$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144985.roa File: AS144985.roa (raw, json) Hash identifier: 9W7SRvrzuc1i5Yj7CTf5UHXN01Lt7cDHoohhCr6v6wY= Subject key identifier: 1A:4D:D4:DC:22:E5:0E:7D:19:C2:91:13:C7:87:CC:07:E6:6A:BE:71 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 3DAB1292C96DDFD2CA13A8B5687EE04CE59274A0 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144985.roa Signing time: Wed 04 Mar 2026 06:20:09 +0000 ROA not before: Wed 04 Mar 2026 06:15:09 +0000 ROA not after: Wed 03 Mar 2027 06:20:09 +0000 asID: 144985 IP address blocks: 240a:a91f::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:ab:12:92:c9:6d:df:d2:ca:13:a8:b5:68:7e:e0:4c:e5:92:74:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:15:09 2026 GMT Not After : Mar 3 06:20:09 2027 GMT Subject: CN=1A4DD4DC22E50E7D19C29113C787CC07E66ABE71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:44:1a:7b:0e:1b:9f:19:8c:18:5f:f8:9a:0f: 31:fe:0b:f8:88:6b:7f:09:36:25:75:e2:4e:8d:f9: a4:62:af:b0:c7:90:4b:b9:63:f1:9b:e3:9f:2c:7a: fb:3e:ef:53:b2:68:d5:2b:fc:0a:cc:b8:48:f4:3e: e6:d2:c6:fb:a8:9f:b1:ce:50:c3:ff:67:f8:bc:41: 2a:73:b1:d4:37:e3:c3:e8:10:a3:93:2e:89:36:28: 78:9c:3c:a3:74:73:7c:6f:ec:4b:09:65:a7:b5:50: 17:3e:20:5a:27:6e:5a:77:4b:77:29:58:e0:8a:ac: 89:e6:9a:c7:4b:a9:ae:8b:63:89:78:d2:04:2e:0a: ce:e7:c6:a0:41:6d:0f:65:b5:1e:a1:ba:8b:bd:e3: f7:e6:30:d0:16:4b:6a:18:fc:25:1f:2e:1d:44:2f: 68:db:48:87:8c:03:f6:0b:d2:b1:1b:05:5d:8f:f1: f8:a5:e2:f4:ec:6d:26:1d:23:b9:69:72:fd:89:4e: e6:19:f2:60:5e:1b:ef:d3:a4:d4:d2:89:b6:66:62: 7a:98:92:ea:19:db:59:28:ae:ed:40:9d:19:fb:bc: bd:d4:43:d9:1f:ff:5e:c4:ab:fa:df:e2:16:89:ac: a2:c5:2b:89:d8:16:62:13:12:a9:29:29:dd:29:e2: 01:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:4D:D4:DC:22:E5:0E:7D:19:C2:91:13:C7:87:CC:07:E6:6A:BE:71 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144985.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a91f::/32 Signature Algorithm: sha256WithRSAEncryption dc:d6:d3:31:d4:10:a2:13:d7:39:32:ff:d5:22:cd:f3:39:ce: 48:c0:a4:1b:22:cb:d7:9f:db:2f:7e:6c:55:c0:6e:2d:ec:c2: bc:c7:bd:56:3d:42:6b:64:d2:38:e9:46:07:87:69:d1:f0:69: 1e:7e:0a:75:4f:c7:81:a2:15:83:e0:b2:91:a2:69:a6:1b:a3: 0b:21:01:59:15:34:29:c4:e4:42:79:12:82:b7:1c:73:3b:be: 7e:d9:69:9e:a1:97:27:49:73:53:9d:e0:bb:6a:49:4f:3d:86: eb:f1:02:c7:c9:61:21:9e:af:70:15:83:70:76:14:c8:d6:c0: 0a:b7:76:05:06:c5:89:86:17:76:01:3f:39:de:5b:b8:e3:3e: b1:2f:1a:5c:1e:6c:09:c4:6b:1d:16:bb:53:89:58:4a:04:70: 6e:58:af:e3:1e:d4:b5:f9:dd:1c:4c:18:fb:19:8b:72:9e:ab: 70:c1:64:60:23:3f:fa:11:0c:cb:8f:c9:65:8a:c5:72:e2:fe: c5:89:ed:23:37:f0:1c:4a:bf:e7:ec:20:34:21:a4:f4:53:b1: 07:77:1d:9c:21:d8:69:da:e5:63:ec:62:66:45:51:7b:be:7a: 7f:8d:46:58:d0:6a:3c:9d:9d:3a:2b:50:4e:c6:fb:98:13:48: 79:80:b5:1e -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUPasSkslt39LKE6i1aH7gTOWSdKAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTUwOVoX DTI3MDMwMzA2MjAwOVowMzExMC8GA1UEAxMoMUE0REQ0REMyMkU1MEU3RDE5QzI5 MTEzQzc4N0NDMDdFNjZBQkU3MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJhEGnsOG58ZjBhf+JoPMf4L+Ihrfwk2JXXiTo35pGKvsMeQS7lj8Zvjnyx6 +z7vU7Jo1Sv8Csy4SPQ+5tLG+6ifsc5Qw/9n+LxBKnOx1Dfjw+gQo5MuiTYoeJw8 o3RzfG/sSwllp7VQFz4gWiduWndLdylY4Iqsieaax0uprotjiXjSBC4KzufGoEFt D2W1HqG6i73j9+Yw0BZLahj8JR8uHUQvaNtIh4wD9gvSsRsFXY/x+KXi9OxtJh0j uWly/YlO5hnyYF4b79Ok1NKJtmZiepiS6hnbWSiu7UCdGfu8vdRD2R//XsSr+t/i FomsosUridgWYhMSqSkp3SniAb0CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQaTdTc IuUOfRnCkRPHh8wH5mq+cTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDk4NS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qR8wDQYJKoZIhvcNAQELBQADggEBANzW0zHUEKIT1zky/9UizfM5zkjApBsiy9ef 2y9+bFXAbi3swrzHvVY9Qmtk0jjpRgeHadHwaR5+CnVPx4GiFYPgspGiaaYbowsh AVkVNCnE5EJ5EoK3HHM7vn7ZaZ6hlydJc1Od4LtqSU89huvxAsfJYSGer3AVg3B2 FMjWwAq3dgUGxYmGF3YBPzneW7jjPrEvGlwebAnEax0Wu1OJWEoEcG5Yr+Me1LX5 3RxMGPsZi3Keq3DBZGAjP/oRDMuPyWWKxXLi/sWJ7SM38BxKv+fsIDQhpPRTsQd3 HZwh2Gna5WPsYmZFUXu+en+NRljQajydnTorUE7G+5gTSHmAtR4= -----END CERTIFICATE-----Generated at Sat Mar 28 11:42:26 2026 by rpki-client