$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144988.roa File: AS144988.roa (raw, json) Hash identifier: tGuLJ6iV9gGB6z52gd2u0nMPMTXcU0fWFsMjBlGLRuY= Subject key identifier: 41:EA:68:E4:52:B7:2B:9E:C2:C1:BB:4F:66:27:47:5F:5A:66:B8:AC Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 1EAF9BBC787CAFA7F3ACF86D07155D5E46449FBD Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144988.roa Signing time: Wed 04 Mar 2026 06:22:32 +0000 ROA not before: Wed 04 Mar 2026 06:17:32 +0000 ROA not after: Wed 03 Mar 2027 06:22:32 +0000 asID: 144988 IP address blocks: 240a:a922::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:af:9b:bc:78:7c:af:a7:f3:ac:f8:6d:07:15:5d:5e:46:44:9f:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:17:32 2026 GMT Not After : Mar 3 06:22:32 2027 GMT Subject: CN=41EA68E452B72B9EC2C1BB4F6627475F5A66B8AC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:95:78:e7:53:36:6f:65:41:89:be:eb:37:c5: 43:ee:c2:dc:67:a9:b0:bc:c9:9a:6f:ed:ef:10:3c: ca:52:5f:bc:ac:1d:a8:9b:3b:46:b6:b8:a6:c2:97: 36:8c:6c:58:6d:3b:fa:be:b9:33:e3:88:82:5f:ac: 5c:f4:7d:67:b2:8c:7b:43:c4:eb:c9:d8:0d:69:5d: 29:c7:69:76:2e:99:2e:2a:39:26:4b:b8:fa:a1:76: 26:6e:ce:72:f3:db:0c:5f:56:20:94:d8:ec:c4:fb: 9b:cf:99:c4:4d:26:ab:11:bb:82:ae:ef:cb:b3:c1: 1a:13:23:46:fd:1c:0d:18:90:48:1c:a3:18:d4:11: cb:a1:db:56:91:84:8c:5b:26:58:43:34:d3:e7:ad: 23:72:f9:19:34:db:bc:2b:d9:8b:90:e4:29:42:d8: 6f:f0:3e:ef:7f:b3:f2:95:5d:51:39:0a:9f:a3:c8: fd:e1:6c:27:00:d8:e9:79:ec:cc:60:dc:7c:08:1b: 45:29:5b:10:ef:43:fe:22:cb:ae:32:e2:0c:39:33: ab:16:09:33:0b:a9:5d:e6:ea:0a:46:7d:9f:b9:66: 14:ed:63:b8:b3:53:da:c4:62:e1:1d:5c:de:6b:4e: 6e:6d:8b:e4:c0:14:26:4c:8a:6d:8f:b3:de:c4:5d: 2e:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:EA:68:E4:52:B7:2B:9E:C2:C1:BB:4F:66:27:47:5F:5A:66:B8:AC X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144988.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a922::/32 Signature Algorithm: sha256WithRSAEncryption a1:26:85:c6:23:76:5a:98:5d:61:a6:01:d9:7a:67:73:05:99: 86:d5:8c:c7:4e:47:4f:c9:38:63:34:87:df:83:a9:dd:57:38: b8:61:d0:10:72:c8:c1:ad:fd:4c:61:d7:ea:b8:a5:7e:34:93: f0:27:e5:b8:7b:2c:97:a5:76:3f:2d:d8:d2:db:22:82:61:ff: 13:a2:73:5a:b3:9d:25:8c:5d:1f:68:8b:33:58:cd:56:5c:a7: 0a:39:84:87:40:fc:db:06:47:09:ce:c6:4c:f3:08:63:2c:62: 11:21:c9:15:a1:f4:a2:b2:61:db:75:ea:47:d4:eb:c4:f1:ef: be:a5:65:f7:84:d3:93:dc:20:83:7a:cd:f4:90:21:f9:02:36: 74:5e:83:b6:fe:66:27:46:4c:16:54:5a:8a:2d:04:e5:11:50: 1d:e3:96:fb:8c:10:05:4f:6a:6f:45:27:a6:31:ac:a2:3a:93: 17:6a:e6:1e:60:6b:40:da:e7:fe:ca:c8:93:13:20:4d:67:dd: b2:f8:c8:f6:c3:04:20:69:f0:12:d2:d6:66:4d:68:13:70:7d: 42:f2:bd:5f:5c:32:f1:ec:52:c3:39:81:54:ca:ae:54:e8:40: 45:ef:71:c8:14:95:b1:df:74:e0:19:9a:21:1a:b0:7e:08:91: 56:c2:24:22 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUHq+bvHh8r6fzrPhtBxVdXkZEn70wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTczMloX DTI3MDMwMzA2MjIzMlowMzExMC8GA1UEAxMoNDFFQTY4RTQ1MkI3MkI5RUMyQzFC QjRGNjYyNzQ3NUY1QTY2QjhBQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM6VeOdTNm9lQYm+6zfFQ+7C3GepsLzJmm/t7xA8ylJfvKwdqJs7Rra4psKX NoxsWG07+r65M+OIgl+sXPR9Z7KMe0PE68nYDWldKcdpdi6ZLio5Jku4+qF2Jm7O cvPbDF9WIJTY7MT7m8+ZxE0mqxG7gq7vy7PBGhMjRv0cDRiQSByjGNQRy6HbVpGE jFsmWEM00+etI3L5GTTbvCvZi5DkKULYb/A+73+z8pVdUTkKn6PI/eFsJwDY6Xns zGDcfAgbRSlbEO9D/iLLrjLiDDkzqxYJMwupXebqCkZ9n7lmFO1juLNT2sRi4R1c 3mtObm2L5MAUJkyKbY+z3sRdLrcCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRB6mjk UrcrnsLBu09mJ0dfWma4rDAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDk4OC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qSIwDQYJKoZIhvcNAQELBQADggEBAKEmhcYjdlqYXWGmAdl6Z3MFmYbVjMdOR0/J OGM0h9+Dqd1XOLhh0BByyMGt/Uxh1+q4pX40k/An5bh7LJeldj8t2NLbIoJh/xOi c1qznSWMXR9oizNYzVZcpwo5hIdA/NsGRwnOxkzzCGMsYhEhyRWh9KKyYdt16kfU 68Tx776lZfeE05PcIIN6zfSQIfkCNnReg7b+ZidGTBZUWootBOURUB3jlvuMEAVP am9FJ6YxrKI6kxdq5h5ga0Da5/7KyJMTIE1n3bL4yPbDBCBp8BLS1mZNaBNwfULy vV9cMvHsUsM5gVTKrlToQEXvccgUlbHfdOAZmiEasH4IkVbCJCI= -----END CERTIFICATE-----Generated at Sat Mar 28 11:44:36 2026 by rpki-client