$ rpki-client -vvf rsync.cernet.net/repo/cernet/0/AS144704.roa File: AS144704.roa (raw, json) Hash identifier: RXQtw6U4iZQJQw30nR9tKVUyutUccoLsB7TRgZROzSw= Subject key identifier: F7:DC:C2:F1:0E:9D:B2:13:AB:EE:4F:11:95:40:42:70:2C:C9:E5:82 Certificate issuer: /CN=A91E5D610001/serialNumber=C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2 Certificate serial: 40FE9CF2366C0C31F7E8ED1BCBEA2EEB16B92E17 Authority key identifier: C1:EF:39:2C:50:05:97:CA:3C:BA:2E:1E:C7:AA:1E:C3:F5:0A:28:B2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/we85LFAFl8o8ui4ex6oew_UKKLI.cer Subject info access: rsync://rsync.cernet.net/repo/cernet/0/AS144704.roa Signing time: Mon 27 Jul 2026 06:39:21 +0000 ROA not before: Mon 27 Jul 2026 06:34:21 +0000 ROA not after: Mon 26 Jul 2027 06:39:21 +0000 asID: 144704 IP address blocks: 118.228.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.crl rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/we85LFAFl8o8ui4ex6oew_UKKLI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 06:43:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:fe:9c:f2:36:6c:0c:31:f7:e8:ed:1b:cb:ea:2e:eb:16:b9:2e:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2 Validity Not Before: Jul 27 06:34:21 2026 GMT Not After : Jul 26 06:39:21 2027 GMT Subject: CN=F7DCC2F10E9DB213ABEE4F11954042702CC9E582 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:03:6d:cf:f6:f8:bf:24:8f:d5:04:3d:cd:12: 6d:71:b8:03:50:a0:21:d5:e2:c0:45:c1:3b:94:0c: 69:d9:93:03:1b:c2:9f:cd:83:36:bb:2c:2c:ad:08: 61:83:e7:e3:d3:6f:7e:83:9f:db:ac:c1:ef:9c:28: 2c:2e:4f:64:23:7d:db:86:3a:31:f2:6e:08:28:b2: 2b:df:99:9e:ec:71:28:0c:dd:d8:7c:96:32:39:51: 43:ad:29:34:ef:5d:74:d1:1c:d7:d9:c1:ed:60:9b: 5f:aa:5c:ae:4c:5c:73:9d:01:18:74:7d:41:c0:3f: c6:63:7c:c9:99:11:ec:29:2a:54:29:5f:aa:66:2a: 8e:7c:40:8f:d4:62:3e:e1:ab:f0:9d:ee:67:00:71: 85:28:46:31:02:9b:ba:0e:78:ad:90:62:36:df:12: 55:19:98:6f:db:a1:d5:3a:83:9d:6d:79:9e:e4:5d: 80:2c:9d:bf:47:09:f8:1a:71:80:ed:82:c3:4d:b4: 49:dd:9e:3d:ef:c0:0c:56:52:81:7e:55:0f:d9:b8: 06:22:b3:a4:76:3b:5f:e5:aa:db:f1:11:4e:b5:9f: a3:8c:19:6b:16:09:12:13:49:fd:b7:e2:38:00:0b: d4:50:8d:98:e5:06:c3:5e:7e:58:73:03:d8:e6:e2: bb:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:DC:C2:F1:0E:9D:B2:13:AB:EE:4F:11:95:40:42:70:2C:C9:E5:82 X509v3 Authority Key Identifier: keyid:C1:EF:39:2C:50:05:97:CA:3C:BA:2E:1E:C7:AA:1E:C3:F5:0A:28:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/we85LFAFl8o8ui4ex6oew_UKKLI.cer Subject Information Access: Signed Object - URI:rsync://rsync.cernet.net/repo/cernet/0/AS144704.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 118.228.33.0/24 Signature Algorithm: sha256WithRSAEncryption a7:85:8f:b8:0f:90:0f:ca:3e:7c:f9:61:3d:8c:ee:c9:9d:f3: 8f:81:d4:04:ed:5b:ce:29:7d:71:b9:4f:6f:35:44:75:72:50: 08:d5:2c:12:88:83:79:63:7d:2d:4a:78:5b:ee:2d:c4:f4:fb: 4a:b7:03:ef:80:67:0e:3a:88:37:c0:20:a9:d8:dd:61:58:f1: 6d:08:3d:0d:b6:f4:17:26:ea:96:b8:2f:86:8d:9d:58:a3:a7: 23:ac:6a:24:14:e2:bc:da:d2:e0:cf:1e:78:f6:bf:6b:c7:7e: 92:0c:5e:90:a8:eb:e3:0e:28:e9:2b:2f:ee:54:4b:38:fa:75: b4:70:40:da:0d:60:35:9d:90:c3:3b:5c:33:77:3d:ca:f2:34: 68:54:b2:0c:0e:32:fc:29:3c:9c:4f:06:fc:47:80:41:49:33: 1a:c0:52:bf:ce:f5:f8:28:ec:a1:af:94:4f:10:77:89:45:ee: 2f:f0:80:cb:fa:3b:de:d2:88:05:43:7b:90:43:8f:3c:c2:20: 97:7d:82:cf:ab:77:94:3e:93:f4:16:c3:3a:87:b6:f6:99:a4: 63:52:96:81:ab:65:c3:b6:df:cd:ed:7c:97:c2:e6:77:f8:5a: 9d:00:4b:e4:49:d6:f6:54:0b:53:8c:7a:51:ad:d3:4f:a3:36: 5a:3d:50:57 -----BEGIN CERTIFICATE----- MIIE0zCCA7ugAwIBAgIUQP6c8jZsDDH36O0by+ou6xa5LhcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRTVENjEwMDAxMTEwLwYDVQQFEyhDMUVGMzkyQzUw MDU5N0NBM0NCQTJFMUVDN0FBMUVDM0Y1MEEyOEIyMB4XDTI2MDcyNzA2MzQyMVoX DTI3MDcyNjA2MzkyMVowMzExMC8GA1UEAxMoRjdEQ0MyRjEwRTlEQjIxM0FCRUU0 RjExOTU0MDQyNzAyQ0M5RTU4MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMUDbc/2+L8kj9UEPc0SbXG4A1CgIdXiwEXBO5QMadmTAxvCn82DNrssLK0I YYPn49NvfoOf26zB75woLC5PZCN924Y6MfJuCCiyK9+ZnuxxKAzd2HyWMjlRQ60p NO9ddNEc19nB7WCbX6pcrkxcc50BGHR9QcA/xmN8yZkR7CkqVClfqmYqjnxAj9Ri PuGr8J3uZwBxhShGMQKbug54rZBiNt8SVRmYb9uh1TqDnW15nuRdgCydv0cJ+Bpx gO2Cw020Sd2ePe/ADFZSgX5VD9m4BiKzpHY7X+Wq2/ERTrWfo4wZaxYJEhNJ/bfi OAAL1FCNmOUGw15+WHMD2Obiu0UCAwEAAaOCAcYwggHCMB0GA1UdDgQWBBT33MLx Dp2yE6vuTxGVQEJwLMnlgjAfBgNVHSMEGDAWgBTB7zksUAWXyjy6Lh7Hqh7D9Qoo sjAOBgNVHQ8BAf8EBAMCB4AwZAYDVR0fBF0wWzBZoFegVYZTcnN5bmM6Ly9yc3lu Yy5jZXJuZXQubmV0L3JlcG8vY2VybmV0LzAvQzFFRjM5MkM1MDA1OTdDQTNDQkEy RTFFQzdBQTFFQzNGNTBBMjhCMi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUF BzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgx RDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvd2U4NUxGQUZsOG84dWk0ZXg2b2V3X1VL S0xJLmNlcjBPBggrBgEFBQcBCwRDMEEwPwYIKwYBBQUHMAuGM3JzeW5jOi8vcnN5 bmMuY2VybmV0Lm5ldC9yZXBvL2Nlcm5ldC8wL0FTMTQ0NzA0LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA duQhMA0GCSqGSIb3DQEBCwUAA4IBAQCnhY+4D5APyj58+WE9jO7JnfOPgdQE7VvO KX1xuU9vNUR1clAI1SwSiIN5Y30tSnhb7i3E9PtKtwPvgGcOOog3wCCp2N1hWPFt CD0NtvQXJuqWuC+GjZ1Yo6cjrGokFOK82tLgzx549r9rx36SDF6QqOvjDijpKy/u VEs4+nW0cEDaDWA1nZDDO1wzdz3K8jRoVLIMDjL8KTycTwb8R4BBSTMawFK/zvX4 KOyhr5RPEHeJRe4v8IDL+jve0ogFQ3uQQ488wiCXfYLPq3eUPpP0FsM6h7b2maRj UpaBq2XDtt/N7XyXwuZ3+FqdAEvkSdb2VAtTjHpRrdNPozZaPVBX -----END CERTIFICATE-----Generated at Mon Jul 27 18:37:58 2026 by rpki-client