$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144003.roa File: AS144003.roa (raw, json) Hash identifier: C9svSz6VHTy3G5RMHUOWEEDGY6Q3ccU0OlELVFTLthM= Subject key identifier: 3F:04:E6:5A:1F:94:1B:30:75:0A:60:05:EA:92:0E:9A:0A:9D:07:04 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 74E40B0F6B3C36EEEEB46601E05DF68433A535C4 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144003.roa Signing time: Wed 04 Mar 2026 06:14:52 +0000 ROA not before: Wed 04 Mar 2026 06:09:52 +0000 ROA not after: Wed 03 Mar 2027 06:14:52 +0000 asID: 144003 IP address blocks: 240a:a549::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:e4:0b:0f:6b:3c:36:ee:ee:b4:66:01:e0:5d:f6:84:33:a5:35:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:09:52 2026 GMT Not After : Mar 3 06:14:52 2027 GMT Subject: CN=3F04E65A1F941B30750A6005EA920E9A0A9D0704 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:bd:68:41:9e:43:a5:6c:69:6e:36:aa:e1:a4: a7:b3:0a:06:39:3c:3f:01:1b:3e:7f:01:00:fa:44: bc:dc:ba:ad:25:2d:64:1d:7f:3b:58:89:9e:79:1b: 80:08:a0:92:84:af:5e:7d:34:d8:3b:ef:1e:79:06: c7:44:e5:bf:e4:7f:6c:9f:a7:66:b6:26:b1:8c:9e: 7e:7b:4a:6e:b9:70:ba:c4:bb:ee:66:05:02:7a:76: 2c:11:b5:ff:10:f9:96:71:84:d7:a1:8c:19:66:79: df:8f:82:82:4d:41:ce:31:f7:cc:cd:e5:e3:97:05: 37:cd:1b:a6:3a:8b:77:3b:5d:b0:98:5f:08:15:41: a6:99:43:75:e4:ed:4a:15:d1:13:f6:5e:1e:02:65: 1a:0a:81:a0:c7:90:26:7a:23:c1:34:53:01:9d:15: 5f:db:dc:73:c6:0a:db:19:a3:29:dd:de:a1:f4:e7: e2:8c:20:ad:df:de:75:f1:57:72:df:65:c6:73:3e: ab:b2:62:fe:02:d1:e7:dd:3e:2a:8f:2c:2b:40:3f: f0:37:52:e5:e8:71:d7:19:ef:fa:8e:fa:e0:2a:3b: 6f:44:c3:b2:5b:1c:9b:a2:89:b9:a7:75:a6:90:a2: 28:6d:93:10:30:13:d7:47:b7:af:63:d2:55:41:0b: ec:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:04:E6:5A:1F:94:1B:30:75:0A:60:05:EA:92:0E:9A:0A:9D:07:04 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144003.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a549::/32 Signature Algorithm: sha256WithRSAEncryption ac:b8:70:f9:b0:30:e2:09:a5:30:46:dc:a7:8d:55:b8:e3:cc: 97:4d:c0:89:82:0d:1c:ea:21:99:3e:c4:c1:21:d8:ab:b1:0d: c1:ff:3c:e6:e9:fa:57:2c:e9:7e:9b:e6:21:a7:1c:72:d5:19: 4e:2d:4c:70:73:c4:33:a5:c0:75:1c:2a:c3:e2:ef:ea:14:5f: 98:98:75:2e:b8:d5:28:74:5b:0d:11:1a:58:5b:58:49:9b:36: 92:bd:4a:d3:91:d5:e2:15:40:ef:cc:9e:a0:9e:4a:79:42:01: c5:ad:67:ba:a4:ac:c7:5f:c3:de:c0:79:c1:9d:3b:36:13:f0: 23:eb:76:b8:dd:19:b2:00:0a:1e:ef:83:29:21:68:87:74:b4: 7e:0d:d0:27:9e:75:e5:a6:2f:34:f2:4a:97:78:0a:a7:ee:b3: c0:02:e8:6c:54:e1:0d:c5:c7:00:c0:a5:b6:cb:e9:17:8d:22: 7e:3f:76:b1:92:a8:0a:ce:4f:0f:e2:bc:67:ad:97:8e:fe:61: c8:b8:88:06:5d:92:a8:41:2a:a4:e6:9f:05:44:26:78:aa:32: d5:3f:c8:1a:1a:90:fc:47:ca:26:e1:0a:3c:46:50:13:06:a1: 84:46:fe:62:f2:39:51:52:3f:d6:e1:7e:92:29:1b:01:d6:5d: d2:16:a4:d4 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUdOQLD2s8Nu7utGYB4F32hDOlNcQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDk1MloX DTI3MDMwMzA2MTQ1MlowMzExMC8GA1UEAxMoM0YwNEU2NUExRjk0MUIzMDc1MEE2 MDA1RUE5MjBFOUEwQTlEMDcwNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOe9aEGeQ6VsaW42quGkp7MKBjk8PwEbPn8BAPpEvNy6rSUtZB1/O1iJnnkb gAigkoSvXn002DvvHnkGx0Tlv+R/bJ+nZrYmsYyefntKbrlwusS77mYFAnp2LBG1 /xD5lnGE16GMGWZ534+Cgk1BzjH3zM3l45cFN80bpjqLdztdsJhfCBVBpplDdeTt ShXRE/ZeHgJlGgqBoMeQJnojwTRTAZ0VX9vcc8YK2xmjKd3eofTn4owgrd/edfFX ct9lxnM+q7Ji/gLR590+Ko8sK0A/8DdS5ehx1xnv+o764Co7b0TDslscm6KJuad1 ppCiKG2TEDAT10e3r2PSVUEL7L8CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQ/BOZa H5QbMHUKYAXqkg6aCp0HBDAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDAwMy5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK pUkwDQYJKoZIhvcNAQELBQADggEBAKy4cPmwMOIJpTBG3KeNVbjjzJdNwImCDRzq IZk+xMEh2KuxDcH/PObp+lcs6X6b5iGnHHLVGU4tTHBzxDOlwHUcKsPi7+oUX5iY dS641Sh0Ww0RGlhbWEmbNpK9StOR1eIVQO/MnqCeSnlCAcWtZ7qkrMdfw97AecGd OzYT8CPrdrjdGbIACh7vgykhaId0tH4N0CeedeWmLzTySpd4Cqfus8AC6GxU4Q3F xwDApbbL6ReNIn4/drGSqArOTw/ivGetl47+Yci4iAZdkqhBKqTmnwVEJniqMtU/ yBoakPxHyibhCjxGUBMGoYRG/mLyOVFSP9bhfpIpGwHWXdIWpNQ= -----END CERTIFICATE-----Generated at Sat Mar 28 11:44:34 2026 by rpki-client