$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144005.roa File: AS144005.roa (raw, json) Hash identifier: 9zdRaYkfd3QF2zDeg3y64F/vqMqDBhVaAMp5xPRPKvs= Subject key identifier: 1C:73:63:B5:6B:E2:64:44:E8:05:69:12:69:77:62:F6:2F:C0:07:2D Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 62FE482F6B02017FA743F07993CCD3B3D74AD846 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144005.roa Signing time: Wed 04 Mar 2026 06:14:24 +0000 ROA not before: Wed 04 Mar 2026 06:09:24 +0000 ROA not after: Wed 03 Mar 2027 06:14:24 +0000 asID: 144005 IP address blocks: 240a:a54b::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:fe:48:2f:6b:02:01:7f:a7:43:f0:79:93:cc:d3:b3:d7:4a:d8:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:09:24 2026 GMT Not After : Mar 3 06:14:24 2027 GMT Subject: CN=1C7363B56BE26444E8056912697762F62FC0072D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:32:60:2e:eb:b0:03:8b:45:80:3a:c6:04:77: 3b:99:e3:27:d9:bf:1c:0f:16:1b:02:d1:85:7b:c7: d5:4c:f4:fa:4c:15:fd:a2:dd:ab:f5:e9:64:02:bc: 33:dc:51:c5:99:53:a0:e1:36:7d:76:1d:0b:d4:dc: 41:ee:d1:59:14:c8:d4:fe:3c:9a:09:ce:8c:08:c2: 02:ec:e5:35:b2:ba:20:5a:11:a9:d7:69:02:48:8f: 2a:d0:15:49:d9:43:1b:cb:c9:3a:bf:66:41:14:6b: 86:61:b6:1b:65:c5:1e:f5:a6:a7:9b:93:fa:a8:69: d6:3d:57:9c:de:16:dd:10:bf:7f:90:66:69:ab:a1: 3c:e4:ff:68:03:f9:ba:91:48:77:82:a0:6c:28:2f: cc:36:47:86:e6:48:27:03:1f:ad:62:5a:72:40:7b: 17:6c:6b:0e:cc:26:d8:94:61:1f:5e:4a:70:1a:7a: 95:d7:db:39:fd:57:ef:11:14:71:0f:e2:cf:7b:d6: 7a:f9:d3:76:6c:86:74:7e:55:32:df:0e:cb:f2:6a: d5:76:a8:24:21:0b:35:bf:a6:d6:11:75:c9:92:52: 60:fa:93:e9:67:9b:9b:94:a9:5c:86:ea:da:9e:9f: c3:b0:25:24:e6:50:18:77:58:ff:22:de:b4:0e:67: da:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:73:63:B5:6B:E2:64:44:E8:05:69:12:69:77:62:F6:2F:C0:07:2D X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144005.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a54b::/32 Signature Algorithm: sha256WithRSAEncryption 91:15:51:41:e4:c6:b7:52:cc:b6:e4:c5:5e:67:d5:3e:c4:93: 73:85:50:87:9d:8a:e6:44:4f:b2:f5:85:90:5e:a5:73:ac:4b: bd:57:39:3f:93:5d:1b:4b:6b:85:f0:da:a9:8e:93:25:a4:bd: b7:a6:c4:77:c5:92:64:2f:33:42:a9:46:98:06:18:de:e7:61: ab:d6:31:fa:a6:a0:e4:d9:0a:f1:05:7b:6f:bd:51:51:2b:c0: 5d:66:72:eb:43:30:48:67:b9:4b:c1:1c:8e:9a:77:e8:e2:13: 0a:67:4b:d7:a6:75:f4:ef:9a:dc:61:a6:f6:36:6c:bd:b5:19: 1d:b8:cf:d3:42:f0:0d:b1:ed:33:51:a0:d0:24:55:27:52:e2: 19:0c:85:a4:c1:15:15:4a:dd:ad:e4:d1:fa:78:2c:95:8b:f5: f8:74:89:6b:66:f7:39:08:00:b0:46:cd:9e:5e:15:b6:79:66: d3:bb:21:6f:2d:4a:0c:57:8f:2f:b0:b0:c7:bd:48:db:4b:97: 4f:38:75:43:b6:5b:03:8e:67:09:ec:38:5a:4f:d6:56:d8:53: 76:4d:5a:6f:e3:d4:fe:08:05:4f:ac:d0:77:3a:8c:f1:d9:44: 39:0f:d6:f6:4b:fc:a0:bb:e2:d8:8d:14:e7:dc:c0:b7:c2:9e: 86:f5:23:e3 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUYv5IL2sCAX+nQ/B5k8zTs9dK2EYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDkyNFoX DTI3MDMwMzA2MTQyNFowMzExMC8GA1UEAxMoMUM3MzYzQjU2QkUyNjQ0NEU4MDU2 OTEyNjk3NzYyRjYyRkMwMDcyRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKQyYC7rsAOLRYA6xgR3O5njJ9m/HA8WGwLRhXvH1Uz0+kwV/aLdq/XpZAK8 M9xRxZlToOE2fXYdC9TcQe7RWRTI1P48mgnOjAjCAuzlNbK6IFoRqddpAkiPKtAV SdlDG8vJOr9mQRRrhmG2G2XFHvWmp5uT+qhp1j1XnN4W3RC/f5BmaauhPOT/aAP5 upFId4KgbCgvzDZHhuZIJwMfrWJackB7F2xrDswm2JRhH15KcBp6ldfbOf1X7xEU cQ/iz3vWevnTdmyGdH5VMt8Oy/Jq1XaoJCELNb+m1hF1yZJSYPqT6Webm5SpXIbq 2p6fw7AlJOZQGHdY/yLetA5n2r0CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQcc2O1 a+JkROgFaRJpd2L2L8AHLTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDAwNS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK pUswDQYJKoZIhvcNAQELBQADggEBAJEVUUHkxrdSzLbkxV5n1T7Ek3OFUIediuZE T7L1hZBepXOsS71XOT+TXRtLa4Xw2qmOkyWkvbemxHfFkmQvM0KpRpgGGN7nYavW MfqmoOTZCvEFe2+9UVErwF1mcutDMEhnuUvBHI6ad+jiEwpnS9emdfTvmtxhpvY2 bL21GR24z9NC8A2x7TNRoNAkVSdS4hkMhaTBFRVK3a3k0fp4LJWL9fh0iWtm9zkI ALBGzZ5eFbZ5ZtO7IW8tSgxXjy+wsMe9SNtLl084dUO2WwOOZwnsOFpP1lbYU3ZN Wm/j1P4IBU+s0Hc6jPHZRDkP1vZL/KC74tiNFOfcwLfCnob1I+M= -----END CERTIFICATE-----Generated at Sat Mar 28 11:44:13 2026 by rpki-client