$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144009.roa File: AS144009.roa (raw, json) Hash identifier: 0/wF4M6+C3mHccPCA78/Q/T2O/0wynqzT2wvq1dlr3k= Subject key identifier: 9D:19:E8:79:9A:B5:35:33:72:5A:A3:AB:CA:B5:B0:A3:54:36:C0:8F Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 42F2BD9D37C973F39615D53DAAD78C5A722FF301 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144009.roa Signing time: Wed 04 Mar 2026 06:12:30 +0000 ROA not before: Wed 04 Mar 2026 06:07:30 +0000 ROA not after: Wed 03 Mar 2027 06:12:30 +0000 asID: 144009 IP address blocks: 240a:a54f::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:f2:bd:9d:37:c9:73:f3:96:15:d5:3d:aa:d7:8c:5a:72:2f:f3:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:07:30 2026 GMT Not After : Mar 3 06:12:30 2027 GMT Subject: CN=9D19E8799AB53533725AA3ABCAB5B0A35436C08F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:9f:b7:c9:dd:4d:0f:75:fa:b2:1e:11:72:2b: 29:cf:7e:9a:6c:93:c3:19:7a:b7:e5:22:dc:f9:60: 02:0d:2d:e0:76:84:87:78:20:17:af:23:da:2f:56: 62:16:be:52:02:0a:9d:8f:64:2a:82:08:31:7f:a8: f2:03:6e:6f:89:8f:94:c1:f7:c5:98:17:9c:73:cc: 0c:56:89:64:66:f8:8c:21:38:d4:3e:f2:6b:d8:fd: 20:18:b2:a8:6e:81:45:46:ea:e7:28:72:32:11:09: 9d:22:8f:59:fa:1d:03:1a:0e:a3:ab:75:af:cd:cc: 05:33:41:8c:2f:e0:81:bd:d4:a3:ac:19:f8:45:ab: 2c:34:d0:9f:c5:86:53:f9:0d:d1:33:f7:8a:fd:93: 6e:28:c8:14:71:d5:7a:73:a6:32:17:a0:50:86:fb: c3:ab:dd:31:5a:94:8d:cc:79:99:f5:2d:04:62:0c: 95:a1:68:63:06:7e:8c:63:76:5d:7e:ec:c7:7a:7e: af:a1:f9:ec:ae:85:14:70:5c:9d:6d:21:89:53:93: a5:c3:71:7e:12:25:3b:cd:08:5d:ab:2f:17:0f:47: 29:ea:e2:f6:a7:3a:57:3b:04:7a:5a:f7:69:0b:44: a4:cc:86:2c:39:ba:3f:de:08:ef:c0:6f:21:36:fc: 4a:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:19:E8:79:9A:B5:35:33:72:5A:A3:AB:CA:B5:B0:A3:54:36:C0:8F X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144009.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a54f::/32 Signature Algorithm: sha256WithRSAEncryption d0:49:fa:64:ff:67:16:fa:8c:55:63:e4:df:c0:7a:60:85:81: 3e:ca:7d:ac:69:6d:68:51:b2:a4:27:33:cd:3f:a0:47:e6:20: 95:9e:73:97:a0:d6:a2:91:aa:f6:c1:06:56:f6:f9:e4:8c:66: 36:32:89:fc:82:6c:4d:75:2a:ca:79:f0:01:83:ce:d0:87:fe: 49:38:b6:83:4e:6a:90:11:9f:60:98:e8:c2:11:11:9d:69:d5: 0b:25:11:23:a6:21:19:ec:b4:e8:62:cb:19:2b:67:c5:7b:51: 91:03:01:12:8e:03:ff:df:0f:79:08:55:98:91:1a:3d:ae:dd: 5e:43:51:51:92:91:fa:d7:5d:73:4d:ca:0b:44:22:3b:df:49: 11:cb:ea:d0:6c:a2:16:dc:89:d8:51:4a:c6:5b:c1:ce:90:49: 1f:1b:89:d9:37:0c:25:7c:7e:cf:82:14:cd:0e:ea:3f:3e:71: 8b:0a:15:ed:24:9e:12:a0:aa:12:9d:18:21:27:1e:ba:02:7c: c4:5d:fe:6f:ad:46:08:3d:7a:a4:ac:bc:17:29:1e:78:1f:d2: 89:ff:c1:78:ea:72:13:7b:7f:e1:08:df:91:65:d7:06:70:e5: 21:fd:f0:84:bc:30:fd:a0:77:aa:9e:b7:b5:b3:42:2c:a1:61: 8c:d4:ab:3e -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUQvK9nTfJc/OWFdU9qteMWnIv8wEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDczMFoX DTI3MDMwMzA2MTIzMFowMzExMC8GA1UEAxMoOUQxOUU4Nzk5QUI1MzUzMzcyNUFB M0FCQ0FCNUIwQTM1NDM2QzA4RjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALuft8ndTQ91+rIeEXIrKc9+mmyTwxl6t+Ui3PlgAg0t4HaEh3ggF68j2i9W Yha+UgIKnY9kKoIIMX+o8gNub4mPlMH3xZgXnHPMDFaJZGb4jCE41D7ya9j9IBiy qG6BRUbq5yhyMhEJnSKPWfodAxoOo6t1r83MBTNBjC/ggb3Uo6wZ+EWrLDTQn8WG U/kN0TP3iv2TbijIFHHVenOmMhegUIb7w6vdMVqUjcx5mfUtBGIMlaFoYwZ+jGN2 XX7sx3p+r6H57K6FFHBcnW0hiVOTpcNxfhIlO80IXasvFw9HKeri9qc6VzsEelr3 aQtEpMyGLDm6P94I78BvITb8SsECAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSdGeh5 mrU1M3Jao6vKtbCjVDbAjzAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDAwOS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK pU8wDQYJKoZIhvcNAQELBQADggEBANBJ+mT/Zxb6jFVj5N/AemCFgT7KfaxpbWhR sqQnM80/oEfmIJWec5eg1qKRqvbBBlb2+eSMZjYyifyCbE11Ksp58AGDztCH/kk4 toNOapARn2CY6MIREZ1p1QslESOmIRnstOhiyxkrZ8V7UZEDARKOA//fD3kIVZiR Gj2u3V5DUVGSkfrXXXNNygtEIjvfSRHL6tBsohbcidhRSsZbwc6QSR8bidk3DCV8 fs+CFM0O6j8+cYsKFe0knhKgqhKdGCEnHroCfMRd/m+tRgg9eqSsvBcpHngf0on/ wXjqchN7f+EI35Fl1wZw5SH98IS8MP2gd6qet7WzQiyhYYzUqz4= -----END CERTIFICATE-----Generated at Sat Mar 28 11:49:48 2026 by rpki-client