$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144011.roa File: AS144011.roa (raw, json) Hash identifier: nxo4SrcBwHG30g0L5sydaSz4XFayhAolNoxMuveHJJc= Subject key identifier: 31:1D:14:19:9E:9F:D3:A3:65:C6:1B:37:9B:3F:4D:20:9B:0F:81:C6 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 16C802E17879F7A078F275047ED06B3BC863880C Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144011.roa Signing time: Wed 04 Mar 2026 06:12:47 +0000 ROA not before: Wed 04 Mar 2026 06:07:47 +0000 ROA not after: Wed 03 Mar 2027 06:12:47 +0000 asID: 144011 IP address blocks: 240a:a551::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:c8:02:e1:78:79:f7:a0:78:f2:75:04:7e:d0:6b:3b:c8:63:88:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:07:47 2026 GMT Not After : Mar 3 06:12:47 2027 GMT Subject: CN=311D14199E9FD3A365C61B379B3F4D209B0F81C6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:7b:0e:78:cd:93:b1:71:42:00:fb:52:13:89: 5b:60:87:76:9f:15:e4:ea:57:c7:ea:bd:bb:1c:15: 99:ea:6f:ac:51:89:39:9d:80:72:4f:a3:f3:6e:7b: b1:bd:a8:df:cf:87:72:64:bf:c6:10:fe:45:dc:eb: 4e:1f:ab:4d:c3:9d:f0:31:70:99:63:0d:6c:32:b1: 05:31:03:73:6a:c1:99:31:bb:19:45:03:42:73:f0: 66:04:f1:d4:9a:0f:67:de:ba:13:b6:5c:56:be:40: 23:62:38:dd:21:fd:6b:e8:9d:b6:c7:a9:0a:3a:7a: 69:86:69:23:bb:be:4d:3f:dc:d5:76:35:b4:67:1a: d7:d2:54:ac:72:f6:4a:e3:07:f9:cd:01:50:25:c4: 58:ce:07:d5:27:8a:fd:c4:69:c6:68:18:c4:99:16: 98:46:27:d5:d9:9b:02:6a:3f:72:64:d3:f9:9d:45: 55:a9:86:35:02:a0:de:3e:d1:2f:f5:fc:0c:96:ef: fc:c9:17:63:20:c6:60:e9:ab:64:bd:10:f3:78:e8: 28:ce:0f:4f:36:19:72:17:32:04:c7:d6:11:ac:5e: 96:0e:c4:f1:ab:76:40:ed:e6:67:90:87:f5:4c:5b: fe:3b:38:27:c1:b4:71:9c:60:81:0d:29:b6:96:75: 8c:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:1D:14:19:9E:9F:D3:A3:65:C6:1B:37:9B:3F:4D:20:9B:0F:81:C6 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144011.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a551::/32 Signature Algorithm: sha256WithRSAEncryption be:88:d5:81:4e:89:bb:ab:79:0d:4c:6c:47:8c:0a:e9:70:54: 0b:7c:58:b6:90:72:37:b8:e3:8f:32:91:ce:87:4b:d0:93:55: 0f:c6:fb:ad:37:54:9a:99:15:fb:e1:9d:73:3a:5e:f9:c6:82: a0:d6:dd:77:ff:df:e0:15:4e:dd:47:a7:40:2d:42:10:11:23: 5c:e9:07:19:eb:69:ad:70:06:41:54:ba:e9:17:ae:03:a5:82: 14:04:04:c7:eb:0d:06:ad:fd:ce:57:e4:6b:f2:da:da:eb:5b: b2:d1:8a:48:97:f1:d2:7a:70:0c:f4:bc:c1:94:4e:f9:8c:a7: 2e:4c:a9:3a:bd:f3:df:11:25:25:98:02:23:25:6d:a1:86:d4: c1:92:1a:79:bd:45:3a:28:b7:a4:19:02:e2:2a:03:34:bc:5a: 3b:ba:8f:ef:84:a5:00:86:bc:94:7c:a9:24:24:ea:a5:62:e5: eb:30:19:69:a7:c1:e5:fb:3d:33:83:ac:5a:82:34:de:cc:08: bf:9f:ab:9c:e7:10:a8:79:de:a7:d0:4a:70:26:0f:a1:3f:c1: 0e:dd:c2:2f:bf:b1:bb:f2:e6:92:84:ff:48:b5:cf:81:90:84: c3:b7:e5:71:d9:33:3e:a1:06:5f:b9:b3:db:4a:54:99:b2:5d: 14:9d:74:a7 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUFsgC4Xh596B48nUEftBrO8hjiAwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDc0N1oX DTI3MDMwMzA2MTI0N1owMzExMC8GA1UEAxMoMzExRDE0MTk5RTlGRDNBMzY1QzYx QjM3OUIzRjREMjA5QjBGODFDNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK57DnjNk7FxQgD7UhOJW2CHdp8V5OpXx+q9uxwVmepvrFGJOZ2Ack+j8257 sb2o38+HcmS/xhD+RdzrTh+rTcOd8DFwmWMNbDKxBTEDc2rBmTG7GUUDQnPwZgTx 1JoPZ966E7ZcVr5AI2I43SH9a+idtsepCjp6aYZpI7u+TT/c1XY1tGca19JUrHL2 SuMH+c0BUCXEWM4H1SeK/cRpxmgYxJkWmEYn1dmbAmo/cmTT+Z1FVamGNQKg3j7R L/X8DJbv/MkXYyDGYOmrZL0Q83joKM4PTzYZchcyBMfWEaxelg7E8at2QO3mZ5CH 9Uxb/js4J8G0cZxggQ0ptpZ1jNUCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQxHRQZ np/To2XGGzebP00gmw+BxjAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDAxMS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK pVEwDQYJKoZIhvcNAQELBQADggEBAL6I1YFOibureQ1MbEeMCulwVAt8WLaQcje4 448ykc6HS9CTVQ/G+603VJqZFfvhnXM6XvnGgqDW3Xf/3+AVTt1Hp0AtQhARI1zp Bxnraa1wBkFUuukXrgOlghQEBMfrDQat/c5X5Gvy2trrW7LRikiX8dJ6cAz0vMGU TvmMpy5MqTq9898RJSWYAiMlbaGG1MGSGnm9RToot6QZAuIqAzS8Wju6j++EpQCG vJR8qSQk6qVi5eswGWmnweX7PTODrFqCNN7MCL+fq5znEKh53qfQSnAmD6E/wQ7d wi+/sbvy5pKE/0i1z4GQhMO35XHZMz6hBl+5s9tKVJmyXRSddKc= -----END CERTIFICATE-----Generated at Sat Mar 28 11:44:01 2026 by rpki-client