$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144012.roa File: AS144012.roa (raw, json) Hash identifier: msZW5AcGbk18jSbZ9r0j8cjKZlUV8fN7ihbvrm8ahFQ= Subject key identifier: B4:57:64:49:59:43:A6:59:AA:2C:5C:40:28:26:DA:A2:54:C2:31:96 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 2B0B3AE5DDF8CE2DD417043C1139C7730FB57D2D Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144012.roa Signing time: Wed 04 Mar 2026 06:15:11 +0000 ROA not before: Wed 04 Mar 2026 06:10:11 +0000 ROA not after: Wed 03 Mar 2027 06:15:11 +0000 asID: 144012 IP address blocks: 240a:a552::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:0b:3a:e5:dd:f8:ce:2d:d4:17:04:3c:11:39:c7:73:0f:b5:7d:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:10:11 2026 GMT Not After : Mar 3 06:15:11 2027 GMT Subject: CN=B45764495943A659AA2C5C402826DAA254C23196 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:fe:f9:ae:38:f0:c9:0a:ec:4e:1e:c1:93:ba: 97:43:b6:88:7e:d0:d1:67:71:48:41:cd:4f:dd:90: 36:d1:79:15:ba:97:29:bc:64:b3:02:84:ee:96:8e: 22:36:d5:a6:00:bb:bc:2f:fc:b2:b2:70:61:48:7a: 58:0f:ee:ad:46:f9:16:31:ff:e8:88:57:cd:82:99: 0c:ff:64:a1:46:f9:4a:82:c8:ca:8e:64:fb:62:b7: a4:76:47:d5:3d:78:d3:cd:c9:4c:22:8b:36:61:9e: ca:ee:91:05:f7:6f:47:05:fc:4f:34:fc:55:bc:c5: 63:09:4e:44:55:55:d2:e7:03:01:70:b1:0a:7c:87: 05:c2:8a:58:25:f1:3f:a8:c0:61:a0:05:3f:5f:8a: 61:91:cf:38:c9:1b:1d:bb:1c:e2:27:17:fd:b7:e5: 98:b0:c7:b6:3b:dd:f1:f5:9e:ec:ef:1b:bb:a1:d8: e5:eb:22:0f:18:0f:e8:99:2c:8b:69:a1:0f:46:ea: 49:e5:ac:bc:60:18:3c:6a:d2:b2:cc:75:11:de:d2: e2:07:ab:b7:cb:44:95:6d:3e:53:7f:13:f4:97:d9: e9:2e:27:aa:c8:b4:67:84:59:eb:12:02:a6:cd:8e: 83:7d:e3:c9:75:08:ec:6d:24:82:f7:49:35:43:2b: 2f:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:57:64:49:59:43:A6:59:AA:2C:5C:40:28:26:DA:A2:54:C2:31:96 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144012.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a552::/32 Signature Algorithm: sha256WithRSAEncryption 50:db:b9:09:bd:4d:7d:ef:b3:69:fe:55:b6:18:b8:02:b0:df: 4e:4d:81:ff:f6:0f:14:53:0c:25:24:b2:e8:bd:d0:8c:2b:df: 1a:45:a1:bf:f0:ef:06:6c:4c:58:91:07:b2:66:28:84:6d:1c: c9:c1:6e:78:ef:64:60:26:fc:03:59:f8:e9:d9:21:b9:41:bd: 4e:b5:b2:a8:52:8e:6e:2a:c8:c3:f3:00:bd:96:7d:30:1b:48: 7f:05:6d:da:4b:a6:4b:04:67:0e:d5:5b:33:11:76:cd:55:92: 87:9b:e6:76:25:5b:62:3a:47:7e:09:ce:59:e4:da:31:a4:f2: 69:ee:91:b5:7c:82:21:cf:70:b9:16:11:ca:0e:64:5c:8a:b4: dc:f6:97:ca:51:91:f6:cd:87:99:32:17:51:df:54:a1:5b:a4: 24:a1:47:57:6a:f8:50:65:20:f3:df:0a:e4:1e:e9:12:26:cc: ee:ce:25:54:f1:e9:a8:65:5c:19:fa:d0:b0:6e:e9:e3:19:a2: ba:c1:03:2c:0b:05:d5:7c:25:7a:cf:32:7d:1a:6e:45:5f:38: a7:3c:fa:c2:b0:b6:86:b5:07:5b:fb:eb:f6:47:1f:e0:90:94: aa:26:2a:59:fb:82:fa:ff:50:1f:21:bf:30:38:44:1e:39:99: fa:a0:be:16 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUKws65d34zi3UFwQ8ETnHcw+1fS0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTAxMVoX DTI3MDMwMzA2MTUxMVowMzExMC8GA1UEAxMoQjQ1NzY0NDk1OTQzQTY1OUFBMkM1 QzQwMjgyNkRBQTI1NEMyMzE5NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJT++a448MkK7E4ewZO6l0O2iH7Q0WdxSEHNT92QNtF5FbqXKbxkswKE7paO IjbVpgC7vC/8srJwYUh6WA/urUb5FjH/6IhXzYKZDP9koUb5SoLIyo5k+2K3pHZH 1T14083JTCKLNmGeyu6RBfdvRwX8TzT8VbzFYwlORFVV0ucDAXCxCnyHBcKKWCXx P6jAYaAFP1+KYZHPOMkbHbsc4icX/bflmLDHtjvd8fWe7O8bu6HY5esiDxgP6Jks i2mhD0bqSeWsvGAYPGrSssx1Ed7S4gert8tElW0+U38T9JfZ6S4nqsi0Z4RZ6xIC ps2Og33jyXUI7G0kgvdJNUMrL6sCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBS0V2RJ WUOmWaosXEAoJtqiVMIxljAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDAxMi5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK pVIwDQYJKoZIhvcNAQELBQADggEBAFDbuQm9TX3vs2n+VbYYuAKw305Ngf/2DxRT DCUksui90Iwr3xpFob/w7wZsTFiRB7JmKIRtHMnBbnjvZGAm/ANZ+OnZIblBvU61 sqhSjm4qyMPzAL2WfTAbSH8FbdpLpksEZw7VWzMRds1Vkoeb5nYlW2I6R34Jzlnk 2jGk8mnukbV8giHPcLkWEcoOZFyKtNz2l8pRkfbNh5kyF1HfVKFbpCShR1dq+FBl IPPfCuQe6RImzO7OJVTx6ahlXBn60LBu6eMZorrBAywLBdV8JXrPMn0abkVfOKc8 +sKwtoa1B1v76/ZHH+CQlKomKln7gvr/UB8hvzA4RB45mfqgvhY= -----END CERTIFICATE-----Generated at Sat Mar 28 11:41:35 2026 by rpki-client