$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144014.roa File: AS144014.roa (raw, json) Hash identifier: mMCuFdjavfV5HChdf3aIpDeRBbwJRqfiNo8/YNMGoL4= Subject key identifier: 28:59:35:37:77:F5:49:B3:7D:4A:83:DC:88:27:15:EB:24:AA:A4:63 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 2D0C2E3BF90061778C19F928CE9C9D34E950D225 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144014.roa Signing time: Wed 04 Mar 2026 06:13:15 +0000 ROA not before: Wed 04 Mar 2026 06:08:15 +0000 ROA not after: Wed 03 Mar 2027 06:13:15 +0000 asID: 144014 IP address blocks: 240a:a554::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:0c:2e:3b:f9:00:61:77:8c:19:f9:28:ce:9c:9d:34:e9:50:d2:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:08:15 2026 GMT Not After : Mar 3 06:13:15 2027 GMT Subject: CN=2859353777F549B37D4A83DC882715EB24AAA463 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:94:e8:f4:17:5c:27:eb:f2:e0:3f:52:0b:a4: e3:7f:53:05:57:88:9c:ce:6f:63:5d:00:d6:69:41: c1:95:0b:c0:4d:ba:7d:66:db:14:14:e0:8b:8b:68: ed:0d:da:4a:0e:34:50:3f:be:eb:cf:c3:46:5d:41: 23:76:8f:20:9f:9b:2a:84:02:b5:e9:0a:7c:31:d8: cd:fa:7c:8c:a2:24:16:02:02:42:6c:45:7c:e7:95: 5e:d8:6b:53:51:25:38:73:17:33:9c:d7:d4:42:fb: c5:7a:86:c0:76:31:47:78:00:20:0b:eb:b7:ae:cd: f0:d6:db:cc:f4:28:55:15:a5:88:e9:eb:65:c7:cd: 2d:57:80:22:fb:9c:af:e6:3d:df:ef:d6:6d:88:65: bd:b7:19:a9:06:98:89:ba:b4:c3:95:55:74:5e:a3: 6b:0c:46:e2:1c:57:dd:a2:a2:4a:c0:7e:95:a6:0a: c7:fc:c0:8e:d6:55:0b:3d:cd:e0:9e:95:b7:83:2c: 47:8a:c1:1c:69:06:f8:39:c7:83:2b:8a:f9:de:a9: 3f:d7:80:0c:e8:e8:a7:6d:20:27:6f:7b:03:12:80: 4e:55:69:c8:02:9b:f2:f4:e7:41:2d:ab:1f:e9:0a: 50:d4:19:d2:8a:fe:69:20:af:fc:68:41:2f:68:58: 78:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:59:35:37:77:F5:49:B3:7D:4A:83:DC:88:27:15:EB:24:AA:A4:63 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144014.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a554::/32 Signature Algorithm: sha256WithRSAEncryption 58:eb:76:0f:69:c7:b7:0d:c7:58:2d:1b:2d:45:e5:9e:67:8f: 8c:bd:72:51:d3:f7:63:ea:af:7b:01:6c:c8:b7:03:cf:03:32: 29:e4:1e:f2:5c:d3:9f:0c:3e:a4:1a:24:f6:ba:28:8d:72:da: 25:dd:d8:72:a2:35:b4:0e:ba:08:20:62:03:b3:00:0b:ec:d9: 04:96:90:78:20:20:46:23:23:b6:12:9e:cf:3e:7c:51:66:87: e4:f5:ff:f5:af:9e:4a:7d:d1:1d:cb:90:0f:2a:c2:e9:82:6a: f6:99:39:87:03:39:2a:fd:e7:4c:72:b1:65:d7:c8:0f:f3:a0: f1:04:16:88:99:08:88:b1:30:87:57:e9:1c:9c:5d:5e:7e:fb: e2:56:7f:62:cb:9f:8c:1b:38:3e:af:35:70:7a:ef:64:2f:27: d5:a9:59:ff:4a:8c:56:25:c2:27:73:b7:86:c9:3b:14:68:af: fc:80:e5:ea:e9:92:64:c7:31:74:30:06:ec:ce:22:8e:7b:ba: bb:50:23:96:c8:ff:b0:75:c4:7f:3c:4f:de:1e:a0:6d:45:2a: 82:a1:f6:1b:06:0c:1a:63:92:8b:86:16:57:83:37:c1:c4:12: 6c:f4:74:eb:20:17:24:23:88:3d:7a:71:a9:0f:6c:c4:96:d8: b5:44:90:7e -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIULQwuO/kAYXeMGfkozpydNOlQ0iUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDgxNVoX DTI3MDMwMzA2MTMxNVowMzExMC8GA1UEAxMoMjg1OTM1Mzc3N0Y1NDlCMzdENEE4 M0RDODgyNzE1RUIyNEFBQTQ2MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJ+U6PQXXCfr8uA/Uguk439TBVeInM5vY10A1mlBwZULwE26fWbbFBTgi4to 7Q3aSg40UD++68/DRl1BI3aPIJ+bKoQCtekKfDHYzfp8jKIkFgICQmxFfOeVXthr U1ElOHMXM5zX1EL7xXqGwHYxR3gAIAvrt67N8NbbzPQoVRWliOnrZcfNLVeAIvuc r+Y93+/WbYhlvbcZqQaYibq0w5VVdF6jawxG4hxX3aKiSsB+laYKx/zAjtZVCz3N 4J6Vt4MsR4rBHGkG+DnHgyuK+d6pP9eADOjop20gJ297AxKATlVpyAKb8vTnQS2r H+kKUNQZ0or+aSCv/GhBL2hYeKUCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQoWTU3 d/VJs31Kg9yIJxXrJKqkYzAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDAxNC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK pVQwDQYJKoZIhvcNAQELBQADggEBAFjrdg9px7cNx1gtGy1F5Z5nj4y9clHT92Pq r3sBbMi3A88DMinkHvJc058MPqQaJPa6KI1y2iXd2HKiNbQOugggYgOzAAvs2QSW kHggIEYjI7YSns8+fFFmh+T1//Wvnkp90R3LkA8qwumCavaZOYcDOSr950xysWXX yA/zoPEEFoiZCIixMIdX6RycXV5+++JWf2LLn4wbOD6vNXB672QvJ9WpWf9KjFYl widzt4bJOxRor/yA5erpkmTHMXQwBuzOIo57urtQI5bI/7B1xH88T94eoG1FKoKh 9hsGDBpjkouGFleDN8HEEmz0dOsgFyQjiD16cakPbMSW2LVEkH4= -----END CERTIFICATE-----Generated at Sat Mar 28 13:18:05 2026 by rpki-client