$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144016.roa File: AS144016.roa (raw, json) Hash identifier: xBfTfX1BbzgwC2SjyO6j9JMeXWSAzi0sApxWmSJ9Pl4= Subject key identifier: AB:0F:62:8A:00:77:7F:AA:6B:96:FC:CB:9A:A5:F7:3B:D0:C2:CD:09 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 49552AD49C1DFF7835BE96A7326F4915543F509E Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144016.roa Signing time: Wed 04 Mar 2026 06:15:05 +0000 ROA not before: Wed 04 Mar 2026 06:10:05 +0000 ROA not after: Wed 03 Mar 2027 06:15:05 +0000 asID: 144016 IP address blocks: 240a:a556::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:55:2a:d4:9c:1d:ff:78:35:be:96:a7:32:6f:49:15:54:3f:50:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:10:05 2026 GMT Not After : Mar 3 06:15:05 2027 GMT Subject: CN=AB0F628A00777FAA6B96FCCB9AA5F73BD0C2CD09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:95:9a:23:7b:5d:c2:09:e7:cb:f4:ac:af:29: 86:6b:65:a0:ab:b7:14:91:44:cd:ec:fa:60:4b:f3: 16:84:75:60:70:0f:c2:30:a3:e4:0d:6c:9c:e1:6c: 9e:b7:fc:9b:14:42:76:1d:74:0c:53:3c:bd:cd:82: b9:80:32:e0:30:e6:bf:b8:91:81:3d:79:f2:05:6e: 9b:28:fc:4b:e7:ae:51:a8:b7:25:c7:5c:a3:51:34: 8d:08:43:b0:a8:aa:3a:54:a0:81:e8:62:4f:18:12: d9:87:2e:5d:0c:5e:85:73:3b:06:b1:1e:83:31:d2: f9:e0:12:cf:b3:34:83:33:95:a4:55:05:ed:1c:bc: 9d:d2:a2:6a:20:ad:c5:3d:e2:b4:3c:84:b4:5a:68: e4:91:43:77:e0:5c:47:a5:c7:e9:38:da:29:2d:9c: fb:c2:81:6a:38:68:9f:6c:80:5d:be:5b:dc:c7:77: 3b:81:7f:59:f4:d6:f0:27:f2:96:88:29:90:91:a1: dd:cc:cb:5f:22:b9:9c:46:c8:6e:53:36:e4:cf:c8: a1:03:f8:69:ea:6a:9c:39:16:95:f2:73:b9:e7:2f: e2:80:64:95:67:1f:c5:dd:38:89:9b:bb:6e:ff:e2: 6a:c8:85:ef:50:86:db:6c:32:8d:ff:b9:89:00:f9: b1:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:0F:62:8A:00:77:7F:AA:6B:96:FC:CB:9A:A5:F7:3B:D0:C2:CD:09 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144016.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a556::/32 Signature Algorithm: sha256WithRSAEncryption db:f1:45:d8:94:bf:db:7a:02:e6:d5:bb:a7:1b:96:67:8e:b7: 21:f8:de:a5:e5:d4:a4:71:b3:e7:e3:f7:ea:1a:24:c6:23:24: b9:41:e8:b3:84:a9:a5:ed:c2:06:b0:56:f3:40:06:7c:99:0a: 2d:7d:5b:cd:00:fe:a6:48:47:63:d1:7f:9a:d3:ab:31:2c:7b: 1a:81:5f:8d:16:8f:d4:69:1d:67:39:50:3f:db:89:0d:82:cd: 2e:ed:03:4b:48:ff:d1:98:5d:0e:0d:8e:db:d2:3d:56:a5:0f: 39:d9:b6:71:72:14:c7:9e:a7:ca:39:7a:1d:d6:44:d7:2b:f9: 1f:bb:e7:41:66:c7:e4:9d:e9:f2:52:3e:bc:72:7c:b4:e2:b4: d8:cc:7b:74:16:e1:39:5e:64:88:7d:9f:4a:28:63:65:04:9d: b3:6a:db:d5:44:8d:a0:03:33:8f:2f:9a:07:de:14:4b:ee:e9: 05:e7:0f:c0:dc:e6:f6:04:7f:0b:20:08:34:44:99:f9:fc:5d: 26:40:17:87:d7:91:68:eb:4a:cc:02:ce:c4:60:e9:38:4d:31: 09:50:fd:a7:c1:97:a4:5b:34:c9:2d:a3:4c:d2:a3:55:00:e7: d1:0a:b5:c9:58:2d:ff:ca:8e:67:8b:73:34:a3:bd:c0:a7:51: 03:c5:26:af -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUSVUq1Jwd/3g1vpanMm9JFVQ/UJ4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTAwNVoX DTI3MDMwMzA2MTUwNVowMzExMC8GA1UEAxMoQUIwRjYyOEEwMDc3N0ZBQTZCOTZG Q0NCOUFBNUY3M0JEMEMyQ0QwOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKiVmiN7XcIJ58v0rK8phmtloKu3FJFEzez6YEvzFoR1YHAPwjCj5A1snOFs nrf8mxRCdh10DFM8vc2CuYAy4DDmv7iRgT158gVumyj8S+euUai3Jcdco1E0jQhD sKiqOlSggehiTxgS2YcuXQxehXM7BrEegzHS+eASz7M0gzOVpFUF7Ry8ndKiaiCt xT3itDyEtFpo5JFDd+BcR6XH6TjaKS2c+8KBajhon2yAXb5b3Md3O4F/WfTW8Cfy logpkJGh3czLXyK5nEbIblM25M/IoQP4aepqnDkWlfJzuecv4oBklWcfxd04iZu7 bv/iasiF71CG22wyjf+5iQD5sZcCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSrD2KK AHd/qmuW/Muapfc70MLNCTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDAxNi5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK pVYwDQYJKoZIhvcNAQELBQADggEBANvxRdiUv9t6AubVu6cblmeOtyH43qXl1KRx s+fj9+oaJMYjJLlB6LOEqaXtwgawVvNABnyZCi19W80A/qZIR2PRf5rTqzEsexqB X40Wj9RpHWc5UD/biQ2CzS7tA0tI/9GYXQ4NjtvSPValDznZtnFyFMeep8o5eh3W RNcr+R+750Fmx+Sd6fJSPrxyfLTitNjMe3QW4TleZIh9n0ooY2UEnbNq29VEjaAD M48vmgfeFEvu6QXnD8Dc5vYEfwsgCDREmfn8XSZAF4fXkWjrSswCzsRg6ThNMQlQ /afBl6RbNMkto0zSo1UA59EKtclYLf/KjmeLczSjvcCnUQPFJq8= -----END CERTIFICATE-----Generated at Sat Mar 28 14:30:41 2026 by rpki-client