$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144020.roa File: AS144020.roa (raw, json) Hash identifier: e+yQMgPvX5yTuNWMoKGojk4285mVsos4YIW0/yfqSik= Subject key identifier: C2:BE:E4:BE:38:70:62:79:04:41:88:60:D9:E9:76:F0:F1:4C:B3:BF Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 51F3EBC7DB9C6C2AD1A30C5C0E3EC3847D51227C Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144020.roa Signing time: Wed 04 Mar 2026 06:15:15 +0000 ROA not before: Wed 04 Mar 2026 06:10:15 +0000 ROA not after: Wed 03 Mar 2027 06:15:15 +0000 asID: 144020 IP address blocks: 240a:a55a::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:f3:eb:c7:db:9c:6c:2a:d1:a3:0c:5c:0e:3e:c3:84:7d:51:22:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:10:15 2026 GMT Not After : Mar 3 06:15:15 2027 GMT Subject: CN=C2BEE4BE3870627904418860D9E976F0F14CB3BF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:a4:63:e2:73:53:c7:d4:f5:74:ba:18:d2:a3: 88:23:0c:98:e9:07:13:11:20:11:d5:84:22:a4:b6: 8a:56:68:c9:f1:75:2f:ff:a6:d1:04:62:7c:78:f8: b9:ec:4a:c7:72:ce:42:a9:75:6b:c6:6f:c7:64:4d: 96:88:43:26:ad:86:65:57:f5:4e:42:d9:24:bc:ef: a6:a3:7f:73:83:9f:94:ca:27:9a:70:a5:03:fd:07: b6:7b:5d:37:20:a0:01:35:8b:c4:94:f5:5d:89:26: a4:21:f8:13:71:46:ff:e8:37:91:d6:d9:f0:29:f9: 52:d0:43:51:b6:2c:84:f6:cd:67:46:cd:bd:9e:8b: f4:65:81:28:a7:d7:fa:57:c6:3d:ea:c4:55:5d:43: 1f:af:1d:13:16:e7:2e:35:33:71:40:b8:f7:d5:8a: e5:3e:c8:6f:75:e0:07:ee:40:f5:cb:a1:92:3c:a2: d4:ca:12:ec:75:53:f3:15:b8:4e:05:16:de:12:54: 0b:99:41:da:90:42:26:2d:1d:9f:03:c3:f0:8f:6d: d0:9a:78:a7:8a:a9:03:b3:41:3d:bb:d9:5f:dc:b3: 4e:06:ed:0e:0e:dd:f0:49:be:e9:46:a5:1d:0a:95: 26:19:61:24:be:6b:d6:d4:10:8a:d6:cf:6a:da:3b: 8d:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:BE:E4:BE:38:70:62:79:04:41:88:60:D9:E9:76:F0:F1:4C:B3:BF X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144020.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a55a::/32 Signature Algorithm: sha256WithRSAEncryption d3:c1:0d:57:e0:c3:f1:3a:8b:0e:54:a7:ed:a0:45:a5:f1:f7: 8a:0e:55:2c:c8:ea:21:34:68:0b:ee:8c:0e:53:76:b0:0a:1c: 2d:b2:ca:4c:f6:e6:ec:56:57:24:1e:e2:2b:db:46:bb:cc:5f: 6a:09:44:ab:fa:d0:ee:f4:3e:7a:ab:04:c2:c3:33:88:6d:6a: ec:15:63:25:8c:43:76:38:c1:98:8e:ea:24:a7:ec:95:85:83: 72:e2:be:59:c6:53:88:d4:ce:82:81:2b:be:55:58:9f:72:ca: 9f:d5:12:df:df:36:fb:84:89:74:b3:cc:fa:0e:22:47:51:a6: 4f:5b:bb:ac:4b:80:e6:fd:9e:45:85:16:b3:d7:e3:23:2d:5a: 31:2b:de:6b:f4:d8:a9:c2:8c:9a:0c:34:8f:98:d6:40:e1:a0: c6:fc:ee:aa:d0:a2:bf:f4:38:78:f6:08:f6:32:79:0d:80:d4: da:cd:54:1e:ff:4e:41:f0:d9:7c:1e:4f:23:41:86:c8:b2:ef: f6:62:4a:c8:b1:9e:a1:71:16:5d:b5:21:d0:61:b0:76:32:1a: b5:52:8c:cd:cb:11:cb:f8:a5:b0:1a:c9:58:c9:6d:cd:fc:46: 97:07:27:76:d1:94:b8:f7:25:a3:20:dd:00:69:30:0a:61:f2: dd:7a:71:90 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUUfPrx9ucbCrRowxcDj7DhH1RInwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTAxNVoX DTI3MDMwMzA2MTUxNVowMzExMC8GA1UEAxMoQzJCRUU0QkUzODcwNjI3OTA0NDE4 ODYwRDlFOTc2RjBGMTRDQjNCRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAIukY+JzU8fU9XS6GNKjiCMMmOkHExEgEdWEIqS2ilZoyfF1L/+m0QRifHj4 uexKx3LOQql1a8Zvx2RNlohDJq2GZVf1TkLZJLzvpqN/c4OflMonmnClA/0Htntd NyCgATWLxJT1XYkmpCH4E3FG/+g3kdbZ8Cn5UtBDUbYshPbNZ0bNvZ6L9GWBKKfX +lfGPerEVV1DH68dExbnLjUzcUC499WK5T7Ib3XgB+5A9cuhkjyi1MoS7HVT8xW4 TgUW3hJUC5lB2pBCJi0dnwPD8I9t0Jp4p4qpA7NBPbvZX9yzTgbtDg7d8Em+6Ual HQqVJhlhJL5r1tQQitbPato7jX8CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBTCvuS+ OHBieQRBiGDZ6Xbw8UyzvzAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDAyMC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK pVowDQYJKoZIhvcNAQELBQADggEBANPBDVfgw/E6iw5Up+2gRaXx94oOVSzI6iE0 aAvujA5TdrAKHC2yykz25uxWVyQe4ivbRrvMX2oJRKv60O70PnqrBMLDM4htauwV YyWMQ3Y4wZiO6iSn7JWFg3LivlnGU4jUzoKBK75VWJ9yyp/VEt/fNvuEiXSzzPoO IkdRpk9bu6xLgOb9nkWFFrPX4yMtWjEr3mv02KnCjJoMNI+Y1kDhoMb87qrQor/0 OHj2CPYyeQ2A1NrNVB7/TkHw2XweTyNBhsiy7/ZiSsixnqFxFl21IdBhsHYyGrVS jM3LEcv4pbAayVjJbc38RpcHJ3bRlLj3JaMg3QBpMAph8t16cZA= -----END CERTIFICATE-----Generated at Sat Mar 28 11:43:07 2026 by rpki-client