$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144025.roa File: AS144025.roa (raw, json) Hash identifier: Pj7y7beA26A3AsTjlcbBzlJohvnhEl6pX8AnPU8Zf34= Subject key identifier: E7:32:4F:D6:61:97:5A:E5:AC:37:C6:03:B2:A1:DB:0E:FC:70:DD:DF Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 21A1D1A8401546D52F3E4077502E76DAB14BD13E Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144025.roa Signing time: Wed 04 Mar 2026 06:13:26 +0000 ROA not before: Wed 04 Mar 2026 06:08:26 +0000 ROA not after: Wed 03 Mar 2027 06:13:26 +0000 asID: 144025 IP address blocks: 240a:a55f::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:a1:d1:a8:40:15:46:d5:2f:3e:40:77:50:2e:76:da:b1:4b:d1:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:08:26 2026 GMT Not After : Mar 3 06:13:26 2027 GMT Subject: CN=E7324FD661975AE5AC37C603B2A1DB0EFC70DDDF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:bd:c2:dd:76:f7:15:b4:18:3c:54:92:15:68: 3c:42:84:81:8b:17:f5:85:2c:78:fa:ac:c4:2f:af: a2:fa:9d:27:4b:a1:f8:83:43:93:1f:46:73:f1:a6: 8e:dd:a4:22:9e:dd:77:68:7a:18:5d:7f:6a:63:5f: 6c:7f:f9:01:11:d0:d3:a1:a0:ba:39:5e:08:2f:4b: 55:fa:74:59:4f:f5:d7:91:ca:2c:54:d4:fc:c7:1d: a1:0b:a4:43:2b:1f:90:69:da:38:dc:90:6c:6a:e1: b7:9b:35:84:43:e2:94:02:04:68:8e:00:cc:84:e1: c2:f5:eb:0c:47:8c:1f:68:42:ca:d3:fa:6d:41:fd: 00:e7:90:25:2f:c8:d0:cc:7a:59:5f:74:bc:8b:31: 94:0f:7f:81:4f:ae:36:47:91:16:0d:03:40:51:39: 2e:d8:a3:47:6f:4f:50:fa:56:82:f4:bb:04:8d:95: ac:0c:94:77:2a:b7:8a:c7:0d:fa:de:fa:06:72:27: e6:e7:2e:b5:7b:8e:c5:d8:b1:48:72:6f:14:e7:0b: c8:1a:78:4d:db:73:0b:f8:ee:fe:70:b3:6a:ae:88: 14:8b:02:32:f1:27:b8:fa:4c:13:77:c1:41:03:f8: 6e:e3:70:6f:76:f7:f4:64:31:0b:b9:fd:0d:7c:c7: 7f:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:32:4F:D6:61:97:5A:E5:AC:37:C6:03:B2:A1:DB:0E:FC:70:DD:DF X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144025.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a55f::/32 Signature Algorithm: sha256WithRSAEncryption 99:ec:b4:af:b3:9e:12:4f:3e:f3:ac:4e:74:ae:51:57:10:b0: bb:1e:c7:32:45:cb:23:77:62:92:47:12:03:11:94:ec:b3:57: bc:6b:74:40:ec:9c:7f:9b:16:d4:b9:03:af:77:54:15:0a:d3: f7:ab:b5:fb:f2:65:0e:f1:cc:c7:67:6c:33:b3:50:8f:ab:b4: 77:19:aa:7b:2c:59:36:88:91:5f:98:26:5f:ce:55:fc:f3:81: b2:5f:ac:b1:21:2c:0b:2b:4f:73:6c:db:ca:05:c1:ee:80:e8: e9:81:66:18:03:40:1b:02:4d:56:99:f9:b9:b7:cb:81:cc:96: 25:63:ba:e0:4a:8c:58:5b:e5:2d:56:23:fd:b9:84:f0:14:ac: b9:7a:9d:da:29:14:03:af:ed:b1:8e:e5:db:58:8e:22:52:c2: 80:d1:af:59:ae:4b:1e:79:6d:8b:52:9a:b3:4e:c9:26:35:f7: e1:44:b4:e0:f3:c7:27:de:1c:80:64:76:3c:c8:6b:7d:f1:c2: 39:5f:b6:66:d3:7f:4d:87:67:2e:53:98:39:81:10:28:aa:8e: de:cd:72:d5:dd:63:83:fb:85:b3:40:36:d9:ad:fa:c9:84:f2: 4d:45:34:54:b3:94:4e:0f:cd:c1:04:db:38:b6:0b:3b:25:2d: 02:d4:2e:43 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUIaHRqEAVRtUvPkB3UC522rFL0T4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDgyNloX DTI3MDMwMzA2MTMyNlowMzExMC8GA1UEAxMoRTczMjRGRDY2MTk3NUFFNUFDMzdD NjAzQjJBMURCMEVGQzcwRERERjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJW9wt129xW0GDxUkhVoPEKEgYsX9YUsePqsxC+vovqdJ0uh+INDkx9Gc/Gm jt2kIp7dd2h6GF1/amNfbH/5ARHQ06GgujleCC9LVfp0WU/115HKLFTU/McdoQuk QysfkGnaONyQbGrht5s1hEPilAIEaI4AzIThwvXrDEeMH2hCytP6bUH9AOeQJS/I 0Mx6WV90vIsxlA9/gU+uNkeRFg0DQFE5LtijR29PUPpWgvS7BI2VrAyUdyq3iscN +t76BnIn5ucutXuOxdixSHJvFOcLyBp4TdtzC/ju/nCzaq6IFIsCMvEnuPpME3fB QQP4buNwb3b39GQxC7n9DXzHf1ECAwEAAaOCAcUwggHBMB0GA1UdDgQWBBTnMk/W YZda5aw3xgOyodsO/HDd3zAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDAyNS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK pV8wDQYJKoZIhvcNAQELBQADggEBAJnstK+znhJPPvOsTnSuUVcQsLsexzJFyyN3 YpJHEgMRlOyzV7xrdEDsnH+bFtS5A693VBUK0/ertfvyZQ7xzMdnbDOzUI+rtHcZ qnssWTaIkV+YJl/OVfzzgbJfrLEhLAsrT3Ns28oFwe6A6OmBZhgDQBsCTVaZ+bm3 y4HMliVjuuBKjFhb5S1WI/25hPAUrLl6ndopFAOv7bGO5dtYjiJSwoDRr1muSx55 bYtSmrNOySY19+FEtODzxyfeHIBkdjzIa33xwjlftmbTf02HZy5TmDmBECiqjt7N ctXdY4P7hbNANtmt+smE8k1FNFSzlE4PzcEE2zi2CzslLQLULkM= -----END CERTIFICATE-----Generated at Sat Mar 28 11:49:53 2026 by rpki-client