$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144037.roa File: AS144037.roa (raw, json) Hash identifier: o2731aWaty1IkG/TsVDC/DItAcoR6H6cMuT02KsNI2s= Subject key identifier: BD:4E:33:C6:89:3F:1C:E3:FE:AA:8D:5E:F4:4C:89:38:07:02:D8:5D Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 0785B624CF4FBA718336C9F61F6919E58EE7C0BD Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144037.roa Signing time: Wed 04 Mar 2026 06:12:55 +0000 ROA not before: Wed 04 Mar 2026 06:07:55 +0000 ROA not after: Wed 03 Mar 2027 06:12:55 +0000 asID: 144037 IP address blocks: 240a:a56b::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:85:b6:24:cf:4f:ba:71:83:36:c9:f6:1f:69:19:e5:8e:e7:c0:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:07:55 2026 GMT Not After : Mar 3 06:12:55 2027 GMT Subject: CN=BD4E33C6893F1CE3FEAA8D5EF44C89380702D85D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:6c:70:db:14:a0:67:a7:7e:1b:3e:0b:8a:8f: 85:00:22:90:15:0e:16:70:00:ab:8d:c9:90:44:9c: 12:8d:7d:82:b3:a6:62:4f:58:1b:45:78:b4:ae:e5: b3:6d:4c:f4:7c:38:bb:1f:2c:23:36:be:6f:25:2e: 8d:0f:e6:74:27:b1:71:ec:10:5d:04:da:84:cf:c5: 0a:67:f1:fb:09:a8:bf:5a:b0:8c:65:0b:45:5e:7d: ec:14:d8:9a:94:4b:c0:4a:7b:2e:58:66:c7:f6:6f: 33:b4:5e:6c:c2:1d:4c:b2:79:6d:80:58:00:ad:83: fb:1e:a2:81:15:95:c2:57:7a:90:63:60:d3:3b:17: ac:89:a2:c6:af:f0:36:e5:9c:9b:3a:a7:77:6c:03: e7:69:60:7a:75:39:a8:5a:92:89:78:c1:fa:48:61: c9:74:26:f0:64:bc:5e:6a:00:0a:8b:34:9e:a8:b1: 80:dc:78:33:60:0e:1d:46:75:69:57:5d:46:1f:15: ab:c2:90:9f:74:70:19:4e:aa:94:59:fa:b9:de:d2: f6:a0:3b:11:1d:12:24:7a:90:92:02:9b:0c:31:67: 06:9b:c0:0f:90:8a:c1:1f:40:28:33:7d:c6:bb:cc: eb:65:0f:c1:de:cf:f7:6b:07:ec:23:19:d8:17:7a: 55:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:4E:33:C6:89:3F:1C:E3:FE:AA:8D:5E:F4:4C:89:38:07:02:D8:5D X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144037.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a56b::/32 Signature Algorithm: sha256WithRSAEncryption 4c:08:16:65:70:59:f0:51:35:88:4f:46:7e:8c:1b:97:42:89: c0:0d:4e:df:57:54:db:9e:87:0b:6b:ec:05:e4:3a:70:c1:b7: 04:6f:9b:c1:3b:85:fd:4c:5e:b3:cc:37:20:8e:ad:69:07:9b: 82:ea:26:80:ca:bd:c4:f2:ae:b7:60:80:66:8d:86:f5:2a:83: c2:31:81:ba:d3:0d:87:89:b6:55:bc:ff:42:13:2d:6d:52:2a: 06:42:c2:2d:d2:86:14:71:2f:eb:8f:65:00:25:15:9f:1e:2e: 61:8a:ce:4d:9d:ad:3b:a6:d3:44:5f:24:95:af:dd:09:86:47: c5:af:5f:df:29:70:11:cd:d7:48:88:dd:20:b8:18:8f:d9:46: 6c:0b:15:26:e2:00:7b:48:b4:30:29:a4:eb:22:d0:c4:d2:95: 24:64:bc:2d:2f:1f:0d:81:f8:d2:20:9e:4c:3e:19:92:55:58: f2:f6:63:fa:b5:79:a5:c5:42:ad:26:3c:72:7b:a5:94:f5:d9: ee:bb:fb:32:26:f6:ac:d6:fc:b4:af:33:9b:ad:91:5f:03:be: a6:4c:70:ab:98:c6:4a:61:fe:df:7f:ef:fe:68:c5:8b:7c:e3: 23:29:f6:51:e0:ba:76:da:e2:87:e1:71:30:f4:02:48:ff:6b: 8b:30:64:56 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUB4W2JM9PunGDNsn2H2kZ5Y7nwL0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDc1NVoX DTI3MDMwMzA2MTI1NVowMzExMC8GA1UEAxMoQkQ0RTMzQzY4OTNGMUNFM0ZFQUE4 RDVFRjQ0Qzg5MzgwNzAyRDg1RDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALxscNsUoGenfhs+C4qPhQAikBUOFnAAq43JkEScEo19grOmYk9YG0V4tK7l s21M9Hw4ux8sIza+byUujQ/mdCexcewQXQTahM/FCmfx+wmov1qwjGULRV597BTY mpRLwEp7Llhmx/ZvM7RebMIdTLJ5bYBYAK2D+x6igRWVwld6kGNg0zsXrImixq/w NuWcmzqnd2wD52lgenU5qFqSiXjB+khhyXQm8GS8XmoACos0nqixgNx4M2AOHUZ1 aVddRh8Vq8KQn3RwGU6qlFn6ud7S9qA7ER0SJHqQkgKbDDFnBpvAD5CKwR9AKDN9 xrvM62UPwd7P92sH7CMZ2Bd6VaUCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBS9TjPG iT8c4/6qjV70TIk4BwLYXTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDAzNy5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK pWswDQYJKoZIhvcNAQELBQADggEBAEwIFmVwWfBRNYhPRn6MG5dCicANTt9XVNue hwtr7AXkOnDBtwRvm8E7hf1MXrPMNyCOrWkHm4LqJoDKvcTyrrdggGaNhvUqg8Ix gbrTDYeJtlW8/0ITLW1SKgZCwi3ShhRxL+uPZQAlFZ8eLmGKzk2drTum00RfJJWv 3QmGR8WvX98pcBHN10iI3SC4GI/ZRmwLFSbiAHtItDAppOsi0MTSlSRkvC0vHw2B +NIgnkw+GZJVWPL2Y/q1eaXFQq0mPHJ7pZT12e67+zIm9qzW/LSvM5utkV8DvqZM cKuYxkph/t9/7/5oxYt84yMp9lHgunba4ofhcTD0Akj/a4swZFY= -----END CERTIFICATE-----Generated at Sat Mar 28 11:41:35 2026 by rpki-client