$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144040.roa File: AS144040.roa (raw, json) Hash identifier: MT1M24tY9CyL1MuIFqANCUZbnZA62dzCiLarch1UQ8Q= Subject key identifier: 84:88:E5:4D:97:C4:55:44:FB:17:98:23:D5:1B:00:F5:92:DD:52:48 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 66A87B36BF2EF75D414ADF60C99E16E9561BCD9F Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144040.roa Signing time: Wed 04 Mar 2026 06:14:39 +0000 ROA not before: Wed 04 Mar 2026 06:09:39 +0000 ROA not after: Wed 03 Mar 2027 06:14:39 +0000 asID: 144040 IP address blocks: 240a:a56e::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:a8:7b:36:bf:2e:f7:5d:41:4a:df:60:c9:9e:16:e9:56:1b:cd:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:09:39 2026 GMT Not After : Mar 3 06:14:39 2027 GMT Subject: CN=8488E54D97C45544FB179823D51B00F592DD5248 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:5e:d6:1b:aa:11:02:44:73:4e:5e:d7:b6:62: c8:a0:ab:36:06:30:ab:fa:5b:57:18:17:5f:c6:93: cb:3a:ab:63:2c:0d:20:a4:21:2b:a3:d4:ca:14:75: b2:ec:db:3c:35:17:72:77:d8:b0:22:24:ff:24:85: c2:ab:41:84:c8:20:17:2b:eb:9f:2d:b9:2c:70:a1: 34:7e:34:17:e7:28:01:5e:ff:1d:08:b5:a6:da:59: d1:99:63:d2:5f:51:19:78:0d:bc:c8:1d:f8:02:44: 59:ee:93:5a:d2:c8:32:f1:aa:02:8d:94:21:11:62: 5b:45:01:c0:15:73:a6:8d:a8:07:d7:18:1d:a4:b4: bc:17:7b:16:1b:65:c8:7b:d7:b1:6c:c0:59:85:12: 3f:c6:c9:85:f7:c0:ec:46:e1:d5:bd:08:e0:da:84: 36:0b:82:77:d6:1a:75:ff:2c:67:f6:7e:d1:a1:8a: 28:72:80:00:61:b6:05:5a:a7:04:76:ac:f4:32:0e: e7:b0:e2:fa:75:c1:43:53:0c:ba:4b:8c:c1:13:96: b1:d7:b5:a3:bf:61:32:f8:b2:0c:7e:f5:e5:77:9c: dc:75:a7:49:cf:10:0e:5c:1e:b0:2d:35:1b:2f:c7: b6:90:d9:e4:7d:00:e7:d7:96:c5:eb:f7:aa:e8:01: aa:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:88:E5:4D:97:C4:55:44:FB:17:98:23:D5:1B:00:F5:92:DD:52:48 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144040.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a56e::/32 Signature Algorithm: sha256WithRSAEncryption b2:32:d1:8b:57:9a:ba:74:8b:7f:25:f3:31:cd:1c:9d:9d:87: 9f:22:dd:97:ce:96:e6:9e:33:24:97:d7:ce:c3:91:b4:75:f7: 9c:21:a6:9d:87:34:19:67:a0:ad:d7:03:fe:44:10:89:ab:86: d1:b7:03:cf:01:81:a3:d1:b8:d6:1d:8a:cc:3a:a7:db:04:22: 64:a0:a5:ee:2a:84:73:ec:8f:bc:75:bf:38:13:1e:be:f8:ea: b7:dd:16:e2:45:25:fa:f1:14:ff:72:cb:41:a2:13:95:5f:e7: 3c:74:be:0d:ce:db:4b:64:bc:02:4b:d0:85:d4:70:bd:fc:52: 51:e4:33:c6:28:34:2b:eb:ff:f1:d8:e0:bc:b6:9a:34:af:a5: b9:66:0d:00:70:b6:fd:b7:c7:62:7c:0e:85:b3:7e:cc:2b:b0: db:a6:eb:80:c9:11:f2:65:29:c3:16:f0:ab:9d:7d:9a:bd:66: bf:51:90:3f:97:9c:f7:10:54:f3:d7:2c:0f:9e:66:fb:6d:b7: af:07:f2:1f:5d:cf:93:54:21:89:de:28:8c:67:27:fa:b7:9f: 24:f8:c1:ca:2d:d8:f9:bb:cd:7a:66:b6:03:26:ff:ba:d9:bb: ce:b0:75:5b:60:b9:8c:92:1a:54:5a:40:72:73:df:af:5a:36: c9:91:88:35 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUZqh7Nr8u911BSt9gyZ4W6VYbzZ8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDkzOVoX DTI3MDMwMzA2MTQzOVowMzExMC8GA1UEAxMoODQ4OEU1NEQ5N0M0NTU0NEZCMTc5 ODIzRDUxQjAwRjU5MkRENTI0ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKVe1huqEQJEc05e17ZiyKCrNgYwq/pbVxgXX8aTyzqrYywNIKQhK6PUyhR1 suzbPDUXcnfYsCIk/ySFwqtBhMggFyvrny25LHChNH40F+coAV7/HQi1ptpZ0Zlj 0l9RGXgNvMgd+AJEWe6TWtLIMvGqAo2UIRFiW0UBwBVzpo2oB9cYHaS0vBd7Fhtl yHvXsWzAWYUSP8bJhffA7Ebh1b0I4NqENguCd9Yadf8sZ/Z+0aGKKHKAAGG2BVqn BHas9DIO57Di+nXBQ1MMukuMwROWsde1o79hMviyDH715Xec3HWnSc8QDlwesC01 Gy/HtpDZ5H0A59eWxev3qugBqqkCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSEiOVN l8RVRPsXmCPVGwD1kt1SSDAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDA0MC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK pW4wDQYJKoZIhvcNAQELBQADggEBALIy0YtXmrp0i38l8zHNHJ2dh58i3ZfOluae MySX187DkbR195whpp2HNBlnoK3XA/5EEImrhtG3A88BgaPRuNYdisw6p9sEImSg pe4qhHPsj7x1vzgTHr746rfdFuJFJfrxFP9yy0GiE5Vf5zx0vg3O20tkvAJL0IXU cL38UlHkM8YoNCvr//HY4Ly2mjSvpblmDQBwtv23x2J8DoWzfswrsNum64DJEfJl KcMW8KudfZq9Zr9RkD+XnPcQVPPXLA+eZvttt68H8h9dz5NUIYneKIxnJ/q3nyT4 wcot2Pm7zXpmtgMm/7rZu86wdVtguYySGlRaQHJz369aNsmRiDU= -----END CERTIFICATE-----Generated at Sat Mar 28 11:41:08 2026 by rpki-client