$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144043.roa File: AS144043.roa (raw, json) Hash identifier: K/Gf2goGV/T4qXH3qhqP5Utip+WZRwtokAwI2Hua+00= Subject key identifier: 81:35:6D:2F:F6:BA:53:BC:09:CF:4B:77:FC:FC:98:E9:EE:14:9F:10 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 446F51BA7FE255CCE425599F32DC30C0CF8EDB5D Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144043.roa Signing time: Wed 04 Mar 2026 06:15:14 +0000 ROA not before: Wed 04 Mar 2026 06:10:14 +0000 ROA not after: Wed 03 Mar 2027 06:15:14 +0000 asID: 144043 IP address blocks: 240a:a571::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:6f:51:ba:7f:e2:55:cc:e4:25:59:9f:32:dc:30:c0:cf:8e:db:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:10:14 2026 GMT Not After : Mar 3 06:15:14 2027 GMT Subject: CN=81356D2FF6BA53BC09CF4B77FCFC98E9EE149F10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:7e:b2:24:2c:7e:d0:6a:83:c9:0d:a3:c6:10: 4b:35:b1:7d:68:93:d0:2c:00:c5:f2:53:5f:6b:f4: f7:92:0d:e0:61:da:f5:a1:22:0e:10:49:7b:03:9a: ae:f6:59:8e:01:4c:0b:e0:c1:64:75:e6:91:f3:d1: fd:0c:6e:a0:b5:ca:79:9c:86:68:db:f8:69:1d:82: 20:b3:61:20:7e:35:6e:77:73:4a:48:14:1a:d2:63: 44:ed:f5:97:0e:5d:02:d2:9a:5c:a9:54:3f:27:b6: 8e:7f:37:bf:ab:62:70:b5:06:2c:70:f8:58:fd:1a: 7f:d3:f3:00:9e:68:a1:94:66:14:2a:fe:93:21:f0: f8:f6:eb:94:80:86:8c:48:b0:c5:2b:68:72:73:0b: d1:bd:48:61:6a:cc:c8:09:ef:2e:c5:5a:64:94:36: 82:b7:e0:68:1b:0a:40:cb:39:fa:8f:67:6a:8f:66: ae:c6:7c:90:6f:d5:7a:f9:be:3b:9a:1b:b0:26:4e: ed:20:85:6f:63:56:3f:0b:33:2e:3e:f5:b1:6d:62: 27:21:b1:32:41:34:c4:64:77:8f:94:6d:2c:14:74: 72:69:d7:c4:05:28:6b:57:8f:54:b9:c7:91:8a:2f: 9d:03:8a:0b:ee:39:c1:5f:09:92:94:f8:06:0c:70: 2d:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:35:6D:2F:F6:BA:53:BC:09:CF:4B:77:FC:FC:98:E9:EE:14:9F:10 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144043.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a571::/32 Signature Algorithm: sha256WithRSAEncryption d4:ee:d8:06:fa:69:a4:40:04:95:a8:f3:25:13:72:7c:8c:f0: 05:3b:0d:e8:3e:16:c5:ff:94:e6:d4:5e:47:ca:70:49:f4:02: ed:72:ec:ef:5b:35:69:c5:2e:97:66:01:10:c6:75:99:94:3a: e4:8d:cc:67:e6:e1:4e:00:23:b7:22:2f:b6:e7:2a:fa:6b:cf: db:76:f2:13:0a:37:84:05:e6:be:0a:e7:f0:6f:85:56:76:da: e8:17:f5:52:f3:dd:15:24:eb:27:63:03:69:5f:f5:31:7e:72: 63:88:6f:de:9c:26:99:47:90:19:82:14:c6:fe:c2:5c:f5:e0: e0:69:0b:ea:6b:d4:52:e3:6e:29:d0:2f:6e:d0:9f:3b:dd:53: 2b:0f:df:1f:5b:d8:ec:ba:0b:85:bf:b7:b0:f7:5c:76:8f:7b: 5c:d6:0f:65:17:62:93:4f:8e:d3:d5:74:97:23:16:bd:7e:99: 82:b0:69:cc:8f:c4:e4:ad:17:60:51:c9:02:35:36:5c:95:cf: d3:1c:9a:86:db:34:3e:9c:06:72:2a:7a:31:53:05:39:e8:35: 53:fe:95:d9:6b:58:6a:4b:9b:01:f8:97:93:36:61:2b:c9:bb: ba:ef:cd:51:ed:27:b9:d6:d9:61:2a:0b:92:f2:e9:40:26:54: 0d:09:47:ad -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIURG9Run/iVczkJVmfMtwwwM+O210wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTAxNFoX DTI3MDMwMzA2MTUxNFowMzExMC8GA1UEAxMoODEzNTZEMkZGNkJBNTNCQzA5Q0Y0 Qjc3RkNGQzk4RTlFRTE0OUYxMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAIx+siQsftBqg8kNo8YQSzWxfWiT0CwAxfJTX2v095IN4GHa9aEiDhBJewOa rvZZjgFMC+DBZHXmkfPR/QxuoLXKeZyGaNv4aR2CILNhIH41bndzSkgUGtJjRO31 lw5dAtKaXKlUPye2jn83v6ticLUGLHD4WP0af9PzAJ5ooZRmFCr+kyHw+PbrlICG jEiwxStocnML0b1IYWrMyAnvLsVaZJQ2grfgaBsKQMs5+o9nao9mrsZ8kG/Vevm+ O5obsCZO7SCFb2NWPwszLj71sW1iJyGxMkE0xGR3j5RtLBR0cmnXxAUoa1ePVLnH kYovnQOKC+45wV8JkpT4BgxwLaECAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSBNW0v 9rpTvAnPS3f8/Jjp7hSfEDAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDA0My5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK pXEwDQYJKoZIhvcNAQELBQADggEBANTu2Ab6aaRABJWo8yUTcnyM8AU7Deg+FsX/ lObUXkfKcEn0Au1y7O9bNWnFLpdmARDGdZmUOuSNzGfm4U4AI7ciL7bnKvprz9t2 8hMKN4QF5r4K5/BvhVZ22ugX9VLz3RUk6ydjA2lf9TF+cmOIb96cJplHkBmCFMb+ wlz14OBpC+pr1FLjbinQL27QnzvdUysP3x9b2Oy6C4W/t7D3XHaPe1zWD2UXYpNP jtPVdJcjFr1+mYKwacyPxOStF2BRyQI1NlyVz9McmobbND6cBnIqejFTBTnoNVP+ ldlrWGpLmwH4l5M2YSvJu7rvzVHtJ7nW2WEqC5Ly6UAmVA0JR60= -----END CERTIFICATE-----Generated at Sat Mar 28 11:42:26 2026 by rpki-client