$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144044.roa File: AS144044.roa (raw, json) Hash identifier: jA5ugACAE24W77jK0D7rDJXVE49l2X5Zo058CZ3cvgI= Subject key identifier: F7:D0:D2:7F:D0:48:6C:AD:EA:FA:49:C6:4B:A8:3D:0A:8A:99:6E:31 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 4C7F218C9E056A0213D8B67E2AA3DD6562B0EC31 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144044.roa Signing time: Wed 04 Mar 2026 06:13:05 +0000 ROA not before: Wed 04 Mar 2026 06:08:05 +0000 ROA not after: Wed 03 Mar 2027 06:13:05 +0000 asID: 144044 IP address blocks: 240a:a572::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:7f:21:8c:9e:05:6a:02:13:d8:b6:7e:2a:a3:dd:65:62:b0:ec:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:08:05 2026 GMT Not After : Mar 3 06:13:05 2027 GMT Subject: CN=F7D0D27FD0486CADEAFA49C64BA83D0A8A996E31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:fe:6e:a3:2e:07:9c:3a:7b:93:ef:67:88:2a: 4f:e4:a9:c6:09:66:b8:e1:91:7f:bf:ab:1d:f2:a5: 79:58:d3:45:5f:5e:08:eb:5f:f6:4a:93:6b:38:8d: bb:47:b1:47:c6:16:92:80:52:38:8c:17:55:05:8a: c4:42:00:ad:cc:00:d5:b6:d8:a6:b8:2e:c7:66:62: fc:97:b3:d4:81:26:a0:a9:60:22:b6:16:7a:3b:b1: 2a:8b:ca:59:af:3b:13:71:30:92:4a:08:40:7d:f9: 08:e3:be:ae:2e:d9:e1:af:0c:08:56:81:84:e0:d4: 8b:6d:31:43:90:d7:39:b8:92:7a:87:47:31:a8:33: 52:9f:21:fa:8d:62:07:c6:5e:8f:6a:4f:00:7f:eb: ad:4d:3a:e2:3a:56:52:ec:54:a9:b7:31:30:27:6e: 09:79:ab:94:94:f8:d3:0b:35:dd:94:ef:9c:30:7d: d3:ad:e3:04:be:da:44:33:a8:5f:c1:dd:eb:12:0e: 16:2d:64:63:72:9f:d1:58:77:a2:73:2c:f3:05:d1: 1e:7d:b9:b4:b4:29:10:3f:36:7b:62:ad:0b:44:04: 68:e6:b9:e0:07:ba:a4:22:32:71:98:35:13:ef:fc: 36:af:93:85:9b:bb:45:8d:8d:68:e2:de:d0:4c:2e: c8:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:D0:D2:7F:D0:48:6C:AD:EA:FA:49:C6:4B:A8:3D:0A:8A:99:6E:31 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144044.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a572::/32 Signature Algorithm: sha256WithRSAEncryption b9:28:e2:b0:7c:6a:cf:ae:3a:72:64:34:63:2c:d9:f1:86:da: 7c:aa:1a:e7:60:96:c0:b6:d1:6a:f5:52:be:a5:cb:bb:f0:98: ae:4e:6e:a5:74:20:e2:7d:04:58:8e:45:62:ec:96:e2:d4:e8: ce:65:8e:21:0e:45:25:9c:08:10:25:20:ca:ea:6d:c5:81:35: c6:75:f0:fc:c3:da:db:ce:21:ba:8e:86:bd:54:b3:fe:b8:8b: 63:96:83:91:ef:c0:ac:82:13:7c:21:dd:3c:bf:67:ae:d8:ea: e8:3f:93:39:1e:b7:2b:5a:8c:ce:b2:bb:a1:23:fe:a8:a3:6d: 5b:d2:90:7a:88:62:48:ef:2a:8e:49:99:a7:3c:e2:76:51:79: 94:41:25:66:65:96:aa:bc:ef:77:44:eb:db:52:7c:88:de:05: 67:5c:f2:27:c0:97:d6:a9:7a:9d:ee:7b:dd:4f:4e:00:88:20: 0d:bd:94:dd:41:2f:19:74:13:c9:61:4a:b7:be:18:2d:b3:8d: 07:ea:64:95:17:bd:89:bc:1b:7b:ec:22:97:33:73:02:73:00: b1:5b:5d:63:68:98:bb:e0:22:33:2f:0d:6b:12:4a:e4:77:5c: 8c:7a:70:39:0b:19:00:5f:c8:95:d5:27:76:1d:b1:ea:9e:61: 36:36:92:58 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUTH8hjJ4FagIT2LZ+KqPdZWKw7DEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDgwNVoX DTI3MDMwMzA2MTMwNVowMzExMC8GA1UEAxMoRjdEMEQyN0ZEMDQ4NkNBREVBRkE0 OUM2NEJBODNEMEE4QTk5NkUzMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALL+bqMuB5w6e5PvZ4gqT+SpxglmuOGRf7+rHfKleVjTRV9eCOtf9kqTaziN u0exR8YWkoBSOIwXVQWKxEIArcwA1bbYprgux2Zi/Jez1IEmoKlgIrYWejuxKovK Wa87E3EwkkoIQH35COO+ri7Z4a8MCFaBhODUi20xQ5DXObiSeodHMagzUp8h+o1i B8Zej2pPAH/rrU064jpWUuxUqbcxMCduCXmrlJT40ws13ZTvnDB9063jBL7aRDOo X8Hd6xIOFi1kY3Kf0Vh3onMs8wXRHn25tLQpED82e2KtC0QEaOa54Ae6pCIycZg1 E+/8Nq+ThZu7RY2NaOLe0EwuyLcCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBT30NJ/ 0Ehsrer6ScZLqD0KipluMTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDA0NC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK pXIwDQYJKoZIhvcNAQELBQADggEBALko4rB8as+uOnJkNGMs2fGG2nyqGudglsC2 0Wr1Ur6ly7vwmK5ObqV0IOJ9BFiORWLsluLU6M5ljiEORSWcCBAlIMrqbcWBNcZ1 8PzD2tvOIbqOhr1Us/64i2OWg5HvwKyCE3wh3Ty/Z67Y6ug/kzketytajM6yu6Ej /qijbVvSkHqIYkjvKo5Jmac84nZReZRBJWZllqq873dE69tSfIjeBWdc8ifAl9ap ep3ue91PTgCIIA29lN1BLxl0E8lhSre+GC2zjQfqZJUXvYm8G3vsIpczcwJzALFb XWNomLvgIjMvDWsSSuR3XIx6cDkLGQBfyJXVJ3YdseqeYTY2klg= -----END CERTIFICATE-----Generated at Sat Mar 28 11:41:12 2026 by rpki-client