$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144053.roa File: AS144053.roa (raw, json) Hash identifier: +7Symib52q1IoDjgvKOuQ131LX9AfwTqVMAVuOU1phU= Subject key identifier: 92:87:13:06:75:43:7C:E3:CB:98:86:0B:00:F1:47:F7:C9:1E:C3:A8 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 60046F7A0BFEA89BD40F45AC1DEAF37E84D3373D Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144053.roa Signing time: Wed 04 Mar 2026 06:12:50 +0000 ROA not before: Wed 04 Mar 2026 06:07:50 +0000 ROA not after: Wed 03 Mar 2027 06:12:50 +0000 asID: 144053 IP address blocks: 240a:a57b::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:04:6f:7a:0b:fe:a8:9b:d4:0f:45:ac:1d:ea:f3:7e:84:d3:37:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:07:50 2026 GMT Not After : Mar 3 06:12:50 2027 GMT Subject: CN=9287130675437CE3CB98860B00F147F7C91EC3A8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:b2:f8:96:3c:1e:ce:89:a0:62:a7:96:59:f2: fc:c7:b0:f4:52:62:56:d3:eb:b3:ab:15:eb:e4:2b: f4:01:fb:0b:da:64:0a:dc:44:d6:5e:bf:ea:21:71: 5e:b7:96:26:39:44:e3:b5:60:f8:56:c5:47:ee:79: 94:ee:6e:85:8a:ee:29:e0:1b:39:33:99:55:3a:f4: dc:11:8d:4e:05:9f:22:4b:28:46:2e:9b:23:16:f5: e4:d4:d0:a5:09:34:0a:37:4b:00:a4:70:50:b5:c3: ad:23:34:e8:b6:5a:08:36:7d:78:8f:f9:77:f1:3a: fb:18:b0:2a:cf:a2:16:f6:00:77:8e:96:46:c3:31: 01:2e:eb:72:08:7d:bb:87:3e:f9:82:4b:fc:9d:9d: d1:2a:eb:1c:5c:90:ad:c4:d8:68:e3:dc:a4:af:a7: 45:cc:1e:d0:ec:be:1b:1a:f2:e6:57:0b:27:14:82: ae:04:99:10:b7:fd:e9:27:c8:cc:30:62:ed:aa:25: a5:01:1b:ac:4d:e4:53:65:75:38:6b:77:13:43:4e: e2:62:cd:df:eb:a0:97:dc:d5:51:70:aa:1b:78:8d: f6:d4:ea:af:7e:93:7d:b8:2e:62:b3:2e:2a:f9:3d: 08:bb:c4:34:00:b2:2a:1c:53:a5:42:a3:cd:2b:c7: 06:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:87:13:06:75:43:7C:E3:CB:98:86:0B:00:F1:47:F7:C9:1E:C3:A8 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144053.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a57b::/32 Signature Algorithm: sha256WithRSAEncryption 25:ee:71:73:b0:23:21:1c:89:ea:de:d8:b9:1b:91:43:77:a4: 31:18:b1:bd:9f:65:f2:47:d0:4f:78:9e:7e:4e:24:1c:c4:f0: 3c:e5:12:c0:ee:a9:f4:06:d8:39:23:9a:6e:6a:c8:d4:26:06: 45:8c:a5:d9:13:64:20:56:97:14:a9:4a:46:a5:c8:08:7c:af: 22:de:88:62:1e:f5:1f:9e:57:38:2d:eb:d9:a1:2f:87:86:ea: 63:e1:c0:0f:ad:77:67:bc:d6:4f:5e:e6:a7:45:31:99:2c:a8: 05:62:2b:6f:08:14:b3:0a:6b:51:ea:a6:e9:ff:f4:1d:ae:34: 31:81:48:c4:04:c6:e9:51:8c:7f:35:c6:b4:10:2e:09:8c:7d: 43:d8:aa:f4:af:f0:0c:77:1f:ed:7b:92:ab:91:50:6d:41:cd: 0f:6f:38:1c:6f:ec:de:c4:ad:aa:45:7e:5b:37:04:e0:a3:e2: f5:4d:67:dd:38:5a:58:03:24:9b:d3:f1:83:df:69:0a:fd:8a: 7b:4c:98:e7:fa:e3:08:74:32:31:9d:7d:61:82:4d:2a:d7:e3: 22:57:4f:b7:c0:50:09:a0:a8:e0:34:67:92:47:7b:50:86:f6: 3a:ec:60:a5:b5:15:d9:f3:f1:17:ad:b4:68:02:4e:12:2b:ab: 7e:ae:c0:95 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUYARvegv+qJvUD0WsHerzfoTTNz0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDc1MFoX DTI3MDMwMzA2MTI1MFowMzExMC8GA1UEAxMoOTI4NzEzMDY3NTQzN0NFM0NCOTg4 NjBCMDBGMTQ3RjdDOTFFQzNBODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAI2y+JY8Hs6JoGKnllny/Mew9FJiVtPrs6sV6+Qr9AH7C9pkCtxE1l6/6iFx XreWJjlE47Vg+FbFR+55lO5uhYruKeAbOTOZVTr03BGNTgWfIksoRi6bIxb15NTQ pQk0CjdLAKRwULXDrSM06LZaCDZ9eI/5d/E6+xiwKs+iFvYAd46WRsMxAS7rcgh9 u4c++YJL/J2d0SrrHFyQrcTYaOPcpK+nRcwe0Oy+Gxry5lcLJxSCrgSZELf96SfI zDBi7aolpQEbrE3kU2V1OGt3E0NO4mLN3+ugl9zVUXCqG3iN9tTqr36TfbguYrMu Kvk9CLvENACyKhxTpUKjzSvHBj8CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSShxMG dUN848uYhgsA8Uf3yR7DqDAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDA1My5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK pXswDQYJKoZIhvcNAQELBQADggEBACXucXOwIyEciere2LkbkUN3pDEYsb2fZfJH 0E94nn5OJBzE8DzlEsDuqfQG2Dkjmm5qyNQmBkWMpdkTZCBWlxSpSkalyAh8ryLe iGIe9R+eVzgt69mhL4eG6mPhwA+td2e81k9e5qdFMZksqAViK28IFLMKa1Hqpun/ 9B2uNDGBSMQExulRjH81xrQQLgmMfUPYqvSv8Ax3H+17kquRUG1BzQ9vOBxv7N7E rapFfls3BOCj4vVNZ904WlgDJJvT8YPfaQr9intMmOf64wh0MjGdfWGCTSrX4yJX T7fAUAmgqOA0Z5JHe1CG9jrsYKW1Fdnz8RettGgCThIrq36uwJU= -----END CERTIFICATE-----Generated at Sat Mar 28 14:30:41 2026 by rpki-client