$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144056.roa File: AS144056.roa (raw, json) Hash identifier: 15GxiCZ0iekcLuePr5Zn+XLfuh/dpmthv/sBIsjASFA= Subject key identifier: 65:6A:F9:39:4B:2A:2F:23:CE:05:99:4F:79:66:E4:89:37:E4:B8:D8 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 6EA93F3F6FF11FE8A67422BA1581694665A5B1B7 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144056.roa Signing time: Wed 04 Mar 2026 06:14:37 +0000 ROA not before: Wed 04 Mar 2026 06:09:37 +0000 ROA not after: Wed 03 Mar 2027 06:14:37 +0000 asID: 144056 IP address blocks: 240a:a57e::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:a9:3f:3f:6f:f1:1f:e8:a6:74:22:ba:15:81:69:46:65:a5:b1:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:09:37 2026 GMT Not After : Mar 3 06:14:37 2027 GMT Subject: CN=656AF9394B2A2F23CE05994F7966E48937E4B8D8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:69:5d:37:b1:db:15:84:33:65:b0:85:c3:1a: e4:9f:5f:1b:77:11:6e:dd:0a:b0:7f:c0:54:d1:73: 25:8f:73:12:8a:e2:45:42:3e:53:ec:6c:d5:66:22: 34:8e:d4:07:f4:f4:98:15:04:9e:af:3e:d3:9c:64: 80:3a:6b:bf:db:f5:e1:51:28:60:8f:8d:10:8e:c1: 6f:da:a7:6e:58:1f:e8:31:18:be:62:90:f1:9f:c1: f8:f9:89:ea:d8:6f:9c:83:91:f5:8a:d2:52:29:b5: 86:50:67:61:e9:b0:43:6f:ed:3c:e7:35:75:d9:f0: 53:70:73:48:3f:48:2e:08:9e:cb:ff:27:da:d6:5f: 55:9b:46:a2:d9:54:e6:ef:81:60:13:fa:5b:11:a6: 6b:d4:eb:16:40:5f:fc:85:f9:87:ed:4f:b8:2a:15: 36:84:f8:69:73:38:9e:aa:88:2c:72:89:1c:9f:6b: b2:bb:86:2f:ba:94:ea:ff:cf:16:3a:1c:4b:71:38: 59:a4:42:ca:7f:80:a7:fb:80:40:c5:78:6c:de:76: d6:03:6a:6c:d6:74:a9:74:5e:1e:45:a9:55:93:48: 40:20:10:c1:20:2f:5a:60:b8:ef:3f:44:7f:ef:04: 2f:b6:d4:1c:a4:d5:6e:f5:6a:83:10:cb:80:57:c3: b6:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:6A:F9:39:4B:2A:2F:23:CE:05:99:4F:79:66:E4:89:37:E4:B8:D8 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144056.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a57e::/32 Signature Algorithm: sha256WithRSAEncryption 20:e3:51:d4:2d:c7:ab:a7:d1:81:3f:6c:f6:72:ed:9f:a2:a6: a2:7a:e9:c7:5b:55:da:08:eb:af:c5:8d:eb:a3:f8:45:35:da: a5:67:ba:de:a3:37:7d:d6:73:6c:8c:69:3d:8f:09:1a:b1:4b: 2b:94:1c:31:d9:8c:24:a4:81:3d:cd:e9:fa:28:01:75:e3:89: ef:1e:22:a0:aa:ee:a0:d5:f5:de:7f:20:c5:c8:18:17:de:bc: b4:a7:8d:76:5e:08:df:9e:27:b8:4a:b6:70:c7:2c:5b:ba:5e: af:3b:da:da:61:7e:23:de:49:29:93:54:8b:57:cd:60:7c:d2: da:46:d7:77:14:6a:a9:2d:c2:d7:a0:04:9c:4f:5b:4a:a2:05: 2f:fa:6a:9a:55:6c:14:0e:fa:31:e8:e6:96:ab:7e:15:b5:7b: 3c:9a:ed:de:67:8b:c8:6a:83:37:81:b4:d5:81:8a:f3:d3:13: 34:8b:b3:0a:9e:7b:17:56:62:b4:56:d3:6b:67:85:db:70:5f: 33:73:6f:dc:f3:0d:7d:21:fb:c9:fb:e3:4b:a0:3f:1d:55:3d: 9a:54:96:41:ef:e0:05:bb:e7:55:6e:04:81:28:b3:71:54:71: 1f:39:04:6e:93:04:92:70:ac:dc:14:3a:4f:22:47:ee:b0:2d: c2:9c:e2:cc -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUbqk/P2/xH+imdCK6FYFpRmWlsbcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDkzN1oX DTI3MDMwMzA2MTQzN1owMzExMC8GA1UEAxMoNjU2QUY5Mzk0QjJBMkYyM0NFMDU5 OTRGNzk2NkU0ODkzN0U0QjhEODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKhpXTex2xWEM2WwhcMa5J9fG3cRbt0KsH/AVNFzJY9zEoriRUI+U+xs1WYi NI7UB/T0mBUEnq8+05xkgDprv9v14VEoYI+NEI7Bb9qnblgf6DEYvmKQ8Z/B+PmJ 6thvnIOR9YrSUim1hlBnYemwQ2/tPOc1ddnwU3BzSD9ILgiey/8n2tZfVZtGotlU 5u+BYBP6WxGma9TrFkBf/IX5h+1PuCoVNoT4aXM4nqqILHKJHJ9rsruGL7qU6v/P FjocS3E4WaRCyn+Ap/uAQMV4bN521gNqbNZ0qXReHkWpVZNIQCAQwSAvWmC47z9E f+8EL7bUHKTVbvVqgxDLgFfDtpcCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRlavk5 SyovI84FmU95ZuSJN+S42DAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDA1Ni5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK pX4wDQYJKoZIhvcNAQELBQADggEBACDjUdQtx6un0YE/bPZy7Z+ipqJ66cdbVdoI 66/Fjeuj+EU12qVnut6jN33Wc2yMaT2PCRqxSyuUHDHZjCSkgT3N6fooAXXjie8e IqCq7qDV9d5/IMXIGBfevLSnjXZeCN+eJ7hKtnDHLFu6Xq872tphfiPeSSmTVItX zWB80tpG13cUaqktwtegBJxPW0qiBS/6appVbBQO+jHo5parfhW1ezya7d5ni8hq gzeBtNWBivPTEzSLswqeexdWYrRW02tnhdtwXzNzb9zzDX0h+8n740ugPx1VPZpU lkHv4AW751VuBIEos3FUcR85BG6TBJJwrNwUOk8iR+6wLcKc4sw= -----END CERTIFICATE-----Generated at Sat Mar 28 11:43:13 2026 by rpki-client