$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144058.roa File: AS144058.roa (raw, json) Hash identifier: Efkrb8BKajnyZvxxHESgYiwLEvJz8Q8hWVDxaBDLnWE= Subject key identifier: 6E:88:86:BC:91:5B:ED:A1:66:4C:13:08:79:AE:56:80:49:F5:2F:B1 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 555C3CD5B9520B5C0E58E79E2A50404CEF1603B2 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144058.roa Signing time: Wed 04 Mar 2026 06:13:27 +0000 ROA not before: Wed 04 Mar 2026 06:08:27 +0000 ROA not after: Wed 03 Mar 2027 06:13:27 +0000 asID: 144058 IP address blocks: 240a:a580::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:5c:3c:d5:b9:52:0b:5c:0e:58:e7:9e:2a:50:40:4c:ef:16:03:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:08:27 2026 GMT Not After : Mar 3 06:13:27 2027 GMT Subject: CN=6E8886BC915BEDA1664C130879AE568049F52FB1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:c8:08:4f:72:cd:8e:92:a0:2f:4e:46:b5:8a: be:03:37:9c:a2:29:0c:9b:9a:50:53:70:fc:72:7a: e2:5f:35:ed:12:14:b0:d2:a2:40:0d:f5:8d:7b:0f: f0:f3:e9:a3:54:b3:c3:41:b7:29:32:77:2c:9d:32: e6:5d:92:66:f1:f7:c2:7e:4f:7b:bb:26:bc:80:50: 3e:aa:fd:7e:80:13:bf:3c:95:07:60:e4:a0:2c:2f: 59:fe:bb:1e:66:a7:7f:09:a2:e2:8d:99:5f:e0:34: 97:92:6f:f7:a2:29:2c:08:0f:16:92:07:a2:3b:4a: c7:56:83:5c:30:1b:fe:85:87:5c:5b:f7:ad:90:b6: 3b:29:3b:c2:8e:f9:da:87:56:9c:9f:6e:33:a6:db: 52:47:e1:c4:df:ee:2c:04:e8:1c:05:ea:48:f2:c6: 4f:c5:b4:15:62:c4:5e:a5:58:f4:40:59:42:cc:3f: 5a:63:12:17:4c:b2:9c:7a:f9:b6:90:80:2b:8e:0d: 62:31:f0:bb:bf:40:72:67:5e:e4:18:ca:64:21:c1: ff:7f:a6:c5:b6:8b:ac:83:20:ba:a0:71:39:42:77: 05:bc:5b:ed:1f:fa:26:20:a1:b1:0a:ee:31:86:c3: 80:ef:58:f0:18:1b:2e:42:29:68:3f:74:f0:33:67: 49:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:88:86:BC:91:5B:ED:A1:66:4C:13:08:79:AE:56:80:49:F5:2F:B1 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144058.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a580::/32 Signature Algorithm: sha256WithRSAEncryption da:f4:16:ca:7a:16:bd:f6:fe:d1:76:b4:96:1c:00:2d:41:bd: b4:6a:1a:71:d5:ab:ba:1d:37:ab:47:22:20:5a:f1:c9:56:ea: e3:a7:f2:86:df:99:b8:5d:d6:f6:0b:1d:e4:d7:93:0a:ac:b0: 71:90:85:1d:18:c0:b3:01:2a:95:7b:c8:5c:38:40:54:ed:ac: 63:11:9e:68:6b:14:c9:9e:df:16:73:1d:56:ff:32:b5:94:29: 12:b1:2e:7b:b9:ce:c0:45:e5:ab:68:0e:a6:45:f4:ee:f8:25: ae:07:db:65:b1:e1:69:89:b4:34:58:43:81:55:7b:e4:c2:1a: f8:b0:c7:84:9a:0e:96:db:b4:14:f9:ae:de:d9:03:47:12:74: fe:f2:70:a2:f9:18:9e:dd:ca:de:df:8e:16:72:6e:78:b4:35: 29:e0:37:ae:d8:0a:68:ce:3a:7b:4a:f4:17:7d:87:fb:ef:1c: 1c:54:e3:4a:4a:51:f9:db:97:46:17:f0:2f:ff:ab:33:ec:ac: b7:cf:c9:ee:dc:6f:56:35:f4:28:18:bd:4e:1d:e2:0a:fa:e6: 03:13:66:07:f0:fb:07:68:fa:09:b1:a0:79:8f:81:40:56:08: 11:69:0b:32:f1:93:16:b8:ef:98:86:f2:51:45:f0:ac:31:79: 1b:54:fe:f2 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUVVw81blSC1wOWOeeKlBATO8WA7IwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDgyN1oX DTI3MDMwMzA2MTMyN1owMzExMC8GA1UEAxMoNkU4ODg2QkM5MTVCRURBMTY2NEMx MzA4NzlBRTU2ODA0OUY1MkZCMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMrICE9yzY6SoC9ORrWKvgM3nKIpDJuaUFNw/HJ64l817RIUsNKiQA31jXsP 8PPpo1Szw0G3KTJ3LJ0y5l2SZvH3wn5Pe7smvIBQPqr9foATvzyVB2DkoCwvWf67 Hmanfwmi4o2ZX+A0l5Jv96IpLAgPFpIHojtKx1aDXDAb/oWHXFv3rZC2Oyk7wo75 2odWnJ9uM6bbUkfhxN/uLAToHAXqSPLGT8W0FWLEXqVY9EBZQsw/WmMSF0yynHr5 tpCAK44NYjHwu79Acmde5BjKZCHB/3+mxbaLrIMguqBxOUJ3Bbxb7R/6JiChsQru MYbDgO9Y8BgbLkIpaD908DNnSUUCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRuiIa8 kVvtoWZMEwh5rlaASfUvsTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDA1OC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK pYAwDQYJKoZIhvcNAQELBQADggEBANr0Fsp6Fr32/tF2tJYcAC1BvbRqGnHVq7od N6tHIiBa8clW6uOn8obfmbhd1vYLHeTXkwqssHGQhR0YwLMBKpV7yFw4QFTtrGMR nmhrFMme3xZzHVb/MrWUKRKxLnu5zsBF5atoDqZF9O74Ja4H22Wx4WmJtDRYQ4FV e+TCGviwx4SaDpbbtBT5rt7ZA0cSdP7ycKL5GJ7dyt7fjhZybni0NSngN67YCmjO OntK9Bd9h/vvHBxU40pKUfnbl0YX8C//qzPsrLfPye7cb1Y19CgYvU4d4gr65gMT Zgfw+wdo+gmxoHmPgUBWCBFpCzLxkxa475iG8lFF8KwxeRtU/vI= -----END CERTIFICATE-----Generated at Sat Mar 28 11:42:24 2026 by rpki-client