$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144059.roa File: AS144059.roa (raw, json) Hash identifier: 5KcmffL2neMw5QwhwvohL1VyIWr7HFCyhFNO70pNDsI= Subject key identifier: 76:DB:0D:B7:63:1F:28:A5:43:38:8B:F9:63:1D:DA:37:14:06:37:EC Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 5BEC46D76DEC377D51ACC294052E851FD4679B49 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144059.roa Signing time: Wed 04 Mar 2026 06:15:05 +0000 ROA not before: Wed 04 Mar 2026 06:10:05 +0000 ROA not after: Wed 03 Mar 2027 06:15:05 +0000 asID: 144059 IP address blocks: 240a:a581::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:ec:46:d7:6d:ec:37:7d:51:ac:c2:94:05:2e:85:1f:d4:67:9b:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:10:05 2026 GMT Not After : Mar 3 06:15:05 2027 GMT Subject: CN=76DB0DB7631F28A543388BF9631DDA37140637EC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:e4:ff:ce:e1:76:3a:2d:d1:b0:60:ba:a1:4b: 69:5d:08:b6:2b:bf:51:c9:8a:b0:96:55:32:ae:f5: 94:e7:b1:d0:69:4c:42:50:24:ae:11:87:82:65:35: bc:02:18:7a:d6:c4:1b:33:50:04:34:19:06:02:a4: 17:8a:e7:1e:59:29:af:69:bf:b4:37:a6:3e:a0:68: c5:28:27:24:05:e4:e0:5d:54:36:21:b0:18:7d:f3: e6:03:90:cd:61:d5:71:dd:48:b6:fd:e9:dd:4d:f7: 20:4a:f6:7e:73:13:f6:88:7c:a4:45:a0:ff:1f:d8: 86:4e:22:1f:14:b0:f3:a0:90:ed:4b:ef:cc:e0:8b: 01:50:34:4e:65:b1:fd:a6:16:e1:40:24:22:5b:d0: f9:e4:8c:30:2d:d6:79:a8:b6:52:d0:7b:3b:ca:ec: 98:01:47:b9:3a:11:7b:31:47:4b:a9:57:e5:34:c8: 69:8b:bb:bb:38:6c:c3:bb:79:30:85:7b:51:85:1c: 5d:79:e4:a1:fa:38:d6:f1:bf:65:5b:4f:2e:91:3f: ef:c9:c4:7f:4c:ef:31:fe:cc:69:df:8b:f4:cb:d9: 78:89:fa:02:5f:d0:9f:19:5a:bb:88:80:83:8a:66: fb:e7:82:6a:de:c8:95:05:0e:97:84:da:1b:8d:f8: 37:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:DB:0D:B7:63:1F:28:A5:43:38:8B:F9:63:1D:DA:37:14:06:37:EC X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144059.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a581::/32 Signature Algorithm: sha256WithRSAEncryption 6f:d8:22:77:33:9d:09:7a:6c:f3:c5:35:06:00:be:9e:dc:c4: 21:f8:09:65:6f:1c:14:80:b1:f2:db:f1:5c:dc:fa:f7:f2:5e: 62:3b:9c:f8:71:f8:2e:97:51:ba:9e:59:0a:f6:e2:38:90:70: c7:e5:5f:64:b1:fe:32:09:3c:45:bd:d2:04:ea:30:10:d5:78: f2:c5:b2:f0:e1:bf:08:b7:15:ca:4d:60:68:96:1c:b8:b4:18: 3d:68:a4:7c:7e:80:bb:ee:9e:58:b0:48:1d:aa:66:9d:08:e6: d5:ff:d9:f4:4b:92:16:c8:22:98:f9:2f:6f:ae:db:3a:66:71: 85:ae:0b:c0:66:58:ab:9c:18:12:20:36:ff:1e:0c:71:70:2d: 9d:cd:e6:74:6a:3d:8c:cc:7e:d2:00:03:36:97:1d:9f:86:07: 59:db:d0:1e:1f:31:a3:91:4b:06:ce:a8:e4:bf:f3:75:25:ec: dc:4f:32:f7:51:eb:ef:d2:95:79:8c:c3:45:f5:bd:f3:f3:da: 8e:02:10:6e:b5:99:c6:ac:8f:72:c0:33:9c:a1:6d:84:4c:6d: 9b:9d:54:9e:70:fe:00:b0:8e:6d:68:c5:dc:c1:6d:92:99:d0: fb:fa:5d:fc:f0:ad:20:2d:99:f3:2a:98:51:3c:29:7a:69:08: 7b:dc:a6:ec -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUW+xG123sN31RrMKUBS6FH9Rnm0kwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTAwNVoX DTI3MDMwMzA2MTUwNVowMzExMC8GA1UEAxMoNzZEQjBEQjc2MzFGMjhBNTQzMzg4 QkY5NjMxRERBMzcxNDA2MzdFQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAPHk/87hdjot0bBguqFLaV0Itiu/UcmKsJZVMq71lOex0GlMQlAkrhGHgmU1 vAIYetbEGzNQBDQZBgKkF4rnHlkpr2m/tDemPqBoxSgnJAXk4F1UNiGwGH3z5gOQ zWHVcd1Itv3p3U33IEr2fnMT9oh8pEWg/x/Yhk4iHxSw86CQ7UvvzOCLAVA0TmWx /aYW4UAkIlvQ+eSMMC3Weai2UtB7O8rsmAFHuToRezFHS6lX5TTIaYu7uzhsw7t5 MIV7UYUcXXnkofo41vG/ZVtPLpE/78nEf0zvMf7Mad+L9MvZeIn6Al/Qnxlau4iA g4pm++eCat7IlQUOl4TaG434NycCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBR22w23 Yx8opUM4i/ljHdo3FAY37DAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDA1OS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK pYEwDQYJKoZIhvcNAQELBQADggEBAG/YIncznQl6bPPFNQYAvp7cxCH4CWVvHBSA sfLb8Vzc+vfyXmI7nPhx+C6XUbqeWQr24jiQcMflX2Sx/jIJPEW90gTqMBDVePLF svDhvwi3FcpNYGiWHLi0GD1opHx+gLvunliwSB2qZp0I5tX/2fRLkhbIIpj5L2+u 2zpmcYWuC8BmWKucGBIgNv8eDHFwLZ3N5nRqPYzMftIAAzaXHZ+GB1nb0B4fMaOR SwbOqOS/83Ul7NxPMvdR6+/SlXmMw0X1vfPz2o4CEG61mcasj3LAM5yhbYRMbZud VJ5w/gCwjm1oxdzBbZKZ0Pv6XfzwrSAtmfMqmFE8KXppCHvcpuw= -----END CERTIFICATE-----Generated at Sat Mar 28 13:18:14 2026 by rpki-client