$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144063.roa File: AS144063.roa (raw, json) Hash identifier: ZCdqQijiqTarSp31HGiT4BJ3W93L0luNrFv7ROdNDNg= Subject key identifier: A5:7E:DA:0F:E8:D4:71:02:8D:D0:A0:9A:13:0C:27:B7:8F:CD:1A:7C Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 5E9316EE76EFB2592A36BD15FFA3F230449CFB29 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144063.roa Signing time: Wed 04 Mar 2026 06:12:57 +0000 ROA not before: Wed 04 Mar 2026 06:07:57 +0000 ROA not after: Wed 03 Mar 2027 06:12:57 +0000 asID: 144063 IP address blocks: 240a:a585::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:93:16:ee:76:ef:b2:59:2a:36:bd:15:ff:a3:f2:30:44:9c:fb:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:07:57 2026 GMT Not After : Mar 3 06:12:57 2027 GMT Subject: CN=A57EDA0FE8D471028DD0A09A130C27B78FCD1A7C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:07:11:f7:9a:41:66:b4:7b:5e:0e:b8:8d:30: 3d:d3:36:b2:73:ca:f1:ac:df:ae:bb:9e:6c:f6:b1: ae:8e:a8:70:c1:bd:1b:34:7d:04:17:0c:30:43:d2: 54:14:be:a4:f6:81:00:e0:2b:da:f9:00:74:62:4a: 9c:0d:62:56:59:87:48:4a:ad:56:d3:09:2e:6d:4e: 85:56:97:ae:41:1e:e3:b4:2c:68:e4:a7:d6:56:02: b0:e9:ad:46:9f:2f:4f:17:38:8c:cd:6f:95:ca:e7: 04:7d:b8:fd:de:87:43:c5:c0:21:76:c7:1a:2c:8a: f1:64:55:ea:6e:45:d1:15:88:37:74:6f:20:91:85: c6:ef:58:46:62:8c:0e:8f:c4:56:e9:c8:df:11:78: 65:8f:39:de:b6:95:36:d4:45:af:fb:4b:69:fd:ca: 7b:c6:57:2e:ac:89:60:fb:aa:35:33:21:eb:c9:e7: 13:1e:74:ca:7d:9f:7b:70:8d:0d:4e:47:e8:e5:1c: 7f:7e:a1:c5:21:f7:50:45:1d:39:7c:6d:52:a6:67: fc:c0:c1:bf:39:5b:b6:7d:38:b6:0f:51:e6:4e:c9: 4e:20:15:3b:ed:32:36:60:0c:f3:11:fd:87:be:51: 7b:bf:79:08:22:97:a4:cc:2a:05:87:a6:7a:0c:b3: 1b:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:7E:DA:0F:E8:D4:71:02:8D:D0:A0:9A:13:0C:27:B7:8F:CD:1A:7C X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144063.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a585::/32 Signature Algorithm: sha256WithRSAEncryption 7d:dd:31:ce:0e:32:35:84:ec:b6:ea:f6:b4:30:d2:64:41:dc: 07:50:99:e2:11:63:36:56:90:e4:8c:9d:dd:5a:61:2e:6b:8b: ec:83:6a:cd:10:db:65:3c:91:79:ff:70:6e:dd:b5:27:a8:8f: ff:03:6e:38:3a:de:5b:78:6b:49:1a:73:9f:30:42:9e:ac:74: 11:85:39:30:30:06:54:18:72:95:cb:15:05:31:ce:9f:1e:90: 90:98:63:c8:1f:b1:bd:2a:53:9d:fb:7e:94:98:db:43:ab:2f: a4:a7:6d:11:ba:0a:0d:ce:f0:f1:cb:5a:c3:14:08:21:b6:70: c1:0f:00:87:21:9d:57:98:30:ff:92:26:a4:45:9d:22:62:53: 55:67:57:9b:82:18:43:66:9c:bd:61:58:7f:ad:6f:d9:f7:08: d7:52:92:1e:69:32:5a:b8:51:1f:a0:df:d5:be:75:df:04:ca: 72:55:39:20:f5:8c:dc:21:d7:c5:45:aa:85:70:e1:08:5a:d0: 7b:1d:3d:e5:44:75:61:cd:2b:c9:ab:ea:1a:a9:4c:14:ff:ad: c8:22:2f:2c:9d:71:08:04:a7:61:78:32:ae:ef:60:94:ca:25: d3:f4:65:23:ce:e1:04:1d:ce:7a:5f:59:5e:a7:d8:9c:c5:3f: c9:9b:55:52 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUXpMW7nbvslkqNr0V/6PyMESc+ykwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDc1N1oX DTI3MDMwMzA2MTI1N1owMzExMC8GA1UEAxMoQTU3RURBMEZFOEQ0NzEwMjhERDBB MDlBMTMwQzI3Qjc4RkNEMUE3QzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM4HEfeaQWa0e14OuI0wPdM2snPK8azfrruebPaxro6ocMG9GzR9BBcMMEPS VBS+pPaBAOAr2vkAdGJKnA1iVlmHSEqtVtMJLm1OhVaXrkEe47QsaOSn1lYCsOmt Rp8vTxc4jM1vlcrnBH24/d6HQ8XAIXbHGiyK8WRV6m5F0RWIN3RvIJGFxu9YRmKM Do/EVunI3xF4ZY853raVNtRFr/tLaf3Ke8ZXLqyJYPuqNTMh68nnEx50yn2fe3CN DU5H6OUcf36hxSH3UEUdOXxtUqZn/MDBvzlbtn04tg9R5k7JTiAVO+0yNmAM8xH9 h75Re795CCKXpMwqBYemegyzG1cCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSlftoP 6NRxAo3QoJoTDCe3j80afDAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDA2My5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK pYUwDQYJKoZIhvcNAQELBQADggEBAH3dMc4OMjWE7Lbq9rQw0mRB3AdQmeIRYzZW kOSMnd1aYS5ri+yDas0Q22U8kXn/cG7dtSeoj/8Dbjg63lt4a0kac58wQp6sdBGF OTAwBlQYcpXLFQUxzp8ekJCYY8gfsb0qU537fpSY20OrL6SnbRG6Cg3O8PHLWsMU CCG2cMEPAIchnVeYMP+SJqRFnSJiU1VnV5uCGENmnL1hWH+tb9n3CNdSkh5pMlq4 UR+g39W+dd8EynJVOSD1jNwh18VFqoVw4Qha0HsdPeVEdWHNK8mr6hqpTBT/rcgi LyydcQgEp2F4Mq7vYJTKJdP0ZSPO4QQdznpfWV6n2JzFP8mbVVI= -----END CERTIFICATE-----Generated at Sat Mar 28 11:41:15 2026 by rpki-client