$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144064.roa File: AS144064.roa (raw, json) Hash identifier: sYbDOY9fdqbt6n14t0CMKclSINE6Qc/vwAShKs59Lxk= Subject key identifier: 99:64:E9:54:B5:C5:E5:D7:96:C8:67:C2:40:63:8C:99:D9:E6:1B:74 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 68550A1108867277E807A3CB1AF3748E889C6BBF Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144064.roa Signing time: Wed 04 Mar 2026 06:14:48 +0000 ROA not before: Wed 04 Mar 2026 06:09:48 +0000 ROA not after: Wed 03 Mar 2027 06:14:48 +0000 asID: 144064 IP address blocks: 240a:a586::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:55:0a:11:08:86:72:77:e8:07:a3:cb:1a:f3:74:8e:88:9c:6b:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:09:48 2026 GMT Not After : Mar 3 06:14:48 2027 GMT Subject: CN=9964E954B5C5E5D796C867C240638C99D9E61B74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:35:41:55:b8:86:93:6a:89:02:43:4c:07:e4: e8:67:7b:51:50:89:be:08:d9:39:12:36:be:2e:99: c4:b8:d6:aa:df:29:7b:44:ca:6a:b5:49:4c:d9:ac: 09:c8:17:ff:de:d0:27:35:6f:fa:b4:cf:a3:cc:28: 5c:31:ef:60:9d:88:9e:dd:98:15:ec:78:b1:2b:c0: c6:58:88:a5:95:d8:b8:a4:39:ff:3d:ce:ac:69:74: b8:d1:35:65:63:34:46:a3:31:7f:d3:8b:cc:ad:a3: 11:f5:fb:24:4a:92:09:3a:cd:c6:86:48:51:36:ba: 47:fc:24:f0:b5:4a:93:bb:f8:31:99:69:32:93:e1: 3a:7b:99:98:5a:9d:4a:58:e5:54:e5:97:0e:c7:8d: 1c:2e:4d:17:4d:70:8d:e4:59:c4:4b:39:6e:58:d6: 64:9a:39:a9:99:ac:b2:13:ca:d1:f2:e3:ba:44:23: 66:cf:23:b8:1a:1e:ce:4e:2e:0d:39:d8:c1:9d:61: 98:38:09:8a:5d:77:f4:15:7f:97:c1:56:67:44:07: 4e:e6:2c:55:40:bf:3e:d8:42:7f:9e:c4:33:2e:29: f6:7a:60:5b:79:64:ad:98:25:4f:24:6e:ef:75:1c: d7:5d:9b:9c:fa:93:f8:bb:48:c3:cd:ab:86:4e:05: 20:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:64:E9:54:B5:C5:E5:D7:96:C8:67:C2:40:63:8C:99:D9:E6:1B:74 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144064.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a586::/32 Signature Algorithm: sha256WithRSAEncryption 7c:7a:5f:1b:3f:c2:4f:36:e1:67:d0:10:84:86:c2:ca:dc:76: 2a:e7:7a:3c:a6:8f:a6:ea:55:da:20:fb:38:5c:4e:c1:bb:15: 20:3a:c1:f6:d9:84:9f:aa:57:da:71:5c:b1:ca:5e:9b:e2:04: 8d:4a:92:f7:f9:b5:1e:86:fc:25:59:ba:47:1f:dc:cb:aa:af: 91:75:cf:c9:34:93:64:72:2c:00:dc:16:ff:b1:c1:48:1b:87: ab:10:07:f1:59:e3:51:0e:d9:13:7a:2a:15:7b:1d:d5:85:52: 16:0e:3a:69:28:4b:44:82:b9:14:11:fd:7a:f0:52:67:9c:b9: d0:d4:a8:7b:6f:4e:27:04:59:76:d8:7f:06:d7:23:df:57:ea: 41:7e:db:d4:49:53:02:33:aa:f2:0a:58:89:fa:9f:87:10:8e: c6:77:a8:a0:91:eb:bf:44:a1:72:7a:14:8f:7c:a3:9f:d6:d2: bc:fc:b1:db:7b:58:7e:89:e8:29:cb:ce:5c:61:97:6f:e6:c3: e7:17:2c:5e:dd:46:f8:1d:3d:64:6a:f7:2f:5f:32:d9:d9:91: e1:ad:71:86:da:0d:3e:e9:3e:d9:2b:f2:83:11:33:52:ef:18: 43:f5:28:3f:1f:cd:39:57:f7:49:cf:cd:e1:fd:c6:e4:d5:e8: 7c:c6:0b:1b -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUaFUKEQiGcnfoB6PLGvN0joica78wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDk0OFoX DTI3MDMwMzA2MTQ0OFowMzExMC8GA1UEAxMoOTk2NEU5NTRCNUM1RTVENzk2Qzg2 N0MyNDA2MzhDOTlEOUU2MUI3NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANU1QVW4hpNqiQJDTAfk6Gd7UVCJvgjZORI2vi6ZxLjWqt8pe0TKarVJTNms CcgX/97QJzVv+rTPo8woXDHvYJ2Int2YFex4sSvAxliIpZXYuKQ5/z3OrGl0uNE1 ZWM0RqMxf9OLzK2jEfX7JEqSCTrNxoZIUTa6R/wk8LVKk7v4MZlpMpPhOnuZmFqd SljlVOWXDseNHC5NF01wjeRZxEs5bljWZJo5qZmsshPK0fLjukQjZs8juBoezk4u DTnYwZ1hmDgJil139BV/l8FWZ0QHTuYsVUC/PthCf57EMy4p9npgW3lkrZglTyRu 73Uc112bnPqT+LtIw82rhk4FIKECAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSZZOlU tcXl15bIZ8JAY4yZ2eYbdDAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDA2NC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK pYYwDQYJKoZIhvcNAQELBQADggEBAHx6Xxs/wk824WfQEISGwsrcdirnejymj6bq Vdog+zhcTsG7FSA6wfbZhJ+qV9pxXLHKXpviBI1Kkvf5tR6G/CVZukcf3Muqr5F1 z8k0k2RyLADcFv+xwUgbh6sQB/FZ41EO2RN6KhV7HdWFUhYOOmkoS0SCuRQR/Xrw UmecudDUqHtvTicEWXbYfwbXI99X6kF+29RJUwIzqvIKWIn6n4cQjsZ3qKCR679E oXJ6FI98o5/W0rz8sdt7WH6J6CnLzlxhl2/mw+cXLF7dRvgdPWRq9y9fMtnZkeGt cYbaDT7pPtkr8oMRM1LvGEP1KD8fzTlX90nPzeH9xuTV6HzGCxs= -----END CERTIFICATE-----Generated at Sat Mar 28 13:18:07 2026 by rpki-client