$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144068.roa File: AS144068.roa (raw, json) Hash identifier: PuCAStszscIWx5dMr28Br+vJ59U1c1FfXIxR2SUNFsU= Subject key identifier: B3:91:1B:88:06:C1:09:5F:B5:7A:E5:E2:0A:55:60:C9:76:D0:7D:96 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 3C06D4359FA62DBE74EDCC7C8D62EE10FE5FC0EA Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144068.roa Signing time: Wed 04 Mar 2026 06:15:14 +0000 ROA not before: Wed 04 Mar 2026 06:10:14 +0000 ROA not after: Wed 03 Mar 2027 06:15:14 +0000 asID: 144068 IP address blocks: 240a:a58a::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:06:d4:35:9f:a6:2d:be:74:ed:cc:7c:8d:62:ee:10:fe:5f:c0:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:10:14 2026 GMT Not After : Mar 3 06:15:14 2027 GMT Subject: CN=B3911B8806C1095FB57AE5E20A5560C976D07D96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:12:1c:50:bc:57:9b:65:55:fd:41:2f:b7:ec: 43:bf:b6:8d:1b:2d:2f:9b:69:c7:2f:6c:1c:9c:b9: 68:a2:4f:00:34:8f:e3:47:f4:81:53:e6:bf:1d:f8: 27:24:fa:85:21:72:1d:04:23:13:16:3b:11:a7:d6: bf:f6:6a:a6:18:19:5b:ec:c8:35:b9:00:f0:d9:d6: be:3e:ef:fd:26:b0:df:2c:1e:ed:86:98:5a:d7:3b: e7:12:4e:c0:60:51:0d:2e:99:a7:d6:20:44:70:81: 3c:95:4a:b5:04:75:03:53:99:64:85:d4:80:0b:64: c3:04:ee:9d:05:93:b5:4a:ba:db:8b:49:c7:7b:d4: f1:17:f4:76:0a:45:8f:6e:d4:e0:7d:48:43:89:b3: 76:16:b6:3b:23:b3:27:bc:d6:4c:ce:44:dd:a3:91: de:20:c7:cd:79:e1:eb:a7:21:87:23:d3:a1:fc:d4: c3:5c:7d:99:31:d3:2b:72:aa:72:6b:80:c1:1c:91: 37:cf:ec:a7:cf:1b:5e:cd:4f:28:ae:78:cf:54:0f: 14:88:90:3f:35:ca:49:d7:ab:e7:2f:be:53:5b:f9: 8d:62:51:02:51:2f:06:6a:bf:be:04:80:02:25:51: 27:9e:57:c8:3c:ca:d2:a7:53:5f:92:1a:61:cf:3d: 66:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:91:1B:88:06:C1:09:5F:B5:7A:E5:E2:0A:55:60:C9:76:D0:7D:96 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144068.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a58a::/32 Signature Algorithm: sha256WithRSAEncryption 7d:1c:cb:88:03:a7:71:35:65:7a:ad:80:95:63:62:c4:88:0a: 57:0d:93:64:e5:57:f0:5f:35:b1:81:7b:87:dc:af:34:56:78: 34:25:47:bf:c3:0b:8c:e4:1c:2d:2b:b1:66:2c:31:b9:14:b1: c0:4f:56:2a:f0:76:51:8b:9f:db:0d:be:b7:46:9b:eb:f4:76: 6c:c4:4e:12:17:fa:d7:f8:4f:1c:19:17:e4:59:5e:b7:6e:bd: 1d:b5:15:53:2b:96:a4:70:44:f7:c3:64:08:dc:ab:2d:02:fe: 8f:8e:ae:fa:37:38:45:9e:16:1f:8f:1a:b4:21:7c:3a:bc:20: 5f:1b:e2:69:f9:35:8b:58:14:51:85:74:e0:f1:32:82:d4:93: 99:e1:86:57:f3:07:23:06:40:07:66:83:7d:84:2a:72:5d:04: 02:c0:95:8b:ca:e1:63:b8:2a:2f:87:0a:a6:50:fb:4a:e5:41: 9b:85:7b:1e:9c:7f:57:c1:e9:1b:d6:73:d1:9d:cf:dc:dd:b6: 0c:66:5b:9d:f3:73:95:8e:e6:d9:76:de:87:d3:91:18:8a:7c: cf:17:50:df:93:6e:70:2d:bb:e8:98:75:5b:23:7f:18:e9:c6: e1:65:ae:65:b9:f8:bc:29:b0:95:62:11:6e:62:00:3b:08:43: 96:47:0d:cf -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUPAbUNZ+mLb507cx8jWLuEP5fwOowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTAxNFoX DTI3MDMwMzA2MTUxNFowMzExMC8GA1UEAxMoQjM5MTFCODgwNkMxMDk1RkI1N0FF NUUyMEE1NTYwQzk3NkQwN0Q5NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJESHFC8V5tlVf1BL7fsQ7+2jRstL5tpxy9sHJy5aKJPADSP40f0gVPmvx34 JyT6hSFyHQQjExY7EafWv/ZqphgZW+zINbkA8NnWvj7v/Saw3ywe7YaYWtc75xJO wGBRDS6Zp9YgRHCBPJVKtQR1A1OZZIXUgAtkwwTunQWTtUq624tJx3vU8Rf0dgpF j27U4H1IQ4mzdha2OyOzJ7zWTM5E3aOR3iDHzXnh66chhyPTofzUw1x9mTHTK3Kq cmuAwRyRN8/sp88bXs1PKK54z1QPFIiQPzXKSder5y++U1v5jWJRAlEvBmq/vgSA AiVRJ55XyDzK0qdTX5IaYc89ZnECAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSzkRuI BsEJX7V65eIKVWDJdtB9ljAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDA2OC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK pYowDQYJKoZIhvcNAQELBQADggEBAH0cy4gDp3E1ZXqtgJVjYsSIClcNk2TlV/Bf NbGBe4fcrzRWeDQlR7/DC4zkHC0rsWYsMbkUscBPVirwdlGLn9sNvrdGm+v0dmzE ThIX+tf4TxwZF+RZXrduvR21FVMrlqRwRPfDZAjcqy0C/o+Orvo3OEWeFh+PGrQh fDq8IF8b4mn5NYtYFFGFdODxMoLUk5nhhlfzByMGQAdmg32EKnJdBALAlYvK4WO4 Ki+HCqZQ+0rlQZuFex6cf1fB6RvWc9Gdz9zdtgxmW53zc5WO5tl23ofTkRiKfM8X UN+TbnAtu+iYdVsjfxjpxuFlrmW5+LwpsJViEW5iADsIQ5ZHDc8= -----END CERTIFICATE-----Generated at Sat Mar 28 11:42:27 2026 by rpki-client