$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144076.roa File: AS144076.roa (raw, json) Hash identifier: q7mMKAUeX5EKg9x9a8CsnT1axCBTIp3dNzh3fTDt71k= Subject key identifier: 5F:89:05:B1:D6:81:C0:70:FD:51:1F:BC:EF:A7:5E:6C:89:17:B7:B8 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 1BF5A062B511F833EB02933BE647E913A89DE07F Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144076.roa Signing time: Wed 04 Mar 2026 06:14:46 +0000 ROA not before: Wed 04 Mar 2026 06:09:46 +0000 ROA not after: Wed 03 Mar 2027 06:14:46 +0000 asID: 144076 IP address blocks: 240a:a592::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:f5:a0:62:b5:11:f8:33:eb:02:93:3b:e6:47:e9:13:a8:9d:e0:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:09:46 2026 GMT Not After : Mar 3 06:14:46 2027 GMT Subject: CN=5F8905B1D681C070FD511FBCEFA75E6C8917B7B8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:3c:9a:aa:61:a6:bd:06:de:da:b5:2a:47:40: 0e:5c:f2:66:04:05:99:6d:d9:4e:b1:ab:f2:e0:78: 3f:f9:5f:28:d1:2b:28:be:e8:1f:57:dc:6b:cd:e6: 95:93:9a:4f:0c:c4:40:b5:1e:12:96:d4:aa:71:46: c9:af:16:6a:15:6e:42:e4:dd:57:57:cb:7e:91:10: 4f:20:c1:58:7b:b6:8e:ac:80:56:62:87:22:d9:34: c3:26:87:20:9e:74:be:88:9e:2c:f8:fe:d2:cc:d0: 05:54:89:d0:26:ad:96:d5:41:9e:81:ac:31:f2:24: 7e:ee:8d:f5:56:e0:a6:41:c6:fc:bb:c8:5d:d2:7d: 32:14:62:e4:42:fc:12:82:ad:b7:62:1e:29:6d:e7: fd:a1:5c:6c:6a:22:50:95:36:1f:21:98:49:5e:05: 36:ae:ad:af:ee:37:9f:c9:36:c7:a3:23:60:fc:65: 1d:26:e9:09:b9:48:62:7b:85:f9:6e:8d:6e:1a:32: d4:b4:a7:70:e5:32:11:83:ad:34:7b:ae:5e:b8:cf: cd:ec:39:74:75:34:7b:5c:19:dd:b3:71:f2:56:e1: 78:12:13:db:2d:a9:ec:c0:f3:cd:c0:51:68:d9:14: 9c:6c:3c:4f:b8:37:be:74:3a:bf:4a:37:d6:2e:55: 31:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:89:05:B1:D6:81:C0:70:FD:51:1F:BC:EF:A7:5E:6C:89:17:B7:B8 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144076.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a592::/32 Signature Algorithm: sha256WithRSAEncryption 8b:cc:e1:97:44:56:16:87:b1:aa:d6:bc:de:c3:d7:93:7c:5a: e4:d1:e1:db:3a:15:28:a5:67:9d:26:7e:42:d1:73:74:76:93: 91:63:da:84:7e:f7:22:e8:8a:ae:9d:13:63:5e:d1:d7:fb:c2: 71:ba:17:1b:4c:cc:25:ba:01:1e:aa:7b:59:10:e3:ef:b1:bc: 46:5c:d6:13:4b:fc:d1:94:e2:b4:28:ee:57:dc:af:42:27:10: c2:ff:3c:28:0b:3a:5f:dc:89:00:f1:80:4d:61:cd:31:7d:89: d2:25:ce:2e:3b:67:3c:b2:96:50:9c:49:55:5e:39:b2:50:84: 2a:02:cb:fd:82:65:13:f9:ac:60:b6:e6:fe:1c:20:ec:99:ad: 94:58:89:61:64:8e:d8:12:14:78:28:07:6a:e2:bf:2b:41:43: 74:1f:b0:02:3d:80:0c:ba:6f:e3:28:f4:67:c9:29:e3:98:05: 90:7d:d4:02:00:d9:da:89:e6:d1:6c:41:28:f0:97:e4:43:43: 20:ec:12:59:03:c9:37:72:7c:93:cb:8e:ee:b2:8c:0e:5d:0d: e3:65:ba:04:be:ae:f1:bf:61:c3:ed:53:fc:e7:4a:bb:7a:e3: 1f:45:90:81:6a:0c:99:2d:a6:37:fd:90:6f:56:28:bc:b5:df: 30:d8:a3:39 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUG/WgYrUR+DPrApM75kfpE6id4H8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDk0NloX DTI3MDMwMzA2MTQ0NlowMzExMC8GA1UEAxMoNUY4OTA1QjFENjgxQzA3MEZENTEx RkJDRUZBNzVFNkM4OTE3QjdCODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMM8mqphpr0G3tq1KkdADlzyZgQFmW3ZTrGr8uB4P/lfKNErKL7oH1fca83m lZOaTwzEQLUeEpbUqnFGya8WahVuQuTdV1fLfpEQTyDBWHu2jqyAVmKHItk0wyaH IJ50voieLPj+0szQBVSJ0CatltVBnoGsMfIkfu6N9VbgpkHG/LvIXdJ9MhRi5EL8 EoKtt2IeKW3n/aFcbGoiUJU2HyGYSV4FNq6tr+43n8k2x6MjYPxlHSbpCblIYnuF +W6Nbhoy1LSncOUyEYOtNHuuXrjPzew5dHU0e1wZ3bNx8lbheBIT2y2p7MDzzcBR aNkUnGw8T7g3vnQ6v0o31i5VMdcCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRfiQWx 1oHAcP1RH7zvp15siRe3uDAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDA3Ni5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK pZIwDQYJKoZIhvcNAQELBQADggEBAIvM4ZdEVhaHsarWvN7D15N8WuTR4ds6FSil Z50mfkLRc3R2k5Fj2oR+9yLoiq6dE2Ne0df7wnG6FxtMzCW6AR6qe1kQ4++xvEZc 1hNL/NGU4rQo7lfcr0InEML/PCgLOl/ciQDxgE1hzTF9idIlzi47ZzyyllCcSVVe ObJQhCoCy/2CZRP5rGC25v4cIOyZrZRYiWFkjtgSFHgoB2rivytBQ3QfsAI9gAy6 b+Mo9GfJKeOYBZB91AIA2dqJ5tFsQSjwl+RDQyDsElkDyTdyfJPLju6yjA5dDeNl ugS+rvG/YcPtU/znSrt64x9FkIFqDJktpjf9kG9WKLy13zDYozk= -----END CERTIFICATE-----Generated at Sat Mar 28 11:42:08 2026 by rpki-client