$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144083.roa File: AS144083.roa (raw, json) Hash identifier: +fvLanvzPyIpWckI2bBaNeBBZdVVin5gqRm6aNPZi10= Subject key identifier: C7:6C:F1:03:35:1F:0A:93:C7:A2:FA:76:01:99:63:44:9E:C7:AF:2E Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 7416A6048ED99061D6208F79796F5E9349742859 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144083.roa Signing time: Wed 04 Mar 2026 06:13:40 +0000 ROA not before: Wed 04 Mar 2026 06:08:40 +0000 ROA not after: Wed 03 Mar 2027 06:13:40 +0000 asID: 144083 IP address blocks: 240a:a599::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:16:a6:04:8e:d9:90:61:d6:20:8f:79:79:6f:5e:93:49:74:28:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:08:40 2026 GMT Not After : Mar 3 06:13:40 2027 GMT Subject: CN=C76CF103351F0A93C7A2FA76019963449EC7AF2E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:e3:71:3a:8e:5b:5f:35:40:fa:a7:dc:50:ef: 03:49:37:24:3f:8f:43:84:e4:62:34:be:6e:69:b8: 43:dd:7a:72:28:12:39:d5:0a:b7:0a:28:47:2c:20: 23:5c:d1:58:c6:44:8f:8d:e6:c5:d1:1b:5a:a8:b2: 9f:7b:1d:46:b4:d3:3a:e3:d2:4a:60:e6:10:5d:87: cc:b7:9a:57:e9:e3:22:1a:6a:b7:ba:c6:09:c7:3e: d9:50:67:f6:d5:0b:b2:f3:14:3e:85:87:2e:b8:2b: 63:0a:8c:31:9d:f6:49:a1:c3:e1:bc:2a:52:8e:a8: f4:b2:22:8f:ca:bd:af:2e:7d:48:95:3c:51:cd:33: b2:d4:92:9e:94:d9:07:af:37:fb:d3:78:94:70:36: 1c:6b:30:b8:fd:e7:a4:e0:cc:95:d6:29:00:24:39: 55:50:08:5a:05:dd:2b:85:a3:94:62:91:c0:ae:aa: ec:3e:40:81:a3:f9:af:4c:09:6d:57:14:e3:13:3b: b8:ec:f5:ab:fb:8e:f8:37:c1:08:f6:90:ac:60:18: c5:4e:05:61:d8:1d:90:9a:b1:ac:e3:8f:91:c8:46: e0:cc:ce:a3:d6:91:d5:a4:6b:c1:8e:90:0f:a3:44: 2b:d0:09:a6:05:8e:49:1b:36:ec:2d:21:71:83:c3: 65:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:6C:F1:03:35:1F:0A:93:C7:A2:FA:76:01:99:63:44:9E:C7:AF:2E X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144083.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a599::/32 Signature Algorithm: sha256WithRSAEncryption 20:07:12:ed:19:d4:5c:eb:00:49:a2:50:c6:a9:65:2c:8e:ec: 79:d2:ec:b4:16:09:ba:05:9d:34:09:d8:c0:40:6e:a8:d6:c3: a1:cf:9d:f4:4a:5a:67:5c:10:55:ea:58:a7:62:dd:9f:ce:0a: 45:57:cb:15:42:3c:a9:97:d0:62:66:62:1c:00:fb:fa:58:db: 50:a2:c5:24:96:a0:71:92:ad:40:85:06:ed:f4:f8:8e:37:95: a8:bb:44:68:1d:12:cb:27:06:2b:db:42:a2:fc:d1:07:54:15: b9:b3:72:04:36:00:4d:9a:1d:1d:af:1d:a6:c3:58:c3:04:9e: e0:ce:63:6a:c9:99:49:a7:e4:a5:20:0f:a7:4d:50:5c:28:ba: 33:e9:a3:54:34:3d:45:a3:c5:10:88:dd:ea:07:68:0e:be:50: 9b:50:48:69:17:94:79:ac:a6:af:43:5c:d4:25:dd:e9:7d:45: e4:ab:14:67:ad:1f:d5:8f:a3:db:90:13:1e:03:de:78:1d:7b: f5:9a:76:e2:61:5c:a9:20:34:4e:9e:f6:ce:8b:ff:7d:b5:57: 4d:74:c5:a2:f6:3d:7d:4f:45:0a:f8:a8:9c:c6:17:2a:64:30: c7:c8:78:ed:31:a1:ed:28:37:d3:04:49:b7:19:0c:24:33:a8: d0:90:04:8d -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUdBamBI7ZkGHWII95eW9ek0l0KFkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDg0MFoX DTI3MDMwMzA2MTM0MFowMzExMC8GA1UEAxMoQzc2Q0YxMDMzNTFGMEE5M0M3QTJG QTc2MDE5OTYzNDQ5RUM3QUYyRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMLjcTqOW181QPqn3FDvA0k3JD+PQ4TkYjS+bmm4Q916cigSOdUKtwooRywg I1zRWMZEj43mxdEbWqiyn3sdRrTTOuPSSmDmEF2HzLeaV+njIhpqt7rGCcc+2VBn 9tULsvMUPoWHLrgrYwqMMZ32SaHD4bwqUo6o9LIij8q9ry59SJU8Uc0zstSSnpTZ B683+9N4lHA2HGswuP3npODMldYpACQ5VVAIWgXdK4WjlGKRwK6q7D5AgaP5r0wJ bVcU4xM7uOz1q/uO+DfBCPaQrGAYxU4FYdgdkJqxrOOPkchG4MzOo9aR1aRrwY6Q D6NEK9AJpgWOSRs27C0hcYPDZRsCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBTHbPED NR8Kk8ei+nYBmWNEnsevLjAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDA4My5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK pZkwDQYJKoZIhvcNAQELBQADggEBACAHEu0Z1FzrAEmiUMapZSyO7HnS7LQWCboF nTQJ2MBAbqjWw6HPnfRKWmdcEFXqWKdi3Z/OCkVXyxVCPKmX0GJmYhwA+/pY21Ci xSSWoHGSrUCFBu30+I43lai7RGgdEssnBivbQqL80QdUFbmzcgQ2AE2aHR2vHabD WMMEnuDOY2rJmUmn5KUgD6dNUFwoujPpo1Q0PUWjxRCI3eoHaA6+UJtQSGkXlHms pq9DXNQl3el9ReSrFGetH9WPo9uQEx4D3ngde/WaduJhXKkgNE6e9s6L/321V010 xaL2PX1PRQr4qJzGFypkMMfIeO0xoe0oN9MESbcZDCQzqNCQBI0= -----END CERTIFICATE-----Generated at Sat Mar 28 11:41:26 2026 by rpki-client