$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144092.roa File: AS144092.roa (raw, json) Hash identifier: 61RecpZMylFnktzvEiDgtpEMSZ5f143EsDyRXNxgy44= Subject key identifier: 51:84:0C:A4:73:96:38:41:F3:BB:0D:B3:F3:94:2F:E6:57:53:21:CA Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 71AEDA57CACD9EF587810DC100B1AE5A00A07ACE Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144092.roa Signing time: Wed 04 Mar 2026 06:13:09 +0000 ROA not before: Wed 04 Mar 2026 06:08:09 +0000 ROA not after: Wed 03 Mar 2027 06:13:09 +0000 asID: 144092 IP address blocks: 240a:a5a2::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:ae:da:57:ca:cd:9e:f5:87:81:0d:c1:00:b1:ae:5a:00:a0:7a:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:08:09 2026 GMT Not After : Mar 3 06:13:09 2027 GMT Subject: CN=51840CA473963841F3BB0DB3F3942FE6575321CA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:ca:7f:05:6c:f6:66:40:97:ea:24:86:7d:16: 92:6a:68:c5:4e:75:86:4a:ba:f7:52:fd:65:97:c4: 92:80:46:bb:da:eb:34:90:fa:38:2f:22:b8:2e:95: 59:44:b9:36:f6:3e:11:d0:80:be:b4:e7:49:85:0b: 7f:67:56:9b:81:b1:80:15:ae:c7:c9:6b:b5:d1:fb: ea:84:a6:07:9a:74:bd:a5:f7:45:10:1f:dc:68:fd: 10:45:bf:79:e6:9e:e0:97:d3:98:a5:d7:79:df:6f: 9e:6f:1c:eb:bb:23:49:80:98:36:8c:1f:76:7a:0e: c9:2d:2a:a2:ed:38:f1:76:ff:41:cf:45:c2:8e:4f: 68:3c:20:ff:f0:18:c8:b5:d7:48:1d:f8:a3:4a:3a: 46:22:e8:d2:9d:c8:aa:b5:b0:d0:d2:e8:a8:02:bc: 1a:0a:db:45:3d:17:63:09:e7:de:84:2d:98:a8:9d: 04:b8:55:3c:79:b8:8f:63:e1:28:c1:dc:86:60:9c: 52:74:04:61:8f:0a:11:ba:a9:8b:f3:58:7c:2e:a5: 89:60:c0:17:1d:67:a5:ec:a3:83:7c:b0:07:b4:c6: b7:53:83:70:39:bc:83:8f:28:93:13:8e:4c:2c:4a: 6e:68:44:b1:d6:fd:a3:0f:5a:b3:41:9f:5f:ac:c8: 8e:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:84:0C:A4:73:96:38:41:F3:BB:0D:B3:F3:94:2F:E6:57:53:21:CA X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144092.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a5a2::/32 Signature Algorithm: sha256WithRSAEncryption 16:01:75:be:39:c9:c7:70:a2:02:67:ea:20:a2:f2:c7:d9:88: e7:bf:5f:01:8b:6c:02:39:20:59:e5:d3:21:3d:9c:ec:14:bb: 0a:b3:f4:0c:e2:0c:73:e9:4c:fa:21:b0:36:67:29:b9:2c:fa: 60:63:aa:96:60:d2:e3:f2:73:50:7d:91:f0:2b:1b:3e:e9:f1: ca:e5:a0:21:49:f4:4a:f7:6e:e0:c9:57:05:ab:14:02:96:20: 30:d2:2e:63:f0:9f:f3:f8:e2:3b:3d:3f:5f:24:8b:7d:96:eb: d2:63:4a:38:c2:4b:11:74:67:2c:78:41:44:54:11:7a:8e:ab: b1:be:8d:d0:63:c6:f4:e2:c5:d7:a2:b8:04:1d:2a:0f:25:d0: 6f:3a:cf:3d:64:7e:91:c4:1a:97:30:6e:82:ff:bd:50:3e:1b: ce:43:ba:11:ae:a7:71:d3:e6:a3:c1:60:5c:ed:0d:5f:70:ed: a2:36:02:26:40:ec:70:f2:35:c7:68:9e:1c:19:c2:e5:b0:ad: ae:1a:2a:8d:3c:fb:6d:fb:33:b2:cc:22:37:f8:37:15:22:7c: 32:98:96:25:e1:10:3d:6a:c6:c9:eb:02:4c:bc:fa:0e:19:15: b7:b4:a2:04:16:59:4d:80:10:a7:4c:4e:d1:00:1a:de:65:27: af:19:9c:a7 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUca7aV8rNnvWHgQ3BALGuWgCges4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDgwOVoX DTI3MDMwMzA2MTMwOVowMzExMC8GA1UEAxMoNTE4NDBDQTQ3Mzk2Mzg0MUYzQkIw REIzRjM5NDJGRTY1NzUzMjFDQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAILKfwVs9mZAl+okhn0WkmpoxU51hkq691L9ZZfEkoBGu9rrNJD6OC8iuC6V WUS5NvY+EdCAvrTnSYULf2dWm4GxgBWux8lrtdH76oSmB5p0vaX3RRAf3Gj9EEW/ eeae4JfTmKXXed9vnm8c67sjSYCYNowfdnoOyS0qou048Xb/Qc9Fwo5PaDwg//AY yLXXSB34o0o6RiLo0p3IqrWw0NLoqAK8GgrbRT0XYwnn3oQtmKidBLhVPHm4j2Ph KMHchmCcUnQEYY8KEbqpi/NYfC6liWDAFx1npeyjg3ywB7TGt1ODcDm8g48okxOO TCxKbmhEsdb9ow9as0GfX6zIjh8CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRRhAyk c5Y4QfO7DbPzlC/mV1MhyjAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDA5Mi5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK paIwDQYJKoZIhvcNAQELBQADggEBABYBdb45ycdwogJn6iCi8sfZiOe/XwGLbAI5 IFnl0yE9nOwUuwqz9AziDHPpTPohsDZnKbks+mBjqpZg0uPyc1B9kfArGz7p8crl oCFJ9Er3buDJVwWrFAKWIDDSLmPwn/P44js9P18ki32W69JjSjjCSxF0Zyx4QURU EXqOq7G+jdBjxvTixdeiuAQdKg8l0G86zz1kfpHEGpcwboL/vVA+G85DuhGup3HT 5qPBYFztDV9w7aI2AiZA7HDyNcdonhwZwuWwra4aKo08+237M7LMIjf4NxUifDKY liXhED1qxsnrAky8+g4ZFbe0ogQWWU2AEKdMTtEAGt5lJ68ZnKc= -----END CERTIFICATE-----Generated at Sat Mar 28 14:26:36 2026 by rpki-client