$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144097.roa File: AS144097.roa (raw, json) Hash identifier: i5YVOj4asZK0ZH/3EUz3yU7dp1Uyg4DzxwXz+8QW5jU= Subject key identifier: A0:13:00:5D:F9:29:EA:BE:AC:8B:8D:30:85:CE:81:97:DE:DB:1C:1F Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 710D51EF2D642CAB463FC940393E2BB7947C6E86 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144097.roa Signing time: Wed 04 Mar 2026 06:12:34 +0000 ROA not before: Wed 04 Mar 2026 06:07:34 +0000 ROA not after: Wed 03 Mar 2027 06:12:34 +0000 asID: 144097 IP address blocks: 240a:a5a7::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:0d:51:ef:2d:64:2c:ab:46:3f:c9:40:39:3e:2b:b7:94:7c:6e:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:07:34 2026 GMT Not After : Mar 3 06:12:34 2027 GMT Subject: CN=A013005DF929EABEAC8B8D3085CE8197DEDB1C1F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:19:b8:c6:b4:4e:cb:14:2e:b3:3f:2c:4b:f5: 35:f7:f2:30:3a:94:7e:61:1d:a8:51:fe:f1:fc:e6: a4:17:4e:f7:a5:d1:f9:10:ca:00:d8:90:c3:b4:b7: 1c:bc:bd:2c:21:5f:be:fc:ea:43:b1:be:f1:1c:10: 12:0a:5a:30:4a:e5:57:0e:ec:3d:24:3e:81:4a:53: f8:c3:51:eb:8d:e8:ff:20:88:1f:4b:84:e4:a6:56: 06:c4:59:cf:4d:b7:6f:38:7e:0b:1d:73:c2:ad:55: 86:c5:3a:5f:dc:c7:86:61:60:4b:97:a9:8d:66:ef: 99:3a:2e:ca:11:fc:51:84:7a:b3:01:c1:94:9d:c1: ce:a8:e2:29:7d:6b:5b:97:98:fb:4c:6e:d1:5c:74: 22:57:e6:b1:c1:0d:ff:90:85:8f:69:14:7a:3c:d0: 8e:4c:ce:92:2a:ed:9f:58:d0:81:22:0c:55:da:27: 0d:42:87:a8:10:06:c3:2f:1f:37:d4:2b:05:1c:01: 28:af:10:9e:59:99:a0:06:ee:3e:ac:cd:ea:57:31: 5a:6c:af:74:35:f6:61:b4:c3:50:68:c0:ec:04:26: 73:02:98:8d:86:79:eb:0d:27:12:d1:c4:bc:1c:15: 2e:86:68:ec:27:f7:79:ca:62:a2:bd:3f:a8:60:84: d7:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:13:00:5D:F9:29:EA:BE:AC:8B:8D:30:85:CE:81:97:DE:DB:1C:1F X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144097.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a5a7::/32 Signature Algorithm: sha256WithRSAEncryption 75:84:8e:ef:b7:6d:4b:51:76:e3:8b:76:93:65:dd:51:d8:9c: b9:fc:e7:73:a0:e5:77:52:5a:d1:62:57:18:93:69:62:a2:5e: 9e:e1:f3:2f:ad:eb:f2:21:b7:01:1b:48:3a:54:c5:db:2b:31: f1:23:5f:63:be:27:f2:33:60:6b:c6:32:7a:51:7f:af:96:f8: ce:69:67:1e:6a:bf:33:84:97:88:a0:2a:82:1b:b9:e2:a4:83: 92:0f:c3:1c:c5:38:b6:fd:bb:cd:06:43:da:fb:ff:c9:a5:09: 77:22:d3:e3:0c:26:3d:39:c9:f1:08:f0:aa:fc:15:ac:97:b1: d1:d9:72:17:ae:9c:26:8d:24:81:f0:c6:9d:e3:b4:d6:10:d0: fd:6f:38:a1:b5:87:42:6e:94:43:4a:35:7f:c8:71:01:f0:dd: a7:6b:71:24:58:0b:b9:db:6d:46:92:92:be:44:50:16:d2:5b: 78:a0:4b:46:b3:6f:7a:13:0c:c4:b9:5f:03:e2:49:ba:2e:ea: b0:2b:fb:4c:75:f8:27:a8:98:34:14:1d:c7:c0:7b:0a:64:8b: d7:0c:e7:cd:3c:5c:b7:26:80:69:62:23:3d:a6:4d:7f:37:b1: 3e:db:7f:37:80:19:36:ca:cd:e5:bc:3e:a5:40:3d:89:97:4b: 28:38:a3:bc -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUcQ1R7y1kLKtGP8lAOT4rt5R8boYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDczNFoX DTI3MDMwMzA2MTIzNFowMzExMC8GA1UEAxMoQTAxMzAwNURGOTI5RUFCRUFDOEI4 RDMwODVDRTgxOTdERURCMUMxRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAPkZuMa0TssULrM/LEv1NffyMDqUfmEdqFH+8fzmpBdO96XR+RDKANiQw7S3 HLy9LCFfvvzqQ7G+8RwQEgpaMErlVw7sPSQ+gUpT+MNR643o/yCIH0uE5KZWBsRZ z023bzh+Cx1zwq1VhsU6X9zHhmFgS5epjWbvmTouyhH8UYR6swHBlJ3BzqjiKX1r W5eY+0xu0Vx0IlfmscEN/5CFj2kUejzQjkzOkirtn1jQgSIMVdonDUKHqBAGwy8f N9QrBRwBKK8QnlmZoAbuPqzN6lcxWmyvdDX2YbTDUGjA7AQmcwKYjYZ56w0nEtHE vBwVLoZo7Cf3ecpior0/qGCE128CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSgEwBd +SnqvqyLjTCFzoGX3tscHzAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDA5Ny5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK pacwDQYJKoZIhvcNAQELBQADggEBAHWEju+3bUtRduOLdpNl3VHYnLn853Og5XdS WtFiVxiTaWKiXp7h8y+t6/IhtwEbSDpUxdsrMfEjX2O+J/IzYGvGMnpRf6+W+M5p Zx5qvzOEl4igKoIbueKkg5IPwxzFOLb9u80GQ9r7/8mlCXci0+MMJj05yfEI8Kr8 FayXsdHZcheunCaNJIHwxp3jtNYQ0P1vOKG1h0JulENKNX/IcQHw3adrcSRYC7nb bUaSkr5EUBbSW3igS0azb3oTDMS5XwPiSbou6rAr+0x1+CeomDQUHcfAewpki9cM 5808XLcmgGliIz2mTX83sT7bfzeAGTbKzeW8PqVAPYmXSyg4o7w= -----END CERTIFICATE-----Generated at Sat Mar 28 11:41:17 2026 by rpki-client