$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144102.roa File: AS144102.roa (raw, json) Hash identifier: aqoMmV/dJsF3EYk8KsuA3I7QXeT3SXtWRjXKirOIlsM= Subject key identifier: 4C:9B:D6:43:02:C7:77:4E:DD:0A:B2:2C:D7:01:20:91:11:5C:DC:90 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 4EB8EFA8E14244AB544E2816CA5DD97280352223 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144102.roa Signing time: Wed 04 Mar 2026 06:13:18 +0000 ROA not before: Wed 04 Mar 2026 06:08:18 +0000 ROA not after: Wed 03 Mar 2027 06:13:18 +0000 asID: 144102 IP address blocks: 240a:a5ac::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:b8:ef:a8:e1:42:44:ab:54:4e:28:16:ca:5d:d9:72:80:35:22:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:08:18 2026 GMT Not After : Mar 3 06:13:18 2027 GMT Subject: CN=4C9BD64302C7774EDD0AB22CD7012091115CDC90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:58:1e:ed:78:bf:b9:76:07:bc:4a:6f:b5:d8: 43:08:84:2c:a3:2e:f4:4b:16:7c:e9:5f:bd:9f:23: 72:59:b6:5e:48:96:4c:b6:a6:53:21:94:99:2b:87: 45:f8:d8:01:99:76:12:ac:41:bb:d7:94:55:bb:74: 36:04:69:e1:e4:23:ed:6f:b0:b6:32:3f:d0:62:2b: de:ec:ba:f9:cc:9b:27:7a:8d:c0:25:95:fb:e5:af: 38:fb:0f:31:a5:78:ff:3a:2a:4d:ae:e3:e8:e7:af: 9a:b9:76:ce:8e:71:6a:73:74:ae:b4:d6:ab:3a:81: 5f:e7:f9:f5:ca:16:dc:6b:4b:de:27:01:ef:66:c7: 07:60:21:47:3f:b7:84:86:e0:cb:0b:44:f7:a7:d7: ce:00:b8:68:2f:6c:eb:e2:bc:18:db:c2:b8:8a:10: 79:8a:29:8a:38:ad:83:fb:a0:cc:99:b8:de:c4:4b: 14:b6:3b:d7:48:73:55:83:5f:7f:ab:23:6b:46:d5: 29:59:d2:a0:37:45:bb:f1:1c:9a:1a:05:e2:da:1b: c4:46:85:19:8c:1f:c0:c8:34:7c:9a:a6:be:03:d4: 7e:08:c8:1c:30:9d:4c:b1:74:58:f6:08:df:9f:2d: 86:86:52:83:cd:48:b8:70:df:93:cd:64:4e:e6:4c: fc:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:9B:D6:43:02:C7:77:4E:DD:0A:B2:2C:D7:01:20:91:11:5C:DC:90 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144102.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a5ac::/32 Signature Algorithm: sha256WithRSAEncryption 5b:37:3e:86:ab:e1:1a:16:99:03:ec:9a:29:ec:e2:0b:4e:53: c8:b0:64:9e:bc:e2:85:53:82:8f:8b:52:73:5a:eb:35:46:b4: 08:fe:e3:80:1e:5b:4a:0c:8e:d8:47:12:5a:48:41:11:bc:d5: c5:43:67:7b:7b:43:d8:d2:64:e1:e7:9a:8e:fb:e7:63:f7:3d: dc:26:21:77:22:83:26:20:2e:18:7f:31:a9:27:8c:cf:89:a1: 65:5b:83:72:99:a2:de:d9:ff:4f:48:7e:6e:8d:25:e9:d6:9b: 33:f7:74:bd:7e:1e:db:7b:13:56:7c:3c:5d:c4:03:c9:92:58: de:49:4e:c7:c4:d3:90:d4:c9:15:c4:13:52:ea:58:9b:00:41: 8b:cf:38:da:1e:a9:05:9f:54:ba:8e:a8:b8:bd:e3:c3:0d:96: 44:06:ae:ea:ab:40:74:47:35:97:a5:74:37:ce:00:c5:1a:68: e9:cf:27:07:99:5b:c2:7d:0a:57:d9:bb:db:23:e0:ee:d9:ba: ff:57:07:66:6b:3b:4d:1b:38:f8:79:d3:8a:20:fc:44:e7:cc: e5:fa:76:5b:02:5a:bd:98:dd:16:10:97:95:2f:2d:d8:c5:4d: cc:3d:06:39:44:b3:c5:09:44:95:a5:b1:2e:0b:44:1d:5f:92: 86:68:f4:fa -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUTrjvqOFCRKtUTigWyl3ZcoA1IiMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDgxOFoX DTI3MDMwMzA2MTMxOFowMzExMC8GA1UEAxMoNEM5QkQ2NDMwMkM3Nzc0RUREMEFC MjJDRDcwMTIwOTExMTVDREM5MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMFYHu14v7l2B7xKb7XYQwiELKMu9EsWfOlfvZ8jclm2XkiWTLamUyGUmSuH RfjYAZl2EqxBu9eUVbt0NgRp4eQj7W+wtjI/0GIr3uy6+cybJ3qNwCWV++WvOPsP MaV4/zoqTa7j6Oevmrl2zo5xanN0rrTWqzqBX+f59coW3GtL3icB72bHB2AhRz+3 hIbgywtE96fXzgC4aC9s6+K8GNvCuIoQeYopijitg/ugzJm43sRLFLY710hzVYNf f6sja0bVKVnSoDdFu/EcmhoF4tobxEaFGYwfwMg0fJqmvgPUfgjIHDCdTLF0WPYI 358thoZSg81IuHDfk81kTuZM/C8CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRMm9ZD Asd3Tt0KsizXASCREVzckDAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDEwMi5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK pawwDQYJKoZIhvcNAQELBQADggEBAFs3Poar4RoWmQPsmins4gtOU8iwZJ684oVT go+LUnNa6zVGtAj+44AeW0oMjthHElpIQRG81cVDZ3t7Q9jSZOHnmo7752P3Pdwm IXcigyYgLhh/MaknjM+JoWVbg3KZot7Z/09Ifm6NJenWmzP3dL1+Htt7E1Z8PF3E A8mSWN5JTsfE05DUyRXEE1LqWJsAQYvPONoeqQWfVLqOqLi948MNlkQGruqrQHRH NZeldDfOAMUaaOnPJweZW8J9ClfZu9sj4O7Zuv9XB2ZrO00bOPh504og/ETnzOX6 dlsCWr2Y3RYQl5UvLdjFTcw9BjlEs8UJRJWlsS4LRB1fkoZo9Po= -----END CERTIFICATE-----Generated at Sat Mar 28 11:42:33 2026 by rpki-client