$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144103.roa File: AS144103.roa (raw, json) Hash identifier: Znncg6DHQrFnvsqvrrV9APMsnGUcaLXNtfMumijYHfw= Subject key identifier: 99:23:B4:C5:0E:2B:06:E5:05:88:E8:3C:E8:59:0C:66:23:58:81:11 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 5D6F0072A7C39DE9C51CAC8C5A70702700E57F83 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144103.roa Signing time: Wed 04 Mar 2026 06:12:43 +0000 ROA not before: Wed 04 Mar 2026 06:07:43 +0000 ROA not after: Wed 03 Mar 2027 06:12:43 +0000 asID: 144103 IP address blocks: 240a:a5ad::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:6f:00:72:a7:c3:9d:e9:c5:1c:ac:8c:5a:70:70:27:00:e5:7f:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:07:43 2026 GMT Not After : Mar 3 06:12:43 2027 GMT Subject: CN=9923B4C50E2B06E50588E83CE8590C6623588111 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:00:e1:a3:c6:f3:73:09:2a:ae:12:eb:dd:25: 30:cf:d1:f6:b3:39:73:d2:9c:cb:c1:7b:f5:44:99: 65:c7:fe:3d:09:38:24:26:39:03:4c:ea:a1:0d:c4: a0:e5:26:de:f9:7b:f4:41:67:ea:20:b0:02:d4:02: 53:ec:df:03:41:a2:14:f0:d7:34:3e:5b:e2:66:6d: 40:0f:4d:85:29:1e:ab:24:03:e0:af:67:e7:c0:cd: c9:71:9e:fe:14:06:6a:d4:07:a7:e8:6e:88:50:fe: 67:32:49:1f:f5:b8:74:77:e3:05:a2:e8:7a:bf:fe: a5:f7:17:ac:e1:49:90:4c:7b:15:eb:9a:84:c5:58: e3:3e:7e:e2:25:c9:ea:08:09:67:45:eb:21:be:55: fb:7f:b1:1e:b5:d3:2b:8e:ec:1e:b8:58:7a:22:d7: 05:78:78:2f:f6:8b:b8:1d:38:9d:11:6b:42:bb:14: df:e1:8a:34:50:f3:35:4d:3c:4f:30:69:34:1e:c3: 20:b6:67:35:38:64:41:e1:43:7a:4a:43:4a:b6:76: 52:31:a8:60:a4:52:46:32:2c:52:1a:41:64:57:4b: 9b:64:9c:a4:08:02:31:14:b3:ef:5c:35:5b:17:2c: c6:84:ce:13:ad:00:d3:43:9c:ee:c8:02:8e:1b:8c: e2:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:23:B4:C5:0E:2B:06:E5:05:88:E8:3C:E8:59:0C:66:23:58:81:11 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144103.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a5ad::/32 Signature Algorithm: sha256WithRSAEncryption 0e:a2:a4:fe:e6:70:f5:3d:88:5d:54:cb:ae:16:e9:2c:7a:40: 92:de:a4:4a:f0:71:1c:9f:c9:bc:ef:ba:46:0f:49:21:fc:0a: c1:e4:38:6a:8a:86:78:1b:69:95:2a:8c:5e:99:99:b1:fc:33: 08:a1:6b:e2:05:f5:58:30:89:7a:86:b9:69:5d:f2:dc:01:09: 43:8a:1c:19:54:63:c0:0b:4f:e0:c1:50:dd:b8:ea:9e:69:20: 77:f8:da:c3:f2:38:d4:7a:fd:6f:ee:70:bf:38:10:0f:40:11: aa:3c:bd:2d:54:ff:d8:28:5e:df:8a:41:c0:64:7a:1b:17:4a: 8a:05:14:94:df:38:e0:2b:93:c2:dc:d3:f9:ce:12:78:22:cc: 29:36:7c:9c:bc:e6:4c:11:32:ab:4e:1c:6a:ae:e7:8a:69:27: a0:5d:e5:b9:f4:fc:79:3e:06:f5:b4:c4:2c:c2:c8:17:d6:0e: b9:85:9e:7a:2d:bb:7f:c1:96:ac:b0:14:f0:5c:fc:fc:04:00: 65:4b:de:17:2f:35:1d:6f:6a:94:3d:f5:24:c7:d6:3f:0f:78: 99:0f:ea:77:19:2d:a8:2c:69:09:42:7b:ab:0d:c6:e0:1a:66: 08:eb:b4:b2:f2:55:ea:37:53:73:b0:04:09:78:7a:23:66:35: 6d:44:cd:1e -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUXW8AcqfDnenFHKyMWnBwJwDlf4MwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDc0M1oX DTI3MDMwMzA2MTI0M1owMzExMC8GA1UEAxMoOTkyM0I0QzUwRTJCMDZFNTA1ODhF ODNDRTg1OTBDNjYyMzU4ODExMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJUA4aPG83MJKq4S690lMM/R9rM5c9Kcy8F79USZZcf+PQk4JCY5A0zqoQ3E oOUm3vl79EFn6iCwAtQCU+zfA0GiFPDXND5b4mZtQA9NhSkeqyQD4K9n58DNyXGe /hQGatQHp+huiFD+ZzJJH/W4dHfjBaLoer/+pfcXrOFJkEx7FeuahMVY4z5+4iXJ 6ggJZ0XrIb5V+3+xHrXTK47sHrhYeiLXBXh4L/aLuB04nRFrQrsU3+GKNFDzNU08 TzBpNB7DILZnNThkQeFDekpDSrZ2UjGoYKRSRjIsUhpBZFdLm2ScpAgCMRSz71w1 WxcsxoTOE60A00Oc7sgCjhuM4nkCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSZI7TF DisG5QWI6DzoWQxmI1iBETAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDEwMy5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK pa0wDQYJKoZIhvcNAQELBQADggEBAA6ipP7mcPU9iF1Uy64W6Sx6QJLepErwcRyf ybzvukYPSSH8CsHkOGqKhngbaZUqjF6ZmbH8Mwiha+IF9VgwiXqGuWld8twBCUOK HBlUY8ALT+DBUN246p5pIHf42sPyONR6/W/ucL84EA9AEao8vS1U/9goXt+KQcBk ehsXSooFFJTfOOArk8Lc0/nOEngizCk2fJy85kwRMqtOHGqu54ppJ6Bd5bn0/Hk+ BvW0xCzCyBfWDrmFnnotu3/BlqywFPBc/PwEAGVL3hcvNR1vapQ99STH1j8PeJkP 6ncZLagsaQlCe6sNxuAaZgjrtLLyVeo3U3OwBAl4eiNmNW1EzR4= -----END CERTIFICATE-----Generated at Sat Mar 28 11:41:36 2026 by rpki-client