$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144104.roa File: AS144104.roa (raw, json) Hash identifier: aYaNCFbhPZJ4fWhkLiPUZcgApk2gXm1hkdyKAqcMMys= Subject key identifier: 53:71:3A:B1:6E:B0:A7:ED:20:7F:5D:04:6A:47:4C:E9:47:94:3B:89 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 1F5FCE4385342E0FECB8A4D8850B72577CCA45CD Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144104.roa Signing time: Wed 04 Mar 2026 06:14:58 +0000 ROA not before: Wed 04 Mar 2026 06:09:58 +0000 ROA not after: Wed 03 Mar 2027 06:14:58 +0000 asID: 144104 IP address blocks: 240a:a5ae::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:5f:ce:43:85:34:2e:0f:ec:b8:a4:d8:85:0b:72:57:7c:ca:45:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:09:58 2026 GMT Not After : Mar 3 06:14:58 2027 GMT Subject: CN=53713AB16EB0A7ED207F5D046A474CE947943B89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:48:a7:18:22:bd:54:3e:60:ff:fd:36:0c:d2: 2d:4e:eb:99:1f:2d:f1:86:17:ac:73:ee:a4:51:4b: 66:40:a0:48:14:fe:c3:20:06:4e:bf:7c:99:9e:41: 8d:cd:6e:fe:13:59:78:ea:d3:44:92:09:ea:88:79: a7:2e:cd:50:d9:b4:ce:15:c6:e3:40:7d:83:16:f9: 64:b0:13:34:85:db:b1:de:3e:68:b2:ec:55:25:2b: 15:5d:b2:fc:3b:7f:17:76:d2:99:8a:b3:0d:f3:8c: 4f:18:ca:83:8a:33:bb:c5:16:de:40:35:f9:87:b0: 47:c5:2f:78:45:bd:f8:51:41:25:c3:61:21:d8:5d: 74:33:38:eb:bc:48:98:eb:89:e3:40:ed:f1:9f:4c: 0e:90:07:25:52:e8:c8:6e:32:3b:51:bf:1f:bf:6b: 98:35:00:b1:3a:8e:c1:b5:ae:e3:d6:92:50:bf:75: 5a:ff:9b:2a:98:52:3d:76:fc:58:22:cb:e8:27:f3: c8:91:54:5b:ae:8b:c9:ce:04:b2:17:67:0b:fc:f3: 7e:f0:67:f7:42:f0:01:d8:c7:af:97:9b:95:66:58: 80:3b:31:e5:e5:ba:94:a6:40:15:a9:0a:1e:4b:ed: a9:3a:5f:2a:2e:40:3a:70:6c:6d:b1:3a:d8:33:93: 8b:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:71:3A:B1:6E:B0:A7:ED:20:7F:5D:04:6A:47:4C:E9:47:94:3B:89 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144104.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a5ae::/32 Signature Algorithm: sha256WithRSAEncryption a4:d4:f9:51:e4:77:15:0e:9c:09:ce:1b:0a:88:79:b3:a7:77: b9:1e:23:82:03:21:ba:db:b7:b3:90:d2:2a:61:7a:14:9a:36: 45:50:5e:fd:75:ae:39:91:1c:b3:84:e6:31:20:d4:36:6f:cd: 3f:36:95:a5:c7:17:94:db:34:b9:c7:81:4a:78:73:9e:82:e7: 6a:af:7b:bf:33:2a:da:23:49:f7:94:78:06:b0:24:13:4c:97: aa:e2:77:79:7f:78:f6:c4:03:ca:93:ea:1d:62:39:14:13:1f: b5:f8:d6:1d:f3:c3:5e:71:58:6e:38:ed:4c:92:65:e6:da:22: a7:5b:80:a4:4d:10:57:a4:86:29:52:70:34:64:aa:2b:89:32: 59:c8:22:92:22:b3:20:ae:35:65:c4:1e:6a:4d:dc:02:cc:97: 61:b3:4f:ec:e4:c4:aa:b8:07:e7:7f:08:36:39:42:91:8f:30: 34:75:f0:89:68:46:54:82:5b:41:12:65:5d:e5:40:7e:e5:7f: 13:8b:3d:06:04:fc:6e:ae:17:e3:63:be:1b:46:b9:05:65:bb: 3e:ad:ac:1d:d7:3c:03:94:78:77:22:06:bf:ce:f0:28:9c:55: f3:a2:5c:2d:a5:d9:ff:f4:c5:5f:b6:b6:54:38:16:33:d1:a5: e3:2d:64:ec -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUH1/OQ4U0Lg/suKTYhQtyV3zKRc0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDk1OFoX DTI3MDMwMzA2MTQ1OFowMzExMC8GA1UEAxMoNTM3MTNBQjE2RUIwQTdFRDIwN0Y1 RDA0NkE0NzRDRTk0Nzk0M0I4OTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJ1IpxgivVQ+YP/9NgzSLU7rmR8t8YYXrHPupFFLZkCgSBT+wyAGTr98mZ5B jc1u/hNZeOrTRJIJ6oh5py7NUNm0zhXG40B9gxb5ZLATNIXbsd4+aLLsVSUrFV2y /Dt/F3bSmYqzDfOMTxjKg4ozu8UW3kA1+YewR8UveEW9+FFBJcNhIdhddDM467xI mOuJ40Dt8Z9MDpAHJVLoyG4yO1G/H79rmDUAsTqOwbWu49aSUL91Wv+bKphSPXb8 WCLL6CfzyJFUW66Lyc4EshdnC/zzfvBn90LwAdjHr5eblWZYgDsx5eW6lKZAFakK HkvtqTpfKi5AOnBsbbE62DOTi50CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRTcTqx brCn7SB/XQRqR0zpR5Q7iTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDEwNC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK pa4wDQYJKoZIhvcNAQELBQADggEBAKTU+VHkdxUOnAnOGwqIebOnd7keI4IDIbrb t7OQ0iphehSaNkVQXv11rjmRHLOE5jEg1DZvzT82laXHF5TbNLnHgUp4c56C52qv e78zKtojSfeUeAawJBNMl6rid3l/ePbEA8qT6h1iORQTH7X41h3zw15xWG447UyS ZebaIqdbgKRNEFekhilScDRkqiuJMlnIIpIisyCuNWXEHmpN3ALMl2GzT+zkxKq4 B+d/CDY5QpGPMDR18IloRlSCW0ESZV3lQH7lfxOLPQYE/G6uF+NjvhtGuQVluz6t rB3XPAOUeHciBr/O8CicVfOiXC2l2f/0xV+2tlQ4FjPRpeMtZOw= -----END CERTIFICATE-----Generated at Sat Mar 28 11:44:23 2026 by rpki-client