$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144115.roa File: AS144115.roa (raw, json) Hash identifier: 7LaR+b9NRrqoFpwuFHkDGTxkOZL+nQICcIGyxZqV700= Subject key identifier: D4:5D:17:48:B5:89:60:08:C0:6D:72:A7:EF:5F:D3:14:BD:29:A3:1A Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 74DA3FCE5FA5BE75AA762B6FC24688D68C9E41F9 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144115.roa Signing time: Wed 04 Mar 2026 06:15:23 +0000 ROA not before: Wed 04 Mar 2026 06:10:23 +0000 ROA not after: Wed 03 Mar 2027 06:15:23 +0000 asID: 144115 IP address blocks: 240a:a5b9::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:da:3f:ce:5f:a5:be:75:aa:76:2b:6f:c2:46:88:d6:8c:9e:41:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:10:23 2026 GMT Not After : Mar 3 06:15:23 2027 GMT Subject: CN=D45D1748B5896008C06D72A7EF5FD314BD29A31A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:21:b8:7b:5b:4e:c9:8d:19:9a:d6:a4:ba:48: a1:36:1e:01:07:f8:21:87:58:40:f4:c2:f6:c4:ba: 5f:31:fd:2c:b1:11:0d:e0:c2:e4:9b:76:3c:6e:79: bf:50:c3:06:5c:2f:63:88:99:8c:bf:10:aa:fa:f8: 1e:ca:c5:49:cf:78:05:a5:36:02:41:2e:2d:f3:59: e3:80:86:58:f3:64:af:e3:7d:8e:de:52:41:71:a4: 20:9b:e2:34:0d:11:87:41:4b:58:d2:39:f5:01:c7: f8:92:93:bd:51:9a:be:23:f5:f1:30:6b:fd:62:c0: 3b:7c:79:ae:d8:6b:55:c2:78:b3:5a:f5:81:78:d6: 37:04:7d:df:64:ab:07:3b:5d:7e:d7:08:d4:d2:06: 00:6c:12:70:51:af:aa:b6:58:ab:f3:71:68:fc:86: 08:ea:06:de:84:6a:84:34:c1:64:ca:9d:b0:dc:28: 9c:c9:24:ad:28:55:02:91:7a:98:e5:9d:89:d8:5d: 7b:e0:7d:61:b2:94:27:d7:57:4e:cc:74:4a:30:21: ed:0d:59:16:66:d5:5c:80:7c:d4:fe:ef:c7:39:74: 89:af:66:44:70:b2:c8:55:05:0a:16:b4:c1:41:2f: 4c:f7:fb:80:dd:3b:31:60:46:b6:c9:d8:66:07:d2: 2e:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:5D:17:48:B5:89:60:08:C0:6D:72:A7:EF:5F:D3:14:BD:29:A3:1A X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144115.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a5b9::/32 Signature Algorithm: sha256WithRSAEncryption 1e:ef:d7:cf:d5:64:95:14:52:43:f3:9a:39:40:20:d1:d6:d8: 5b:72:c0:ef:dc:0b:0e:04:8c:ee:d9:c2:e8:a2:c1:48:47:0a: 0d:91:0e:5b:fc:d0:e6:4b:92:28:32:85:3e:a9:ab:e4:f6:89: 67:6b:e7:f4:31:7f:6f:ba:b4:74:10:62:08:19:03:af:0e:00: a8:26:04:41:82:5b:f8:a5:66:89:87:6a:13:9c:c7:67:ff:fd: da:e1:a6:e8:f1:f4:69:fa:3d:29:60:e4:77:27:a9:01:c4:c9: c8:4e:cf:39:4d:52:c6:f7:0b:54:7b:7b:c6:db:57:b9:f2:8f: 70:4c:9f:a0:c1:07:0d:75:1f:f8:43:c6:0b:19:7c:43:8a:fd: 1d:86:5c:92:d0:c5:b7:21:1a:b0:af:8d:60:47:e5:4d:b2:ed: 61:1f:02:f5:ed:16:de:da:a4:fe:95:63:17:73:56:a5:ff:c2: 32:dc:ca:23:38:65:e9:85:1a:c3:35:98:88:4a:5f:98:62:67: a4:1a:71:26:a4:15:9f:ca:96:4d:b6:e8:1a:1e:ac:25:11:5c: 0f:8f:f9:f8:bf:98:bf:4f:d0:93:f1:a7:9f:21:32:9f:a3:31: 94:3f:52:45:41:a4:18:48:fa:d6:d9:4d:bd:80:15:43:4b:d9: 89:32:59:84 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUdNo/zl+lvnWqditvwkaI1oyeQfkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTAyM1oX DTI3MDMwMzA2MTUyM1owMzExMC8GA1UEAxMoRDQ1RDE3NDhCNTg5NjAwOEMwNkQ3 MkE3RUY1RkQzMTRCRDI5QTMxQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM0huHtbTsmNGZrWpLpIoTYeAQf4IYdYQPTC9sS6XzH9LLERDeDC5Jt2PG55 v1DDBlwvY4iZjL8Qqvr4HsrFSc94BaU2AkEuLfNZ44CGWPNkr+N9jt5SQXGkIJvi NA0Rh0FLWNI59QHH+JKTvVGaviP18TBr/WLAO3x5rthrVcJ4s1r1gXjWNwR932Sr BztdftcI1NIGAGwScFGvqrZYq/NxaPyGCOoG3oRqhDTBZMqdsNwonMkkrShVApF6 mOWdidhde+B9YbKUJ9dXTsx0SjAh7Q1ZFmbVXIB81P7vxzl0ia9mRHCyyFUFCha0 wUEvTPf7gN07MWBGtsnYZgfSLkMCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBTUXRdI tYlgCMBtcqfvX9MUvSmjGjAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDExNS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK pbkwDQYJKoZIhvcNAQELBQADggEBAB7v18/VZJUUUkPzmjlAINHW2FtywO/cCw4E jO7ZwuiiwUhHCg2RDlv80OZLkigyhT6pq+T2iWdr5/Qxf2+6tHQQYggZA68OAKgm BEGCW/ilZomHahOcx2f//drhpujx9Gn6PSlg5HcnqQHEychOzzlNUsb3C1R7e8bb V7nyj3BMn6DBBw11H/hDxgsZfEOK/R2GXJLQxbchGrCvjWBH5U2y7WEfAvXtFt7a pP6VYxdzVqX/wjLcyiM4ZemFGsM1mIhKX5hiZ6QacSakFZ/Klk226BoerCURXA+P +fi/mL9P0JPxp58hMp+jMZQ/UkVBpBhI+tbZTb2AFUNL2YkyWYQ= -----END CERTIFICATE-----Generated at Sat Mar 28 11:41:32 2026 by rpki-client