$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144117.roa File: AS144117.roa (raw, json) Hash identifier: s5PRild1SyBMu4EcsltRoC8lsERc48QEG095Ct9dcP0= Subject key identifier: 4A:74:4B:CD:2E:16:21:93:C3:ED:BE:87:4A:9F:37:C5:D4:9B:EB:83 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 7F78C91E245873CDF5B96CCDE93499A8E442392F Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144117.roa Signing time: Wed 04 Mar 2026 06:12:44 +0000 ROA not before: Wed 04 Mar 2026 06:07:44 +0000 ROA not after: Wed 03 Mar 2027 06:12:44 +0000 asID: 144117 IP address blocks: 240a:a5bb::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:78:c9:1e:24:58:73:cd:f5:b9:6c:cd:e9:34:99:a8:e4:42:39:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:07:44 2026 GMT Not After : Mar 3 06:12:44 2027 GMT Subject: CN=4A744BCD2E162193C3EDBE874A9F37C5D49BEB83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:41:3f:0a:65:2a:47:34:51:2f:65:ad:bf:98: 37:30:8c:4b:e5:61:75:40:5f:69:fa:84:b1:b8:dd: fa:00:35:c0:49:2a:70:3f:12:13:94:74:76:89:e0: e8:b4:70:6e:cb:8b:d3:90:04:ac:ee:a7:2b:1c:c8: 87:05:1b:5a:7c:96:2f:f8:62:7d:a2:37:fc:59:92: ec:8f:88:66:15:7f:a0:b9:90:89:12:8f:e8:49:70: bd:bb:06:a3:54:56:f6:3f:15:6f:a4:9c:66:ba:2a: be:06:56:fb:5d:b2:48:50:6e:ad:5b:c3:b3:73:fb: b4:fd:62:0c:56:06:61:de:25:12:6c:4a:d2:e9:c7: ac:2f:6e:2b:82:91:34:6d:19:50:56:c3:25:9f:fb: 35:05:ef:3e:8b:21:0b:57:6c:c0:ef:31:ad:1e:8e: 25:c5:f5:b8:6c:32:de:b7:53:26:98:27:87:c4:9d: 04:49:5a:2f:68:82:ac:b9:62:0e:f1:48:af:eb:46: 62:d3:57:80:c1:fe:53:2d:c5:49:e8:b5:db:e7:4c: f4:54:e9:28:35:31:60:c9:72:c4:71:ad:f0:b2:6f: fd:a3:fd:5d:ad:3b:44:7e:dc:9c:c8:45:86:38:e9: 3d:e2:ae:4f:43:8c:27:4e:8d:a0:bf:bf:19:44:6d: 4d:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:74:4B:CD:2E:16:21:93:C3:ED:BE:87:4A:9F:37:C5:D4:9B:EB:83 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144117.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a5bb::/32 Signature Algorithm: sha256WithRSAEncryption 95:2a:e8:b3:73:c5:f1:c1:89:51:0e:79:dc:a6:2a:09:55:fe: a5:a1:d9:4c:41:ad:87:e0:46:fc:ab:b2:3f:df:96:12:fb:25: 73:ab:60:19:7a:ff:c0:75:be:1a:c9:f2:3e:b8:9b:15:ca:3f: ca:ab:a4:d2:db:2f:8d:0a:b1:71:2d:1f:e1:b2:db:f1:e6:91: 1c:f0:07:55:6e:31:8d:f3:99:86:14:17:19:d0:e1:f1:50:4e: a0:d9:b9:93:31:8d:d7:27:4b:91:e5:11:06:cf:32:9b:79:a7: 28:14:61:24:80:db:d3:b1:dd:6a:ae:40:f0:2a:ef:09:ce:cb: 8d:a8:29:ed:80:a1:4d:73:e5:df:83:dc:6f:a8:28:f7:06:5a: 69:ca:c9:ef:d9:74:9f:71:db:67:3f:80:78:85:71:27:af:6c: 7d:6c:2c:75:9b:ee:a0:02:04:28:b7:c4:9a:49:be:be:70:33: 72:4c:84:a1:90:d4:ae:de:0e:c7:86:5a:b0:c2:4f:34:be:5a: e1:67:02:11:6d:96:31:f7:21:b4:57:36:b7:85:18:b9:2b:3f: 1d:9b:95:1d:b6:fc:87:4f:38:cb:4a:3a:20:7e:fb:e5:9d:70: b4:86:de:36:e8:24:b3:92:9d:ca:1d:69:62:e4:85:90:9f:c6: c6:01:f8:ba -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUf3jJHiRYc831uWzN6TSZqORCOS8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDc0NFoX DTI3MDMwMzA2MTI0NFowMzExMC8GA1UEAxMoNEE3NDRCQ0QyRTE2MjE5M0MzRURC RTg3NEE5RjM3QzVENDlCRUI4MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKxBPwplKkc0US9lrb+YNzCMS+VhdUBfafqEsbjd+gA1wEkqcD8SE5R0dong 6LRwbsuL05AErO6nKxzIhwUbWnyWL/hifaI3/FmS7I+IZhV/oLmQiRKP6ElwvbsG o1RW9j8Vb6ScZroqvgZW+12ySFBurVvDs3P7tP1iDFYGYd4lEmxK0unHrC9uK4KR NG0ZUFbDJZ/7NQXvPoshC1dswO8xrR6OJcX1uGwy3rdTJpgnh8SdBElaL2iCrLli DvFIr+tGYtNXgMH+Uy3FSei12+dM9FTpKDUxYMlyxHGt8LJv/aP9Xa07RH7cnMhF hjjpPeKuT0OMJ06NoL+/GURtTdsCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRKdEvN LhYhk8PtvodKnzfF1JvrgzAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDExNy5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK pbswDQYJKoZIhvcNAQELBQADggEBAJUq6LNzxfHBiVEOedymKglV/qWh2UxBrYfg Rvyrsj/flhL7JXOrYBl6/8B1vhrJ8j64mxXKP8qrpNLbL40KsXEtH+Gy2/HmkRzw B1VuMY3zmYYUFxnQ4fFQTqDZuZMxjdcnS5HlEQbPMpt5pygUYSSA29Ox3WquQPAq 7wnOy42oKe2AoU1z5d+D3G+oKPcGWmnKye/ZdJ9x22c/gHiFcSevbH1sLHWb7qAC BCi3xJpJvr5wM3JMhKGQ1K7eDseGWrDCTzS+WuFnAhFtljH3IbRXNreFGLkrPx2b lR22/IdPOMtKOiB+++WdcLSG3jboJLOSncodaWLkhZCfxsYB+Lo= -----END CERTIFICATE-----Generated at Sat Mar 28 11:46:01 2026 by rpki-client