$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144123.roa File: AS144123.roa (raw, json) Hash identifier: dPwmjs31w+P8maaT2jW0KTv5SsA/8YcUSa9T/cTKN8Q= Subject key identifier: E3:92:D0:AF:3E:E3:06:EA:C0:97:D3:62:AA:28:64:2A:E4:AE:A9:05 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 7152A470927B3489385B03105DAF14E4ECD8E939 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144123.roa Signing time: Wed 04 Mar 2026 06:14:04 +0000 ROA not before: Wed 04 Mar 2026 06:09:04 +0000 ROA not after: Wed 03 Mar 2027 06:14:04 +0000 asID: 144123 IP address blocks: 240a:a5c1::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:52:a4:70:92:7b:34:89:38:5b:03:10:5d:af:14:e4:ec:d8:e9:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:09:04 2026 GMT Not After : Mar 3 06:14:04 2027 GMT Subject: CN=E392D0AF3EE306EAC097D362AA28642AE4AEA905 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:53:b9:45:6b:d4:c3:dd:44:16:2a:e1:89:de: 5a:f6:e5:e5:e1:c1:a9:80:6f:4c:f3:b3:3f:3d:68: ee:ba:83:80:7f:fa:ff:ea:c8:b6:b4:d1:3d:fe:ea: 1e:52:f6:d0:84:e0:d8:ea:a7:1f:88:08:ff:e8:ce: 0c:c9:37:22:cf:07:ae:de:45:8f:7c:49:a9:57:93: c6:30:75:39:e5:30:01:d8:55:8d:de:8e:22:43:65: 1d:f4:25:2d:97:7c:3a:d2:10:6b:8d:35:01:d6:54: 65:66:9b:2f:83:51:74:bb:1d:41:a0:70:53:4f:8e: 9f:78:5d:90:21:6f:09:88:d5:2a:af:d9:f5:83:62: e0:c7:34:a2:cd:37:9d:5e:e4:aa:84:40:2b:28:e6: 52:f8:79:c4:30:83:85:68:8a:c1:44:f9:1a:06:55: 25:7a:34:04:92:71:e0:8a:3c:a5:9c:31:7d:a9:81: b4:3d:39:b9:6a:8b:4a:49:22:29:9c:58:93:43:16: 22:a2:09:8f:3a:4c:a9:a7:84:af:da:27:b9:e1:1d: 06:41:b9:5c:7c:bd:c8:59:fc:59:57:f1:1b:5c:2b: df:b0:eb:37:73:95:aa:87:77:a0:ac:ab:51:a5:92: b5:ea:a1:c2:21:4b:31:e7:ad:db:57:d8:1d:29:27: a9:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:92:D0:AF:3E:E3:06:EA:C0:97:D3:62:AA:28:64:2A:E4:AE:A9:05 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144123.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a5c1::/32 Signature Algorithm: sha256WithRSAEncryption 42:1f:ec:4a:d2:ee:80:2c:6d:02:cf:a8:16:f5:06:71:4b:90: 04:c1:5c:85:25:45:3d:58:44:88:4d:c6:cf:cb:d3:95:36:4b: 29:e6:91:bd:95:ad:bd:3c:44:ff:d1:6e:72:d6:e0:cb:7c:7a: 23:34:c2:c0:7a:f8:42:1f:f8:f3:17:b8:3e:ed:91:9c:eb:02: 67:de:3c:88:87:a3:04:5c:ba:3c:69:55:11:10:7c:40:00:10: db:fc:6e:8a:97:c2:d6:86:79:e3:33:20:a7:96:8b:11:ca:a9: c8:a9:b1:86:13:75:37:04:e9:72:dc:ce:03:12:b1:78:84:e3: 53:87:48:19:5e:92:65:57:81:31:8b:d6:f2:cb:d1:8e:e6:e4: 51:5d:3f:d5:f8:cd:52:33:d3:08:87:d6:3b:5b:48:0b:53:c0: f8:c1:f7:aa:e4:c3:a8:e8:3d:87:27:b7:10:e4:16:90:f0:e1: 60:fc:02:8e:f0:71:c8:7b:26:b2:a4:2a:25:c9:7a:18:ed:d8: 77:9f:75:7a:c9:58:34:77:64:f1:a9:28:3e:94:8d:ef:bc:4c: 13:fe:d9:4a:aa:ab:fa:a5:b9:31:95:a6:34:33:64:40:d0:87: 31:50:98:18:1a:17:d7:c5:00:b7:f2:a0:ca:68:9f:ff:ed:5d: 69:e3:83:36 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUcVKkcJJ7NIk4WwMQXa8U5OzY6TkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDkwNFoX DTI3MDMwMzA2MTQwNFowMzExMC8GA1UEAxMoRTM5MkQwQUYzRUUzMDZFQUMwOTdE MzYyQUEyODY0MkFFNEFFQTkwNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAI9TuUVr1MPdRBYq4YneWvbl5eHBqYBvTPOzPz1o7rqDgH/6/+rItrTRPf7q HlL20ITg2OqnH4gI/+jODMk3Is8Hrt5Fj3xJqVeTxjB1OeUwAdhVjd6OIkNlHfQl LZd8OtIQa401AdZUZWabL4NRdLsdQaBwU0+On3hdkCFvCYjVKq/Z9YNi4Mc0os03 nV7kqoRAKyjmUvh5xDCDhWiKwUT5GgZVJXo0BJJx4Io8pZwxfamBtD05uWqLSkki KZxYk0MWIqIJjzpMqaeEr9onueEdBkG5XHy9yFn8WVfxG1wr37DrN3OVqod3oKyr UaWSteqhwiFLMeet21fYHSknqaECAwEAAaOCAcUwggHBMB0GA1UdDgQWBBTjktCv PuMG6sCX02KqKGQq5K6pBTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDEyMy5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK pcEwDQYJKoZIhvcNAQELBQADggEBAEIf7ErS7oAsbQLPqBb1BnFLkATBXIUlRT1Y RIhNxs/L05U2Synmkb2Vrb08RP/RbnLW4Mt8eiM0wsB6+EIf+PMXuD7tkZzrAmfe PIiHowRcujxpVREQfEAAENv8boqXwtaGeeMzIKeWixHKqcipsYYTdTcE6XLczgMS sXiE41OHSBlekmVXgTGL1vLL0Y7m5FFdP9X4zVIz0wiH1jtbSAtTwPjB96rkw6jo PYcntxDkFpDw4WD8Ao7wcch7JrKkKiXJehjt2HefdXrJWDR3ZPGpKD6Uje+8TBP+ 2Uqqq/qluTGVpjQzZEDQhzFQmBgaF9fFALfyoMpon//tXWnjgzY= -----END CERTIFICATE-----Generated at Sat Mar 28 11:43:45 2026 by rpki-client