$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144143.roa File: AS144143.roa (raw, json) Hash identifier: vz2OU7G47kruUWSZlY4e6gOb2ozw9l7zKI8U/ieJubQ= Subject key identifier: A8:64:E8:FB:F3:A9:99:98:4D:84:8D:51:49:65:C3:D0:2D:82:D6:B4 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 106C44F935A093389D6802CC763CEF2491F8605C Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144143.roa Signing time: Wed 04 Mar 2026 06:14:32 +0000 ROA not before: Wed 04 Mar 2026 06:09:32 +0000 ROA not after: Wed 03 Mar 2027 06:14:32 +0000 asID: 144143 IP address blocks: 240a:a5d5::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:6c:44:f9:35:a0:93:38:9d:68:02:cc:76:3c:ef:24:91:f8:60:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:09:32 2026 GMT Not After : Mar 3 06:14:32 2027 GMT Subject: CN=A864E8FBF3A999984D848D514965C3D02D82D6B4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:32:ca:71:66:00:c0:ed:4d:e1:89:68:1a:6e: 22:0c:99:f1:0a:1a:12:3d:7a:09:29:a7:2a:a0:a1: 38:5c:88:59:1b:a6:56:dd:94:58:bf:70:2d:22:e1: 9c:90:71:1f:25:73:ef:44:26:88:84:74:ff:a1:ba: ff:20:74:1b:33:a2:c7:34:69:ac:7e:93:97:03:d4: 39:23:49:04:ae:78:32:26:08:d8:f7:af:dd:c1:c3: 7d:a8:cf:78:60:af:19:59:4a:ff:67:12:49:43:ea: 63:75:fc:49:01:83:1a:cc:df:c7:f8:4e:9d:4e:7b: e9:66:e8:85:79:f5:c0:a5:5c:57:8f:db:11:22:a6: b2:6f:5d:5d:1c:c8:79:e4:62:c8:be:f8:4d:65:b7: 74:28:a9:f2:f4:91:3d:49:71:98:f8:76:7e:29:6b: c3:9d:50:03:53:7d:d7:a2:c6:cf:26:f4:c4:ce:41: 28:73:02:82:78:ba:04:b1:d0:28:2e:f6:7f:34:36: 51:8d:2c:16:cc:e2:ab:ba:40:51:21:0c:bf:6e:29: 99:15:0e:a4:05:ed:62:74:d5:ce:2d:4e:64:6b:d9: 52:5c:a7:2e:da:27:79:b9:8a:a0:fe:ae:99:2f:6d: 54:3f:10:42:57:aa:8d:7f:d2:26:71:ce:60:df:5b: 4e:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:64:E8:FB:F3:A9:99:98:4D:84:8D:51:49:65:C3:D0:2D:82:D6:B4 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144143.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a5d5::/32 Signature Algorithm: sha256WithRSAEncryption 80:3b:d1:fb:53:f4:f8:44:b7:d4:23:84:39:a8:08:30:2a:8e: 9a:54:97:08:35:1d:83:a6:56:22:a8:f5:d9:40:01:e6:10:cb: 8d:0a:da:58:b3:8a:39:f0:b7:5f:3d:1a:be:4f:7d:3a:8d:18: c4:1d:08:e7:78:ad:51:ee:2f:be:10:6b:08:06:c3:8e:d3:84: 50:62:fb:00:3d:6e:ef:83:9d:07:38:c6:12:66:d7:7f:d4:b0: 93:2f:0c:d0:ab:92:33:9d:05:e3:65:eb:17:15:d3:d2:06:f9: 6c:ea:e4:42:31:0a:7f:3a:62:f9:fa:d5:34:6a:8c:e8:80:87: 60:73:eb:99:1a:53:4a:f6:91:d3:61:69:dc:00:5a:ef:e7:aa: ab:c0:1b:9e:3f:ab:ac:3a:ba:9b:7f:18:3c:2a:42:f1:dd:2e: c2:59:b8:e0:28:20:78:d5:f0:40:ae:4e:b4:03:a8:8c:8f:9b: 58:dd:7b:97:be:f1:92:66:f0:71:65:2f:11:86:1c:fb:57:0b: c2:db:b8:79:e5:5a:12:c0:6f:0a:96:2b:b9:02:45:b6:bd:03: 94:ed:68:bd:c7:f2:48:20:0c:61:cb:26:15:42:62:40:2a:bc: 19:99:b9:28:11:a4:1d:44:0f:11:52:96:83:f6:96:4a:2e:22: fd:1f:7c:8b -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUEGxE+TWgkzidaALMdjzvJJH4YFwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDkzMloX DTI3MDMwMzA2MTQzMlowMzExMC8GA1UEAxMoQTg2NEU4RkJGM0E5OTk5ODREODQ4 RDUxNDk2NUMzRDAyRDgyRDZCNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMIyynFmAMDtTeGJaBpuIgyZ8QoaEj16CSmnKqChOFyIWRumVt2UWL9wLSLh nJBxHyVz70QmiIR0/6G6/yB0GzOixzRprH6TlwPUOSNJBK54MiYI2Pev3cHDfajP eGCvGVlK/2cSSUPqY3X8SQGDGszfx/hOnU576WbohXn1wKVcV4/bESKmsm9dXRzI eeRiyL74TWW3dCip8vSRPUlxmPh2filrw51QA1N916LGzyb0xM5BKHMCgni6BLHQ KC72fzQ2UY0sFsziq7pAUSEMv24pmRUOpAXtYnTVzi1OZGvZUlynLtonebmKoP6u mS9tVD8QQleqjX/SJnHOYN9bTh0CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSoZOj7 86mZmE2EjVFJZcPQLYLWtDAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDE0My5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK pdUwDQYJKoZIhvcNAQELBQADggEBAIA70ftT9PhEt9QjhDmoCDAqjppUlwg1HYOm ViKo9dlAAeYQy40K2lizijnwt189Gr5PfTqNGMQdCOd4rVHuL74QawgGw47ThFBi +wA9bu+DnQc4xhJm13/UsJMvDNCrkjOdBeNl6xcV09IG+Wzq5EIxCn86Yvn61TRq jOiAh2Bz65kaU0r2kdNhadwAWu/nqqvAG54/q6w6upt/GDwqQvHdLsJZuOAoIHjV 8ECuTrQDqIyPm1jde5e+8ZJm8HFlLxGGHPtXC8LbuHnlWhLAbwqWK7kCRba9A5Tt aL3H8kggDGHLJhVCYkAqvBmZuSgRpB1EDxFSloP2lkouIv0ffIs= -----END CERTIFICATE-----Generated at Sat Mar 28 13:10:36 2026 by rpki-client