$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144149.roa File: AS144149.roa (raw, json) Hash identifier: oskz1PavpTkGW9Gkbxfaa4pDVEKGaxmG8pgIys76ZW4= Subject key identifier: 0B:0F:03:0E:C3:BB:D0:EF:3F:0F:02:DA:CC:A2:00:B0:8E:0E:02:36 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 1878763E93372F69AA4D187E7A1FA4D05A7B75F3 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144149.roa Signing time: Wed 04 Mar 2026 06:15:34 +0000 ROA not before: Wed 04 Mar 2026 06:10:34 +0000 ROA not after: Wed 03 Mar 2027 06:15:34 +0000 asID: 144149 IP address blocks: 240a:a5db::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:78:76:3e:93:37:2f:69:aa:4d:18:7e:7a:1f:a4:d0:5a:7b:75:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:10:34 2026 GMT Not After : Mar 3 06:15:34 2027 GMT Subject: CN=0B0F030EC3BBD0EF3F0F02DACCA200B08E0E0236 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:13:79:47:0b:67:92:da:4c:86:5c:91:11:fd: 63:60:d5:ea:85:7f:1e:f8:66:83:f5:b1:60:1e:54: b4:6d:84:3c:ec:21:3f:32:cf:8f:17:4a:f0:c9:e0: 86:dd:15:14:a6:67:b3:36:5b:cd:94:f5:06:2c:5f: 4c:9b:ac:56:9a:91:0b:2a:90:10:2e:35:63:e4:ce: 8c:e6:86:dc:80:19:cf:d0:db:a2:61:d3:8f:63:54: 18:74:2b:57:01:02:bf:bc:36:55:dc:5b:fb:ec:b7: a4:05:72:f2:67:31:bd:46:58:5e:e2:e2:0c:7a:89: 90:ff:f7:a8:96:84:ef:89:46:08:3c:96:fb:56:f2: 9f:25:5c:3c:67:84:c1:80:01:42:44:df:a5:1a:9e: 64:e5:6f:31:d8:49:61:b6:a5:ad:b6:ee:de:60:99: ee:a0:4c:57:17:46:e5:70:cf:1e:3d:05:18:f8:6c: 19:ec:bb:34:46:1c:b9:a1:ff:67:d4:43:74:e2:7b: f0:65:76:3d:41:ce:16:19:7e:bb:f8:6e:55:64:61: ef:f3:f6:f2:e1:f1:30:d9:a8:ba:ad:25:1b:48:08: 2e:a8:42:95:b0:da:29:a8:01:46:da:53:60:b6:d1: ea:e7:9a:44:17:be:e2:09:9c:7a:87:d9:11:4d:99: 94:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:0F:03:0E:C3:BB:D0:EF:3F:0F:02:DA:CC:A2:00:B0:8E:0E:02:36 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144149.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a5db::/32 Signature Algorithm: sha256WithRSAEncryption b3:ba:29:67:9e:00:61:db:80:3d:36:9d:2f:87:83:d2:a2:32: 89:e4:16:3f:6a:f5:e7:27:b8:34:f4:fc:eb:6c:79:b3:98:58: f2:c4:28:c2:dc:9a:73:63:d9:44:35:6e:1a:22:28:1c:e6:f0: ac:be:e3:8f:de:2b:15:da:d7:a2:3f:83:cf:ac:c9:f3:02:e5: 18:14:a0:6e:4c:29:a2:7d:4e:6f:a6:49:cb:81:fa:62:23:27: f4:ec:ae:6d:3c:fe:21:2f:5b:b5:5f:98:e2:c8:e7:27:5e:47: 59:dc:11:af:c4:67:3a:aa:59:16:72:92:fd:17:1f:25:dc:3c: 9b:b2:e2:da:42:c7:ce:54:88:7d:a0:36:46:35:3b:07:f6:66: 2a:fa:12:53:37:22:82:43:bf:7f:8a:12:e8:f2:b6:7e:7e:e7: b1:c0:66:fd:40:0a:37:95:6c:62:8c:8c:59:e2:0b:17:74:30: a0:e8:e9:d5:a7:86:a5:da:21:3c:e3:d8:af:bd:71:39:a6:b8: ea:66:b4:73:59:00:3b:0c:2e:65:38:d0:e9:d9:36:ae:da:77: cd:9c:37:e2:19:61:f0:d8:e8:37:80:64:24:c0:dc:f9:ec:6b: 7d:9f:f4:07:d7:a3:95:19:38:cb:2c:8e:0c:95:ae:b5:67:ed: 27:2c:b3:60 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUGHh2PpM3L2mqTRh+eh+k0Fp7dfMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTAzNFoX DTI3MDMwMzA2MTUzNFowMzExMC8GA1UEAxMoMEIwRjAzMEVDM0JCRDBFRjNGMEYw MkRBQ0NBMjAwQjA4RTBFMDIzNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALMTeUcLZ5LaTIZckRH9Y2DV6oV/Hvhmg/WxYB5UtG2EPOwhPzLPjxdK8Mng ht0VFKZnszZbzZT1BixfTJusVpqRCyqQEC41Y+TOjOaG3IAZz9DbomHTj2NUGHQr VwECv7w2Vdxb++y3pAVy8mcxvUZYXuLiDHqJkP/3qJaE74lGCDyW+1bynyVcPGeE wYABQkTfpRqeZOVvMdhJYbalrbbu3mCZ7qBMVxdG5XDPHj0FGPhsGey7NEYcuaH/ Z9RDdOJ78GV2PUHOFhl+u/huVWRh7/P28uHxMNmouq0lG0gILqhClbDaKagBRtpT YLbR6ueaRBe+4gmceofZEU2ZlAMCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQLDwMO w7vQ7z8PAtrMogCwjg4CNjAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDE0OS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK pdswDQYJKoZIhvcNAQELBQADggEBALO6KWeeAGHbgD02nS+Hg9KiMonkFj9q9ecn uDT0/OtsebOYWPLEKMLcmnNj2UQ1bhoiKBzm8Ky+44/eKxXa16I/g8+syfMC5RgU oG5MKaJ9Tm+mScuB+mIjJ/Tsrm08/iEvW7VfmOLI5ydeR1ncEa/EZzqqWRZykv0X HyXcPJuy4tpCx85UiH2gNkY1Owf2Zir6ElM3IoJDv3+KEujytn5+57HAZv1ACjeV bGKMjFniCxd0MKDo6dWnhqXaITzj2K+9cTmmuOpmtHNZADsMLmU40OnZNq7ad82c N+IZYfDY6DeAZCTA3Pnsa32f9AfXo5UZOMssjgyVrrVn7Scss2A= -----END CERTIFICATE-----Generated at Sat Mar 28 13:18:07 2026 by rpki-client