$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144155.roa File: AS144155.roa (raw, json) Hash identifier: dNL4rq99hMbPV2u+ZdXe77zNMflKj23dDWFXPiymbaI= Subject key identifier: 08:AF:52:6A:56:2A:85:16:25:8A:B5:17:02:0A:87:C8:AE:41:77:8F Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 6B1D29188A8E7CEAB4C6BE84D126F8E57FF167A7 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144155.roa Signing time: Wed 04 Mar 2026 06:13:07 +0000 ROA not before: Wed 04 Mar 2026 06:08:07 +0000 ROA not after: Wed 03 Mar 2027 06:13:07 +0000 asID: 144155 IP address blocks: 240a:a5e1::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:1d:29:18:8a:8e:7c:ea:b4:c6:be:84:d1:26:f8:e5:7f:f1:67:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:08:07 2026 GMT Not After : Mar 3 06:13:07 2027 GMT Subject: CN=08AF526A562A8516258AB517020A87C8AE41778F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:de:05:8c:0f:13:d6:7f:52:75:1b:14:1f:86: 8c:71:4f:fd:a8:b1:a9:08:f1:f1:3d:06:37:41:57: 06:2b:51:e2:63:e7:bd:a9:6c:e6:bf:64:d3:dc:7e: f8:09:29:98:68:bd:81:60:47:73:35:cd:7b:f0:84: eb:fe:39:86:a3:9d:c6:1c:6f:ba:7f:6d:89:c7:28: b6:d9:23:02:23:ae:60:21:eb:44:18:d0:99:8e:63: 3c:e7:89:42:6d:10:cd:c6:e0:50:ce:4a:d8:e0:2b: eb:c2:46:2d:88:f1:f3:f3:10:c7:53:2d:18:1e:55: fd:04:37:03:bc:d5:29:b8:f5:b6:5a:e7:b5:ca:6d: 22:d0:10:8a:c6:6a:a9:62:4c:05:a4:5c:5e:d7:1d: 5c:11:3f:41:ba:a0:e5:5f:8a:47:5f:6b:01:7f:1e: 51:75:71:2b:fc:b4:13:d3:12:ef:24:56:e1:be:ea: 68:4b:c9:0b:22:89:73:7c:1e:3f:92:5b:b5:a7:54: 04:29:2b:f3:f1:d4:af:95:63:80:2a:6b:51:e7:9a: 8f:d7:02:59:11:ec:2d:fe:a3:35:92:c2:0f:1a:73: f7:3d:b3:cd:cd:df:03:04:b8:70:f1:e1:49:57:aa: d3:74:31:ba:18:c8:f2:00:3d:5c:d5:97:6f:6b:d6: e0:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:AF:52:6A:56:2A:85:16:25:8A:B5:17:02:0A:87:C8:AE:41:77:8F X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144155.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a5e1::/32 Signature Algorithm: sha256WithRSAEncryption 33:e0:60:fd:d8:dc:05:81:66:50:fe:86:ae:08:fb:54:27:80: c0:e3:60:7a:7b:1f:1b:df:b9:75:7e:a2:f3:f6:84:d5:c1:e4: 70:1e:7d:12:79:a1:8a:39:4c:cf:14:3e:d2:df:73:f5:2d:67: 3b:ae:29:f8:14:ec:98:73:4c:97:69:d7:c4:a4:81:fb:7d:e4: da:9f:f4:a3:24:bd:93:e9:d9:1b:8c:2c:a7:33:8d:f4:d9:88: 41:0f:1d:d5:33:44:70:91:8a:05:7b:67:a2:24:24:8b:e0:f1: 4b:fa:38:cf:17:6e:3f:ef:83:55:45:4a:c8:16:40:71:88:ab: 26:52:89:a9:6a:f0:58:80:5e:f8:65:e5:43:9b:36:b0:ee:65: c0:4f:d8:29:18:15:b2:0b:5f:d3:8e:7e:bb:1b:e9:b7:60:f1: b9:4c:ad:b4:2a:65:df:5a:a1:96:c6:c9:18:57:87:e1:cf:7a: 0d:fb:6b:09:bf:c2:05:b2:07:a8:65:8c:53:42:a8:3a:ca:df: ff:73:51:4f:e4:98:53:4f:e4:15:a8:2d:03:50:03:2b:73:89: 96:e8:54:58:90:a7:99:da:ef:77:24:7f:22:8b:48:2d:26:48: 59:59:83:fb:d2:8f:fd:04:26:85:2f:ef:75:75:35:b5:25:90: 37:20:1d:9e -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUax0pGIqOfOq0xr6E0Sb45X/xZ6cwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDgwN1oX DTI3MDMwMzA2MTMwN1owMzExMC8GA1UEAxMoMDhBRjUyNkE1NjJBODUxNjI1OEFC NTE3MDIwQTg3QzhBRTQxNzc4RjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM7eBYwPE9Z/UnUbFB+GjHFP/aixqQjx8T0GN0FXBitR4mPnvals5r9k09x+ +AkpmGi9gWBHczXNe/CE6/45hqOdxhxvun9ticcottkjAiOuYCHrRBjQmY5jPOeJ Qm0QzcbgUM5K2OAr68JGLYjx8/MQx1MtGB5V/QQ3A7zVKbj1tlrntcptItAQisZq qWJMBaRcXtcdXBE/Qbqg5V+KR19rAX8eUXVxK/y0E9MS7yRW4b7qaEvJCyKJc3we P5JbtadUBCkr8/HUr5VjgCprUeeaj9cCWRHsLf6jNZLCDxpz9z2zzc3fAwS4cPHh SVeq03QxuhjI8gA9XNWXb2vW4A0CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQIr1Jq ViqFFiWKtRcCCofIrkF3jzAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDE1NS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK peEwDQYJKoZIhvcNAQELBQADggEBADPgYP3Y3AWBZlD+hq4I+1QngMDjYHp7Hxvf uXV+ovP2hNXB5HAefRJ5oYo5TM8UPtLfc/UtZzuuKfgU7JhzTJdp18Skgft95Nqf 9KMkvZPp2RuMLKczjfTZiEEPHdUzRHCRigV7Z6IkJIvg8Uv6OM8Xbj/vg1VFSsgW QHGIqyZSialq8FiAXvhl5UObNrDuZcBP2CkYFbILX9OOfrsb6bdg8blMrbQqZd9a oZbGyRhXh+HPeg37awm/wgWyB6hljFNCqDrK3/9zUU/kmFNP5BWoLQNQAytziZbo VFiQp5na73ckfyKLSC0mSFlZg/vSj/0EJoUv73V1NbUlkDcgHZ4= -----END CERTIFICATE-----Generated at Sat Mar 28 11:42:49 2026 by rpki-client