$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144187.roa File: AS144187.roa (raw, json) Hash identifier: t+vUsl1Csd7fvdGQxkfOWZO7TQMAubDpXJgjvoimtVE= Subject key identifier: 34:3C:83:E0:8E:32:14:B4:E8:6E:98:50:56:06:02:7D:C6:E7:4F:A6 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 23719CC7F361DF7DE40FB2669DB3ADD6496B91DA Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144187.roa Signing time: Wed 04 Mar 2026 06:12:32 +0000 ROA not before: Wed 04 Mar 2026 06:07:32 +0000 ROA not after: Wed 03 Mar 2027 06:12:32 +0000 asID: 144187 IP address blocks: 240a:a601::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:71:9c:c7:f3:61:df:7d:e4:0f:b2:66:9d:b3:ad:d6:49:6b:91:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:07:32 2026 GMT Not After : Mar 3 06:12:32 2027 GMT Subject: CN=343C83E08E3214B4E86E98505606027DC6E74FA6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:d3:0c:57:da:13:54:40:a3:02:4b:07:e3:44: 37:a8:d7:98:5d:53:4b:19:5a:54:1b:de:3d:5c:6a: a8:26:d9:60:ad:2b:b2:1d:4a:2e:06:a5:26:a2:eb: 00:b7:32:89:8c:d9:e6:1f:34:8b:b7:a3:d2:94:d0: e0:3e:73:2a:b9:0c:90:49:d9:6a:49:fc:f9:3e:72: cb:d5:6b:fd:d4:64:b4:34:a4:e4:69:7a:4d:ef:63: 35:4f:d1:3e:27:25:35:01:8b:18:1c:78:f7:6d:24: 14:90:06:07:63:85:99:11:1a:7d:1f:56:98:45:44: c9:8b:8d:4d:24:e8:fe:00:ba:01:2a:2f:e7:05:be: f5:f8:ab:56:18:f8:6d:63:f2:a6:81:a3:3f:2d:f2: 42:b3:5a:6c:cd:d5:e8:41:fc:d7:6b:3d:e6:13:71: 34:4d:6f:38:61:79:b2:d5:38:4e:f1:93:f4:96:c6: 4f:46:18:79:b8:be:9f:8e:d0:b5:9e:1d:c6:63:fa: 51:11:14:f6:c8:a8:42:27:16:86:2f:a7:a8:85:f3: bf:70:93:07:db:c2:a1:cc:54:03:a7:25:8b:0a:63: b0:72:85:e1:b7:91:16:a8:d2:39:e8:de:bd:0a:15: 47:a9:22:26:f5:b5:ca:2d:74:55:a5:dd:87:15:b1: 68:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:3C:83:E0:8E:32:14:B4:E8:6E:98:50:56:06:02:7D:C6:E7:4F:A6 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144187.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a601::/32 Signature Algorithm: sha256WithRSAEncryption 7e:2e:a3:44:5c:32:b4:b4:cc:5b:a9:e6:ed:fb:49:67:f4:f8: 5c:80:f9:dc:39:ba:38:e9:64:47:fc:17:f7:58:b5:86:97:fe: 5b:e4:1c:51:81:f3:ce:6b:b0:79:bf:0c:bd:22:f7:e1:6b:e8: dd:dc:c6:bd:2d:72:cd:90:d7:2e:b8:a1:8c:59:83:66:55:f7: dc:e5:c8:b0:91:04:f1:28:52:5d:b3:7b:46:69:7f:eb:76:7e: 75:4f:b7:f7:28:01:a1:27:6e:0b:c5:b1:c2:53:16:c6:0a:8b: 88:94:10:40:c9:88:c5:ee:c4:fb:e5:09:9e:12:e2:64:ae:e4: 60:f5:16:09:b3:c3:1a:7c:4b:a5:9e:4e:62:0e:cb:ed:26:91: 77:08:c2:c7:94:34:7e:a2:54:9b:a6:30:19:85:3b:16:2a:c2: 96:c7:51:f5:9b:ac:10:b6:84:21:cf:94:47:40:23:80:7a:75: b2:10:88:69:16:de:a1:af:f2:c9:82:ea:b2:01:5d:63:2d:24: 96:4c:74:65:f1:00:5b:e2:07:6b:36:5c:63:c6:b6:3a:64:5a: f7:14:2e:72:01:f7:bf:c8:30:08:64:d1:f5:cd:84:55:28:3c: a5:cf:29:74:7f:dd:3b:76:08:e9:7a:a5:26:7a:a2:72:b3:ce: d3:2c:3f:eb -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUI3Gcx/Nh333kD7JmnbOt1klrkdowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDczMloX DTI3MDMwMzA2MTIzMlowMzExMC8GA1UEAxMoMzQzQzgzRTA4RTMyMTRCNEU4NkU5 ODUwNTYwNjAyN0RDNkU3NEZBNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALfTDFfaE1RAowJLB+NEN6jXmF1TSxlaVBvePVxqqCbZYK0rsh1KLgalJqLr ALcyiYzZ5h80i7ej0pTQ4D5zKrkMkEnZakn8+T5yy9Vr/dRktDSk5Gl6Te9jNU/R PiclNQGLGBx4920kFJAGB2OFmREafR9WmEVEyYuNTSTo/gC6ASov5wW+9firVhj4 bWPypoGjPy3yQrNabM3V6EH812s95hNxNE1vOGF5stU4TvGT9JbGT0YYebi+n47Q tZ4dxmP6UREU9sioQicWhi+nqIXzv3CTB9vCocxUA6cliwpjsHKF4beRFqjSOeje vQoVR6kiJvW1yi10VaXdhxWxaLMCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQ0PIPg jjIUtOhumFBWBgJ9xudPpjAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDE4Ny5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK pgEwDQYJKoZIhvcNAQELBQADggEBAH4uo0RcMrS0zFup5u37SWf0+FyA+dw5ujjp ZEf8F/dYtYaX/lvkHFGB885rsHm/DL0i9+Fr6N3cxr0tcs2Q1y64oYxZg2ZV99zl yLCRBPEoUl2ze0Zpf+t2fnVPt/coAaEnbgvFscJTFsYKi4iUEEDJiMXuxPvlCZ4S 4mSu5GD1Fgmzwxp8S6WeTmIOy+0mkXcIwseUNH6iVJumMBmFOxYqwpbHUfWbrBC2 hCHPlEdAI4B6dbIQiGkW3qGv8smC6rIBXWMtJJZMdGXxAFviB2s2XGPGtjpkWvcU LnIB97/IMAhk0fXNhFUoPKXPKXR/3Tt2COl6pSZ6onKzztMsP+s= -----END CERTIFICATE-----Generated at Sat Mar 28 11:41:04 2026 by rpki-client