$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144189.roa File: AS144189.roa (raw, json) Hash identifier: cdnCqv/FzeCRg+hKSXCHXrpyu2/rFJtcRu+cD0lq03Y= Subject key identifier: 9F:04:9B:2B:87:54:66:97:36:19:1E:5A:13:DB:3F:6B:E6:95:FD:9A Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 453DA8EE113DE26CDE455E320CD070458BF0FBF5 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144189.roa Signing time: Wed 04 Mar 2026 06:14:02 +0000 ROA not before: Wed 04 Mar 2026 06:09:02 +0000 ROA not after: Wed 03 Mar 2027 06:14:02 +0000 asID: 144189 IP address blocks: 240a:a603::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:3d:a8:ee:11:3d:e2:6c:de:45:5e:32:0c:d0:70:45:8b:f0:fb:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:09:02 2026 GMT Not After : Mar 3 06:14:02 2027 GMT Subject: CN=9F049B2B8754669736191E5A13DB3F6BE695FD9A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:a6:84:12:64:09:62:b2:0f:d4:32:9f:84:cd: 8e:e4:f4:ca:f6:6a:7e:6d:1e:0f:4f:4a:27:ab:57: ef:47:56:d4:e8:aa:53:56:84:e3:74:3c:9c:ac:29: 21:d4:0e:59:77:6d:87:05:97:32:22:3e:db:5b:b8: c3:54:24:70:e3:99:f7:9d:a1:86:cf:5f:8c:1b:b8: 32:05:53:bf:54:49:55:f2:26:4e:c2:9a:4a:d8:e6: 91:b4:2c:4b:33:64:b0:eb:5c:9d:9a:d0:86:3f:e3: c4:df:2b:60:84:d2:3c:66:23:aa:76:ae:ff:6c:e0: 58:0f:f8:93:96:83:8a:86:f6:47:94:a6:dd:e4:4f: 41:e5:1e:c8:15:3b:ad:cb:7b:b1:16:89:64:bf:99: e5:cf:2d:2b:15:b6:9e:ed:a9:a7:22:6f:ab:d6:d6: 9c:3d:af:67:11:0f:e6:ca:02:18:22:b0:e9:26:83: 58:9b:65:d1:3f:ab:34:69:7b:ad:77:de:6a:d4:51: 9d:e5:8b:d3:78:8b:97:f6:e9:ba:2e:9f:50:2c:83: 66:9c:58:62:92:31:c8:47:a9:95:08:7a:07:91:86: 50:ef:ec:3e:ca:02:d8:5b:6e:4f:3b:d9:9a:6e:75: 2f:9b:04:48:f2:ea:e1:aa:22:32:e6:29:4c:53:a8: f0:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:04:9B:2B:87:54:66:97:36:19:1E:5A:13:DB:3F:6B:E6:95:FD:9A X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144189.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a603::/32 Signature Algorithm: sha256WithRSAEncryption 2b:77:d3:c1:4e:fa:04:22:79:32:1e:cc:44:11:d4:12:13:68: 53:3a:22:92:14:b2:bd:90:8a:5f:8b:d0:da:51:41:11:77:f5: 1c:d4:07:c7:8b:e1:02:c6:6a:a8:3c:54:ae:0f:7d:28:15:25: 49:4b:58:e8:7f:3b:a0:a6:c7:9a:eb:26:49:69:4e:b0:57:1c: 17:d3:2b:85:75:d2:f8:61:82:9e:c4:b1:67:b0:ea:ba:ae:ba: 65:10:b4:ee:ba:d8:93:ce:49:ba:dc:05:44:cc:fa:24:4d:ac: 80:60:3c:3c:98:7b:41:ae:92:d8:39:0f:82:23:31:32:33:8e: 1b:2e:d7:9a:1d:13:e9:1e:ee:aa:2d:d1:96:69:53:25:fc:c5: e4:e3:bf:d7:83:1b:f2:ff:ac:af:7b:7d:65:91:dc:99:2c:39: e0:46:7c:3a:10:27:64:9d:4d:40:2e:1e:b6:f0:92:ce:b2:01: b6:a4:a7:47:e5:df:1b:9f:6d:38:9d:80:61:21:60:2d:8c:bc: 71:d0:06:8b:56:9f:2d:2f:e8:3b:99:0e:36:9f:00:e9:e9:3f: 45:e1:8d:36:7e:1f:f1:d5:24:d8:3c:71:ef:a4:19:65:b9:4c: 88:4a:ad:fa:e0:75:58:b4:de:5b:b3:71:00:5d:11:f7:ce:b6: e3:50:53:88 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIURT2o7hE94mzeRV4yDNBwRYvw+/UwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDkwMloX DTI3MDMwMzA2MTQwMlowMzExMC8GA1UEAxMoOUYwNDlCMkI4NzU0NjY5NzM2MTkx RTVBMTNEQjNGNkJFNjk1RkQ5QTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALOmhBJkCWKyD9Qyn4TNjuT0yvZqfm0eD09KJ6tX70dW1OiqU1aE43Q8nKwp IdQOWXdthwWXMiI+21u4w1QkcOOZ952hhs9fjBu4MgVTv1RJVfImTsKaStjmkbQs SzNksOtcnZrQhj/jxN8rYITSPGYjqnau/2zgWA/4k5aDiob2R5Sm3eRPQeUeyBU7 rct7sRaJZL+Z5c8tKxW2nu2ppyJvq9bWnD2vZxEP5soCGCKw6SaDWJtl0T+rNGl7 rXfeatRRneWL03iLl/bpui6fUCyDZpxYYpIxyEeplQh6B5GGUO/sPsoC2FtuTzvZ mm51L5sESPLq4aoiMuYpTFOo8IMCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSfBJsr h1RmlzYZHloT2z9r5pX9mjAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDE4OS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK pgMwDQYJKoZIhvcNAQELBQADggEBACt308FO+gQieTIezEQR1BITaFM6IpIUsr2Q il+L0NpRQRF39RzUB8eL4QLGaqg8VK4PfSgVJUlLWOh/O6Cmx5rrJklpTrBXHBfT K4V10vhhgp7EsWew6rquumUQtO662JPOSbrcBUTM+iRNrIBgPDyYe0Guktg5D4Ij MTIzjhsu15odE+ke7qot0ZZpUyX8xeTjv9eDG/L/rK97fWWR3JksOeBGfDoQJ2Sd TUAuHrbwks6yAbakp0fl3xufbTidgGEhYC2MvHHQBotWny0v6DuZDjafAOnpP0Xh jTZ+H/HVJNg8ce+kGWW5TIhKrfrgdVi03luzcQBdEffOtuNQU4g= -----END CERTIFICATE-----Generated at Sat Mar 28 11:42:58 2026 by rpki-client