$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144196.roa File: AS144196.roa (raw, json) Hash identifier: 9JFAl4a06oolrC6UTO2eeK3St1lSHLSukIAHkGwIg8A= Subject key identifier: EC:1E:3D:B8:C4:60:0D:F1:C2:97:20:DE:07:57:76:FF:AF:65:AA:57 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 546393F5810B6F7B12AEA323013B2A3EE8BAE46E Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144196.roa Signing time: Wed 04 Mar 2026 06:13:41 +0000 ROA not before: Wed 04 Mar 2026 06:08:41 +0000 ROA not after: Wed 03 Mar 2027 06:13:41 +0000 asID: 144196 IP address blocks: 240a:a60a::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:63:93:f5:81:0b:6f:7b:12:ae:a3:23:01:3b:2a:3e:e8:ba:e4:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:08:41 2026 GMT Not After : Mar 3 06:13:41 2027 GMT Subject: CN=EC1E3DB8C4600DF1C29720DE075776FFAF65AA57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:c5:4c:f3:dd:b5:b6:31:dc:0b:15:7c:7e:8d: 0d:48:c6:11:07:08:b9:c3:68:fd:a2:22:07:a9:ba: e0:48:29:c8:d6:e0:3e:60:7e:b1:eb:b5:3d:24:cc: 3f:9a:d6:d4:45:3f:bb:03:db:31:fa:da:1a:c0:73: d8:64:3f:77:96:93:51:f5:b1:af:e5:a6:41:aa:cc: 3b:12:41:45:4a:cd:9a:9d:58:1a:df:62:a8:6f:33: 1e:2f:ba:37:2d:5b:3a:44:27:cf:5a:71:f6:83:87: 2c:7f:b2:20:43:66:da:f3:b3:fc:48:6f:2c:14:d6: 6d:52:74:8f:27:98:11:f9:ae:0f:e0:85:32:e4:40: d1:7e:bc:bf:1a:2b:92:fd:70:94:e2:70:42:a4:4a: 11:6d:fd:dd:f7:74:9c:68:99:3d:d4:4d:a9:dc:79: 22:97:50:a5:1f:bb:01:4d:cc:dd:70:2f:44:8d:cb: 2d:be:c3:d2:d5:3a:76:2e:ee:0f:ce:3a:8b:e2:57: 70:98:1f:0c:19:87:f8:8c:62:51:2f:8a:b9:b9:bd: fa:4c:62:d8:ac:46:52:79:17:0e:73:5f:f9:2e:cc: 81:67:26:23:e3:8c:6c:2c:47:fd:9f:91:e7:97:36: 7d:ba:93:f3:93:ae:aa:dd:ab:57:81:b9:15:c8:8a: 9a:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:1E:3D:B8:C4:60:0D:F1:C2:97:20:DE:07:57:76:FF:AF:65:AA:57 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144196.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a60a::/32 Signature Algorithm: sha256WithRSAEncryption 01:7e:7d:79:cd:5d:b4:5e:83:bc:cd:39:06:07:61:e4:39:5d: 60:43:cc:2e:e3:c8:c3:c9:f9:f7:bf:80:f7:44:9e:d9:6f:55: 6b:60:67:04:10:2c:d3:5a:5d:2d:0f:dd:a9:3b:53:f3:6f:73: 7e:4e:12:b3:fc:fa:74:6d:b4:16:20:2e:85:e9:c4:f3:75:41: 1c:d6:e5:44:66:92:8f:c5:5c:7f:f8:36:9a:66:d9:34:3a:c0: 2e:b6:2b:4b:f1:0b:92:a4:72:ff:38:fb:c1:4c:a4:db:c6:f8: a1:5b:c8:9f:3f:71:53:30:23:56:ea:71:49:e8:f4:8e:f3:cd: 57:d3:41:e3:7d:be:46:a3:48:2e:a0:0f:9e:28:b6:2e:e4:ee: 1e:a8:b4:87:2d:26:a4:bc:77:eb:bd:9c:94:0d:ae:fc:1b:9c: ab:af:b7:b4:da:6a:3b:62:8b:11:f3:6a:47:7e:be:45:1c:a5: 39:44:9e:c0:a9:0d:ae:7e:e5:08:df:d4:60:77:cf:b3:79:00: 9a:d4:7e:ac:e8:38:0a:81:d1:74:cb:ac:4f:c6:53:31:56:80: e7:25:51:b9:49:6e:70:a2:8d:dc:52:4b:b0:a1:01:e1:5b:57: 15:f8:78:49:7a:24:1f:ec:1a:ae:9b:2e:06:d7:cc:80:4a:88: 1f:b3:e2:11 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUVGOT9YELb3sSrqMjATsqPui65G4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDg0MVoX DTI3MDMwMzA2MTM0MVowMzExMC8GA1UEAxMoRUMxRTNEQjhDNDYwMERGMUMyOTcy MERFMDc1Nzc2RkZBRjY1QUE1NzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALXFTPPdtbYx3AsVfH6NDUjGEQcIucNo/aIiB6m64EgpyNbgPmB+seu1PSTM P5rW1EU/uwPbMfraGsBz2GQ/d5aTUfWxr+WmQarMOxJBRUrNmp1YGt9iqG8zHi+6 Ny1bOkQnz1px9oOHLH+yIENm2vOz/EhvLBTWbVJ0jyeYEfmuD+CFMuRA0X68vxor kv1wlOJwQqRKEW393fd0nGiZPdRNqdx5IpdQpR+7AU3M3XAvRI3LLb7D0tU6di7u D846i+JXcJgfDBmH+IxiUS+Kubm9+kxi2KxGUnkXDnNf+S7MgWcmI+OMbCxH/Z+R 55c2fbqT85Ouqt2rV4G5FciKmpUCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBTsHj24 xGAN8cKXIN4HV3b/r2WqVzAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDE5Ni5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK pgowDQYJKoZIhvcNAQELBQADggEBAAF+fXnNXbReg7zNOQYHYeQ5XWBDzC7jyMPJ +fe/gPdEntlvVWtgZwQQLNNaXS0P3ak7U/Nvc35OErP8+nRttBYgLoXpxPN1QRzW 5URmko/FXH/4Nppm2TQ6wC62K0vxC5Kkcv84+8FMpNvG+KFbyJ8/cVMwI1bqcUno 9I7zzVfTQeN9vkajSC6gD54oti7k7h6otIctJqS8d+u9nJQNrvwbnKuvt7Taajti ixHzakd+vkUcpTlEnsCpDa5+5Qjf1GB3z7N5AJrUfqzoOAqB0XTLrE/GUzFWgOcl UblJbnCijdxSS7ChAeFbVxX4eEl6JB/sGq6bLgbXzIBKiB+z4hE= -----END CERTIFICATE-----Generated at Sat Mar 28 11:41:52 2026 by rpki-client