$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144200.roa File: AS144200.roa (raw, json) Hash identifier: Y2OxAJ7sWwRJlDEKmivq00ULD08ycr77H/MO7H0CTgU= Subject key identifier: 63:AF:C6:37:2F:0E:DE:56:73:AE:D9:AF:53:D6:5D:B3:BA:F3:34:93 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 3F5A79D5588E359FA358AB1AAA5B6BE3375E2516 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144200.roa Signing time: Wed 04 Mar 2026 06:13:06 +0000 ROA not before: Wed 04 Mar 2026 06:08:06 +0000 ROA not after: Wed 03 Mar 2027 06:13:06 +0000 asID: 144200 IP address blocks: 240a:a60e::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:5a:79:d5:58:8e:35:9f:a3:58:ab:1a:aa:5b:6b:e3:37:5e:25:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:08:06 2026 GMT Not After : Mar 3 06:13:06 2027 GMT Subject: CN=63AFC6372F0EDE5673AED9AF53D65DB3BAF33493 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:cd:f2:9d:71:43:df:36:01:47:c3:cf:a1:0e: 77:de:a4:5f:3c:83:ac:20:8d:68:7f:fb:ea:56:a9: d7:85:56:1a:ea:39:11:5b:f7:89:55:d0:98:4b:78: 7f:43:bf:9c:9b:9c:04:43:fb:38:f4:9d:2b:ab:8b: 8c:a4:56:65:9c:ad:1b:05:56:d7:46:01:02:5d:48: a5:06:e0:c2:d7:ae:37:a0:9b:44:46:4b:de:98:fe: 13:4a:f0:1b:69:5c:2d:79:2f:75:ca:fb:50:68:ea: e5:0c:34:46:84:12:02:f4:ab:88:ba:8e:bd:bc:50: c4:18:d9:f0:ff:45:cb:62:4e:49:33:fa:cc:cd:a3: 6c:5d:27:cb:18:72:04:fd:45:13:51:5b:9b:45:38: e1:d5:aa:d0:90:04:eb:f7:5e:bb:9a:34:18:60:37: 48:a8:fa:de:1c:9f:26:1e:50:c0:fe:c7:65:a3:8d: dc:71:79:5a:e1:2c:8a:ef:68:ac:92:59:9e:63:d3: c3:69:9b:fc:83:7c:18:46:4e:13:1c:a7:3d:9d:53: 6e:58:61:40:39:d6:17:bc:04:7f:8e:eb:64:7a:93: 90:79:ad:14:3b:8d:92:5c:1f:db:e3:bc:4d:b3:77: 00:80:c2:33:9b:d1:87:b4:e0:16:82:1e:ab:76:82: bd:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:AF:C6:37:2F:0E:DE:56:73:AE:D9:AF:53:D6:5D:B3:BA:F3:34:93 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144200.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a60e::/32 Signature Algorithm: sha256WithRSAEncryption 8a:87:4d:8f:89:51:e8:fa:1b:71:21:03:fc:d1:5e:02:0d:1b: ca:2d:70:46:0a:a6:f9:cc:b7:0b:dd:b5:4b:67:f7:c3:38:b5: bb:b9:2e:c9:24:02:15:ad:f9:67:b8:24:3c:e4:0a:d5:ba:be: ee:c1:93:69:cf:75:b6:1b:65:0b:42:61:30:94:2b:58:81:17: db:ec:85:f1:cd:c2:03:0f:2a:af:9f:bf:7a:f5:b4:2a:6e:30: fe:40:b3:12:19:49:3d:e6:96:ec:7b:96:bd:ca:a7:03:5e:29: 77:03:31:59:57:ac:3c:b3:a5:d5:e9:aa:24:79:7f:74:47:24: 6b:7f:51:9e:c7:d0:8a:05:9d:27:bd:eb:48:31:ac:c5:56:7d: 83:cf:f7:5b:dc:91:ae:fc:87:26:f7:3c:58:b1:a8:f1:aa:a4: b6:fb:97:f6:e2:36:6e:3a:e3:e3:44:24:8c:a0:6a:45:f9:bc: 53:62:29:9d:3c:e4:2c:50:c3:5d:0c:99:61:97:f1:85:e9:cf: 1b:e7:62:c7:64:63:20:87:13:1a:a6:7f:8f:55:1f:36:2e:2b: 5f:f8:bc:6f:21:3f:2b:19:28:c9:45:e5:05:aa:2d:5f:3e:ab: 5f:ac:f6:94:22:27:9a:ff:bc:2d:f6:69:49:63:d1:43:86:f3: c7:85:75:84 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUP1p51ViONZ+jWKsaqltr4zdeJRYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDgwNloX DTI3MDMwMzA2MTMwNlowMzExMC8GA1UEAxMoNjNBRkM2MzcyRjBFREU1NjczQUVE OUFGNTNENjVEQjNCQUYzMzQ5MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKXN8p1xQ982AUfDz6EOd96kXzyDrCCNaH/76lap14VWGuo5EVv3iVXQmEt4 f0O/nJucBEP7OPSdK6uLjKRWZZytGwVW10YBAl1IpQbgwteuN6CbREZL3pj+E0rw G2lcLXkvdcr7UGjq5Qw0RoQSAvSriLqOvbxQxBjZ8P9Fy2JOSTP6zM2jbF0nyxhy BP1FE1Fbm0U44dWq0JAE6/deu5o0GGA3SKj63hyfJh5QwP7HZaON3HF5WuEsiu9o rJJZnmPTw2mb/IN8GEZOExynPZ1TblhhQDnWF7wEf47rZHqTkHmtFDuNklwf2+O8 TbN3AIDCM5vRh7TgFoIeq3aCvUMCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRjr8Y3 Lw7eVnOu2a9T1l2zuvM0kzAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDIwMC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK pg4wDQYJKoZIhvcNAQELBQADggEBAIqHTY+JUej6G3EhA/zRXgING8otcEYKpvnM twvdtUtn98M4tbu5LskkAhWt+We4JDzkCtW6vu7Bk2nPdbYbZQtCYTCUK1iBF9vs hfHNwgMPKq+fv3r1tCpuMP5AsxIZST3mlux7lr3KpwNeKXcDMVlXrDyzpdXpqiR5 f3RHJGt/UZ7H0IoFnSe960gxrMVWfYPP91vcka78hyb3PFixqPGqpLb7l/biNm46 4+NEJIygakX5vFNiKZ085CxQw10MmWGX8YXpzxvnYsdkYyCHExqmf49VHzYuK1/4 vG8hPysZKMlF5QWqLV8+q1+s9pQiJ5r/vC32aUlj0UOG88eFdYQ= -----END CERTIFICATE-----Generated at Sat Mar 28 11:41:58 2026 by rpki-client