$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144202.roa File: AS144202.roa (raw, json) Hash identifier: xlmdL/Gt+CfKUVYsNlzZPiRiyp5B1scYrdMhjyUEfbM= Subject key identifier: 59:32:2D:83:88:7A:63:BB:A5:54:FC:4A:CB:2C:94:01:76:1A:BC:75 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 6E65073ACD1277267197AE5F0B88E42BD6E62AA6 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144202.roa Signing time: Wed 04 Mar 2026 06:12:41 +0000 ROA not before: Wed 04 Mar 2026 06:07:41 +0000 ROA not after: Wed 03 Mar 2027 06:12:41 +0000 asID: 144202 IP address blocks: 240a:a610::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:65:07:3a:cd:12:77:26:71:97:ae:5f:0b:88:e4:2b:d6:e6:2a:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:07:41 2026 GMT Not After : Mar 3 06:12:41 2027 GMT Subject: CN=59322D83887A63BBA554FC4ACB2C9401761ABC75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:31:6c:49:83:fa:ae:1c:a7:b5:89:52:6d:02: dc:74:2c:70:48:14:13:60:32:a9:3c:54:18:1e:85: 3c:b1:24:2c:a1:5d:22:b5:86:40:03:e6:1e:8d:c1: fb:46:0d:17:b1:62:29:92:bb:97:ab:1b:19:28:f6: 38:72:f2:c1:ee:79:70:d6:3c:9f:3a:cb:60:1d:c4: 31:f9:26:50:2e:ac:a4:d7:87:28:97:b1:1e:c0:e2: ad:0d:c7:38:4b:97:ca:c1:0c:4b:13:73:61:70:54: 5b:07:7d:ba:05:d7:6f:61:d8:45:b0:ca:77:6c:ac: e2:91:c7:d2:84:74:63:87:5d:a3:5f:78:8f:b9:e2: a8:14:02:21:e1:6e:00:a5:43:8f:68:f1:3a:09:c1: d8:20:7d:38:5d:c1:b5:73:31:6b:9b:0e:ff:9d:c0: 6d:e2:ed:65:88:db:c7:34:41:22:ae:00:6b:87:cd: d1:62:6c:6a:a7:c9:fb:ea:3e:3c:16:20:17:68:be: 26:ac:bd:09:17:4f:4c:fd:3d:ed:a9:a6:fa:92:3c: 31:de:a1:65:50:a7:d6:07:c9:7c:93:d2:f5:01:e7: 7e:60:78:50:17:be:a7:da:88:ab:91:09:71:95:c3: 83:29:d3:1f:fa:c9:59:46:0e:7c:5e:b2:9c:a9:60: ef:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:32:2D:83:88:7A:63:BB:A5:54:FC:4A:CB:2C:94:01:76:1A:BC:75 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144202.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a610::/32 Signature Algorithm: sha256WithRSAEncryption 09:54:32:fb:e5:4b:c8:1e:98:bc:a7:a1:20:5c:f2:08:d5:f4: b2:5c:38:94:30:8c:20:7c:98:75:67:99:ae:55:7b:c9:c7:01: ac:9b:c1:bf:34:9c:95:4b:12:f4:17:c3:e1:42:f2:12:88:cc: c4:25:94:98:a9:36:82:c1:6f:d3:b5:79:16:65:02:ae:9d:4c: 83:19:2f:9b:eb:f4:be:66:22:2f:b7:4f:da:eb:0c:10:2b:06: eb:ce:22:00:96:b0:5c:cc:cf:38:bd:d2:3b:df:80:82:61:02: 74:d2:30:4b:de:18:3a:87:b8:97:aa:41:07:e6:63:a7:39:11: 85:5e:43:55:1d:ca:90:c3:83:fe:6b:d9:a2:d8:24:fc:6d:6b: 31:51:b2:2c:01:f0:23:61:53:22:33:c1:f7:da:11:29:bb:fe: 2b:7f:c5:04:9f:1b:a5:20:a0:36:44:b9:0f:94:12:11:b3:47: 02:42:c3:97:b8:3d:c1:c8:02:7e:50:99:70:4b:b2:53:49:ab: 49:9f:c4:5f:ed:5e:5c:a4:aa:6a:0e:40:f4:e8:f0:f1:15:cd: ac:3c:c8:8f:5c:9e:dd:fe:68:42:0a:18:9f:5c:3f:cb:84:f3: 19:3f:ae:ae:af:47:20:a5:54:80:18:21:4a:18:4e:01:82:06: 3b:1e:8a:69 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUbmUHOs0SdyZxl65fC4jkK9bmKqYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDc0MVoX DTI3MDMwMzA2MTI0MVowMzExMC8GA1UEAxMoNTkzMjJEODM4ODdBNjNCQkE1NTRG QzRBQ0IyQzk0MDE3NjFBQkM3NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOExbEmD+q4cp7WJUm0C3HQscEgUE2AyqTxUGB6FPLEkLKFdIrWGQAPmHo3B +0YNF7FiKZK7l6sbGSj2OHLywe55cNY8nzrLYB3EMfkmUC6spNeHKJexHsDirQ3H OEuXysEMSxNzYXBUWwd9ugXXb2HYRbDKd2ys4pHH0oR0Y4ddo194j7niqBQCIeFu AKVDj2jxOgnB2CB9OF3BtXMxa5sO/53AbeLtZYjbxzRBIq4Aa4fN0WJsaqfJ++o+ PBYgF2i+Jqy9CRdPTP097amm+pI8Md6hZVCn1gfJfJPS9QHnfmB4UBe+p9qIq5EJ cZXDgynTH/rJWUYOfF6ynKlg730CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRZMi2D iHpju6VU/ErLLJQBdhq8dTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDIwMi5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK phAwDQYJKoZIhvcNAQELBQADggEBAAlUMvvlS8gemLynoSBc8gjV9LJcOJQwjCB8 mHVnma5Ve8nHAaybwb80nJVLEvQXw+FC8hKIzMQllJipNoLBb9O1eRZlAq6dTIMZ L5vr9L5mIi+3T9rrDBArBuvOIgCWsFzMzzi90jvfgIJhAnTSMEveGDqHuJeqQQfm Y6c5EYVeQ1UdypDDg/5r2aLYJPxtazFRsiwB8CNhUyIzwffaESm7/it/xQSfG6Ug oDZEuQ+UEhGzRwJCw5e4PcHIAn5QmXBLslNJq0mfxF/tXlykqmoOQPTo8PEVzaw8 yI9cnt3+aEIKGJ9cP8uE8xk/rq6vRyClVIAYIUoYTgGCBjseimk= -----END CERTIFICATE-----Generated at Sat Mar 28 13:14:17 2026 by rpki-client