$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144211.roa File: AS144211.roa (raw, json) Hash identifier: J+7afbQ3K2g0b0kd7z/eLivRk/haZyiXwUB7Z9JxpHE= Subject key identifier: A1:6D:82:31:3B:FD:E1:D6:57:1C:3F:14:6F:12:1F:5E:6D:83:80:77 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 3B23F76761206B76B46A0DBFB917AB63CA319A25 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144211.roa Signing time: Wed 04 Mar 2026 06:15:33 +0000 ROA not before: Wed 04 Mar 2026 06:10:33 +0000 ROA not after: Wed 03 Mar 2027 06:15:33 +0000 asID: 144211 IP address blocks: 240a:a619::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:23:f7:67:61:20:6b:76:b4:6a:0d:bf:b9:17:ab:63:ca:31:9a:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:10:33 2026 GMT Not After : Mar 3 06:15:33 2027 GMT Subject: CN=A16D82313BFDE1D6571C3F146F121F5E6D838077 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:3e:9b:0e:9c:5f:56:85:0f:ee:a6:f3:5e:d5: 6b:3b:cb:4d:e2:ff:bb:96:a4:85:4d:58:78:ef:f2: 27:b0:15:2b:13:61:79:e2:3e:5a:aa:64:4e:2a:9a: e5:a6:dc:a6:87:00:72:07:dd:63:56:20:56:30:40: ad:92:d3:99:b3:07:15:ba:07:cb:5b:f7:10:ca:5f: a9:6b:fc:a4:ce:84:8f:95:c3:97:12:8f:c5:8d:2b: 9d:74:a3:65:65:04:06:32:d1:2b:b4:2b:a0:d3:00: 4d:4a:19:0d:4b:42:fd:4d:d4:90:b5:c6:a2:16:bc: 99:90:2a:0e:63:40:74:2b:99:7b:73:88:6e:c1:33: 5a:f5:20:9f:b0:c1:3c:ee:ff:b3:80:66:a0:d4:50: f4:93:da:35:c1:97:ab:55:88:db:73:45:3b:43:91: 1d:71:47:73:73:8b:26:bb:6f:3b:9f:b6:7d:fe:63: 58:9c:da:da:8c:67:3c:c6:da:79:93:7f:bd:62:26: 76:71:0d:21:34:c8:8d:ba:6a:b8:92:7e:b4:d9:ef: 68:91:03:bf:fa:a6:8e:13:67:a8:4a:28:8a:ac:13: b7:e0:7d:2d:6f:eb:47:58:bc:01:d7:e1:60:a7:24: 18:1f:c8:10:ff:e6:8f:50:1c:5c:a1:1c:16:20:c8: a8:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:6D:82:31:3B:FD:E1:D6:57:1C:3F:14:6F:12:1F:5E:6D:83:80:77 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144211.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a619::/32 Signature Algorithm: sha256WithRSAEncryption b3:e0:e6:4f:c2:b5:a9:cd:1f:86:94:bc:5f:36:36:13:08:e5: 18:58:3c:fa:4a:e1:b1:da:f5:6e:de:b1:5d:ff:3e:fb:d3:d8: 43:ad:d7:b4:80:ce:87:23:03:61:23:12:19:99:c5:20:d8:fb: 87:ee:2d:82:ba:31:6e:be:19:62:d8:76:4a:22:6b:1b:7f:2b: b8:0d:03:f2:84:8b:af:38:f2:27:3d:25:bf:c1:f6:ae:f2:6f: c5:06:fa:72:92:bb:45:51:b2:df:57:d6:b8:a7:1a:f4:13:6a: 58:ba:76:75:9f:ab:35:31:5a:34:dd:be:e4:fe:05:05:4a:74: 94:6d:d6:f1:a5:42:ff:9a:1c:7d:31:f9:52:da:b6:0d:25:e8: 49:e8:10:dc:58:4d:a1:d3:f5:b0:d6:f2:ba:bf:ac:a0:19:c5: 7f:b5:81:4b:70:ee:17:f2:05:b8:01:0c:63:dc:2b:16:f6:43: 90:49:71:1e:54:96:4f:1d:09:e6:81:2d:51:18:d4:c8:1f:15: 32:fc:aa:41:64:e4:a4:ab:54:af:45:3a:3f:b0:27:04:0c:ef: 01:34:10:bc:d3:b2:33:f7:88:46:7f:90:73:f3:59:8b:54:83: 25:89:b4:ed:27:de:30:2f:b4:5b:85:1a:38:82:2f:14:57:72: 6d:6a:55:79 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUOyP3Z2Ega3a0ag2/uRerY8oxmiUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTAzM1oX DTI3MDMwMzA2MTUzM1owMzExMC8GA1UEAxMoQTE2RDgyMzEzQkZERTFENjU3MUMz RjE0NkYxMjFGNUU2RDgzODA3NzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANo+mw6cX1aFD+6m817VazvLTeL/u5akhU1YeO/yJ7AVKxNheeI+WqpkTiqa 5abcpocAcgfdY1YgVjBArZLTmbMHFboHy1v3EMpfqWv8pM6Ej5XDlxKPxY0rnXSj ZWUEBjLRK7QroNMATUoZDUtC/U3UkLXGoha8mZAqDmNAdCuZe3OIbsEzWvUgn7DB PO7/s4BmoNRQ9JPaNcGXq1WI23NFO0ORHXFHc3OLJrtvO5+2ff5jWJza2oxnPMba eZN/vWImdnENITTIjbpquJJ+tNnvaJEDv/qmjhNnqEooiqwTt+B9LW/rR1i8Adfh YKckGB/IEP/mj1AcXKEcFiDIqCECAwEAAaOCAcUwggHBMB0GA1UdDgQWBBShbYIx O/3h1lccPxRvEh9ebYOAdzAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDIxMS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK phkwDQYJKoZIhvcNAQELBQADggEBALPg5k/CtanNH4aUvF82NhMI5RhYPPpK4bHa 9W7esV3/PvvT2EOt17SAzocjA2EjEhmZxSDY+4fuLYK6MW6+GWLYdkoiaxt/K7gN A/KEi6848ic9Jb/B9q7yb8UG+nKSu0VRst9X1rinGvQTali6dnWfqzUxWjTdvuT+ BQVKdJRt1vGlQv+aHH0x+VLatg0l6EnoENxYTaHT9bDW8rq/rKAZxX+1gUtw7hfy BbgBDGPcKxb2Q5BJcR5Ulk8dCeaBLVEY1MgfFTL8qkFk5KSrVK9FOj+wJwQM7wE0 ELzTsjP3iEZ/kHPzWYtUgyWJtO0n3jAvtFuFGjiCLxRXcm1qVXk= -----END CERTIFICATE-----Generated at Sat Mar 28 15:54:49 2026 by rpki-client