$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144212.roa File: AS144212.roa (raw, json) Hash identifier: zOTCKb/8RAckss6eQUrayMqkP9ITD8DqosDXMwL1h2s= Subject key identifier: 75:E4:1C:DB:0B:BC:FF:5F:D1:57:D6:BD:43:15:C9:48:58:43:72:3D Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 0E5770714A6391F84DB8828E1FA1B4F973280E17 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144212.roa Signing time: Wed 04 Mar 2026 06:13:40 +0000 ROA not before: Wed 04 Mar 2026 06:08:40 +0000 ROA not after: Wed 03 Mar 2027 06:13:40 +0000 asID: 144212 IP address blocks: 240a:a61a::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:57:70:71:4a:63:91:f8:4d:b8:82:8e:1f:a1:b4:f9:73:28:0e:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:08:40 2026 GMT Not After : Mar 3 06:13:40 2027 GMT Subject: CN=75E41CDB0BBCFF5FD157D6BD4315C9485843723D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:a4:ab:c1:11:1d:69:43:3b:d1:95:ce:1e:3b: 16:9c:7c:8f:37:35:bf:8f:89:64:9e:91:52:e1:d2: 42:0f:78:af:eb:f2:65:ac:99:46:a2:35:cf:d7:5e: 6e:2c:9f:83:30:c8:1b:d5:b6:b5:a4:bc:ae:c4:48: e3:37:c6:1f:0b:11:b2:0c:24:5f:75:93:33:a9:2a: c7:6e:4f:b5:46:3b:27:b7:be:80:2e:af:3d:b7:5a: 79:34:39:8d:8b:ba:58:48:69:36:01:8f:13:ab:1d: f0:2a:b1:65:34:91:06:e7:b3:28:5f:95:84:7c:bb: 84:17:7f:3c:69:d2:50:e1:d6:73:9f:1c:e5:b3:12: ec:b0:29:e7:52:90:2e:6d:2b:a2:5b:4f:d8:90:20: 50:d0:87:ed:6f:07:aa:70:62:d1:03:65:62:05:63: 6d:f7:a8:e6:a4:b3:13:cc:93:5f:a6:4f:67:3d:f1: 2d:ae:93:22:ef:41:bc:3f:10:0d:5a:f8:de:45:be: 2a:26:16:3d:7a:bb:a0:1b:fd:53:eb:d3:e3:02:93: e7:14:63:7a:11:86:cc:b9:07:47:8f:76:2a:f5:4d: 31:55:ca:12:f0:aa:70:6c:cb:51:ad:4a:68:63:01: c2:f9:9a:44:b0:c7:a3:dd:74:b6:9f:44:eb:19:cd: 2e:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:E4:1C:DB:0B:BC:FF:5F:D1:57:D6:BD:43:15:C9:48:58:43:72:3D X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144212.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a61a::/32 Signature Algorithm: sha256WithRSAEncryption d1:53:64:4e:63:eb:42:b0:8b:fa:cf:f1:81:77:9b:7b:2b:79: 76:b2:83:6a:38:e0:37:08:e5:9b:34:0e:ec:70:c9:03:61:82: 19:6d:cb:2c:83:c6:55:d4:e8:9e:a3:9f:54:22:c7:1e:fa:8e: e0:66:fe:5a:7e:09:ac:ac:85:da:f5:4d:9b:6a:72:64:75:42: 9e:00:c7:e0:ae:79:a9:a0:6b:7d:64:ea:3b:fd:dd:98:b5:16: 69:61:df:ec:04:8e:45:e3:3d:dc:bf:56:14:a5:58:48:e4:fc: 76:43:82:1b:21:2e:7c:85:45:40:ef:d5:7a:8d:95:13:86:02: b0:57:63:0a:0d:68:dd:d0:89:e7:3e:71:60:58:f7:c5:fd:3d: 99:af:68:55:60:0b:3a:86:7d:58:57:c7:fe:b5:23:c1:28:d6: 4e:79:2a:8d:a8:93:a9:d3:d4:4c:83:f7:0a:9d:0f:91:39:2a: 0e:d2:c4:d2:ab:bf:02:1c:ca:18:55:08:54:10:89:14:4d:6f: 00:1f:c8:21:13:2f:89:2e:4d:98:45:4b:fc:9f:bc:7f:41:c9: bf:f7:3e:bd:1d:c6:62:12:29:26:98:31:b2:4c:f5:78:29:cf: ba:96:b0:15:eb:38:44:54:d3:a8:b9:ef:86:3e:2f:8f:30:62: 00:cf:39:c2 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUDldwcUpjkfhNuIKOH6G0+XMoDhcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDg0MFoX DTI3MDMwMzA2MTM0MFowMzExMC8GA1UEAxMoNzVFNDFDREIwQkJDRkY1RkQxNTdE NkJENDMxNUM5NDg1ODQzNzIzRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMakq8ERHWlDO9GVzh47Fpx8jzc1v4+JZJ6RUuHSQg94r+vyZayZRqI1z9de biyfgzDIG9W2taS8rsRI4zfGHwsRsgwkX3WTM6kqx25PtUY7J7e+gC6vPbdaeTQ5 jYu6WEhpNgGPE6sd8CqxZTSRBuezKF+VhHy7hBd/PGnSUOHWc58c5bMS7LAp51KQ Lm0roltP2JAgUNCH7W8HqnBi0QNlYgVjbfeo5qSzE8yTX6ZPZz3xLa6TIu9BvD8Q DVr43kW+KiYWPXq7oBv9U+vT4wKT5xRjehGGzLkHR492KvVNMVXKEvCqcGzLUa1K aGMBwvmaRLDHo910tp9E6xnNLhECAwEAAaOCAcUwggHBMB0GA1UdDgQWBBR15Bzb C7z/X9FX1r1DFclIWENyPTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDIxMi5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK phowDQYJKoZIhvcNAQELBQADggEBANFTZE5j60Kwi/rP8YF3m3sreXayg2o44DcI 5Zs0DuxwyQNhghltyyyDxlXU6J6jn1Qixx76juBm/lp+Cayshdr1TZtqcmR1Qp4A x+Cueamga31k6jv93Zi1Fmlh3+wEjkXjPdy/VhSlWEjk/HZDghshLnyFRUDv1XqN lROGArBXYwoNaN3Qiec+cWBY98X9PZmvaFVgCzqGfVhXx/61I8Eo1k55Ko2ok6nT 1EyD9wqdD5E5Kg7SxNKrvwIcyhhVCFQQiRRNbwAfyCETL4kuTZhFS/yfvH9Byb/3 Pr0dxmISKSaYMbJM9Xgpz7qWsBXrOERU06i574Y+L48wYgDPOcI= -----END CERTIFICATE-----Generated at Sat Mar 28 11:44:34 2026 by rpki-client