$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144213.roa File: AS144213.roa (raw, json) Hash identifier: oBZcV1korI3nV70l/xHdBF09gVIrue4nmUVxjHOwnaw= Subject key identifier: 64:75:9E:A8:39:38:8A:7E:DD:3B:66:7B:4E:E6:16:E2:17:03:77:7B Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 59C345679D181828C36F06A1A0196B8C4E228BBF Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144213.roa Signing time: Wed 04 Mar 2026 06:13:00 +0000 ROA not before: Wed 04 Mar 2026 06:08:00 +0000 ROA not after: Wed 03 Mar 2027 06:13:00 +0000 asID: 144213 IP address blocks: 240a:a61b::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:c3:45:67:9d:18:18:28:c3:6f:06:a1:a0:19:6b:8c:4e:22:8b:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:08:00 2026 GMT Not After : Mar 3 06:13:00 2027 GMT Subject: CN=64759EA839388A7EDD3B667B4EE616E21703777B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:41:f7:b4:3a:36:81:0a:1d:94:fd:b4:18:ca: ff:e0:32:ca:5b:5f:e8:94:99:39:49:84:92:a9:b8: eb:e6:8f:f2:cf:97:c1:75:46:01:43:86:5c:bd:77: 82:ac:9d:80:b5:40:0a:b0:6d:b0:00:59:dd:0b:62: a5:89:ed:f7:ad:29:6e:c5:87:cc:b8:a6:7f:e1:a6: c3:eb:8c:bc:fa:35:e4:48:b4:e1:5e:65:c8:3b:8c: b7:0f:a0:b1:0a:f9:50:0b:12:d6:1a:c6:13:54:1e: 95:7d:f2:0d:d7:d9:00:58:84:0c:38:f7:ce:2a:6b: c8:5c:16:57:45:cf:eb:35:ba:63:f6:2d:1f:cc:d9: e6:53:35:b8:4b:7f:7f:8e:5a:f2:e2:5e:91:6c:4f: c7:c6:19:7d:86:e9:1b:61:f4:c1:9f:42:85:50:24: 8b:90:e8:d8:54:e0:26:77:2e:f6:2f:93:3e:71:ef: f1:2a:75:f4:51:b0:c7:cb:e2:c8:12:71:a4:49:f9: 34:06:3d:39:34:d1:0a:8c:ac:26:04:9c:18:67:c1: eb:5a:5b:14:4d:bd:e6:64:3e:e6:10:11:a1:b5:f5: 01:3c:48:1c:97:43:b0:6c:d4:32:5c:48:59:ca:72: 0b:9b:a5:37:98:03:7d:77:a1:0a:08:e8:17:c8:ab: c9:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:75:9E:A8:39:38:8A:7E:DD:3B:66:7B:4E:E6:16:E2:17:03:77:7B X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144213.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a61b::/32 Signature Algorithm: sha256WithRSAEncryption 8d:dc:b7:11:68:7d:90:34:05:26:25:0d:76:8b:8a:f2:f2:0f: 30:4e:46:b0:76:d1:0b:40:29:9b:6b:c0:b8:4c:14:6c:ca:0e: e2:b3:de:23:cf:b8:3f:84:26:a0:9a:fc:fd:bf:0d:91:df:a5: 9c:94:93:d6:e4:04:fc:49:6b:4a:a7:3c:c4:07:22:9d:04:79: 9a:e1:3b:a2:93:6e:f7:47:f2:1f:c7:f5:bd:a4:ef:77:ef:0d: a2:d3:b3:6e:61:b4:55:d3:21:73:e0:47:c7:58:60:cb:30:51: 03:24:fd:f9:77:06:67:ac:ea:85:7a:d7:8b:2d:bb:a6:9d:b1: c3:13:f2:a9:28:3d:fe:08:49:fb:de:c2:eb:c7:02:c1:12:cd: 04:00:2b:95:d7:be:c0:b8:3b:bc:38:78:c1:6f:f1:ec:05:3a: 36:77:88:55:b4:20:ac:65:48:13:da:58:bb:ca:fb:b5:f6:0f: e1:a4:d0:ee:17:4f:a5:4f:7a:b2:af:0d:83:0f:5e:c9:03:7a: cc:b4:0f:e4:a8:e1:2a:9a:5e:11:86:46:72:4a:49:39:fd:4e: a7:8e:e2:1e:07:7a:6c:26:c3:34:62:e3:6e:7f:03:93:2e:23: cf:45:6d:77:57:05:82:85:5d:2c:a3:9f:05:a8:1e:8c:1a:76: 90:f8:2b:e4 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUWcNFZ50YGCjDbwahoBlrjE4ii78wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDgwMFoX DTI3MDMwMzA2MTMwMFowMzExMC8GA1UEAxMoNjQ3NTlFQTgzOTM4OEE3RUREM0I2 NjdCNEVFNjE2RTIxNzAzNzc3QjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKdB97Q6NoEKHZT9tBjK/+Ayyltf6JSZOUmEkqm46+aP8s+XwXVGAUOGXL13 gqydgLVACrBtsABZ3QtipYnt960pbsWHzLimf+Gmw+uMvPo15Ei04V5lyDuMtw+g sQr5UAsS1hrGE1QelX3yDdfZAFiEDDj3zipryFwWV0XP6zW6Y/YtH8zZ5lM1uEt/ f45a8uJekWxPx8YZfYbpG2H0wZ9ChVAki5Do2FTgJncu9i+TPnHv8Sp19FGwx8vi yBJxpEn5NAY9OTTRCoysJgScGGfB61pbFE295mQ+5hARobX1ATxIHJdDsGzUMlxI WcpyC5ulN5gDfXehCgjoF8iryYcCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRkdZ6o OTiKft07ZntO5hbiFwN3ezAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDIxMy5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK phswDQYJKoZIhvcNAQELBQADggEBAI3ctxFofZA0BSYlDXaLivLyDzBORrB20QtA KZtrwLhMFGzKDuKz3iPPuD+EJqCa/P2/DZHfpZyUk9bkBPxJa0qnPMQHIp0EeZrh O6KTbvdH8h/H9b2k73fvDaLTs25htFXTIXPgR8dYYMswUQMk/fl3Bmes6oV614st u6adscMT8qkoPf4ISfvewuvHAsESzQQAK5XXvsC4O7w4eMFv8ewFOjZ3iFW0IKxl SBPaWLvK+7X2D+Gk0O4XT6VPerKvDYMPXskDesy0D+So4SqaXhGGRnJKSTn9TqeO 4h4HemwmwzRi425/A5MuI89FbXdXBYKFXSyjnwWoHowadpD4K+Q= -----END CERTIFICATE-----Generated at Sat Mar 28 13:10:28 2026 by rpki-client