$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144231.roa File: AS144231.roa (raw, json) Hash identifier: aGDFJ6uBWNJLTarqIGsKUg8CgnoIdlrHQzDaOhTpykA= Subject key identifier: 84:FD:58:FF:F8:38:2B:06:9E:46:DE:3F:D4:42:FA:6E:DE:A7:D4:60 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 36A9AD40C997D8597D60A4F91D6CE94D476F293B Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144231.roa Signing time: Wed 04 Mar 2026 06:14:17 +0000 ROA not before: Wed 04 Mar 2026 06:09:17 +0000 ROA not after: Wed 03 Mar 2027 06:14:17 +0000 asID: 144231 IP address blocks: 240a:a62d::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:a9:ad:40:c9:97:d8:59:7d:60:a4:f9:1d:6c:e9:4d:47:6f:29:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:09:17 2026 GMT Not After : Mar 3 06:14:17 2027 GMT Subject: CN=84FD58FFF8382B069E46DE3FD442FA6EDEA7D460 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:39:3a:51:8d:97:e5:b4:36:c0:4c:41:cd:e5: 06:5a:e0:96:e1:24:f7:1b:2a:7a:63:de:aa:d2:71: 28:36:66:eb:1b:c1:b3:07:00:1f:f7:a6:0d:bc:8d: 35:5a:ce:3c:5b:06:a4:fd:17:8f:7f:8c:9c:16:8e: 70:30:3d:b2:04:1a:7c:b6:a3:2c:a2:e3:64:3a:a5: 13:e8:41:be:f1:49:6e:eb:58:95:2f:25:9d:19:4b: 74:5d:71:69:30:67:f3:8c:b7:a0:88:10:5d:47:06: b3:19:74:d0:77:ba:34:36:80:20:6b:db:33:0e:d8: d8:1d:b5:43:d7:3f:51:d4:22:75:8a:c1:af:29:b9: e7:4e:c0:f7:39:ba:fc:de:45:19:f8:1f:78:6c:3d: 6a:3a:e1:29:fb:1b:35:8b:1f:5c:a3:80:51:df:91: f8:54:6b:9c:2b:63:b9:d8:1b:50:92:54:1f:0b:d6: 33:0d:ef:93:96:5f:1e:f6:f4:69:f9:f0:53:70:e3: 13:ad:11:24:a9:da:2d:69:f7:20:f0:28:9a:ad:2c: 8b:18:cd:14:33:5a:d4:c9:64:0c:3b:20:6d:1c:61: 83:e3:b2:72:29:fe:60:b1:52:34:51:ee:26:bf:3c: 61:9b:2d:6a:ac:93:1e:f3:11:e4:fc:35:8d:b4:bb: 23:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:FD:58:FF:F8:38:2B:06:9E:46:DE:3F:D4:42:FA:6E:DE:A7:D4:60 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144231.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a62d::/32 Signature Algorithm: sha256WithRSAEncryption b9:7c:52:92:b0:c5:55:05:e3:dd:37:2a:58:ec:9e:db:79:70: 62:14:d4:c1:cb:1f:0d:4c:84:c3:35:40:24:9d:2d:9b:9f:86: 98:e3:fd:e6:15:6f:74:28:73:b6:e5:74:8d:fc:08:c1:fd:d6: f6:a6:5a:68:49:56:00:d8:73:8b:9c:82:39:01:3b:6e:5b:6c: ac:8c:c7:31:f7:1f:85:cc:ce:c0:18:fc:5f:fb:95:02:4e:d6: ea:d2:6a:b4:88:07:d2:78:3b:94:9e:de:fd:66:7c:f6:51:fc: c0:98:cb:5f:c0:f2:4a:25:ed:3d:cc:5f:bc:19:dc:65:9b:44: 11:fb:dc:21:0a:75:8a:50:39:6f:27:45:ec:8e:f0:1a:68:17: 09:84:42:bc:17:10:ff:9e:64:e7:5a:85:50:a1:0b:fe:bd:68: b9:e5:c4:99:bd:77:c1:f4:71:b0:c0:44:b6:e1:44:8b:60:af: 18:76:25:17:33:df:5a:c7:97:22:72:d7:45:53:6e:70:57:67: 95:cc:72:d2:b6:1b:a3:54:b8:35:d4:05:f8:59:57:10:72:ce: 67:10:2a:21:d1:c5:4c:97:82:89:d6:f2:da:6e:f3:ef:69:93: e9:60:4c:1f:6c:e2:f8:d5:67:35:b4:e9:3c:d9:1d:c2:1b:ba: 28:d4:66:e3 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUNqmtQMmX2Fl9YKT5HWzpTUdvKTswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDkxN1oX DTI3MDMwMzA2MTQxN1owMzExMC8GA1UEAxMoODRGRDU4RkZGODM4MkIwNjlFNDZE RTNGRDQ0MkZBNkVERUE3RDQ2MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAPo5OlGNl+W0NsBMQc3lBlrgluEk9xsqemPeqtJxKDZm6xvBswcAH/emDbyN NVrOPFsGpP0Xj3+MnBaOcDA9sgQafLajLKLjZDqlE+hBvvFJbutYlS8lnRlLdF1x aTBn84y3oIgQXUcGsxl00He6NDaAIGvbMw7Y2B21Q9c/UdQidYrBrym5507A9zm6 /N5FGfgfeGw9ajrhKfsbNYsfXKOAUd+R+FRrnCtjudgbUJJUHwvWMw3vk5ZfHvb0 afnwU3DjE60RJKnaLWn3IPAomq0sixjNFDNa1MlkDDsgbRxhg+Oycin+YLFSNFHu Jr88YZstaqyTHvMR5Pw1jbS7IzMCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSE/Vj/ +DgrBp5G3j/UQvpu3qfUYDAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDIzMS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK pi0wDQYJKoZIhvcNAQELBQADggEBALl8UpKwxVUF4903Kljsntt5cGIU1MHLHw1M hMM1QCSdLZufhpjj/eYVb3Qoc7bldI38CMH91vamWmhJVgDYc4ucgjkBO25bbKyM xzH3H4XMzsAY/F/7lQJO1urSarSIB9J4O5Se3v1mfPZR/MCYy1/A8kol7T3MX7wZ 3GWbRBH73CEKdYpQOW8nReyO8BpoFwmEQrwXEP+eZOdahVChC/69aLnlxJm9d8H0 cbDARLbhRItgrxh2JRcz31rHlyJy10VTbnBXZ5XMctK2G6NUuDXUBfhZVxByzmcQ KiHRxUyXgonW8tpu8+9pk+lgTB9s4vjVZzW06TzZHcIbuijUZuM= -----END CERTIFICATE-----Generated at Sat Mar 28 11:42:18 2026 by rpki-client