$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144239.roa File: AS144239.roa (raw, json) Hash identifier: efzGgY8PTNFANtqERAHW3r+fVaVWTP+H5kM/y/xx/o4= Subject key identifier: 73:5B:ED:21:E7:B5:18:A7:5C:89:D0:77:C7:DA:E0:EE:54:84:B9:23 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 05C8EFCB5F9CE5FAD4D030515084E78A08D299A6 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144239.roa Signing time: Wed 04 Mar 2026 06:12:59 +0000 ROA not before: Wed 04 Mar 2026 06:07:59 +0000 ROA not after: Wed 03 Mar 2027 06:12:59 +0000 asID: 144239 IP address blocks: 240a:a635::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:c8:ef:cb:5f:9c:e5:fa:d4:d0:30:51:50:84:e7:8a:08:d2:99:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:07:59 2026 GMT Not After : Mar 3 06:12:59 2027 GMT Subject: CN=735BED21E7B518A75C89D077C7DAE0EE5484B923 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:66:76:ae:7c:54:d8:be:34:0a:a5:32:f7:55: a6:e6:2c:ea:7b:34:89:5c:4f:b4:64:40:c6:07:86: 28:5c:3f:58:41:83:89:cc:d6:13:5e:e1:f2:4a:7f: 5a:2b:96:e8:1a:ec:90:d4:f4:b7:75:b8:49:08:8b: 22:1a:11:4d:48:16:f3:1b:3f:30:d2:ea:9d:3b:a1: 6a:0a:06:a5:f7:a4:c0:08:f8:6c:34:be:7d:91:77: 98:f4:c8:8b:e4:69:40:74:76:e3:94:54:3e:b7:c1: 6b:18:81:86:59:ce:87:0b:ae:85:5f:39:31:f8:7f: 31:1f:35:ce:ba:8f:3f:77:0a:70:bf:44:08:3c:f0: 8f:90:dc:8b:8c:64:bd:1e:29:ef:40:75:03:f1:c3: 9f:2b:93:e5:0c:4d:63:ab:35:93:23:9c:f2:d6:1a: 2b:6c:7f:10:e8:eb:66:72:06:ed:1d:03:52:2a:a5: f0:9b:a0:2b:8f:cf:e5:c3:0c:7b:65:ea:a1:29:28: b3:dc:b9:d5:1a:d0:33:ed:23:87:35:fa:42:c7:67: 85:bc:c3:b3:43:80:0f:4f:ea:68:11:02:ad:8b:47: f7:2f:02:c8:7f:64:a8:4a:46:83:5f:f5:1f:fe:c3: 53:99:8b:be:d8:9c:97:b0:0d:e9:3b:36:9b:79:e3: 58:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:5B:ED:21:E7:B5:18:A7:5C:89:D0:77:C7:DA:E0:EE:54:84:B9:23 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144239.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a635::/32 Signature Algorithm: sha256WithRSAEncryption 88:e0:dd:3e:00:cb:36:14:18:35:47:bd:a9:55:d6:23:29:43: 7b:a4:2c:3d:a2:48:67:64:83:58:d3:54:fb:1b:a7:f8:80:7f: 4b:1f:cd:29:b8:2b:58:84:d2:11:3a:04:a3:bd:43:13:ef:8e: c2:01:a4:b9:de:6c:8b:c6:94:cc:3a:9a:38:47:cc:d0:74:0c: 21:53:97:83:9a:4c:c6:93:ea:a2:9e:7b:61:b8:cd:09:31:a0: 58:63:1e:0d:b1:73:c5:38:4f:0b:87:e0:01:92:1e:b9:06:d9: 7c:38:f2:74:80:8c:07:fb:31:1b:8d:d0:39:4c:04:37:78:3d: 0b:75:f3:1d:2c:a2:2f:bf:b1:77:df:65:db:be:2e:90:ed:03: 90:d3:6e:48:11:7f:db:e6:31:60:c6:aa:85:5c:60:cc:61:9e: 2c:07:1b:ce:48:44:47:e7:ba:f0:68:d8:61:2d:36:f7:9e:3f: c6:0b:93:6d:fa:5e:dc:9b:89:3c:f2:ba:10:fe:00:53:c6:de: c1:39:04:ba:f1:5d:4d:e2:ce:67:2b:ef:9f:06:86:35:54:8a: b7:63:c1:3a:65:af:f4:c0:ea:9d:85:9d:22:db:ba:ce:52:2d: c2:1c:d9:5f:be:4d:99:ff:4e:20:a8:8d:ec:ed:7a:48:d2:dc: 41:a2:71:cc -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUBcjvy1+c5frU0DBRUITnigjSmaYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDc1OVoX DTI3MDMwMzA2MTI1OVowMzExMC8GA1UEAxMoNzM1QkVEMjFFN0I1MThBNzVDODlE MDc3QzdEQUUwRUU1NDg0QjkyMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKtmdq58VNi+NAqlMvdVpuYs6ns0iVxPtGRAxgeGKFw/WEGDiczWE17h8kp/ WiuW6BrskNT0t3W4SQiLIhoRTUgW8xs/MNLqnTuhagoGpfekwAj4bDS+fZF3mPTI i+RpQHR245RUPrfBaxiBhlnOhwuuhV85Mfh/MR81zrqPP3cKcL9ECDzwj5Dci4xk vR4p70B1A/HDnyuT5QxNY6s1kyOc8tYaK2x/EOjrZnIG7R0DUiql8JugK4/P5cMM e2XqoSkos9y51RrQM+0jhzX6QsdnhbzDs0OAD0/qaBECrYtH9y8CyH9kqEpGg1/1 H/7DU5mLvticl7AN6Ts2m3njWMcCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRzW+0h 57UYp1yJ0HfH2uDuVIS5IzAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDIzOS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK pjUwDQYJKoZIhvcNAQELBQADggEBAIjg3T4AyzYUGDVHvalV1iMpQ3ukLD2iSGdk g1jTVPsbp/iAf0sfzSm4K1iE0hE6BKO9QxPvjsIBpLnebIvGlMw6mjhHzNB0DCFT l4OaTMaT6qKee2G4zQkxoFhjHg2xc8U4TwuH4AGSHrkG2Xw48nSAjAf7MRuN0DlM BDd4PQt18x0soi+/sXffZdu+LpDtA5DTbkgRf9vmMWDGqoVcYMxhniwHG85IREfn uvBo2GEtNveeP8YLk236XtybiTzyuhD+AFPG3sE5BLrxXU3izmcr758GhjVUirdj wTplr/TA6p2FnSLbus5SLcIc2V++TZn/TiCojeztekjS3EGiccw= -----END CERTIFICATE-----Generated at Sat Mar 28 13:18:06 2026 by rpki-client