$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144248.roa File: AS144248.roa (raw, json) Hash identifier: PZY7/nDljw3Vvi1PKtPKusVBCm7YtvGNp993x0iGslg= Subject key identifier: E2:4E:AA:51:73:DB:55:D3:23:DE:0C:0C:24:58:59:B9:09:84:19:B9 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 6F32EBD8C66AB3085C20FED51B679FAA11C8D434 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144248.roa Signing time: Wed 04 Mar 2026 06:13:10 +0000 ROA not before: Wed 04 Mar 2026 06:08:10 +0000 ROA not after: Wed 03 Mar 2027 06:13:10 +0000 asID: 144248 IP address blocks: 240a:a63e::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:32:eb:d8:c6:6a:b3:08:5c:20:fe:d5:1b:67:9f:aa:11:c8:d4:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:08:10 2026 GMT Not After : Mar 3 06:13:10 2027 GMT Subject: CN=E24EAA5173DB55D323DE0C0C245859B9098419B9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:47:16:43:cc:b1:78:ca:89:31:f3:bb:13:4f: 8c:79:5a:5a:46:00:53:5f:5b:c1:b8:43:df:5b:e3: 07:fc:07:d0:06:33:21:3a:05:a8:e4:45:bc:f3:39: 12:f3:09:02:cb:be:78:34:89:4a:39:ed:9d:e1:06: 3d:47:52:1f:d6:fd:09:93:da:df:dd:6a:57:95:e3: 36:a0:5f:88:93:76:a9:d1:cd:bb:29:81:6b:11:9b: e6:7a:8d:cd:e4:70:0a:0f:2d:92:5b:96:6a:c9:18: 35:98:d4:27:46:ad:94:6c:3e:12:84:5e:e4:bd:bf: dd:4d:95:3e:b7:5e:4f:8a:66:c1:ca:ab:25:9b:51: 8d:da:48:23:f1:88:8d:32:aa:e3:eb:bc:fb:03:84: ac:be:10:59:55:f7:1c:0e:ee:79:7f:32:11:9b:82: ce:5a:0a:ae:30:1b:d7:81:54:26:2c:52:51:f2:b1: c0:a8:d3:cd:ad:d5:b4:b0:bb:48:8e:33:7b:27:e5: 78:a6:37:a5:48:49:ec:1d:a7:49:e0:64:59:d2:7a: 0d:6b:9e:dc:c7:f2:9f:fd:90:06:38:a4:93:29:4e: c0:d5:06:34:2a:14:2d:ba:35:55:47:9c:c2:36:85: 85:5b:71:59:fd:8d:bd:eb:d6:7b:88:fd:cb:1c:62: 78:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:4E:AA:51:73:DB:55:D3:23:DE:0C:0C:24:58:59:B9:09:84:19:B9 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144248.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a63e::/32 Signature Algorithm: sha256WithRSAEncryption 7f:28:d5:7d:b3:ae:f2:36:78:c0:1f:26:52:cd:29:62:97:d3: 16:4c:df:b9:85:ea:84:eb:08:bb:83:5c:a9:5f:0b:a1:a7:a7: 7c:ad:7b:6b:97:2e:e2:cb:50:79:d3:ec:16:9d:1f:0f:6d:44: 1f:c8:d0:98:da:24:d7:c9:f0:a0:08:17:b3:44:9f:74:8a:d7: bb:cf:3a:31:10:ed:3e:c7:0a:a5:8b:e0:fc:19:55:49:59:41: 30:bc:67:a6:9b:60:1e:4d:76:a7:b6:c4:80:0d:be:62:e4:7f: b3:d6:bc:67:03:6c:ca:5b:a4:7c:83:10:72:b8:8b:aa:dd:44: bc:b0:04:f2:8b:79:1f:13:e4:92:6e:cb:98:46:40:d5:98:0f: 43:3b:ee:72:db:a7:47:38:7d:0c:66:f3:1c:11:81:84:aa:92: 41:72:01:74:fe:78:3d:b8:15:e2:9a:50:03:d8:cc:4e:6e:5f: f0:1f:c2:51:b0:e8:4c:3a:c7:91:30:0e:12:3f:73:1e:53:c0: 91:6f:93:e9:57:38:ea:7a:cf:39:cd:6f:43:9f:eb:85:bc:87: 6f:54:f8:1b:6b:bb:b6:cc:c3:32:21:49:d3:ee:5a:22:27:8f: 29:fe:70:9a:7a:b0:db:cd:6d:01:48:4f:d7:9a:bd:43:f7:08: 27:94:a4:93 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUbzLr2MZqswhcIP7VG2efqhHI1DQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDgxMFoX DTI3MDMwMzA2MTMxMFowMzExMC8GA1UEAxMoRTI0RUFBNTE3M0RCNTVEMzIzREUw QzBDMjQ1ODU5QjkwOTg0MTlCOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMJHFkPMsXjKiTHzuxNPjHlaWkYAU19bwbhD31vjB/wH0AYzIToFqORFvPM5 EvMJAsu+eDSJSjntneEGPUdSH9b9CZPa391qV5XjNqBfiJN2qdHNuymBaxGb5nqN zeRwCg8tkluWaskYNZjUJ0atlGw+EoRe5L2/3U2VPrdeT4pmwcqrJZtRjdpII/GI jTKq4+u8+wOErL4QWVX3HA7ueX8yEZuCzloKrjAb14FUJixSUfKxwKjTza3VtLC7 SI4zeyfleKY3pUhJ7B2nSeBkWdJ6DWue3Mfyn/2QBjikkylOwNUGNCoULbo1VUec wjaFhVtxWf2NvevWe4j9yxxieHUCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBTiTqpR c9tV0yPeDAwkWFm5CYQZuTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDI0OC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK pj4wDQYJKoZIhvcNAQELBQADggEBAH8o1X2zrvI2eMAfJlLNKWKX0xZM37mF6oTr CLuDXKlfC6Gnp3yte2uXLuLLUHnT7BadHw9tRB/I0JjaJNfJ8KAIF7NEn3SK17vP OjEQ7T7HCqWL4PwZVUlZQTC8Z6abYB5Ndqe2xIANvmLkf7PWvGcDbMpbpHyDEHK4 i6rdRLywBPKLeR8T5JJuy5hGQNWYD0M77nLbp0c4fQxm8xwRgYSqkkFyAXT+eD24 FeKaUAPYzE5uX/AfwlGw6Ew6x5EwDhI/cx5TwJFvk+lXOOp6zznNb0Of64W8h29U +Btru7bMwzIhSdPuWiInjyn+cJp6sNvNbQFIT9eavUP3CCeUpJM= -----END CERTIFICATE-----Generated at Sat Mar 28 14:26:41 2026 by rpki-client