$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144252.roa File: AS144252.roa (raw, json) Hash identifier: WjaXq/boCs9DaOEVVQLq4fFvRzICd7axAB9iEttVvJQ= Subject key identifier: D0:60:67:6D:BD:B4:5A:9F:CF:77:46:FC:E4:8F:F9:CB:B1:08:EA:F9 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 06384FF0806F4ADE56562EBCFAC6963848029948 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144252.roa Signing time: Wed 04 Mar 2026 06:15:05 +0000 ROA not before: Wed 04 Mar 2026 06:10:05 +0000 ROA not after: Wed 03 Mar 2027 06:15:05 +0000 asID: 144252 IP address blocks: 240a:a642::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:38:4f:f0:80:6f:4a:de:56:56:2e:bc:fa:c6:96:38:48:02:99:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:10:05 2026 GMT Not After : Mar 3 06:15:05 2027 GMT Subject: CN=D060676DBDB45A9FCF7746FCE48FF9CBB108EAF9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:2e:38:e6:62:15:5b:46:50:9c:ad:4d:95:89: d0:3c:33:5b:ff:fc:70:20:67:f0:06:08:1a:91:42: f5:41:98:0e:1c:3c:30:5e:95:f9:fc:45:f2:48:d2: c6:64:a1:67:ee:87:2e:cf:85:5f:53:7d:bc:63:80: 57:52:48:b6:af:97:6c:eb:0f:90:b4:93:06:99:89: 54:f1:aa:d7:9a:ca:ef:f9:6f:f2:1a:90:ee:9b:8c: 00:29:1b:4b:d5:a8:bc:b0:6b:a5:dc:5a:fb:0b:70: f6:95:f2:ce:26:36:0f:61:a5:23:fb:ba:1c:db:b3: 33:a8:15:e5:7e:b7:ae:b5:15:05:4c:fc:fc:d2:c0: 70:c7:36:a1:4b:e1:a7:58:33:dc:a2:ff:01:7e:d0: f9:e6:7d:60:7e:62:81:d2:20:6a:32:56:87:7d:c9: 83:b2:66:18:de:47:7c:1f:26:4b:00:c9:98:93:aa: f1:96:15:c2:c1:36:bb:7d:62:7f:22:11:45:b0:69: 13:a7:9f:34:09:3a:15:91:1e:d5:c2:43:f6:fc:5d: 8f:7f:02:c6:b3:a5:ec:6e:4a:be:6b:19:67:3b:57: 48:1a:ff:4b:e6:11:d1:0b:32:3b:f2:da:7c:94:3e: 35:32:b2:83:a5:ba:50:ab:ad:6a:eb:39:f8:25:de: 44:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:60:67:6D:BD:B4:5A:9F:CF:77:46:FC:E4:8F:F9:CB:B1:08:EA:F9 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144252.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a642::/32 Signature Algorithm: sha256WithRSAEncryption 01:be:cb:2e:6e:09:fe:24:8e:5b:ec:6c:b6:b6:73:80:7b:4d: 00:29:74:54:ea:c6:2b:e8:ec:25:03:17:15:4a:9a:65:e0:c1: 53:e4:fe:15:ea:37:fa:43:57:5d:b5:5e:c2:44:90:55:06:5a: 54:83:93:d6:dc:6a:86:2b:51:94:7a:80:47:21:8b:b6:b5:78: e9:53:11:b5:ad:88:1b:a3:a6:7b:d8:5b:95:4b:85:c4:78:49: f0:c9:47:3c:41:cb:3f:b2:b1:3e:f8:db:83:1f:a4:21:71:b4: dc:4c:2d:d4:06:42:5e:6d:fd:c3:16:cf:24:66:0c:0b:e2:0e: 2c:e6:b2:60:db:81:fb:45:18:c4:c1:ce:32:dd:2b:f7:35:f0: 1e:03:ae:bf:9b:f5:4d:45:0c:2b:a5:86:ac:fd:57:4e:b7:86: c1:b1:95:d9:14:d7:81:e9:15:45:c9:fc:6b:07:27:2c:1d:f9: 86:ea:8b:67:95:76:db:c7:a0:03:bd:0b:83:a9:f9:d7:f8:88: 11:eb:02:cc:ab:3b:79:85:73:97:c6:b9:5a:d3:ed:d9:c8:25: 2f:3c:4f:f4:99:e7:1c:b5:ef:87:93:40:bd:d8:5a:62:f1:37: c8:ec:c4:9e:10:34:da:51:18:d7:bb:81:6c:db:8b:28:1f:f5: 53:12:c8:1f -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUBjhP8IBvSt5WVi68+saWOEgCmUgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTAwNVoX DTI3MDMwMzA2MTUwNVowMzExMC8GA1UEAxMoRDA2MDY3NkRCREI0NUE5RkNGNzc0 NkZDRTQ4RkY5Q0JCMTA4RUFGOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALwuOOZiFVtGUJytTZWJ0DwzW//8cCBn8AYIGpFC9UGYDhw8MF6V+fxF8kjS xmShZ+6HLs+FX1N9vGOAV1JItq+XbOsPkLSTBpmJVPGq15rK7/lv8hqQ7puMACkb S9WovLBrpdxa+wtw9pXyziY2D2GlI/u6HNuzM6gV5X63rrUVBUz8/NLAcMc2oUvh p1gz3KL/AX7Q+eZ9YH5igdIgajJWh33Jg7JmGN5HfB8mSwDJmJOq8ZYVwsE2u31i fyIRRbBpE6efNAk6FZEe1cJD9vxdj38CxrOl7G5KvmsZZztXSBr/S+YR0QsyO/La fJQ+NTKyg6W6UKutaus5+CXeRJ0CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBTQYGdt vbRan893Rvzkj/nLsQjq+TAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDI1Mi5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK pkIwDQYJKoZIhvcNAQELBQADggEBAAG+yy5uCf4kjlvsbLa2c4B7TQApdFTqxivo 7CUDFxVKmmXgwVPk/hXqN/pDV121XsJEkFUGWlSDk9bcaoYrUZR6gEchi7a1eOlT EbWtiBujpnvYW5VLhcR4SfDJRzxByz+ysT7424MfpCFxtNxMLdQGQl5t/cMWzyRm DAviDizmsmDbgftFGMTBzjLdK/c18B4Drr+b9U1FDCulhqz9V063hsGxldkU14Hp FUXJ/GsHJywd+Ybqi2eVdtvHoAO9C4Op+df4iBHrAsyrO3mFc5fGuVrT7dnIJS88 T/SZ5xy174eTQL3YWmLxN8jsxJ4QNNpRGNe7gWzbiygf9VMSyB8= -----END CERTIFICATE-----Generated at Sat Mar 28 11:42:34 2026 by rpki-client