$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144257.roa File: AS144257.roa (raw, json) Hash identifier: 2ajKADZsL5KIB8eN64yi9MvVylNSCOxAFMKL8f1t25Q= Subject key identifier: 89:CB:18:BD:F3:9A:F8:CF:F3:85:7C:77:60:3D:36:14:6C:57:F9:9E Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 6F6A79E48F46E271D5D86B5B4A9816596187AAA3 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144257.roa Signing time: Wed 04 Mar 2026 06:14:04 +0000 ROA not before: Wed 04 Mar 2026 06:09:04 +0000 ROA not after: Wed 03 Mar 2027 06:14:04 +0000 asID: 144257 IP address blocks: 240a:a647::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:6a:79:e4:8f:46:e2:71:d5:d8:6b:5b:4a:98:16:59:61:87:aa:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:09:04 2026 GMT Not After : Mar 3 06:14:04 2027 GMT Subject: CN=89CB18BDF39AF8CFF3857C77603D36146C57F99E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:8b:0d:c5:05:2a:34:22:e6:f7:df:4c:e3:72: 5f:d7:32:2f:db:2b:f2:11:db:85:02:40:06:36:36: 12:53:9e:96:07:93:e1:be:dc:4a:c3:5c:84:78:5c: ea:b2:08:4e:68:2a:05:4a:ee:d3:af:0b:4f:41:97: 5a:e1:70:b3:ca:e6:38:b4:48:c1:c6:e6:4e:e0:e0: b9:54:96:46:32:fa:7f:c1:4e:1c:36:8b:20:13:6b: 4d:19:fd:ed:aa:e3:fe:cc:64:e4:e6:38:a5:5a:e0: 6f:ce:b4:43:66:ff:3b:f2:a2:69:85:c4:e3:71:99: 9e:5d:3e:65:73:bf:9e:31:15:ca:5a:ba:ad:c2:6e: c2:7f:f9:ab:6e:9c:46:09:6b:6b:0b:e0:8d:6a:88: cf:46:60:06:a9:16:2c:53:bb:6c:d3:3f:e5:f7:82: 04:c3:08:1d:3d:73:29:bf:f0:5b:8c:f8:6a:35:6a: 37:89:e0:f8:5a:7c:56:a4:fc:18:4d:71:7e:e2:52: 8d:8f:93:ae:42:c8:7c:43:0c:aa:3d:9f:d1:11:a3: 56:4a:35:91:38:a9:81:ec:19:fd:b1:41:5d:42:92: 14:ad:43:86:23:ec:73:a6:19:56:03:20:27:62:31: b8:2c:17:39:13:a4:dc:ff:c2:6c:03:e4:c5:91:6a: 8d:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:CB:18:BD:F3:9A:F8:CF:F3:85:7C:77:60:3D:36:14:6C:57:F9:9E X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144257.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a647::/32 Signature Algorithm: sha256WithRSAEncryption b6:82:12:40:6d:db:cc:d2:74:f5:be:a1:00:0f:78:1f:1d:14: 25:b2:f1:dc:99:1a:1e:ba:e7:5a:54:f6:a3:d1:44:11:f1:0b: 3f:1c:09:7d:5b:98:7b:1d:fc:36:97:ff:31:bf:90:d5:7d:51: 9a:bb:5e:68:0d:9d:3d:f3:2e:77:10:3b:cb:57:27:ab:16:16: 40:47:f7:54:33:2b:ca:94:f5:45:6e:84:bd:95:e8:d9:ba:84: af:89:58:c6:50:75:b9:63:10:8e:fc:47:09:bf:c3:d5:2d:48: b3:bb:64:95:be:0d:64:a5:50:e1:aa:48:00:1a:a5:e0:4c:36: c8:46:f3:78:21:0c:d3:3d:df:67:e9:0f:00:d9:7e:04:6f:58: b2:cf:26:3b:94:79:4d:c9:be:de:4a:67:8d:53:b8:55:ce:71: 29:57:0d:78:ef:89:b6:08:24:2b:57:61:e4:d5:09:a6:a9:28: 46:d3:14:fc:01:ff:51:be:53:8b:cc:30:72:b3:bd:10:5f:cc: 0a:d1:b4:4b:2c:c9:68:bf:1a:4a:9a:ef:bd:d6:1e:84:ae:82: 52:c2:26:6c:fe:b3:de:d3:ec:e5:93:ab:cc:4f:bb:3c:99:03: fd:7e:f8:b0:a2:17:49:73:bf:1b:94:aa:c7:b6:78:2b:2d:fa: 0a:1c:2f:18 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUb2p55I9G4nHV2GtbSpgWWWGHqqMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDkwNFoX DTI3MDMwMzA2MTQwNFowMzExMC8GA1UEAxMoODlDQjE4QkRGMzlBRjhDRkYzODU3 Qzc3NjAzRDM2MTQ2QzU3Rjk5RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL6LDcUFKjQi5vffTONyX9cyL9sr8hHbhQJABjY2ElOelgeT4b7cSsNchHhc 6rIITmgqBUru068LT0GXWuFws8rmOLRIwcbmTuDguVSWRjL6f8FOHDaLIBNrTRn9 7arj/sxk5OY4pVrgb860Q2b/O/KiaYXE43GZnl0+ZXO/njEVylq6rcJuwn/5q26c RglrawvgjWqIz0ZgBqkWLFO7bNM/5feCBMMIHT1zKb/wW4z4ajVqN4ng+Fp8VqT8 GE1xfuJSjY+TrkLIfEMMqj2f0RGjVko1kTipgewZ/bFBXUKSFK1DhiPsc6YZVgMg J2IxuCwXOROk3P/CbAPkxZFqje0CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSJyxi9 85r4z/OFfHdgPTYUbFf5njAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDI1Ny5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK pkcwDQYJKoZIhvcNAQELBQADggEBALaCEkBt28zSdPW+oQAPeB8dFCWy8dyZGh66 51pU9qPRRBHxCz8cCX1bmHsd/DaX/zG/kNV9UZq7XmgNnT3zLncQO8tXJ6sWFkBH 91QzK8qU9UVuhL2V6Nm6hK+JWMZQdbljEI78Rwm/w9UtSLO7ZJW+DWSlUOGqSAAa peBMNshG83ghDNM932fpDwDZfgRvWLLPJjuUeU3Jvt5KZ41TuFXOcSlXDXjvibYI JCtXYeTVCaapKEbTFPwB/1G+U4vMMHKzvRBfzArRtEssyWi/Gkqa773WHoSuglLC Jmz+s97T7OWTq8xPuzyZA/1++LCiF0lzvxuUqse2eCst+gocLxg= -----END CERTIFICATE-----Generated at Sat Mar 28 11:50:01 2026 by rpki-client