$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144259.roa File: AS144259.roa (raw, json) Hash identifier: I+2q2pFZ3PWTCXWCzexRHp9Oh6PAeJ4UtP5zFLk0zms= Subject key identifier: 5B:95:BE:0D:9E:51:EB:70:00:65:30:9F:67:34:6A:B4:8C:A5:3F:1B Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 0DBE87BCFBE4E8026CC74285E9A138B5A341EA71 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144259.roa Signing time: Wed 04 Mar 2026 06:13:24 +0000 ROA not before: Wed 04 Mar 2026 06:08:24 +0000 ROA not after: Wed 03 Mar 2027 06:13:24 +0000 asID: 144259 IP address blocks: 240a:a649::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:be:87:bc:fb:e4:e8:02:6c:c7:42:85:e9:a1:38:b5:a3:41:ea:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:08:24 2026 GMT Not After : Mar 3 06:13:24 2027 GMT Subject: CN=5B95BE0D9E51EB700065309F67346AB48CA53F1B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:cd:5d:48:31:b4:b3:f9:52:ff:48:76:c3:85: de:c9:65:6d:84:a5:6d:11:7a:d9:f8:77:c9:05:42: 65:3a:14:ae:36:5e:61:9c:8d:55:22:20:56:5b:3e: 1d:17:cd:45:db:ed:3a:95:d0:a7:2f:f9:38:df:c1: 63:08:a7:a8:44:24:19:a2:b6:07:1b:6b:85:37:ac: 4b:bf:bf:48:4a:62:a8:3d:0a:19:18:ef:58:46:97: 95:f6:94:6c:5d:7c:14:61:a3:3e:b4:59:4f:d4:7c: fa:66:fc:30:a6:d8:7e:b8:e7:39:95:6f:e7:ce:70: d6:b9:c8:94:77:87:c3:78:32:7e:84:b1:60:fd:21: 70:cc:38:2d:98:45:c9:cb:67:00:11:f0:83:58:99: 31:94:36:89:fd:26:c7:f7:40:72:c0:18:be:b1:96: 64:d3:14:d4:6d:33:74:f1:e3:de:fe:82:03:fb:05: f5:d7:f5:4c:8e:ee:e9:69:7c:49:13:52:cd:f2:ea: ca:b0:2f:75:7f:30:28:45:6f:02:37:b9:d8:f4:6c: 37:86:15:29:56:2b:3f:85:f9:9a:7a:46:36:48:12: 9e:5b:4a:b6:34:4a:63:b4:d2:eb:6c:c2:15:37:2f: b1:f4:5d:e4:5f:84:e9:f9:97:b3:16:d9:23:97:7f: 88:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:95:BE:0D:9E:51:EB:70:00:65:30:9F:67:34:6A:B4:8C:A5:3F:1B X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144259.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a649::/32 Signature Algorithm: sha256WithRSAEncryption ba:0f:2a:fc:2d:36:be:f2:47:bb:e4:52:94:d5:0f:36:7c:d6: ca:03:d2:82:e9:41:ad:f5:1f:60:36:86:19:e7:12:f4:07:ff: e4:e1:dd:9b:2d:fe:93:63:e7:35:72:7e:a4:85:a0:95:20:41: 2e:13:93:fc:b4:69:3b:cc:1e:c8:55:ac:61:94:4b:4b:16:b6: 35:22:18:70:49:ab:75:bc:a3:f1:88:b5:8a:4a:a2:30:57:06: c7:0d:f9:b5:ef:f6:fb:7d:83:3b:cf:74:05:52:7b:5a:3f:20: cc:ea:ab:19:2e:96:d7:e6:00:3e:ad:11:b3:57:24:91:1c:ed: 68:cc:a0:69:f6:c9:24:f8:d6:2d:10:49:4a:7c:c2:cd:3a:e5: 71:27:5b:6d:24:56:dc:8d:5a:03:be:66:66:ab:5c:c0:eb:fe: d9:00:05:1f:b5:91:44:bf:c6:4c:d9:c9:9b:45:44:29:2e:28: 9b:ea:66:e4:d3:b4:04:43:c0:ff:ba:cf:06:ba:0b:82:7c:bb: c5:d8:49:33:8f:d1:dc:3e:af:30:b4:91:96:be:d8:7a:67:f2: ad:94:4d:41:39:aa:2c:56:76:0a:cb:f6:e7:ca:40:23:f1:83: 71:6d:4d:04:d0:a0:9f:08:3d:6b:39:c0:35:c3:43:1e:1c:f6: 0f:0b:4b:c0 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUDb6HvPvk6AJsx0KF6aE4taNB6nEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDgyNFoX DTI3MDMwMzA2MTMyNFowMzExMC8GA1UEAxMoNUI5NUJFMEQ5RTUxRUI3MDAwNjUz MDlGNjczNDZBQjQ4Q0E1M0YxQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJbNXUgxtLP5Uv9IdsOF3sllbYSlbRF62fh3yQVCZToUrjZeYZyNVSIgVls+ HRfNRdvtOpXQpy/5ON/BYwinqEQkGaK2BxtrhTesS7+/SEpiqD0KGRjvWEaXlfaU bF18FGGjPrRZT9R8+mb8MKbYfrjnOZVv585w1rnIlHeHw3gyfoSxYP0hcMw4LZhF yctnABHwg1iZMZQ2if0mx/dAcsAYvrGWZNMU1G0zdPHj3v6CA/sF9df1TI7u6Wl8 SRNSzfLqyrAvdX8wKEVvAje52PRsN4YVKVYrP4X5mnpGNkgSnltKtjRKY7TS62zC FTcvsfRd5F+E6fmXsxbZI5d/iFECAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRblb4N nlHrcABlMJ9nNGq0jKU/GzAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDI1OS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK pkkwDQYJKoZIhvcNAQELBQADggEBALoPKvwtNr7yR7vkUpTVDzZ81soD0oLpQa31 H2A2hhnnEvQH/+Th3Zst/pNj5zVyfqSFoJUgQS4Tk/y0aTvMHshVrGGUS0sWtjUi GHBJq3W8o/GItYpKojBXBscN+bXv9vt9gzvPdAVSe1o/IMzqqxkultfmAD6tEbNX JJEc7WjMoGn2yST41i0QSUp8ws065XEnW20kVtyNWgO+ZmarXMDr/tkABR+1kUS/ xkzZyZtFRCkuKJvqZuTTtARDwP+6zwa6C4J8u8XYSTOP0dw+rzC0kZa+2Hpn8q2U TUE5qixWdgrL9ufKQCPxg3FtTQTQoJ8IPWs5wDXDQx4c9g8LS8A= -----END CERTIFICATE-----Generated at Sat Mar 28 14:26:40 2026 by rpki-client