$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144276.roa File: AS144276.roa (raw, json) Hash identifier: tQhgA4Bkn+5UYUp8kOC01UUj6CUhbB8sKuUAGgQewy0= Subject key identifier: 0D:79:A5:AE:7A:CA:CC:DD:52:0D:53:A5:4A:3C:A3:FD:D1:28:95:26 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 7F6CC659127D046B7097B10484C2CB973FE051EA Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144276.roa Signing time: Wed 04 Mar 2026 06:13:52 +0000 ROA not before: Wed 04 Mar 2026 06:08:52 +0000 ROA not after: Wed 03 Mar 2027 06:13:52 +0000 asID: 144276 IP address blocks: 240a:a65a::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:6c:c6:59:12:7d:04:6b:70:97:b1:04:84:c2:cb:97:3f:e0:51:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:08:52 2026 GMT Not After : Mar 3 06:13:52 2027 GMT Subject: CN=0D79A5AE7ACACCDD520D53A54A3CA3FDD1289526 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:88:96:f7:53:47:91:d1:80:f9:82:57:43:3a: 05:f2:0f:fa:13:7d:44:05:f2:25:a3:5e:a1:bb:e2: 1d:c5:71:b1:4d:04:0a:ec:e0:32:7c:d5:68:10:d0: db:a4:ce:24:3d:49:77:f3:22:c7:c3:60:9b:9c:5b: 96:0c:10:c7:1a:b7:75:87:cc:ec:f3:8a:70:28:c0: ad:bc:87:33:c6:0b:ba:3d:db:81:06:21:70:0b:50: d8:33:3e:1d:1a:46:04:20:2a:83:8a:0e:30:7b:b2: 8a:89:24:f8:89:8e:98:38:1e:0b:0e:52:0c:b3:d5: 9d:88:84:1a:af:6c:9b:dd:69:d8:62:9d:51:e1:78: 9d:4b:9a:74:62:13:73:08:2f:58:f0:cb:8c:93:ac: 27:28:d9:30:8b:cb:7d:40:c6:92:42:6b:0f:60:68: a1:96:89:01:48:0e:8b:20:85:77:a0:5b:b0:56:79: a0:8e:79:e0:ef:5a:46:91:72:73:86:41:e6:6f:fb: 22:69:9a:de:4d:8d:d0:79:c2:4b:df:b0:c2:31:ac: a7:53:b1:01:d3:fb:77:41:1f:30:c6:39:f7:f4:a9: 52:5c:e9:85:d4:da:e4:24:32:c0:88:59:73:58:39: 43:84:ad:35:4e:c3:05:b4:3f:30:ec:b9:d3:f8:15: ce:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:79:A5:AE:7A:CA:CC:DD:52:0D:53:A5:4A:3C:A3:FD:D1:28:95:26 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144276.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a65a::/32 Signature Algorithm: sha256WithRSAEncryption bc:e9:d9:ea:0d:90:3f:56:74:54:87:a7:0b:6f:2f:79:d2:81: 27:93:9c:d6:dc:5b:06:20:a1:e2:b6:ca:a8:49:a0:4b:c0:4a: c1:78:20:49:92:20:64:65:5a:1a:df:70:de:ba:1a:2f:c7:55: 17:7c:7d:72:8e:05:fa:15:3d:e2:da:55:69:a8:73:31:ba:45: 00:f1:57:82:da:fd:72:3d:2b:5a:26:a7:d5:08:73:64:b6:06: 9d:f6:94:60:f5:c0:d7:f4:0f:6f:f9:71:8a:a8:1f:d4:5d:3b: 95:c1:2d:ba:b9:3f:79:1a:36:b8:8e:e3:78:97:05:6d:68:a3: d8:4d:23:b7:8a:a6:21:56:aa:b4:96:a5:34:4f:ee:1a:1e:a4: 47:88:53:8a:1f:3e:b0:6a:c9:68:e9:88:55:0a:9f:15:04:b6: 22:36:26:ef:f2:b1:50:c1:eb:dc:3e:e2:e8:34:26:9f:8f:d5: 03:9c:17:db:33:92:35:37:76:b6:af:73:5b:c9:52:89:9c:ff: 90:e7:77:72:e4:e2:29:f4:8c:b5:c4:5b:cf:fa:2e:95:16:e9: ac:06:ae:fd:9b:01:49:39:58:ae:46:c7:cb:52:29:b1:81:4b: 3c:ab:8c:24:e1:85:ba:fe:5b:6a:d6:65:54:63:a1:bc:57:37: bd:56:66:c1 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUf2zGWRJ9BGtwl7EEhMLLlz/gUeowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDg1MloX DTI3MDMwMzA2MTM1MlowMzExMC8GA1UEAxMoMEQ3OUE1QUU3QUNBQ0NERDUyMEQ1 M0E1NEEzQ0EzRkREMTI4OTUyNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANqIlvdTR5HRgPmCV0M6BfIP+hN9RAXyJaNeobviHcVxsU0ECuzgMnzVaBDQ 26TOJD1Jd/Mix8Ngm5xblgwQxxq3dYfM7POKcCjArbyHM8YLuj3bgQYhcAtQ2DM+ HRpGBCAqg4oOMHuyiokk+ImOmDgeCw5SDLPVnYiEGq9sm91p2GKdUeF4nUuadGIT cwgvWPDLjJOsJyjZMIvLfUDGkkJrD2BooZaJAUgOiyCFd6BbsFZ5oI554O9aRpFy c4ZB5m/7Imma3k2N0HnCS9+wwjGsp1OxAdP7d0EfMMY59/SpUlzphdTa5CQywIhZ c1g5Q4StNU7DBbQ/MOy50/gVziMCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQNeaWu esrM3VINU6VKPKP90SiVJjAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDI3Ni5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK plowDQYJKoZIhvcNAQELBQADggEBALzp2eoNkD9WdFSHpwtvL3nSgSeTnNbcWwYg oeK2yqhJoEvASsF4IEmSIGRlWhrfcN66Gi/HVRd8fXKOBfoVPeLaVWmoczG6RQDx V4La/XI9K1omp9UIc2S2Bp32lGD1wNf0D2/5cYqoH9RdO5XBLbq5P3kaNriO43iX BW1oo9hNI7eKpiFWqrSWpTRP7hoepEeIU4ofPrBqyWjpiFUKnxUEtiI2Ju/ysVDB 69w+4ug0Jp+P1QOcF9szkjU3dravc1vJUomc/5Dnd3Lk4in0jLXEW8/6LpUW6awG rv2bAUk5WK5Gx8tSKbGBSzyrjCThhbr+W2rWZVRjobxXN71WZsE= -----END CERTIFICATE-----Generated at Sat Mar 28 11:43:07 2026 by rpki-client