$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144285.roa File: AS144285.roa (raw, json) Hash identifier: qVNuexVrVmlY5lF7rBXQZD+zKys+kX65lAvy6/35e/k= Subject key identifier: E1:13:A4:9E:A4:62:F1:84:BD:70:59:96:58:25:25:69:75:89:B6:76 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 763E7E184D335D429DD923C7845AF76A3E095325 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144285.roa Signing time: Wed 04 Mar 2026 06:13:20 +0000 ROA not before: Wed 04 Mar 2026 06:08:20 +0000 ROA not after: Wed 03 Mar 2027 06:13:20 +0000 asID: 144285 IP address blocks: 240a:a663::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:3e:7e:18:4d:33:5d:42:9d:d9:23:c7:84:5a:f7:6a:3e:09:53:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:08:20 2026 GMT Not After : Mar 3 06:13:20 2027 GMT Subject: CN=E113A49EA462F184BD705996582525697589B676 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:e6:bd:43:7e:36:ae:7d:b4:e9:91:63:44:e4: c9:a6:e5:33:e6:a9:f2:40:17:f3:57:69:69:fa:45: f2:f1:a1:5b:e2:6e:3c:fc:08:83:cf:c6:d3:14:6e: 5a:1a:3d:a0:82:fb:b3:cf:8d:d7:31:2d:c3:32:f8: 36:bb:bd:a6:5e:6c:64:9c:66:40:6d:c3:ec:b4:48: 28:d0:ef:3c:02:8b:25:48:dd:47:72:69:ce:74:5d: cb:c6:66:b5:40:8a:aa:0a:f4:ae:01:8c:d4:6e:ba: 11:9e:97:00:34:29:a3:d5:56:7b:75:51:1e:d1:b8: 70:17:0a:63:fa:58:c7:18:40:41:6e:8a:34:68:4f: 37:cd:8f:76:9e:df:30:e7:5b:17:b3:8c:2e:e9:53: 64:0d:4d:fc:b1:e7:3e:c5:33:e0:93:54:0f:3c:38: 4e:c6:77:21:10:d2:1b:d5:8c:80:66:9e:d4:e4:96: 6d:41:17:8d:79:41:05:6b:fd:76:6a:16:e9:c5:8a: 8a:a0:b7:7b:a5:b6:9f:03:26:12:54:74:58:fe:35: db:f4:71:7d:d7:ea:5d:dd:da:6b:30:c3:56:2f:20: 0d:91:33:1e:c0:07:92:59:b6:05:e8:aa:e7:74:76: 7e:e1:6c:87:6a:3f:87:b0:e0:e5:91:e6:a7:f5:c2: 4e:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:13:A4:9E:A4:62:F1:84:BD:70:59:96:58:25:25:69:75:89:B6:76 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144285.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a663::/32 Signature Algorithm: sha256WithRSAEncryption d5:43:37:b6:69:3c:68:a3:2a:64:9e:0c:87:d4:71:60:2e:d1: 09:fa:9a:40:18:f2:66:92:cb:f9:9c:f9:b2:4c:b3:18:18:27: 1b:87:8c:90:89:94:13:94:1b:b7:08:31:c0:f9:92:b4:95:34: 71:ee:cc:b0:98:95:63:af:88:c5:26:98:83:d8:42:f8:48:07: 06:65:a4:7b:65:9c:53:38:5c:6e:83:e6:65:c8:57:f9:ad:fa: 4d:a9:08:5c:c7:ed:64:10:95:8d:cd:12:b3:ca:97:42:af:1a: 3d:ae:30:51:9c:99:6d:ca:d4:b5:fc:48:63:9a:57:45:2f:e1: f5:ac:3b:98:80:a4:1a:2f:1f:28:5c:40:d2:0a:11:40:98:c7: 3a:c5:dd:4b:49:18:c2:13:ef:14:a9:4a:ce:d7:2e:bf:85:aa: 31:22:16:1b:e6:1e:63:71:4e:88:5d:24:05:fc:21:d1:b8:ad: 67:b5:52:46:ae:f5:67:27:c2:bd:ee:09:9d:31:e9:69:fd:29: f2:45:d8:0e:5d:ef:40:80:56:e5:9b:4e:85:82:9a:dd:4e:65: 37:d5:ec:e9:74:28:ec:e9:a3:45:a3:94:7f:cf:7f:8c:02:06: a9:af:d0:c1:22:72:a0:bf:b6:b4:f0:9b:c2:60:3a:07:07:c1: 8f:b3:fa:1e -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUdj5+GE0zXUKd2SPHhFr3aj4JUyUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDgyMFoX DTI3MDMwMzA2MTMyMFowMzExMC8GA1UEAxMoRTExM0E0OUVBNDYyRjE4NEJENzA1 OTk2NTgyNTI1Njk3NTg5QjY3NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKrmvUN+Nq59tOmRY0TkyablM+ap8kAX81dpafpF8vGhW+JuPPwIg8/G0xRu Who9oIL7s8+N1zEtwzL4Nru9pl5sZJxmQG3D7LRIKNDvPAKLJUjdR3JpznRdy8Zm tUCKqgr0rgGM1G66EZ6XADQpo9VWe3VRHtG4cBcKY/pYxxhAQW6KNGhPN82Pdp7f MOdbF7OMLulTZA1N/LHnPsUz4JNUDzw4TsZ3IRDSG9WMgGae1OSWbUEXjXlBBWv9 dmoW6cWKiqC3e6W2nwMmElR0WP412/RxfdfqXd3aazDDVi8gDZEzHsAHklm2Beiq 53R2fuFsh2o/h7Dg5ZHmp/XCTssCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBThE6Se pGLxhL1wWZZYJSVpdYm2djAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDI4NS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK pmMwDQYJKoZIhvcNAQELBQADggEBANVDN7ZpPGijKmSeDIfUcWAu0Qn6mkAY8maS y/mc+bJMsxgYJxuHjJCJlBOUG7cIMcD5krSVNHHuzLCYlWOviMUmmIPYQvhIBwZl pHtlnFM4XG6D5mXIV/mt+k2pCFzH7WQQlY3NErPKl0KvGj2uMFGcmW3K1LX8SGOa V0Uv4fWsO5iApBovHyhcQNIKEUCYxzrF3UtJGMIT7xSpSs7XLr+FqjEiFhvmHmNx TohdJAX8IdG4rWe1Ukau9Wcnwr3uCZ0x6Wn9KfJF2A5d70CAVuWbToWCmt1OZTfV 7Ol0KOzpo0WjlH/Pf4wCBqmv0MEicqC/trTwm8JgOgcHwY+z+h4= -----END CERTIFICATE-----Generated at Sat Mar 28 15:54:07 2026 by rpki-client