$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144293.roa File: AS144293.roa (raw, json) Hash identifier: 1qlJoK3pwR4QLmUw9IUamBsUYPqtfar/vgZJI555dkE= Subject key identifier: DC:D3:C3:31:27:A8:77:E8:88:8C:7E:A9:DB:D9:D2:C4:A7:D6:7C:30 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 3BCF5326ED860497DC3B33B5257D7A124B80 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144293.roa Signing time: Wed 04 Mar 2026 06:14:24 +0000 ROA not before: Wed 04 Mar 2026 06:09:24 +0000 ROA not after: Wed 03 Mar 2027 06:14:24 +0000 asID: 144293 IP address blocks: 240a:a66b::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:cf:53:26:ed:86:04:97:dc:3b:33:b5:25:7d:7a:12:4b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:09:24 2026 GMT Not After : Mar 3 06:14:24 2027 GMT Subject: CN=DCD3C33127A877E8888C7EA9DBD9D2C4A7D67C30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:f6:24:40:bb:f2:18:22:02:34:49:14:ca:15: 1f:72:97:1a:22:35:c5:db:56:f0:13:d4:08:42:0d: c5:64:44:4c:e9:e2:40:ea:00:77:9a:cf:91:84:bd: 75:3e:a3:8c:9d:47:3e:5a:d2:e7:09:08:43:1e:ba: 47:f0:46:aa:04:2a:59:84:d0:9d:46:75:b0:48:a2: 2b:76:0b:34:77:e1:f2:07:8a:f1:9c:b8:b7:06:b5: 91:9d:5a:69:b5:76:6d:54:44:56:55:a4:80:0b:6b: 03:ae:92:d7:ee:fc:4a:f1:8c:d5:a5:b6:52:bf:0c: e7:01:8a:7b:10:2d:15:e5:fd:2d:a6:b5:13:e3:ec: 60:2f:be:ed:bc:8a:e7:43:70:01:d2:27:14:8c:f7: e0:38:9b:23:06:e8:cb:d6:53:b5:2e:39:1e:e1:f8: d0:5f:38:51:44:57:e5:75:69:8f:4f:ad:ce:e6:2a: fd:d1:d2:e5:21:c3:89:00:db:59:59:ac:9c:e2:97: d0:22:49:5e:f3:3d:e0:4d:1e:cd:63:de:bf:3a:66: bc:b9:98:0f:48:dc:e2:bb:c4:7f:97:55:da:dc:f5: 67:e7:21:7c:a2:ca:75:d0:d3:23:77:61:33:fa:4c: ba:80:a1:cd:42:cc:af:d5:f5:54:81:4b:c7:80:96: cf:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:D3:C3:31:27:A8:77:E8:88:8C:7E:A9:DB:D9:D2:C4:A7:D6:7C:30 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144293.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a66b::/32 Signature Algorithm: sha256WithRSAEncryption a4:e4:3e:9a:27:b0:af:45:1c:e9:05:0d:55:4c:7b:8e:60:87: ee:11:54:52:e8:a5:a2:25:bd:73:82:09:a4:28:82:a3:7e:fd: 5b:df:0d:80:9b:a7:fd:d2:02:eb:c4:f7:32:5e:b0:b5:2e:0c: 89:83:be:99:b6:42:0f:08:07:59:b2:59:c5:97:e6:b1:86:b2: 47:7b:52:e1:ff:e0:92:91:9a:cb:0e:33:03:e3:bf:54:a4:91: c5:91:6c:2e:72:14:cf:08:48:2c:76:38:44:d8:7b:18:23:16: 5b:b1:e1:b9:97:58:72:04:40:17:96:65:8e:07:ec:2f:8c:09: 6c:84:31:de:c3:0a:ae:9e:64:5c:99:33:5c:b8:6a:dd:be:cc: dd:8a:9d:b1:9e:e5:75:21:01:d9:75:7d:0d:df:65:c8:72:5f: 28:44:54:a2:5f:67:22:49:ad:2a:f1:b6:2b:c8:c0:2f:8d:5e: 6d:cd:89:78:16:2d:26:dc:b9:95:8e:fc:76:a6:5d:60:b3:76: 9b:ba:09:69:cb:4c:de:f0:ff:d7:c9:65:0d:c9:2f:59:c7:4f: 61:35:b2:97:bd:84:de:2d:50:26:fa:48:15:06:d0:98:f9:6b: 4b:f5:ec:c8:a3:96:b3:e3:ae:b3:41:20:84:37:0a:03:1f:db: 28:a1:33:e2 -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgISO89TJu2GBJfcOzO1JX16EkuAMA0GCSqGSIb3DQEBCwUA MEoxFTATBgNVBAMMDEE5MUU1RDYxMDAwMTExMC8GA1UEBRMoMDVGQzlDNUI4ODUw NkY3QzBEM0Y4NjJDODg5NUJFRDY3RTlGOEVCQTAeFw0yNjAzMDQwNjA5MjRaFw0y NzAzMDMwNjE0MjRaMDMxMTAvBgNVBAMTKERDRDNDMzMxMjdBODc3RTg4ODhDN0VB OURCRDlEMkM0QTdENjdDMzAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCm9iRAu/IYIgI0SRTKFR9ylxoiNcXbVvAT1AhCDcVkREzp4kDqAHeaz5GEvXU+ o4ydRz5a0ucJCEMeukfwRqoEKlmE0J1GdbBIoit2CzR34fIHivGcuLcGtZGdWmm1 dm1URFZVpIALawOuktfu/ErxjNWltlK/DOcBinsQLRXl/S2mtRPj7GAvvu28iudD cAHSJxSM9+A4myMG6MvWU7UuOR7h+NBfOFFEV+V1aY9Prc7mKv3R0uUhw4kA21lZ rJzil9AiSV7zPeBNHs1j3r86Zry5mA9I3OK7xH+XVdrc9WfnIXyiynXQ0yN3YTP6 TLqAoc1CzK/V9VSBS8eAls+tAgMBAAGjggHFMIIBwTAdBgNVHQ4EFgQU3NPDMSeo d+iIjH6p29nSxKfWfDAwHwYDVR0jBBgwFoAUBfycW4hQb3wNP4YsiJW+1n6fjrow DgYDVR0PAQH/BAQDAgeAMGMGA1UdHwRcMFowWKBWoFSGUnJzeW5jOi8vcnBraS5j ZXJuZXQubmV0L3JlcG8vY2VybmV0LzAvMDVGQzlDNUI4ODUwNkY3QzBEM0Y4NjJD ODg5NUJFRDY3RTlGOEVCQS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAC hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2 MTFFMkJCNDY4RjdDNzJGRDFGRjIvQmZ5Y1c0aFFiM3dOUDRZc2lKVy0xbjZmanJv LmNlcjBOBggrBgEFBQcBCwRCMEAwPgYIKwYBBQUHMAuGMnJzeW5jOi8vcnBraS5j ZXJuZXQubmV0L3JlcG8vY2VybmV0LzAvQVMxNDQyOTMucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkCqZr MA0GCSqGSIb3DQEBCwUAA4IBAQCk5D6aJ7CvRRzpBQ1VTHuOYIfuEVRS6KWiJb1z ggmkKIKjfv1b3w2Am6f90gLrxPcyXrC1LgyJg76ZtkIPCAdZslnFl+axhrJHe1Lh /+CSkZrLDjMD479UpJHFkWwuchTPCEgsdjhE2HsYIxZbseG5l1hyBEAXlmWOB+wv jAlshDHewwqunmRcmTNcuGrdvszdip2xnuV1IQHZdX0N32XIcl8oRFSiX2ciSa0q 8bYryMAvjV5tzYl4Fi0m3LmVjvx2pl1gs3abuglpy0ze8P/XyWUNyS9Zx09hNbKX vYTeLVAm+kgVBtCY+WtL9ezIo5az466zQSCENwoDH9sooTPi -----END CERTIFICATE-----Generated at Sat Mar 28 11:42:09 2026 by rpki-client