$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144295.roa File: AS144295.roa (raw, json) Hash identifier: JMBKSx4fUtGMj6HUaNE1eAAVc7Izl7+N7lnQwcbKDkw= Subject key identifier: 6E:57:13:6B:27:74:9D:FA:56:42:73:BC:8A:24:2C:29:11:1E:C2:4D Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 47CCB4C536B1365040F70CB31440A9052E91D3D4 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144295.roa Signing time: Wed 04 Mar 2026 06:14:14 +0000 ROA not before: Wed 04 Mar 2026 06:09:14 +0000 ROA not after: Wed 03 Mar 2027 06:14:14 +0000 asID: 144295 IP address blocks: 240a:a66d::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:cc:b4:c5:36:b1:36:50:40:f7:0c:b3:14:40:a9:05:2e:91:d3:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:09:14 2026 GMT Not After : Mar 3 06:14:14 2027 GMT Subject: CN=6E57136B27749DFA564273BC8A242C29111EC24D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:03:83:a6:0b:90:3e:c4:df:77:04:4e:42:e2: 06:f6:5a:89:d2:b7:9e:b8:35:01:57:a9:a7:79:c1: 67:f4:c2:2d:61:11:55:42:2a:69:7e:70:71:de:34: 5e:7f:56:e0:d5:75:7a:79:39:f0:99:81:fb:b3:8c: 69:b4:fe:dd:bc:1a:f9:c8:0d:1c:d7:95:1e:52:79: 5e:69:90:7d:b8:1e:3d:10:6d:80:03:62:a8:d0:49: 7b:69:7a:7b:74:4b:74:6a:f6:94:77:97:08:a9:85: 58:f7:6c:ad:b6:0a:ff:e8:04:04:b7:82:ec:7c:22: 6a:c1:17:a1:24:b1:ae:a3:97:d6:24:92:0a:c6:c3: 96:07:9e:5e:94:85:b9:10:f4:9d:de:57:d5:d4:9a: 0f:d4:89:86:43:57:e8:17:23:c3:83:c5:5d:0c:39: 1b:8d:b5:0a:c8:bc:90:cd:6f:28:90:8a:b5:e7:8d: b7:97:36:26:80:de:5c:a2:89:bc:f0:b4:a2:c7:a8: 33:e2:46:3b:c2:52:5a:6d:39:01:e4:be:45:0e:af: 20:e1:c4:54:83:2d:3c:c8:51:d9:d6:93:30:18:7e: 95:7c:cc:07:85:3b:50:7f:bf:50:4a:83:58:89:e8: 2d:a3:98:d4:fc:43:52:2e:aa:c2:36:39:c6:d9:59: 89:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:57:13:6B:27:74:9D:FA:56:42:73:BC:8A:24:2C:29:11:1E:C2:4D X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144295.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a66d::/32 Signature Algorithm: sha256WithRSAEncryption 98:73:8f:f6:a1:ad:77:ab:61:89:75:84:03:b8:80:9c:5e:08: 54:18:bc:d4:96:c9:7a:2f:6d:fc:cb:10:a0:5c:63:6f:47:b9: 76:8c:d8:32:fc:2f:06:a5:34:05:af:e5:e5:8d:14:12:c0:81: af:0b:20:b0:ed:12:90:2d:04:09:a0:89:81:94:37:46:ec:2b: 84:6d:d9:2e:ef:6d:a3:26:b8:28:44:d5:fe:aa:74:84:c3:ae: c9:05:b5:6c:86:b4:71:50:dc:fa:43:e1:4e:7e:46:d8:07:57: 3f:35:0d:90:82:d4:8a:a8:24:53:a9:d0:85:6e:9a:5e:cc:91: 30:99:05:d8:79:3e:94:96:52:a9:bf:04:9f:5a:ea:12:8a:9b: 63:13:c2:ef:c7:51:21:43:87:fb:72:b3:a1:7a:87:9d:77:5b: a5:24:b8:2a:1d:3d:50:5e:46:aa:03:5b:be:0c:23:72:a7:98: 66:05:0c:c9:41:e4:16:a8:e0:22:15:9f:0b:68:7f:66:86:65: 0d:d5:ad:13:fa:c9:8f:79:36:fa:26:74:e4:36:9c:7e:bd:7e: 31:79:c5:52:ad:ec:d4:69:28:97:f8:fa:e8:d6:0a:55:42:d5: a2:64:f9:0b:71:39:5b:8c:ac:0a:d2:f6:4b:c0:c7:21:84:ec: 8d:f8:b1:95 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUR8y0xTaxNlBA9wyzFECpBS6R09QwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDkxNFoX DTI3MDMwMzA2MTQxNFowMzExMC8GA1UEAxMoNkU1NzEzNkIyNzc0OURGQTU2NDI3 M0JDOEEyNDJDMjkxMTFFQzI0RDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJMDg6YLkD7E33cETkLiBvZaidK3nrg1AVepp3nBZ/TCLWERVUIqaX5wcd40 Xn9W4NV1enk58JmB+7OMabT+3bwa+cgNHNeVHlJ5XmmQfbgePRBtgANiqNBJe2l6 e3RLdGr2lHeXCKmFWPdsrbYK/+gEBLeC7HwiasEXoSSxrqOX1iSSCsbDlgeeXpSF uRD0nd5X1dSaD9SJhkNX6Bcjw4PFXQw5G421Csi8kM1vKJCKteeNt5c2JoDeXKKJ vPC0oseoM+JGO8JSWm05AeS+RQ6vIOHEVIMtPMhR2daTMBh+lXzMB4U7UH+/UEqD WInoLaOY1PxDUi6qwjY5xtlZiQMCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRuVxNr J3Sd+lZCc7yKJCwpER7CTTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDI5NS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK pm0wDQYJKoZIhvcNAQELBQADggEBAJhzj/ahrXerYYl1hAO4gJxeCFQYvNSWyXov bfzLEKBcY29HuXaM2DL8LwalNAWv5eWNFBLAga8LILDtEpAtBAmgiYGUN0bsK4Rt 2S7vbaMmuChE1f6qdITDrskFtWyGtHFQ3PpD4U5+RtgHVz81DZCC1IqoJFOp0IVu ml7MkTCZBdh5PpSWUqm/BJ9a6hKKm2MTwu/HUSFDh/tys6F6h513W6UkuCodPVBe RqoDW74MI3KnmGYFDMlB5Bao4CIVnwtof2aGZQ3VrRP6yY95NvomdOQ2nH69fjF5 xVKt7NRpKJf4+ujWClVC1aJk+QtxOVuMrArS9kvAxyGE7I34sZU= -----END CERTIFICATE-----Generated at Sat Mar 28 13:15:19 2026 by rpki-client