$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144296.roa File: AS144296.roa (raw, json) Hash identifier: 86EpenpuPgA3dOINrUfdQmMKWJjooNGvk7CVfNMykvk= Subject key identifier: 1C:5B:F8:C2:1E:DC:51:0E:C4:EC:5D:8E:25:09:0D:C3:95:1A:17:5B Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 28228F99E184F7DD99DB2A215C99170B72CA81D5 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144296.roa Signing time: Wed 04 Mar 2026 06:14:44 +0000 ROA not before: Wed 04 Mar 2026 06:09:44 +0000 ROA not after: Wed 03 Mar 2027 06:14:44 +0000 asID: 144296 IP address blocks: 240a:a66e::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:22:8f:99:e1:84:f7:dd:99:db:2a:21:5c:99:17:0b:72:ca:81:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:09:44 2026 GMT Not After : Mar 3 06:14:44 2027 GMT Subject: CN=1C5BF8C21EDC510EC4EC5D8E25090DC3951A175B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:21:7b:2d:47:76:7d:7c:48:61:ed:c8:c6:db: 28:8b:18:57:36:39:50:0c:05:7d:b2:1f:dc:d3:5e: 58:7c:9a:af:6d:51:68:6b:53:a6:3a:ca:70:50:a5: b4:56:db:5d:67:ab:e3:c7:d5:3e:94:fa:69:8b:f1: 70:d3:e5:cb:70:2a:48:49:b0:01:d7:9c:28:2f:8a: fa:74:62:76:97:58:62:48:3c:93:c7:50:7e:f4:65: 7b:cc:8c:5c:15:29:91:a9:ab:ea:de:a4:8f:90:f6: 89:4a:09:94:20:93:74:e3:4f:69:6d:40:7c:0c:e8: a6:f3:8d:f5:e6:0c:a5:b7:1f:bd:20:ea:fe:1b:99: fe:49:1f:be:ef:9e:b9:9a:01:99:47:57:05:2f:01: ce:43:a7:47:60:a3:7c:4d:1d:fe:0f:2f:71:66:da: a2:3e:71:61:b8:f7:a5:d3:5b:8e:ea:9e:a2:60:36: e2:10:f1:ec:e3:8d:fd:be:66:95:a2:9f:e1:23:7c: 75:d3:35:0e:75:b9:a5:c9:6d:09:3b:43:0c:0f:e7: d4:9b:39:62:09:22:95:3b:be:1b:54:8d:83:62:f4: 73:86:5c:02:56:20:dd:d8:1e:3f:95:13:c0:6a:48: 41:be:36:ee:c9:8c:af:69:5e:36:b0:cc:b5:09:71: bd:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:5B:F8:C2:1E:DC:51:0E:C4:EC:5D:8E:25:09:0D:C3:95:1A:17:5B X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144296.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a66e::/32 Signature Algorithm: sha256WithRSAEncryption 41:44:7d:c9:56:47:34:c2:93:65:78:5a:50:29:6f:53:e7:23: 47:93:69:bf:dc:c6:58:3d:42:98:af:63:09:8a:86:a1:ca:47: 7c:5c:d1:81:34:54:ed:04:7f:ba:3e:8a:57:f0:63:a0:16:5b: 2f:85:bd:33:cd:d1:5a:e3:23:1c:8c:87:89:1f:43:5d:01:56: 1e:e4:8e:cb:ac:3c:2f:43:8f:88:13:9a:3f:e6:1b:c5:95:ca: ed:a8:a1:28:fc:6e:ac:2c:5e:5c:f0:35:1b:1e:f0:85:cc:1b: 36:f4:6e:03:ca:57:ce:5c:4d:3c:ba:0d:75:93:b0:47:92:80: 4b:c1:3c:cd:65:4c:9e:91:3c:e4:20:07:e0:41:7c:12:1e:df: b5:b7:ca:b5:53:60:04:54:47:d9:ce:b0:30:af:93:0c:84:cd: 1c:01:cf:27:11:16:a3:d5:21:b8:f8:c3:e0:59:c2:68:41:4c: 69:00:6c:0d:07:16:ff:a7:7c:f7:31:2a:c3:ad:d3:17:fb:ae: 99:ea:7f:0a:1b:b9:b4:5b:39:aa:2f:7d:5f:cc:74:70:8e:87: ae:c0:98:bb:c5:5f:1a:ab:a3:e7:21:03:f6:29:53:37:e9:d8: ed:a6:36:39:d2:45:92:1b:76:90:8a:e1:f2:c8:2e:8c:83:8d: bd:95:9e:c8 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUKCKPmeGE992Z2yohXJkXC3LKgdUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDk0NFoX DTI3MDMwMzA2MTQ0NFowMzExMC8GA1UEAxMoMUM1QkY4QzIxRURDNTEwRUM0RUM1 RDhFMjUwOTBEQzM5NTFBMTc1QjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAIQhey1Hdn18SGHtyMbbKIsYVzY5UAwFfbIf3NNeWHyar21RaGtTpjrKcFCl tFbbXWer48fVPpT6aYvxcNPly3AqSEmwAdecKC+K+nRidpdYYkg8k8dQfvRle8yM XBUpkamr6t6kj5D2iUoJlCCTdONPaW1AfAzopvON9eYMpbcfvSDq/huZ/kkfvu+e uZoBmUdXBS8BzkOnR2CjfE0d/g8vcWbaoj5xYbj3pdNbjuqeomA24hDx7OON/b5m laKf4SN8ddM1DnW5pcltCTtDDA/n1Js5YgkilTu+G1SNg2L0c4ZcAlYg3dgeP5UT wGpIQb427smMr2leNrDMtQlxvVMCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQcW/jC HtxRDsTsXY4lCQ3DlRoXWzAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDI5Ni5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK pm4wDQYJKoZIhvcNAQELBQADggEBAEFEfclWRzTCk2V4WlApb1PnI0eTab/cxlg9 QpivYwmKhqHKR3xc0YE0VO0Ef7o+ilfwY6AWWy+FvTPN0VrjIxyMh4kfQ10BVh7k jsusPC9Dj4gTmj/mG8WVyu2ooSj8bqwsXlzwNRse8IXMGzb0bgPKV85cTTy6DXWT sEeSgEvBPM1lTJ6RPOQgB+BBfBIe37W3yrVTYARUR9nOsDCvkwyEzRwBzycRFqPV Ibj4w+BZwmhBTGkAbA0HFv+nfPcxKsOt0xf7rpnqfwobubRbOaovfV/MdHCOh67A mLvFXxqro+chA/YpUzfp2O2mNjnSRZIbdpCK4fLILoyDjb2Vnsg= -----END CERTIFICATE-----Generated at Sat Mar 28 11:45:00 2026 by rpki-client