$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144302.roa File: AS144302.roa (raw, json) Hash identifier: 4pQF835bmLP5c6JG6nsbgYXtp6LZ9PfqRgBLIWX/yzA= Subject key identifier: B8:44:91:FE:B7:B7:B4:CD:87:78:EE:78:95:D7:B5:F6:18:49:45:09 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 734D7DDF0F7B56211D77405406D5DF870DB47359 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144302.roa Signing time: Wed 04 Mar 2026 06:15:32 +0000 ROA not before: Wed 04 Mar 2026 06:10:32 +0000 ROA not after: Wed 03 Mar 2027 06:15:32 +0000 asID: 144302 IP address blocks: 240a:a674::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:4d:7d:df:0f:7b:56:21:1d:77:40:54:06:d5:df:87:0d:b4:73:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:10:32 2026 GMT Not After : Mar 3 06:15:32 2027 GMT Subject: CN=B84491FEB7B7B4CD8778EE7895D7B5F618494509 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:b5:d6:19:d5:71:dc:12:32:a1:88:63:46:ba: f1:33:66:6d:86:bc:2e:68:ee:d1:9d:90:61:8c:d9: 31:93:6a:5c:36:81:6e:40:42:ad:78:c6:29:a8:38: 43:86:c2:1e:04:d3:20:eb:4e:7f:fd:30:3a:8a:4b: e7:cc:e8:5d:1c:64:4c:74:34:d9:6a:ec:06:5a:2e: b0:f6:cf:d9:da:4c:12:fe:3a:2f:09:47:cb:f7:e1: 26:41:24:d3:25:dd:29:e0:03:c1:38:d6:dd:83:eb: d6:6c:21:01:80:9a:73:89:dd:12:28:b5:d0:36:f3: 76:f1:06:59:b2:e3:88:79:5f:fd:3e:32:12:3a:c0: e4:79:ff:d4:a0:96:e9:04:4c:c3:86:27:8e:f2:fc: 1d:2f:5c:49:bd:7f:0f:ae:e4:0f:0c:82:b9:d7:98: 48:99:39:63:7f:9c:85:10:16:2a:e3:e5:96:73:e5: 2e:02:48:0f:e4:4c:91:ee:d7:cb:13:38:e1:c8:87: 71:40:78:39:f7:04:88:af:0e:bb:1f:30:8c:40:d4: 73:5b:a8:2e:82:74:ff:04:3f:65:1f:85:04:c2:6e: bb:af:e3:e8:f6:52:70:17:30:7d:8e:37:e2:3a:49: 55:77:84:1e:d0:ce:68:50:df:b7:d5:8d:c8:3e:39: 5c:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:44:91:FE:B7:B7:B4:CD:87:78:EE:78:95:D7:B5:F6:18:49:45:09 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144302.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a674::/32 Signature Algorithm: sha256WithRSAEncryption 96:8f:9a:bb:02:9c:c1:f1:a6:82:79:44:f8:a0:8a:e7:96:7a: fa:3f:5b:c6:5f:26:cd:15:8b:5e:cc:d5:8a:ea:1a:15:ea:33: bd:d3:f5:83:8e:65:bb:29:03:82:e8:0d:e3:d6:ac:04:07:08: 9c:fe:b6:ae:86:c8:51:95:1b:36:7c:64:ff:a5:78:f0:1f:3b: 83:96:fd:56:8f:06:b9:cc:f5:13:fa:81:95:36:08:05:ea:3a: ba:17:07:a3:99:f8:8a:83:44:f1:9f:44:21:7e:7c:6c:d0:10: e6:23:b2:c1:8b:a7:2e:b9:24:e6:ff:05:3c:db:34:b9:a0:f8: 4c:cd:ba:85:5f:0d:2d:5f:04:23:8d:da:80:f8:14:96:fa:d7: ba:56:a9:27:bd:fd:ab:45:29:87:23:d4:47:d6:51:c6:31:41: 61:5b:56:46:0b:30:95:60:27:e5:2f:fa:a1:88:bf:be:bb:45: cd:96:98:b3:3f:c2:70:de:84:6e:09:86:05:6a:5c:82:2a:26: be:91:ce:40:97:47:77:96:c0:09:83:e2:70:2f:85:29:e6:5f: b9:13:0b:7f:4e:e8:78:2f:5a:f7:c5:b6:09:98:05:38:bc:86: 3f:6c:5d:3f:0a:e3:70:81:43:c0:62:e4:55:51:6c:28:a3:77: ee:09:be:f1 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUc0193w97ViEdd0BUBtXfhw20c1kwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTAzMloX DTI3MDMwMzA2MTUzMlowMzExMC8GA1UEAxMoQjg0NDkxRkVCN0I3QjRDRDg3NzhF RTc4OTVEN0I1RjYxODQ5NDUwOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKG11hnVcdwSMqGIY0a68TNmbYa8Lmju0Z2QYYzZMZNqXDaBbkBCrXjGKag4 Q4bCHgTTIOtOf/0wOopL58zoXRxkTHQ02WrsBlousPbP2dpMEv46LwlHy/fhJkEk 0yXdKeADwTjW3YPr1mwhAYCac4ndEii10DbzdvEGWbLjiHlf/T4yEjrA5Hn/1KCW 6QRMw4YnjvL8HS9cSb1/D67kDwyCudeYSJk5Y3+chRAWKuPllnPlLgJID+RMke7X yxM44ciHcUB4OfcEiK8Oux8wjEDUc1uoLoJ0/wQ/ZR+FBMJuu6/j6PZScBcwfY43 4jpJVXeEHtDOaFDft9WNyD45XF0CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBS4RJH+ t7e0zYd47niV17X2GElFCTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDMwMi5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK pnQwDQYJKoZIhvcNAQELBQADggEBAJaPmrsCnMHxpoJ5RPigiueWevo/W8ZfJs0V i17M1YrqGhXqM73T9YOOZbspA4LoDePWrAQHCJz+tq6GyFGVGzZ8ZP+lePAfO4OW /VaPBrnM9RP6gZU2CAXqOroXB6OZ+IqDRPGfRCF+fGzQEOYjssGLpy65JOb/BTzb NLmg+EzNuoVfDS1fBCON2oD4FJb617pWqSe9/atFKYcj1EfWUcYxQWFbVkYLMJVg J+Uv+qGIv767Rc2WmLM/wnDehG4JhgVqXIIqJr6RzkCXR3eWwAmD4nAvhSnmX7kT C39O6HgvWvfFtgmYBTi8hj9sXT8K43CBQ8Bi5FVRbCijd+4JvvE= -----END CERTIFICATE-----Generated at Sat Mar 28 15:53:36 2026 by rpki-client