$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144317.roa File: AS144317.roa (raw, json) Hash identifier: P7WniHmCx1biqrzPzOJ7Vm/iOUL+HyuahMho8ZEEVMY= Subject key identifier: 34:35:81:DC:04:CF:3E:44:CC:90:5B:03:D9:49:FB:6F:D1:66:C7:AA Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 783D62C3D9A090CF7608289EBC927C641A8B2F89 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144317.roa Signing time: Wed 04 Mar 2026 06:14:34 +0000 ROA not before: Wed 04 Mar 2026 06:09:34 +0000 ROA not after: Wed 03 Mar 2027 06:14:34 +0000 asID: 144317 IP address blocks: 240a:a683::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:3d:62:c3:d9:a0:90:cf:76:08:28:9e:bc:92:7c:64:1a:8b:2f:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:09:34 2026 GMT Not After : Mar 3 06:14:34 2027 GMT Subject: CN=343581DC04CF3E44CC905B03D949FB6FD166C7AA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:49:66:9a:34:53:d6:3c:ea:b9:21:95:64:fe: e4:9a:b7:be:ed:b7:8a:48:f7:61:0c:2e:98:1e:9c: f3:d7:40:95:60:60:08:5a:37:59:ab:3e:62:7d:a4: 88:e7:63:89:a5:de:d7:7b:d1:68:f5:a3:1b:ab:e7: 71:29:2d:47:5d:12:5d:4a:a3:d9:59:5b:0c:79:37: df:01:4f:f6:f9:86:e1:5a:28:84:cc:3f:ea:20:75: 12:c0:1c:f9:cd:3e:cb:ca:dd:13:a4:65:bc:8e:e4: d9:34:e0:db:cd:3f:17:d3:22:49:aa:68:b1:69:f0: c3:6b:3d:21:ee:22:e6:58:71:c7:bd:10:e3:89:48: 5e:c8:cc:45:f6:01:87:1f:db:69:b5:e6:97:33:fb: 8d:fa:2a:c1:28:08:45:e5:07:0a:e2:b0:f3:b4:f0: a0:34:b6:57:e0:ca:70:2a:a1:e0:35:39:bb:05:ed: 98:c4:17:41:96:06:18:1f:42:11:ca:29:e2:4b:1b: b0:ea:d6:ae:ad:3a:2b:01:98:8a:5a:8b:7e:15:f0: 68:cd:23:51:02:66:5a:5b:85:08:d8:88:ef:b8:0b: 44:ef:fa:86:7d:d4:60:06:3d:56:b2:1c:0f:17:db: 0f:67:cd:96:da:fa:7d:c8:cf:1f:69:69:d8:48:0a: 6f:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:35:81:DC:04:CF:3E:44:CC:90:5B:03:D9:49:FB:6F:D1:66:C7:AA X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144317.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a683::/32 Signature Algorithm: sha256WithRSAEncryption 0c:90:af:3f:ed:79:05:0d:4d:df:20:a7:b2:a6:ee:e4:45:1c: 30:b4:15:58:b3:6d:40:9c:a0:3f:9f:ad:fd:c6:13:97:3a:b2: 6f:ce:d5:52:15:20:15:d9:78:97:ec:1f:ad:df:7e:0c:f1:73: 2e:32:ef:b6:0c:9d:de:3b:dc:9d:84:1b:88:ef:c4:85:7c:5d: 0a:a0:77:d8:cf:c4:9e:e4:c3:b0:85:eb:f1:ac:61:a4:22:f5: 7e:9b:4e:99:ff:29:cb:32:63:3c:80:ab:0c:88:6f:e4:ff:e2: 8b:c3:09:3b:50:c6:37:1d:78:5d:89:b7:b2:38:eb:b7:df:16: 72:ab:71:6e:f1:5a:13:d2:48:22:f2:76:ea:4d:5f:06:1a:26: a2:48:b6:35:9c:65:b0:18:d5:3a:97:e4:94:c9:7f:d4:53:53: d3:e1:65:2b:a7:14:53:8b:ff:1b:28:b0:d3:14:f7:cc:e4:4a: 70:c4:48:ef:fd:05:09:8a:fe:4d:41:c4:25:3e:ae:51:10:5c: 6f:99:c1:f9:dc:38:f7:8f:9d:f4:af:97:5f:09:d9:65:6f:a2: f2:a9:1f:de:7a:9c:80:60:cc:ec:b5:85:91:e3:6f:de:36:3e: 1e:87:72:f4:e9:a2:85:69:66:ff:88:13:e7:0f:c7:d3:6b:6d: dd:17:fd:99 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUeD1iw9mgkM92CCievJJ8ZBqLL4kwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDkzNFoX DTI3MDMwMzA2MTQzNFowMzExMC8GA1UEAxMoMzQzNTgxREMwNENGM0U0NENDOTA1 QjAzRDk0OUZCNkZEMTY2QzdBQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALxJZpo0U9Y86rkhlWT+5Jq3vu23ikj3YQwumB6c89dAlWBgCFo3Was+Yn2k iOdjiaXe13vRaPWjG6vncSktR10SXUqj2VlbDHk33wFP9vmG4VoohMw/6iB1EsAc +c0+y8rdE6RlvI7k2TTg280/F9MiSaposWnww2s9Ie4i5lhxx70Q44lIXsjMRfYB hx/babXmlzP7jfoqwSgIReUHCuKw87TwoDS2V+DKcCqh4DU5uwXtmMQXQZYGGB9C Ecop4ksbsOrWrq06KwGYilqLfhXwaM0jUQJmWluFCNiI77gLRO/6hn3UYAY9VrIc DxfbD2fNltr6fcjPH2lp2EgKb4UCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQ0NYHc BM8+RMyQWwPZSftv0WbHqjAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDMxNy5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK poMwDQYJKoZIhvcNAQELBQADggEBAAyQrz/teQUNTd8gp7Km7uRFHDC0FVizbUCc oD+frf3GE5c6sm/O1VIVIBXZeJfsH63ffgzxcy4y77YMnd473J2EG4jvxIV8XQqg d9jPxJ7kw7CF6/GsYaQi9X6bTpn/KcsyYzyAqwyIb+T/4ovDCTtQxjcdeF2Jt7I4 67ffFnKrcW7xWhPSSCLydupNXwYaJqJItjWcZbAY1TqX5JTJf9RTU9PhZSunFFOL /xsosNMU98zkSnDESO/9BQmK/k1BxCU+rlEQXG+ZwfncOPePnfSvl18J2WVvovKp H956nIBgzOy1hZHjb942Ph6HcvTpooVpZv+IE+cPx9Nrbd0X/Zk= -----END CERTIFICATE-----Generated at Sat Mar 28 11:49:51 2026 by rpki-client