$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144323.roa File: AS144323.roa (raw, json) Hash identifier: PCNvrmHqQWOK4DwOVjnEE9I9Aui3lnh23hFMRVi6agY= Subject key identifier: 90:48:B6:46:C2:D6:C8:5F:4E:D2:EE:0E:B4:8A:99:28:4B:C6:39:6F Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 788E156187D7416B525D92D711183EDDDA738ADD Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144323.roa Signing time: Wed 04 Mar 2026 06:14:28 +0000 ROA not before: Wed 04 Mar 2026 06:09:28 +0000 ROA not after: Wed 03 Mar 2027 06:14:28 +0000 asID: 144323 IP address blocks: 240a:a689::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:8e:15:61:87:d7:41:6b:52:5d:92:d7:11:18:3e:dd:da:73:8a:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:09:28 2026 GMT Not After : Mar 3 06:14:28 2027 GMT Subject: CN=9048B646C2D6C85F4ED2EE0EB48A99284BC6396F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:0f:36:47:a3:9c:84:1f:09:f0:8e:ca:dc:f6: 5a:7d:0c:31:aa:25:e5:d6:01:f3:b9:2a:65:e1:c5: b0:78:52:4c:bd:87:f6:1b:35:86:e3:37:5b:62:cc: de:99:c1:d9:fe:9a:3c:4d:9b:40:0e:2e:80:f1:1f: 97:a0:cc:2c:97:9e:93:a4:05:b0:77:3c:e1:45:f6: 54:23:96:f4:f2:95:4c:2d:31:27:0e:0a:6b:7c:b7: bd:47:7e:9a:06:4e:36:c5:45:27:6f:1a:99:3f:99: 44:16:0a:7a:9f:75:11:bf:c5:e4:b4:19:d4:e4:31: 9a:ed:e0:1d:7a:02:b8:29:5d:db:0e:8a:49:76:60: 09:6d:ee:ec:ed:ad:3f:57:9b:8d:dd:7f:19:d5:4b: a9:41:c7:0f:ff:c6:d4:6a:4d:d2:34:d2:75:34:d6: 44:82:6b:d0:f6:6a:c9:1f:bd:b7:c2:89:37:8b:2f: a4:ac:41:e6:b8:9f:d7:48:32:86:a7:7b:26:a6:aa: 65:10:33:96:eb:75:d0:8f:3c:9f:f1:ec:4a:f8:35: c2:78:38:cb:7e:82:29:96:08:e9:6d:79:68:43:bd: 0d:ce:9e:f4:62:9b:5b:b3:7a:e6:2d:94:70:1e:49: ef:0d:d5:09:8b:c4:14:55:f1:d7:38:06:13:9e:16: a7:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:48:B6:46:C2:D6:C8:5F:4E:D2:EE:0E:B4:8A:99:28:4B:C6:39:6F X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144323.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a689::/32 Signature Algorithm: sha256WithRSAEncryption 42:90:e0:b9:53:52:2c:92:38:05:87:1f:b8:e0:68:e7:51:4f: 2c:1a:30:92:89:5c:5b:d0:3d:51:47:6e:ba:96:a1:df:cc:d8: e3:52:9e:21:ce:bf:e8:e1:2c:14:7d:53:df:a1:08:d9:c7:f5: 50:94:4f:f2:8f:2c:e0:cc:84:a8:80:57:bd:65:99:14:cb:87: ae:64:cd:a7:81:b6:03:51:10:ff:e9:2a:66:be:5f:72:a9:34: 7f:04:d7:fc:c9:d3:99:dc:da:37:64:c2:9d:a9:13:52:1c:6f: 1b:9c:46:60:c1:90:02:32:6f:de:b5:e3:66:f3:f7:e4:66:c1: 2f:dd:80:ff:65:7b:a1:46:fe:7b:d7:0b:5f:e0:ab:08:2c:cf: 05:8d:00:93:ec:25:b3:76:01:2e:32:d2:6d:8b:28:cc:26:17: e9:0a:b4:1c:e5:b6:2b:69:e2:55:b3:75:b4:42:bd:34:67:21: fa:87:6c:7c:ba:e2:b9:2d:b7:91:d3:77:63:d1:ef:e0:3d:0a: ac:f3:a1:a0:f9:04:d6:32:6f:88:25:ae:de:c9:89:d4:32:9e: 34:19:de:55:85:3f:75:c4:64:e8:bd:80:04:22:b3:14:57:e1: b0:dd:5a:49:09:d7:c2:bd:b6:66:06:c4:db:a1:35:de:88:17: ba:1c:b7:c9 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUeI4VYYfXQWtSXZLXERg+3dpzit0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDkyOFoX DTI3MDMwMzA2MTQyOFowMzExMC8GA1UEAxMoOTA0OEI2NDZDMkQ2Qzg1RjRFRDJF RTBFQjQ4QTk5Mjg0QkM2Mzk2RjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKgPNkejnIQfCfCOytz2Wn0MMaol5dYB87kqZeHFsHhSTL2H9hs1huM3W2LM 3pnB2f6aPE2bQA4ugPEfl6DMLJeek6QFsHc84UX2VCOW9PKVTC0xJw4Ka3y3vUd+ mgZONsVFJ28amT+ZRBYKep91Eb/F5LQZ1OQxmu3gHXoCuCld2w6KSXZgCW3u7O2t P1ebjd1/GdVLqUHHD//G1GpN0jTSdTTWRIJr0PZqyR+9t8KJN4svpKxB5rif10gy hqd7JqaqZRAzlut10I88n/HsSvg1wng4y36CKZYI6W15aEO9Dc6e9GKbW7N65i2U cB5J7w3VCYvEFFXx1zgGE54WpyECAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSQSLZG wtbIX07S7g60ipkoS8Y5bzAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDMyMy5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK pokwDQYJKoZIhvcNAQELBQADggEBAEKQ4LlTUiySOAWHH7jgaOdRTywaMJKJXFvQ PVFHbrqWod/M2ONSniHOv+jhLBR9U9+hCNnH9VCUT/KPLODMhKiAV71lmRTLh65k zaeBtgNREP/pKma+X3KpNH8E1/zJ05nc2jdkwp2pE1IcbxucRmDBkAIyb96142bz 9+RmwS/dgP9le6FG/nvXC1/gqwgszwWNAJPsJbN2AS4y0m2LKMwmF+kKtBzltitp 4lWzdbRCvTRnIfqHbHy64rktt5HTd2PR7+A9CqzzoaD5BNYyb4glrt7JidQynjQZ 3lWFP3XEZOi9gAQisxRX4bDdWkkJ18K9tmYGxNuhNd6IF7oct8k= -----END CERTIFICATE-----Generated at Sat Mar 28 11:44:39 2026 by rpki-client