$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144324.roa File: AS144324.roa (raw, json) Hash identifier: cjSb8KIrdoBkkZkDqYHgWk0woBKyOa6KFk9hPEvBJbg= Subject key identifier: 60:E5:12:62:0C:27:3F:6C:67:09:B2:C0:04:63:C3:84:91:95:CE:4C Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 2A9ACAE3E5F602646FEB4F8DDE8124B4C204DCFD Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144324.roa Signing time: Wed 04 Mar 2026 06:12:51 +0000 ROA not before: Wed 04 Mar 2026 06:07:51 +0000 ROA not after: Wed 03 Mar 2027 06:12:51 +0000 asID: 144324 IP address blocks: 240a:a68a::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:9a:ca:e3:e5:f6:02:64:6f:eb:4f:8d:de:81:24:b4:c2:04:dc:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:07:51 2026 GMT Not After : Mar 3 06:12:51 2027 GMT Subject: CN=60E512620C273F6C6709B2C00463C3849195CE4C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:17:6e:3e:af:07:fd:63:26:e9:a2:fa:dc:2b: 96:6c:aa:76:a4:a1:16:c3:39:3e:75:a7:9b:37:60: e1:d4:7d:be:df:91:fa:03:fd:89:bd:12:a7:17:22: c7:f6:2f:a1:79:aa:41:16:db:7b:76:f5:0f:75:8b: 6e:63:0a:01:e3:e1:17:6f:51:b6:e8:88:75:22:67: af:37:c4:86:4b:92:f1:51:17:f1:03:e4:33:fa:5b: 4e:fd:03:81:01:e3:ff:f0:0f:8b:28:b0:d8:56:c2: 0a:ab:21:7b:7b:e3:03:64:c4:ad:be:db:6a:ed:11: 9a:03:24:43:ff:9b:57:9a:8d:88:a6:ed:28:28:f7: 90:05:a6:be:cb:c8:6f:58:66:b0:b8:74:34:de:c7: ad:c0:3b:7e:da:38:54:21:90:ad:26:d5:56:0d:7c: bb:28:61:5a:dd:34:5c:0c:f1:65:de:4b:02:b2:35: b9:dd:2a:f0:d8:f6:5b:e0:5f:0a:49:05:74:28:d8: aa:35:f6:10:36:d2:3d:bd:d2:90:23:21:0b:3c:53: c7:3d:ef:45:db:3c:95:27:7a:05:4f:26:8b:b4:50: c2:69:42:80:5a:d2:67:0c:a2:92:85:98:6e:77:76: 72:0d:41:9b:96:9c:e6:21:39:39:95:1e:56:65:98: 01:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:E5:12:62:0C:27:3F:6C:67:09:B2:C0:04:63:C3:84:91:95:CE:4C X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144324.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a68a::/32 Signature Algorithm: sha256WithRSAEncryption 7a:c8:bc:de:10:11:55:65:53:fa:8a:da:2d:99:73:8a:0b:53: d5:91:6f:1c:05:b9:25:6e:b4:87:c8:62:e5:e9:c4:cb:97:8b: 2a:54:e5:cc:f2:ed:5c:37:16:a5:56:75:7a:c8:43:92:0a:d4: 54:9b:6e:ed:c7:3a:fa:fd:7e:75:78:54:8b:f0:57:ec:7b:08: 22:cf:c7:d9:89:95:bc:23:ff:33:12:e6:0b:c8:34:a8:62:52: d6:e3:cf:86:03:0c:cb:c3:69:41:c7:9e:45:d3:24:99:07:ca: a8:8c:27:88:70:8c:f3:a6:e2:9a:81:d4:2d:e0:6e:f9:13:0f: f2:8d:b8:30:01:96:52:d5:db:e6:9e:92:87:15:86:ae:db:f4: 66:ee:d7:bd:e7:3c:50:78:fd:2c:07:88:0b:a5:ef:b1:f8:97: 86:3b:d9:8e:63:94:e6:e1:ab:c2:8b:98:2e:d4:58:78:8a:ab: 8a:52:16:7d:f2:f0:c8:cb:2c:35:06:15:a9:fb:d9:87:dc:30: a0:b0:e2:e2:c6:5f:d7:29:dd:45:94:2b:9a:c5:1e:ae:31:f0: a8:2d:58:67:66:19:b5:3e:d0:32:8b:b9:63:28:99:ec:76:3a: 87:e8:35:77:3a:fa:e6:89:b0:76:44:e5:d2:dc:c5:32:91:25: c2:4a:7d:dd -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUKprK4+X2AmRv60+N3oEktMIE3P0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDc1MVoX DTI3MDMwMzA2MTI1MVowMzExMC8GA1UEAxMoNjBFNTEyNjIwQzI3M0Y2QzY3MDlC MkMwMDQ2M0MzODQ5MTk1Q0U0QzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAIsXbj6vB/1jJumi+twrlmyqdqShFsM5PnWnmzdg4dR9vt+R+gP9ib0Spxci x/YvoXmqQRbbe3b1D3WLbmMKAePhF29RtuiIdSJnrzfEhkuS8VEX8QPkM/pbTv0D gQHj//APiyiw2FbCCqshe3vjA2TErb7bau0RmgMkQ/+bV5qNiKbtKCj3kAWmvsvI b1hmsLh0NN7HrcA7fto4VCGQrSbVVg18uyhhWt00XAzxZd5LArI1ud0q8Nj2W+Bf CkkFdCjYqjX2EDbSPb3SkCMhCzxTxz3vRds8lSd6BU8mi7RQwmlCgFrSZwyikoWY bnd2cg1Bm5ac5iE5OZUeVmWYAS8CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRg5RJi DCc/bGcJssAEY8OEkZXOTDAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDMyNC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK poowDQYJKoZIhvcNAQELBQADggEBAHrIvN4QEVVlU/qK2i2Zc4oLU9WRbxwFuSVu tIfIYuXpxMuXiypU5czy7Vw3FqVWdXrIQ5IK1FSbbu3HOvr9fnV4VIvwV+x7CCLP x9mJlbwj/zMS5gvINKhiUtbjz4YDDMvDaUHHnkXTJJkHyqiMJ4hwjPOm4pqB1C3g bvkTD/KNuDABllLV2+aekocVhq7b9Gbu173nPFB4/SwHiAul77H4l4Y72Y5jlObh q8KLmC7UWHiKq4pSFn3y8MjLLDUGFan72YfcMKCw4uLGX9cp3UWUK5rFHq4x8Kgt WGdmGbU+0DKLuWMomex2OofoNXc6+uaJsHZE5dLcxTKRJcJKfd0= -----END CERTIFICATE-----Generated at Sat Mar 28 11:49:58 2026 by rpki-client