$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144325.roa File: AS144325.roa (raw, json) Hash identifier: T/yRhr5XDWktDRvqht1n9tQDEiEPm+yLR3I9KKDRC64= Subject key identifier: B1:D6:37:B1:81:8C:2F:44:E0:F4:A5:CC:CB:97:3E:04:6E:4A:58:7D Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 271247084F027928433E9F76D5A153AAD534CECA Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144325.roa Signing time: Wed 04 Mar 2026 06:15:50 +0000 ROA not before: Wed 04 Mar 2026 06:10:50 +0000 ROA not after: Wed 03 Mar 2027 06:15:50 +0000 asID: 144325 IP address blocks: 240a:a68b::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:12:47:08:4f:02:79:28:43:3e:9f:76:d5:a1:53:aa:d5:34:ce:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:10:50 2026 GMT Not After : Mar 3 06:15:50 2027 GMT Subject: CN=B1D637B1818C2F44E0F4A5CCCB973E046E4A587D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:50:1d:fe:2e:70:5e:fa:2c:74:d1:ba:48:be: 51:fa:b0:0e:1d:a2:34:88:d0:04:c2:4b:67:b5:38: 29:18:02:02:69:77:06:ee:75:f4:7a:b5:90:4f:a4: 34:52:47:9a:be:40:33:b0:23:f7:1a:4f:02:57:65: df:82:73:97:d2:3c:ed:4f:94:95:cc:d8:c5:50:00: 6d:5f:29:2f:35:7f:50:43:2d:02:66:39:78:f1:cb: 5f:15:cb:c1:d0:da:2e:f8:5e:a0:2e:c4:25:f3:a3: 6b:6f:b5:a3:f8:c2:38:84:0d:2a:07:36:7e:b2:b8: 3f:3b:d5:9f:5e:d2:1f:32:71:34:48:73:07:44:75: 2e:f8:e2:e1:33:5e:d2:a3:1c:5f:b9:7f:75:0e:41: 12:16:02:26:f6:01:ea:d3:9b:e2:6a:b0:f4:55:ec: 74:d9:f9:65:5e:08:ea:cf:9a:72:16:7a:de:b1:5d: d0:7c:9d:fa:7a:09:25:ad:e8:f3:53:75:56:43:fa: 08:71:07:f6:b6:50:c2:59:c3:63:ac:c7:e1:76:98: f1:2d:03:48:66:c6:ce:cc:83:4c:27:93:67:b3:f5: dd:e5:82:7d:f4:dc:3c:63:de:81:9c:6e:b9:5f:1b: b9:f5:d8:0c:d5:e9:c2:2c:8c:cf:11:ce:a7:77:a5: 06:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:D6:37:B1:81:8C:2F:44:E0:F4:A5:CC:CB:97:3E:04:6E:4A:58:7D X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144325.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a68b::/32 Signature Algorithm: sha256WithRSAEncryption 9b:e9:42:cd:26:66:52:7f:b6:0f:ba:ee:60:a1:f0:fa:c7:f2: 71:e5:15:53:57:45:a0:4e:67:f7:28:da:c2:5d:90:43:f7:eb: 98:cf:29:37:f4:29:cf:e3:c8:45:a9:ad:6d:81:e1:b3:de:9a: 49:22:e4:64:c6:86:83:56:9d:d7:bd:af:1c:3b:30:61:19:eb: 15:3b:75:d8:d6:71:4a:9a:52:39:b7:6c:7a:0b:90:1f:b2:60: e3:fa:48:a7:ea:ea:a4:af:74:7a:ea:cd:d1:17:5c:d1:e8:09: 39:a0:98:ec:3d:84:0d:3c:fe:5b:7b:8c:5d:f9:57:15:9e:52: d3:4e:30:d8:3a:61:0d:99:00:be:2e:fd:55:51:0d:4a:8b:da: b5:1c:6d:54:94:50:f9:34:41:1d:c1:a6:d8:0e:92:68:6d:69: 34:8d:88:0f:65:3a:68:d4:67:10:6c:b6:4a:31:b3:34:db:de: 77:b9:bd:ed:72:3e:c0:57:15:b2:a4:45:4c:1b:fa:48:12:36: 67:2b:74:12:c1:a9:16:b1:68:78:0b:66:6f:b0:11:a4:81:e1: 17:1a:1f:37:7e:e8:29:2f:85:a7:fb:12:64:0f:f4:ea:99:b7: 12:6b:b4:b2:37:36:3d:f8:f6:d3:ec:48:51:ef:1f:85:f0:ab: 5e:32:fe:0a -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUJxJHCE8CeShDPp921aFTqtU0zsowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTA1MFoX DTI3MDMwMzA2MTU1MFowMzExMC8GA1UEAxMoQjFENjM3QjE4MThDMkY0NEUwRjRB NUNDQ0I5NzNFMDQ2RTRBNTg3RDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJVQHf4ucF76LHTRuki+UfqwDh2iNIjQBMJLZ7U4KRgCAml3Bu519Hq1kE+k NFJHmr5AM7Aj9xpPAldl34Jzl9I87U+UlczYxVAAbV8pLzV/UEMtAmY5ePHLXxXL wdDaLvheoC7EJfOja2+1o/jCOIQNKgc2frK4PzvVn17SHzJxNEhzB0R1Lvji4TNe 0qMcX7l/dQ5BEhYCJvYB6tOb4mqw9FXsdNn5ZV4I6s+achZ63rFd0Hyd+noJJa3o 81N1VkP6CHEH9rZQwlnDY6zH4XaY8S0DSGbGzsyDTCeTZ7P13eWCffTcPGPegZxu uV8bufXYDNXpwiyMzxHOp3elBrkCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSx1jex gYwvROD0pczLlz4EbkpYfTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDMyNS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK poswDQYJKoZIhvcNAQELBQADggEBAJvpQs0mZlJ/tg+67mCh8PrH8nHlFVNXRaBO Z/co2sJdkEP365jPKTf0Kc/jyEWprW2B4bPemkki5GTGhoNWnde9rxw7MGEZ6xU7 ddjWcUqaUjm3bHoLkB+yYOP6SKfq6qSvdHrqzdEXXNHoCTmgmOw9hA08/lt7jF35 VxWeUtNOMNg6YQ2ZAL4u/VVRDUqL2rUcbVSUUPk0QR3BptgOkmhtaTSNiA9lOmjU ZxBstkoxszTb3ne5ve1yPsBXFbKkRUwb+kgSNmcrdBLBqRaxaHgLZm+wEaSB4Rca Hzd+6Ckvhaf7EmQP9OqZtxJrtLI3Nj349tPsSFHvH4Xwq14y/go= -----END CERTIFICATE-----Generated at Sat Mar 28 11:49:54 2026 by rpki-client