$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144331.roa File: AS144331.roa (raw, json) Hash identifier: 3OWkPh0BEHyP9FNz2v3MFtIJCY1iHmrU21mEHAw3CFs= Subject key identifier: 6E:6A:A5:74:5D:C9:53:AC:22:6E:24:8C:6E:72:65:85:03:3A:1E:15 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 585C1A81CE665C262E6B323AC2E70E047B400045 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144331.roa Signing time: Wed 04 Mar 2026 06:14:52 +0000 ROA not before: Wed 04 Mar 2026 06:09:52 +0000 ROA not after: Wed 03 Mar 2027 06:14:52 +0000 asID: 144331 IP address blocks: 240a:a691::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:5c:1a:81:ce:66:5c:26:2e:6b:32:3a:c2:e7:0e:04:7b:40:00:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:09:52 2026 GMT Not After : Mar 3 06:14:52 2027 GMT Subject: CN=6E6AA5745DC953AC226E248C6E726585033A1E15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:3e:f3:15:dd:97:04:28:4f:63:9c:77:33:61: b1:54:88:10:f4:6f:b4:f2:51:d6:a0:8b:88:42:78: c0:17:a5:da:ff:6c:88:a2:aa:0e:c0:58:4a:6e:80: 63:87:54:57:3c:70:06:a9:f7:49:01:08:b1:73:07: 7e:97:21:42:b9:7c:42:af:30:8d:e4:b6:8e:6d:0d: 09:de:69:dc:1d:60:2d:14:51:f9:58:fd:8d:15:7d: 05:8f:f4:26:7d:26:8e:48:fd:74:11:2b:6b:15:83: c4:a8:8e:a2:89:57:fc:2b:bc:fc:d1:13:be:c5:c3: 7a:9f:51:b4:05:d0:60:38:3b:e4:2d:59:85:fd:2f: 93:7b:e4:72:4e:c6:1d:69:7c:6a:0e:56:c1:bd:43: bc:d5:cb:61:21:e0:3c:5a:77:38:aa:2e:d6:c8:62: 62:2f:c2:9e:30:84:19:4b:ea:85:0b:71:2b:c9:a8: c4:21:56:23:38:90:d9:a4:d2:b5:8a:fb:69:fc:f6: a7:b6:c4:7d:ce:f9:b7:c4:67:32:e3:0f:72:01:ea: c7:f9:b0:ff:f7:3d:da:64:ac:c8:ce:f4:71:0e:07: bc:a9:f8:da:fb:a6:a0:73:e9:1d:f1:e6:36:14:66: c7:29:f5:d1:31:7b:7d:7c:f0:5b:8d:b6:dc:31:03: 4f:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:6A:A5:74:5D:C9:53:AC:22:6E:24:8C:6E:72:65:85:03:3A:1E:15 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144331.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a691::/32 Signature Algorithm: sha256WithRSAEncryption 57:0c:00:35:90:64:c6:63:46:5e:cb:e1:cc:3e:9e:31:15:b9: 33:19:55:a0:bb:a7:37:65:bd:82:c2:fe:1c:d2:7d:d5:30:a0: f5:56:22:63:97:73:5d:3e:b0:3a:57:a3:32:d9:71:be:76:d6: 70:cd:27:27:ca:ae:b7:b7:d7:64:8a:e1:9d:06:d1:ff:17:98: 99:fd:7b:e6:9f:72:2c:fd:8f:91:31:16:48:af:fa:0a:e2:e3: 7e:d9:df:54:7e:8c:0e:c1:44:02:e0:e4:3f:46:ac:f4:f7:5c: 99:a7:34:9f:60:49:58:30:b6:7b:7c:c8:d9:b6:6c:5d:c1:10: 82:82:fd:4d:5c:db:27:4a:cc:c2:d5:bc:4b:f6:49:7f:6a:29: 94:26:19:75:60:0b:77:e1:f1:a7:7f:90:e4:e8:f1:dd:6b:13: 14:a6:aa:9e:db:03:b7:41:5a:d2:5e:2b:3c:8c:d1:9b:88:07: 6f:fc:ad:d5:a8:86:86:03:cc:a0:66:45:b6:57:49:db:3f:63: 7d:07:28:fc:1f:fa:27:ef:54:73:67:07:5b:58:25:20:a9:ca: 21:ae:e4:d1:38:c7:a7:46:59:6f:57:82:83:d9:2d:83:95:9c: 4f:c2:ce:5d:c3:f3:17:1e:47:5e:d2:9d:68:a4:f9:c9:d9:d6: 0b:bc:9f:36 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUWFwagc5mXCYuazI6wucOBHtAAEUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDk1MloX DTI3MDMwMzA2MTQ1MlowMzExMC8GA1UEAxMoNkU2QUE1NzQ1REM5NTNBQzIyNkUy NDhDNkU3MjY1ODUwMzNBMUUxNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAIY+8xXdlwQoT2OcdzNhsVSIEPRvtPJR1qCLiEJ4wBel2v9siKKqDsBYSm6A Y4dUVzxwBqn3SQEIsXMHfpchQrl8Qq8wjeS2jm0NCd5p3B1gLRRR+Vj9jRV9BY/0 Jn0mjkj9dBEraxWDxKiOoolX/Cu8/NETvsXDep9RtAXQYDg75C1Zhf0vk3vkck7G HWl8ag5Wwb1DvNXLYSHgPFp3OKou1shiYi/CnjCEGUvqhQtxK8moxCFWIziQ2aTS tYr7afz2p7bEfc75t8RnMuMPcgHqx/mw//c92mSsyM70cQ4HvKn42vumoHPpHfHm NhRmxyn10TF7fXzwW4223DEDT+kCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRuaqV0 XclTrCJuJIxucmWFAzoeFTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDMzMS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK ppEwDQYJKoZIhvcNAQELBQADggEBAFcMADWQZMZjRl7L4cw+njEVuTMZVaC7pzdl vYLC/hzSfdUwoPVWImOXc10+sDpXozLZcb521nDNJyfKrre312SK4Z0G0f8XmJn9 e+afciz9j5ExFkiv+gri437Z31R+jA7BRALg5D9GrPT3XJmnNJ9gSVgwtnt8yNm2 bF3BEIKC/U1c2ydKzMLVvEv2SX9qKZQmGXVgC3fh8ad/kOTo8d1rExSmqp7bA7dB WtJeKzyM0ZuIB2/8rdWohoYDzKBmRbZXSds/Y30HKPwf+ifvVHNnB1tYJSCpyiGu 5NE4x6dGWW9XgoPZLYOVnE/Czl3D8xceR17SnWik+cnZ1gu8nzY= -----END CERTIFICATE-----Generated at Sat Mar 28 13:18:09 2026 by rpki-client