$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144332.roa File: AS144332.roa (raw, json) Hash identifier: PpSolmUFBBJMjN9ZsLbtxD1KvJcOxAkgsKODiN1UQ8A= Subject key identifier: 5C:51:41:E8:B2:C3:A2:5C:82:2A:B5:91:53:1D:C1:9B:AD:27:29:E7 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 6B396C1F22BE9C195603B0904003DD355FCFCA84 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144332.roa Signing time: Wed 04 Mar 2026 06:15:37 +0000 ROA not before: Wed 04 Mar 2026 06:10:37 +0000 ROA not after: Wed 03 Mar 2027 06:15:37 +0000 asID: 144332 IP address blocks: 240a:a692::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:39:6c:1f:22:be:9c:19:56:03:b0:90:40:03:dd:35:5f:cf:ca:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:10:37 2026 GMT Not After : Mar 3 06:15:37 2027 GMT Subject: CN=5C5141E8B2C3A25C822AB591531DC19BAD2729E7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:57:9c:61:c7:95:65:8d:e6:67:e2:8d:6b:88: 11:b0:a3:c7:ea:cb:80:80:55:ce:6f:36:87:19:73: 83:1c:65:79:29:d3:58:7c:5f:9b:6b:46:57:10:db: a8:4e:94:c7:35:1d:9a:96:b2:0d:ac:6e:b1:5f:14: 5b:9f:65:86:08:20:43:7e:b6:5a:54:45:0e:4c:4e: 7d:f3:5a:39:f7:33:65:59:9d:72:7f:97:b9:80:65: b1:11:f6:2c:a2:0e:47:22:30:32:93:97:cd:e0:74: eb:f6:bc:50:48:c7:6f:67:0f:9e:de:35:fa:3f:e4: 10:40:e9:35:78:ac:e9:45:e3:03:4b:39:d7:9b:fa: a1:dd:2e:34:a5:91:eb:a0:d4:0a:0f:40:20:1d:00: 3b:6b:f5:02:f1:f5:00:41:af:7d:c3:69:52:21:77: ac:26:2e:4b:d1:14:3a:9e:8d:0c:e7:86:61:b4:3e: 39:f0:ec:d0:e7:e3:62:1c:de:84:0e:10:b4:f1:72: 16:ed:11:ae:75:93:b2:fc:d1:5b:1f:10:3d:40:c1: 1a:f1:17:e1:58:6b:91:91:ac:c9:fc:12:8f:dd:8b: 1f:84:f7:ff:bd:71:5b:95:3b:17:4f:15:d6:a0:39: fd:3f:47:f2:76:fe:09:c6:5b:a9:5b:83:79:25:f2: 11:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:51:41:E8:B2:C3:A2:5C:82:2A:B5:91:53:1D:C1:9B:AD:27:29:E7 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144332.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a692::/32 Signature Algorithm: sha256WithRSAEncryption 85:10:99:20:f3:72:a8:6b:39:60:44:88:c2:f8:7c:a3:b4:e6: 2e:66:4c:da:8e:b7:b5:64:44:1f:d1:88:8f:5e:1c:a1:1c:29: 6f:76:9c:12:5c:12:9d:bc:a8:58:7c:fd:04:07:ff:cb:4f:e7: 22:f3:bc:a3:f2:6c:7e:94:ba:0a:79:56:37:c6:a8:4a:8f:fc: 88:46:1e:17:28:e6:4a:15:1c:c8:fd:d4:80:3f:d6:9d:54:08: 36:bb:8e:16:ce:8d:be:07:ae:0d:c4:60:d0:0b:73:a4:63:e0: 26:33:d9:f0:7b:00:48:8c:71:12:45:0c:b7:7e:02:52:4e:f6: 67:dd:45:26:0e:bc:62:71:7d:17:7e:94:d6:b4:3f:31:d5:09: 2f:b2:32:15:a4:fc:a0:09:49:34:4e:90:2f:59:29:83:fe:bb: 4a:4d:ed:58:9c:f1:31:5b:58:9b:d4:fe:42:33:e4:f6:3f:98: ec:09:02:23:e3:99:47:52:24:f5:f9:fc:e5:6d:da:10:0c:35: ee:03:92:d2:5c:b7:fe:75:a1:6f:72:60:87:88:9f:6c:d7:34: 0a:c2:d0:62:aa:b7:b7:7f:7c:6d:01:c9:af:40:c8:96:ac:db: 53:11:23:30:c5:f9:b9:e6:ef:ee:35:6b:4d:86:6c:03:8c:4c: 3f:6f:c3:98 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUazlsHyK+nBlWA7CQQAPdNV/PyoQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTAzN1oX DTI3MDMwMzA2MTUzN1owMzExMC8GA1UEAxMoNUM1MTQxRThCMkMzQTI1QzgyMkFC NTkxNTMxREMxOUJBRDI3MjlFNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAN1XnGHHlWWN5mfijWuIEbCjx+rLgIBVzm82hxlzgxxleSnTWHxfm2tGVxDb qE6UxzUdmpayDaxusV8UW59lhgggQ362WlRFDkxOffNaOfczZVmdcn+XuYBlsRH2 LKIORyIwMpOXzeB06/a8UEjHb2cPnt41+j/kEEDpNXis6UXjA0s515v6od0uNKWR 66DUCg9AIB0AO2v1AvH1AEGvfcNpUiF3rCYuS9EUOp6NDOeGYbQ+OfDs0OfjYhze hA4QtPFyFu0RrnWTsvzRWx8QPUDBGvEX4VhrkZGsyfwSj92LH4T3/71xW5U7F08V 1qA5/T9H8nb+CcZbqVuDeSXyESsCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRcUUHo ssOiXIIqtZFTHcGbrScp5zAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDMzMi5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK ppIwDQYJKoZIhvcNAQELBQADggEBAIUQmSDzcqhrOWBEiML4fKO05i5mTNqOt7Vk RB/RiI9eHKEcKW92nBJcEp28qFh8/QQH/8tP5yLzvKPybH6Uugp5VjfGqEqP/IhG Hhco5koVHMj91IA/1p1UCDa7jhbOjb4Hrg3EYNALc6Rj4CYz2fB7AEiMcRJFDLd+ AlJO9mfdRSYOvGJxfRd+lNa0PzHVCS+yMhWk/KAJSTROkC9ZKYP+u0pN7Vic8TFb WJvU/kIz5PY/mOwJAiPjmUdSJPX5/OVt2hAMNe4DktJct/51oW9yYIeIn2zXNArC 0GKqt7d/fG0Bya9AyJas21MRIzDF+bnm7+41a02GbAOMTD9vw5g= -----END CERTIFICATE-----Generated at Sat Mar 28 14:26:36 2026 by rpki-client