$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144335.roa File: AS144335.roa (raw, json) Hash identifier: nH9Ed98rcTdh+D+c9cAptz69qkw7sFbcAOhh21Qa1XQ= Subject key identifier: 08:71:BB:95:69:F7:2A:13:24:4D:46:6B:2D:74:50:BB:43:C8:A4:A1 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 37CA4C8FBCDFEBFAAB4D1F5F1F4CDCAFD1AD1470 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144335.roa Signing time: Wed 04 Mar 2026 06:15:39 +0000 ROA not before: Wed 04 Mar 2026 06:10:39 +0000 ROA not after: Wed 03 Mar 2027 06:15:39 +0000 asID: 144335 IP address blocks: 240a:a695::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:ca:4c:8f:bc:df:eb:fa:ab:4d:1f:5f:1f:4c:dc:af:d1:ad:14:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:10:39 2026 GMT Not After : Mar 3 06:15:39 2027 GMT Subject: CN=0871BB9569F72A13244D466B2D7450BB43C8A4A1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:9e:9d:50:72:c0:67:de:84:f8:37:23:73:82: 12:ea:50:3a:ab:3c:44:0d:62:20:c5:56:34:78:f8: 9a:65:d6:01:b7:3b:b8:b6:fb:f4:4a:7c:01:21:cc: 1d:0a:44:ca:ff:3d:14:0f:33:3b:8e:30:34:e0:3a: 73:71:45:21:9e:c3:bb:1e:e0:13:92:46:d9:f7:d0: fe:6b:d4:73:cc:a9:9e:b9:32:2a:81:90:e7:70:fa: 22:b5:06:a0:7e:27:a1:c4:4f:6a:5d:54:9c:ee:c9: 38:9f:b1:d8:bd:39:35:e3:3d:61:e2:42:d0:ee:d4: c0:87:58:cb:1c:26:3c:51:96:1e:0b:32:86:e4:ec: 66:8b:e5:ac:6b:d9:d2:cf:73:4e:77:a6:9d:cf:7e: dd:70:92:48:ae:ed:43:fc:1a:b1:f5:78:55:db:9c: 68:6a:af:9d:6e:bc:6f:4f:6e:a7:44:31:03:62:43: 9e:8d:f2:15:0f:60:8e:f3:04:2f:86:3c:71:90:98: fc:bb:08:df:f4:e2:83:f1:c4:43:8c:0b:62:76:7f: 42:58:ac:dd:40:49:57:bd:6a:39:fa:48:86:66:73: 75:84:e2:a1:b0:b9:ba:d2:8c:e8:83:cd:ea:a2:c8: c2:74:21:0d:67:ac:70:64:ed:29:42:7d:f4:c1:18: bc:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:71:BB:95:69:F7:2A:13:24:4D:46:6B:2D:74:50:BB:43:C8:A4:A1 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144335.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a695::/32 Signature Algorithm: sha256WithRSAEncryption 5b:9f:15:a3:e6:0d:55:3c:3b:66:e3:15:5c:12:7f:83:64:12: e7:55:55:28:ad:f5:9c:29:bc:2f:28:b6:96:cd:9a:a5:f7:f3: ee:b8:f4:65:47:e3:66:11:7a:56:7f:5c:4b:15:09:c2:44:9c: 96:fd:86:f3:e0:22:6c:81:24:01:da:88:39:f4:34:52:1c:67: 39:b4:94:06:61:0f:af:95:9a:08:97:20:21:64:13:85:3b:cc: 01:c4:87:cc:d0:4f:0b:4a:e6:ab:e6:30:df:a8:d6:f6:2a:75: 13:1c:c8:e2:a9:af:d6:14:f0:a5:c9:56:fa:69:aa:2a:f9:0b: ab:f0:16:44:a0:a5:c7:bc:ca:31:ef:65:c9:9f:83:f7:9d:bb: 01:74:85:58:08:48:06:1f:b7:bf:eb:25:2e:14:98:e0:4c:8d: 41:6b:f3:2c:23:05:03:3c:1b:1d:8b:0b:86:1f:67:29:6e:b8: c9:4d:c9:2a:14:04:51:e6:a4:f8:ae:bf:45:a0:5e:e7:64:5e: 68:c7:be:9a:ea:39:5f:7f:26:85:87:15:b6:dd:82:3c:06:40: 20:f1:be:48:af:fa:4b:e3:19:de:a0:24:3b:88:c2:44:a6:c2: 12:ba:97:6d:43:d7:c2:77:4d:57:17:41:9b:74:fe:17:15:7a: 3a:bc:da:57 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUN8pMj7zf6/qrTR9fH0zcr9GtFHAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTAzOVoX DTI3MDMwMzA2MTUzOVowMzExMC8GA1UEAxMoMDg3MUJCOTU2OUY3MkExMzI0NEQ0 NjZCMkQ3NDUwQkI0M0M4QTRBMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANeenVBywGfehPg3I3OCEupQOqs8RA1iIMVWNHj4mmXWAbc7uLb79Ep8ASHM HQpEyv89FA8zO44wNOA6c3FFIZ7Dux7gE5JG2ffQ/mvUc8ypnrkyKoGQ53D6IrUG oH4nocRPal1UnO7JOJ+x2L05NeM9YeJC0O7UwIdYyxwmPFGWHgsyhuTsZovlrGvZ 0s9zTnemnc9+3XCSSK7tQ/wasfV4VducaGqvnW68b09up0QxA2JDno3yFQ9gjvME L4Y8cZCY/LsI3/Tig/HEQ4wLYnZ/Qlis3UBJV71qOfpIhmZzdYTiobC5utKM6IPN 6qLIwnQhDWescGTtKUJ99MEYvD8CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQIcbuV afcqEyRNRmstdFC7Q8ikoTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDMzNS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK ppUwDQYJKoZIhvcNAQELBQADggEBAFufFaPmDVU8O2bjFVwSf4NkEudVVSit9Zwp vC8otpbNmqX38+649GVH42YRelZ/XEsVCcJEnJb9hvPgImyBJAHaiDn0NFIcZzm0 lAZhD6+VmgiXICFkE4U7zAHEh8zQTwtK5qvmMN+o1vYqdRMcyOKpr9YU8KXJVvpp qir5C6vwFkSgpce8yjHvZcmfg/eduwF0hVgISAYft7/rJS4UmOBMjUFr8ywjBQM8 Gx2LC4YfZyluuMlNySoUBFHmpPiuv0WgXudkXmjHvprqOV9/JoWHFbbdgjwGQCDx vkiv+kvjGd6gJDuIwkSmwhK6l21D18J3TVcXQZt0/hcVejq82lc= -----END CERTIFICATE-----Generated at Sat Mar 28 11:42:17 2026 by rpki-client