$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144340.roa File: AS144340.roa (raw, json) Hash identifier: +BaGG3djKTVAQttiwWur8teWOCUuIgpjezh6DsmuUuY= Subject key identifier: BA:EC:25:7B:A2:AA:51:D1:73:77:C6:75:51:59:5E:D3:F2:9A:F8:53 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 5C4691BFC6CB1028DF3B2FE984476D622E935FB8 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144340.roa Signing time: Wed 04 Mar 2026 06:13:46 +0000 ROA not before: Wed 04 Mar 2026 06:08:46 +0000 ROA not after: Wed 03 Mar 2027 06:13:46 +0000 asID: 144340 IP address blocks: 240a:a69a::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:46:91:bf:c6:cb:10:28:df:3b:2f:e9:84:47:6d:62:2e:93:5f:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:08:46 2026 GMT Not After : Mar 3 06:13:46 2027 GMT Subject: CN=BAEC257BA2AA51D17377C67551595ED3F29AF853 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:84:64:5b:b7:0d:b9:81:9d:01:86:a4:4a:78: 99:97:63:43:19:fb:bb:3d:3f:b2:bd:82:d0:69:1c: 5e:45:87:e5:95:0c:55:5c:44:2e:37:b1:87:c5:98: 52:94:ed:ff:da:e7:77:13:37:ed:c5:c2:7a:57:c1: db:c6:0b:31:46:6d:ea:ac:0a:49:df:c1:07:77:1d: 99:95:82:ec:2f:72:6c:19:d0:c1:5d:c7:e6:0d:37: ae:76:38:64:2d:f5:0d:38:7e:33:1f:07:72:7d:60: aa:b4:ef:d4:0b:46:fc:26:86:50:5e:27:d2:20:6e: 35:b4:35:86:ad:32:80:30:31:29:ce:03:cd:38:5b: c9:c0:f5:dc:c5:19:55:1f:36:82:49:c0:57:17:fd: 25:75:43:22:0c:97:9d:34:12:e5:3b:eb:b4:d9:c4: 03:02:24:49:e4:3b:da:d4:32:b6:56:d1:88:bd:18: dc:96:78:04:43:05:e3:2a:7e:23:06:9f:37:ee:55: a1:f0:eb:01:2c:fe:89:8d:4a:b3:e1:27:1f:33:da: ea:b0:65:3e:ef:2b:ca:3d:49:26:a6:34:e4:81:3d: 77:8a:74:fb:ae:f4:82:8f:92:83:2d:33:d3:cf:4f: be:8c:db:5f:4a:86:73:19:13:7d:44:6b:a7:56:8c: 7c:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:EC:25:7B:A2:AA:51:D1:73:77:C6:75:51:59:5E:D3:F2:9A:F8:53 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144340.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a69a::/32 Signature Algorithm: sha256WithRSAEncryption 97:88:61:7e:8e:00:a2:2e:f7:40:a4:04:b2:56:ea:94:f1:11: b8:d1:dd:12:08:48:f7:e9:72:8a:d4:66:82:95:7f:d8:d0:d4: a3:0f:4a:7c:d2:2c:1c:22:02:9a:0b:f9:ab:6b:74:82:56:9d: 9d:ba:46:be:63:c6:0c:b0:30:17:72:02:56:c1:36:7d:cf:ef: 76:fc:c0:58:94:3f:3b:91:a1:6a:98:9b:bd:69:38:7f:01:40: 76:f6:4a:b0:fc:a7:6e:ed:19:ff:34:99:38:af:79:39:e4:cc: e9:5c:98:47:18:c9:e1:a7:fe:23:1b:07:82:da:c9:00:77:51: 8c:ff:36:23:d5:ae:dc:a2:82:80:1a:c4:bc:36:d6:c2:bc:33: ae:12:cb:eb:4d:fa:9c:10:df:1c:81:55:fd:4c:a5:4c:09:83: fa:e3:7a:fe:16:87:39:6e:96:84:75:84:56:20:3d:50:f5:57: 67:14:30:da:71:c6:a0:fb:c5:10:a8:89:b4:f1:0a:8b:e6:0e: d0:91:6a:ba:35:6c:a2:0a:59:8c:9f:54:82:c8:5d:10:bc:47: 12:31:8e:37:10:2b:fa:e1:56:b5:8c:03:ad:91:c4:5b:2c:4c: 6d:a0:bf:6b:55:5d:74:02:e8:cb:3f:c0:09:b0:e6:6a:ed:00: 9f:a0:47:73 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUXEaRv8bLECjfOy/phEdtYi6TX7gwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDg0NloX DTI3MDMwMzA2MTM0NlowMzExMC8GA1UEAxMoQkFFQzI1N0JBMkFBNTFEMTczNzdD Njc1NTE1OTVFRDNGMjlBRjg1MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMaEZFu3DbmBnQGGpEp4mZdjQxn7uz0/sr2C0GkcXkWH5ZUMVVxELjexh8WY UpTt/9rndxM37cXCelfB28YLMUZt6qwKSd/BB3cdmZWC7C9ybBnQwV3H5g03rnY4 ZC31DTh+Mx8Hcn1gqrTv1AtG/CaGUF4n0iBuNbQ1hq0ygDAxKc4DzThbycD13MUZ VR82gknAVxf9JXVDIgyXnTQS5TvrtNnEAwIkSeQ72tQytlbRiL0Y3JZ4BEMF4yp+ IwafN+5VofDrASz+iY1Ks+EnHzPa6rBlPu8ryj1JJqY05IE9d4p0+670go+Sgy0z 089PvozbX0qGcxkTfURrp1aMfNMCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBS67CV7 oqpR0XN3xnVRWV7T8pr4UzAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDM0MC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK ppowDQYJKoZIhvcNAQELBQADggEBAJeIYX6OAKIu90CkBLJW6pTxEbjR3RIISPfp corUZoKVf9jQ1KMPSnzSLBwiApoL+atrdIJWnZ26Rr5jxgywMBdyAlbBNn3P73b8 wFiUPzuRoWqYm71pOH8BQHb2SrD8p27tGf80mTiveTnkzOlcmEcYyeGn/iMbB4La yQB3UYz/NiPVrtyigoAaxLw21sK8M64Sy+tN+pwQ3xyBVf1MpUwJg/rjev4Whzlu loR1hFYgPVD1V2cUMNpxxqD7xRCoibTxCovmDtCRaro1bKIKWYyfVILIXRC8RxIx jjcQK/rhVrWMA62RxFssTG2gv2tVXXQC6Ms/wAmw5mrtAJ+gR3M= -----END CERTIFICATE-----Generated at Sat Mar 28 11:43:14 2026 by rpki-client