$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144343.roa File: AS144343.roa (raw, json) Hash identifier: mkDYR8IBNU+9xtpKm7N0WTXeBkFl4wuCSLJokHyFyZ4= Subject key identifier: 0C:3F:A3:DE:FA:2D:AF:25:8B:06:92:E5:80:46:1E:BA:EE:4A:F8:43 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 12FE9352EF7316611A124368E45E83F9A4178C31 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144343.roa Signing time: Wed 04 Mar 2026 06:15:04 +0000 ROA not before: Wed 04 Mar 2026 06:10:04 +0000 ROA not after: Wed 03 Mar 2027 06:15:04 +0000 asID: 144343 IP address blocks: 240a:a69d::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:fe:93:52:ef:73:16:61:1a:12:43:68:e4:5e:83:f9:a4:17:8c:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:10:04 2026 GMT Not After : Mar 3 06:15:04 2027 GMT Subject: CN=0C3FA3DEFA2DAF258B0692E580461EBAEE4AF843 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:f7:4f:4b:9f:b5:ed:45:7a:42:1b:44:c5:61: b8:e6:33:5f:51:af:a5:f7:5e:33:1f:e0:b7:cd:2c: d5:9e:5e:c7:35:89:e5:be:81:17:3b:a5:b4:15:06: 10:51:39:8e:7c:c7:c0:eb:23:af:4a:c5:aa:67:a7: e9:fa:c5:50:22:dd:a9:32:b2:fd:20:b9:f0:13:5a: f5:e1:00:82:21:61:86:83:b1:b0:cd:77:f1:f2:8f: c2:9a:fd:3e:40:15:e1:c3:28:37:de:57:cc:85:b5: 79:db:54:2c:51:5a:cf:24:6c:ce:db:9c:f2:96:fb: 39:d6:74:db:b5:12:76:3e:41:29:be:20:a1:7b:32: 06:95:8d:f2:c7:12:d4:a4:34:00:d5:3d:d9:fc:b5: d1:52:c7:37:1c:40:78:ee:19:3e:9b:47:0f:7f:b6: 6a:e6:70:d2:df:db:87:d6:36:59:12:57:fb:71:34: 0c:26:34:0c:40:fd:24:b5:c2:c5:fb:c4:cc:1d:27: f3:04:31:14:db:e3:09:af:0e:4d:74:f3:7a:a9:4b: 55:df:5c:39:4f:5b:2a:af:a0:86:04:1c:7b:c4:c9: ea:12:93:0c:94:8b:ac:b3:2f:e2:76:f2:67:21:9f: a0:b6:58:35:dc:2f:7d:93:21:0e:0e:91:4a:6d:51: 47:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:3F:A3:DE:FA:2D:AF:25:8B:06:92:E5:80:46:1E:BA:EE:4A:F8:43 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144343.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a69d::/32 Signature Algorithm: sha256WithRSAEncryption 1d:91:ff:25:b0:2b:52:84:47:72:d9:27:98:e9:0f:70:29:9c: f9:fa:b2:e4:7b:52:1b:bf:93:0c:c8:39:fc:f9:5e:ef:ed:7d: f8:02:9b:0d:ea:b7:e6:f8:b3:6b:99:5e:b4:15:94:46:c9:92: bc:e5:94:42:25:ba:1d:3a:61:e7:70:f8:ef:cb:fd:08:30:7c: 56:40:ad:d2:f0:06:3d:6d:ac:04:41:ef:25:e7:14:d8:31:ee: 46:ee:0d:ed:82:96:71:77:05:1e:7a:65:be:f0:ec:cf:97:53: bc:47:c0:4e:1a:5b:bf:de:fb:31:5e:79:37:43:69:14:26:0a: 51:c6:a6:64:72:83:ac:9f:86:7d:12:f4:eb:d2:6c:09:22:68: 18:d9:e9:2d:a6:fe:88:46:f4:2c:50:b0:bb:88:bb:5a:6a:eb: da:11:9a:28:da:65:e5:f4:92:cb:9c:f4:a0:c9:8e:27:36:62: 8a:ab:7b:94:d3:04:92:75:48:11:bd:48:60:24:39:f0:75:9b: 2b:79:a2:19:c5:f1:25:1a:e9:5d:61:a5:1b:20:0a:d8:6d:2f: 17:9e:c6:23:9d:92:c5:35:ae:c7:22:c2:b3:a6:bb:b2:a5:25: 2d:99:4a:09:f8:4d:b4:7c:6a:e6:0f:03:60:2e:59:4e:fb:38: 34:58:d2:1c -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUEv6TUu9zFmEaEkNo5F6D+aQXjDEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTAwNFoX DTI3MDMwMzA2MTUwNFowMzExMC8GA1UEAxMoMEMzRkEzREVGQTJEQUYyNThCMDY5 MkU1ODA0NjFFQkFFRTRBRjg0MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKT3T0ufte1FekIbRMVhuOYzX1GvpfdeMx/gt80s1Z5exzWJ5b6BFzultBUG EFE5jnzHwOsjr0rFqmen6frFUCLdqTKy/SC58BNa9eEAgiFhhoOxsM138fKPwpr9 PkAV4cMoN95XzIW1edtULFFazyRsztuc8pb7OdZ027USdj5BKb4goXsyBpWN8scS 1KQ0ANU92fy10VLHNxxAeO4ZPptHD3+2auZw0t/bh9Y2WRJX+3E0DCY0DED9JLXC xfvEzB0n8wQxFNvjCa8OTXTzeqlLVd9cOU9bKq+ghgQce8TJ6hKTDJSLrLMv4nby ZyGfoLZYNdwvfZMhDg6RSm1RR2UCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQMP6Pe +i2vJYsGkuWARh667kr4QzAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDM0My5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK pp0wDQYJKoZIhvcNAQELBQADggEBAB2R/yWwK1KER3LZJ5jpD3ApnPn6suR7Uhu/ kwzIOfz5Xu/tffgCmw3qt+b4s2uZXrQVlEbJkrzllEIluh06Yedw+O/L/QgwfFZA rdLwBj1trARB7yXnFNgx7kbuDe2ClnF3BR56Zb7w7M+XU7xHwE4aW7/e+zFeeTdD aRQmClHGpmRyg6yfhn0S9OvSbAkiaBjZ6S2m/ohG9CxQsLuIu1pq69oRmijaZeX0 ksuc9KDJjic2Yoqre5TTBJJ1SBG9SGAkOfB1myt5ohnF8SUa6V1hpRsgCthtLxee xiOdksU1rsciwrOmu7KlJS2ZSgn4TbR8auYPA2AuWU77ODRY0hw= -----END CERTIFICATE-----Generated at Sat Mar 28 11:42:20 2026 by rpki-client