$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144345.roa File: AS144345.roa (raw, json) Hash identifier: JwopUFQmHEVGKBLiFkt1hEoLlYjcwlgoDYqWqhJrOPU= Subject key identifier: A1:E8:4B:93:4C:83:36:6B:32:91:A6:1E:F2:9F:C8:97:4C:7E:6E:29 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 4BFD60262C8FAEAF8F38BD1920446E237913A80F Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144345.roa Signing time: Wed 04 Mar 2026 06:13:17 +0000 ROA not before: Wed 04 Mar 2026 06:08:17 +0000 ROA not after: Wed 03 Mar 2027 06:13:17 +0000 asID: 144345 IP address blocks: 240a:a69f::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:fd:60:26:2c:8f:ae:af:8f:38:bd:19:20:44:6e:23:79:13:a8:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:08:17 2026 GMT Not After : Mar 3 06:13:17 2027 GMT Subject: CN=A1E84B934C83366B3291A61EF29FC8974C7E6E29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:8e:b1:0d:6f:1c:90:99:f9:5b:ac:05:c8:2c: 1e:73:bb:9f:78:5b:e5:c9:ae:75:f9:26:80:b5:ee: a3:29:80:5c:50:ad:58:b8:43:b5:64:29:54:80:a3: 29:00:bb:ba:f5:02:e4:fc:54:8d:eb:74:43:cf:ca: b9:4e:d6:20:a9:7f:b3:49:cf:55:05:6a:e1:ad:f8: f9:24:70:22:87:5d:64:24:ef:8f:c9:df:e3:df:cb: 45:1c:67:74:03:c3:96:4f:8c:c8:01:d3:bc:a7:2a: 33:fb:00:0a:5a:4b:81:4c:5b:3a:a7:67:5a:54:92: f3:a3:c2:2d:30:22:90:70:23:f0:61:4c:05:09:a9: a5:93:46:2e:b7:4d:50:c8:23:a8:f9:67:8c:e3:8d: 94:28:b1:97:77:43:54:1d:68:de:3c:1b:df:9b:5d: 9c:e9:e4:8a:77:1c:63:b9:2b:68:d5:74:3c:20:5b: 84:09:51:2e:87:4f:b4:62:68:9a:3a:5e:8a:f0:8e: 8a:77:76:51:c6:cd:fc:7c:13:3e:c5:8e:b8:87:55: 28:2b:48:c7:df:88:a6:ad:90:af:63:79:b6:05:e8: f5:c1:8f:ab:c5:61:d5:38:a6:49:1b:12:25:ce:1f: 31:67:41:41:35:56:51:85:79:f4:49:8f:85:30:df: 6f:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:E8:4B:93:4C:83:36:6B:32:91:A6:1E:F2:9F:C8:97:4C:7E:6E:29 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144345.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a69f::/32 Signature Algorithm: sha256WithRSAEncryption 2d:bb:8b:a5:da:aa:13:74:83:22:5b:5c:18:2b:ca:1e:10:01: fc:57:ea:a9:c3:ea:21:29:43:ad:33:8e:c4:00:a9:44:39:c0: b5:bb:92:e6:5f:45:2d:3f:97:68:b7:9e:a0:f0:8a:ce:a4:ae: 8c:11:18:59:32:57:72:ed:b7:10:f2:50:e6:d4:8d:9d:37:7f: e1:09:5a:fc:d7:05:4c:b8:a5:c9:52:80:42:e3:0a:c0:2d:a2: 6e:32:62:51:0f:d7:aa:a1:1b:27:60:b3:f0:ad:5b:b0:3f:ee: 60:cc:34:08:05:c3:91:e0:be:9a:bc:51:3f:0a:e6:cd:0f:ac: 79:ed:00:21:89:11:4e:71:67:80:71:42:1c:d1:27:a5:9d:e6: 99:e0:d1:62:fc:d2:d1:ab:f4:14:47:28:96:d9:ee:1a:5e:ca: 33:fa:98:de:38:6f:f7:73:f0:9a:f6:5c:6c:96:66:d9:f8:96: 05:0f:af:17:30:78:97:28:53:20:26:1d:fa:79:52:cc:a3:d3: 63:7e:b4:b4:76:5a:36:69:ab:52:2d:b9:3f:12:31:9a:54:41: f1:9d:b4:be:84:81:6b:a4:7e:74:63:ce:8c:99:0b:1d:03:86: 67:d8:2f:59:1c:5c:59:87:73:82:3b:bd:21:1c:55:17:63:80: 19:1f:e8:63 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUS/1gJiyPrq+POL0ZIERuI3kTqA8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDgxN1oX DTI3MDMwMzA2MTMxN1owMzExMC8GA1UEAxMoQTFFODRCOTM0QzgzMzY2QjMyOTFB NjFFRjI5RkM4OTc0QzdFNkUyOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMKOsQ1vHJCZ+VusBcgsHnO7n3hb5cmudfkmgLXuoymAXFCtWLhDtWQpVICj KQC7uvUC5PxUjet0Q8/KuU7WIKl/s0nPVQVq4a34+SRwIoddZCTvj8nf49/LRRxn dAPDlk+MyAHTvKcqM/sAClpLgUxbOqdnWlSS86PCLTAikHAj8GFMBQmppZNGLrdN UMgjqPlnjOONlCixl3dDVB1o3jwb35tdnOnkinccY7kraNV0PCBbhAlRLodPtGJo mjpeivCOind2UcbN/HwTPsWOuIdVKCtIx9+Ipq2Qr2N5tgXo9cGPq8Vh1TimSRsS Jc4fMWdBQTVWUYV59EmPhTDfby8CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSh6EuT TIM2azKRph7yn8iXTH5uKTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDM0NS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK pp8wDQYJKoZIhvcNAQELBQADggEBAC27i6XaqhN0gyJbXBgryh4QAfxX6qnD6iEp Q60zjsQAqUQ5wLW7kuZfRS0/l2i3nqDwis6krowRGFkyV3LttxDyUObUjZ03f+EJ WvzXBUy4pclSgELjCsAtom4yYlEP16qhGydgs/CtW7A/7mDMNAgFw5Hgvpq8UT8K 5s0PrHntACGJEU5xZ4BxQhzRJ6Wd5png0WL80tGr9BRHKJbZ7hpeyjP6mN44b/dz 8Jr2XGyWZtn4lgUPrxcweJcoUyAmHfp5Usyj02N+tLR2WjZpq1ItuT8SMZpUQfGd tL6EgWukfnRjzoyZCx0DhmfYL1kcXFmHc4I7vSEcVRdjgBkf6GM= -----END CERTIFICATE-----Generated at Sat Mar 28 14:30:40 2026 by rpki-client