$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144349.roa File: AS144349.roa (raw, json) Hash identifier: gStVBBKM624HCyqnm/9QZyOL1JFL+TuPTgxeey4U4lE= Subject key identifier: B3:E9:F0:22:3C:49:B4:E7:07:F5:31:3F:93:01:04:C5:0E:ED:5A:12 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 361B81C3F36D74402901C2A73891E7760470DB1C Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144349.roa Signing time: Wed 04 Mar 2026 06:15:41 +0000 ROA not before: Wed 04 Mar 2026 06:10:41 +0000 ROA not after: Wed 03 Mar 2027 06:15:41 +0000 asID: 144349 IP address blocks: 240a:a6a3::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:1b:81:c3:f3:6d:74:40:29:01:c2:a7:38:91:e7:76:04:70:db:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:10:41 2026 GMT Not After : Mar 3 06:15:41 2027 GMT Subject: CN=B3E9F0223C49B4E707F5313F930104C50EED5A12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:36:06:f8:0c:1f:9b:0a:ab:30:df:e9:7f:c6: 6b:d1:88:df:1f:42:f8:f5:6d:94:7d:ca:e3:53:12: f8:cb:3a:92:62:eb:6e:76:38:35:78:e3:e2:8c:74: 2c:2c:a5:12:9c:fb:63:fb:c1:19:3d:e4:e8:b6:ca: 73:c8:23:3a:61:e5:a1:83:96:b8:39:eb:5f:9e:40: 02:56:f8:c9:2a:e3:54:c8:8f:09:02:31:d8:07:17: de:50:7a:7a:61:01:1c:e0:3e:ff:16:a9:75:b6:b9: 09:5a:3c:cd:9b:17:3e:18:5c:cf:70:4d:dc:30:4e: 49:b5:9a:60:23:e7:26:92:98:de:52:13:4d:7b:54: de:52:4d:f6:a2:88:b4:f5:5c:02:66:b4:fa:84:fa: f2:25:74:61:7d:93:ec:fa:2f:55:a8:e2:6e:17:9e: 34:70:0a:37:12:67:d3:a1:14:56:4c:21:c8:84:c3: d3:92:b8:e4:d5:48:c7:60:fa:bf:df:e4:af:05:dd: d0:5c:ec:52:ff:0a:4a:61:99:ca:b5:e7:42:ff:64: e1:8d:7c:9d:66:1e:7e:e3:8f:ee:49:a3:e6:b6:62: 79:dc:1b:f3:7b:b1:b5:65:fd:6c:40:f9:40:2b:e6: 06:eb:f4:02:62:01:56:a3:e1:5e:51:da:50:6d:46: 92:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:E9:F0:22:3C:49:B4:E7:07:F5:31:3F:93:01:04:C5:0E:ED:5A:12 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144349.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a6a3::/32 Signature Algorithm: sha256WithRSAEncryption bc:7a:53:3a:e6:92:b8:6a:12:e9:17:d4:01:eb:6e:a0:62:a0: 05:68:09:15:e1:32:ce:4e:52:11:16:52:24:68:98:4c:cd:c5: 73:dc:a0:2f:6c:37:2d:86:58:73:4d:8f:7e:48:da:21:bb:18: 92:b6:98:fc:3c:33:a4:4a:99:03:42:fb:39:2e:49:c2:27:e3: bc:b6:1d:73:56:2e:21:36:2c:e7:e9:4f:01:0b:ac:bc:f8:5e: e7:f2:97:d9:1f:3c:ff:01:3b:0e:35:fe:c5:3c:0f:c8:4f:9f: 87:d0:cf:93:cf:7b:9e:6f:5e:e3:ec:f8:68:b7:ff:6f:16:ce: a4:6f:b6:97:b4:6b:df:30:0e:31:bb:31:cf:73:4c:06:86:61: ca:34:03:75:68:44:2a:a4:00:f3:52:b1:21:e5:8a:a7:18:02: 04:a4:06:97:03:b5:68:1b:21:3a:fa:0b:37:19:2e:c2:e5:6e: 07:01:10:f6:e6:43:b8:3f:da:ff:bf:bd:87:63:d4:d1:b8:d2: 6b:7a:ef:7e:37:85:44:39:a9:ca:13:8f:01:61:2b:6a:e3:1e: 62:24:98:09:24:e5:31:fa:3b:ca:08:73:94:79:30:eb:35:c6: 4b:28:29:e8:01:53:81:12:ae:fb:c4:b0:22:7b:c4:9a:d3:bc: e8:cc:58:fd -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUNhuBw/NtdEApAcKnOJHndgRw2xwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTA0MVoX DTI3MDMwMzA2MTU0MVowMzExMC8GA1UEAxMoQjNFOUYwMjIzQzQ5QjRFNzA3RjUz MTNGOTMwMTA0QzUwRUVENUExMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMg2BvgMH5sKqzDf6X/Ga9GI3x9C+PVtlH3K41MS+Ms6kmLrbnY4NXjj4ox0 LCylEpz7Y/vBGT3k6LbKc8gjOmHloYOWuDnrX55AAlb4ySrjVMiPCQIx2AcX3lB6 emEBHOA+/xapdba5CVo8zZsXPhhcz3BN3DBOSbWaYCPnJpKY3lITTXtU3lJN9qKI tPVcAma0+oT68iV0YX2T7PovVajibheeNHAKNxJn06EUVkwhyITD05K45NVIx2D6 v9/krwXd0FzsUv8KSmGZyrXnQv9k4Y18nWYefuOP7kmj5rZiedwb83uxtWX9bED5 QCvmBuv0AmIBVqPhXlHaUG1Gkp8CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSz6fAi PEm05wf1MT+TAQTFDu1aEjAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDM0OS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK pqMwDQYJKoZIhvcNAQELBQADggEBALx6UzrmkrhqEukX1AHrbqBioAVoCRXhMs5O UhEWUiRomEzNxXPcoC9sNy2GWHNNj35I2iG7GJK2mPw8M6RKmQNC+zkuScIn47y2 HXNWLiE2LOfpTwELrLz4Xufyl9kfPP8BOw41/sU8D8hPn4fQz5PPe55vXuPs+Gi3 /28WzqRvtpe0a98wDjG7Mc9zTAaGYco0A3VoRCqkAPNSsSHliqcYAgSkBpcDtWgb ITr6CzcZLsLlbgcBEPbmQ7g/2v+/vYdj1NG40mt67343hUQ5qcoTjwFhK2rjHmIk mAkk5TH6O8oIc5R5MOs1xksoKegBU4ESrvvEsCJ7xJrTvOjMWP0= -----END CERTIFICATE-----Generated at Sat Mar 28 11:45:32 2026 by rpki-client