$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144351.roa File: AS144351.roa (raw, json) Hash identifier: rI/gNzzgOd7W5K+XnvTLGnMV2xIoB7uDQZUtsDP6LMY= Subject key identifier: 45:81:31:22:9B:EA:7F:B9:FE:CA:E8:DE:8D:46:74:40:3C:6A:5D:4B Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 3399D61D9EEF009B0EBD835744132C7D00B612C3 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144351.roa Signing time: Wed 04 Mar 2026 06:13:43 +0000 ROA not before: Wed 04 Mar 2026 06:08:43 +0000 ROA not after: Wed 03 Mar 2027 06:13:43 +0000 asID: 144351 IP address blocks: 240a:a6a5::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:99:d6:1d:9e:ef:00:9b:0e:bd:83:57:44:13:2c:7d:00:b6:12:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:08:43 2026 GMT Not After : Mar 3 06:13:43 2027 GMT Subject: CN=458131229BEA7FB9FECAE8DE8D4674403C6A5D4B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:30:1d:5c:0e:23:ad:b3:70:de:65:77:60:21: 9e:24:16:d5:ca:92:93:78:37:a4:48:7c:8f:a2:cc: 8d:7d:cf:ae:ba:58:8e:ed:8b:bc:1b:ed:a3:ee:42: 63:fd:7a:c7:c5:a3:09:26:db:1e:45:02:63:96:b1: 03:63:92:ba:aa:ba:dc:56:6f:ab:d4:3c:5a:0e:50: 0d:ff:e9:be:2a:49:34:01:cf:13:63:05:93:b8:74: 03:9b:8d:29:5c:3f:af:eb:07:ac:75:8c:d0:d7:2a: 31:74:90:23:04:97:7c:30:8f:48:97:d6:4d:15:b5: 19:f3:d7:95:78:96:32:82:3f:f8:c2:aa:0e:9f:aa: 12:bc:42:75:ec:3a:d0:a8:ff:79:12:97:ae:78:af: bb:8c:f7:69:74:9f:51:4a:02:5b:1f:94:f2:ef:96: 3d:98:92:ea:a4:68:52:ce:a1:59:10:0d:fc:40:f3: 9c:c4:ae:68:cf:b3:c5:87:ab:9c:7c:97:40:5b:18: 3b:90:bb:a5:b2:5b:2d:11:3f:d3:48:3f:73:5d:4c: 54:72:08:67:58:9f:fe:b0:36:88:3b:c4:1d:3c:b8: 0a:44:7f:a4:4a:0a:55:f2:04:bf:9b:e2:3a:41:dd: 48:7f:a1:01:29:9c:a3:8b:10:20:60:03:df:f0:26: 05:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:81:31:22:9B:EA:7F:B9:FE:CA:E8:DE:8D:46:74:40:3C:6A:5D:4B X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144351.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a6a5::/32 Signature Algorithm: sha256WithRSAEncryption d7:99:1e:6b:0a:bc:c4:54:7e:78:f7:51:48:f5:2c:6e:33:fa: 99:e1:88:6a:05:32:92:34:b7:88:bc:c1:5e:4a:da:74:30:97: 61:bd:46:8c:16:8a:ac:4a:d1:66:df:c0:8a:47:bb:ef:a8:53: 8b:0e:d6:12:4b:cd:37:6c:3c:72:19:77:67:ab:53:be:d4:c0: 4f:da:ab:45:ca:6c:b3:d4:bb:3a:f3:d0:7e:01:32:65:73:ef: cf:d0:23:43:92:36:c0:b1:7a:4c:ab:fd:bc:53:39:81:01:ea: dd:6d:4b:4a:56:5a:8c:60:27:26:4d:99:2d:4e:b7:67:f6:d6: 72:45:f1:b1:87:f2:de:e2:c2:20:0b:57:0a:99:18:a8:1b:88: c0:2e:13:1d:96:33:be:f4:02:ae:93:23:69:45:a6:b0:62:21: e5:12:fe:79:12:18:c4:dd:b1:15:52:a2:e4:22:07:fb:4d:c5: 28:74:c4:ce:fd:08:a5:0b:b9:18:12:35:4a:ed:58:24:9d:56: 2d:d8:a3:7e:86:39:5e:08:e4:83:44:53:cb:06:5f:e7:66:56: f7:ef:d9:81:2e:37:57:f6:62:38:1f:7a:b1:77:8f:93:4d:23: 4a:d3:96:b4:ce:fe:ff:42:67:db:15:2a:fc:7b:01:7a:33:55: b7:b9:be:a7 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUM5nWHZ7vAJsOvYNXRBMsfQC2EsMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDg0M1oX DTI3MDMwMzA2MTM0M1owMzExMC8GA1UEAxMoNDU4MTMxMjI5QkVBN0ZCOUZFQ0FF OERFOEQ0Njc0NDAzQzZBNUQ0QjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANMwHVwOI62zcN5ld2AhniQW1cqSk3g3pEh8j6LMjX3PrrpYju2LvBvto+5C Y/16x8WjCSbbHkUCY5axA2OSuqq63FZvq9Q8Wg5QDf/pvipJNAHPE2MFk7h0A5uN KVw/r+sHrHWM0NcqMXSQIwSXfDCPSJfWTRW1GfPXlXiWMoI/+MKqDp+qErxCdew6 0Kj/eRKXrnivu4z3aXSfUUoCWx+U8u+WPZiS6qRoUs6hWRAN/EDznMSuaM+zxYer nHyXQFsYO5C7pbJbLRE/00g/c11MVHIIZ1if/rA2iDvEHTy4CkR/pEoKVfIEv5vi OkHdSH+hASmco4sQIGAD3/AmBfkCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRFgTEi m+p/uf7K6N6NRnRAPGpdSzAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDM1MS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK pqUwDQYJKoZIhvcNAQELBQADggEBANeZHmsKvMRUfnj3UUj1LG4z+pnhiGoFMpI0 t4i8wV5K2nQwl2G9RowWiqxK0WbfwIpHu++oU4sO1hJLzTdsPHIZd2erU77UwE/a q0XKbLPUuzrz0H4BMmVz78/QI0OSNsCxekyr/bxTOYEB6t1tS0pWWoxgJyZNmS1O t2f21nJF8bGH8t7iwiALVwqZGKgbiMAuEx2WM770Aq6TI2lFprBiIeUS/nkSGMTd sRVSouQiB/tNxSh0xM79CKULuRgSNUrtWCSdVi3Yo36GOV4I5INEU8sGX+dmVvfv 2YEuN1f2YjgferF3j5NNI0rTlrTO/v9CZ9sVKvx7AXozVbe5vqc= -----END CERTIFICATE-----Generated at Sat Mar 28 11:44:14 2026 by rpki-client