$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144356.roa File: AS144356.roa (raw, json) Hash identifier: KzzleYg/TmUKC4tS051h+y+Auk8ivWllAM1zySmeQZA= Subject key identifier: 4F:56:55:7E:F6:A8:F8:39:E3:B0:E9:9E:D5:63:8B:EE:49:49:4F:B9 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 5AD3AC657AF3DBC2A6EA49838983974649567BF6 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144356.roa Signing time: Wed 04 Mar 2026 06:13:31 +0000 ROA not before: Wed 04 Mar 2026 06:08:31 +0000 ROA not after: Wed 03 Mar 2027 06:13:31 +0000 asID: 144356 IP address blocks: 240a:a6aa::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:d3:ac:65:7a:f3:db:c2:a6:ea:49:83:89:83:97:46:49:56:7b:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:08:31 2026 GMT Not After : Mar 3 06:13:31 2027 GMT Subject: CN=4F56557EF6A8F839E3B0E99ED5638BEE49494FB9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:71:dd:a2:d2:65:81:59:92:f2:8b:60:04:98: 6e:55:62:35:15:ab:3d:8e:94:b9:57:2c:27:c5:d3: 13:a8:e0:85:c4:e5:eb:2c:9b:33:02:2b:9d:5c:ff: 3c:89:f9:76:5e:2f:5f:09:92:26:65:8f:8b:87:a0: 81:62:7b:eb:49:46:2c:7e:a0:fd:07:3d:81:3b:87: 5c:f5:90:67:e4:f5:0a:56:91:b4:b1:7c:5a:5d:26: e2:f0:3a:28:31:ad:ec:ae:26:29:69:0b:ac:3c:02: 53:4b:cd:df:e5:07:7a:3b:94:9a:87:f8:00:12:ef: d8:d0:0d:87:93:34:7c:f0:fb:54:7f:0b:9a:53:2b: 65:10:e3:11:1b:7e:a8:53:d1:b9:3d:38:ea:b3:25: d8:fb:61:75:3e:38:dc:4f:e3:79:28:bd:76:07:4b: 98:92:63:7c:90:6d:b6:09:09:c2:99:c3:c3:ba:e6: ea:58:3b:28:a8:9b:48:bb:e6:73:ba:4f:44:eb:09: 83:03:02:c1:b4:30:5b:c4:c2:00:3c:89:e0:cc:ff: 02:0f:a3:3b:96:91:0a:00:37:6a:27:f6:28:85:32: e9:a3:68:a7:05:b9:ad:a4:4e:85:a0:19:20:25:60: 5a:12:35:7b:40:b8:b1:3c:e2:4c:6b:a1:e1:d2:10: 72:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:56:55:7E:F6:A8:F8:39:E3:B0:E9:9E:D5:63:8B:EE:49:49:4F:B9 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144356.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a6aa::/32 Signature Algorithm: sha256WithRSAEncryption c5:b3:00:c9:9a:db:9d:af:09:17:42:1b:c6:95:9f:15:bf:5a: e5:96:4e:cd:7a:7f:11:91:ed:4f:f4:30:d9:3e:ea:ca:a8:40: d8:66:18:91:25:f1:6a:50:6f:c9:0b:49:d8:1d:4d:6b:01:dd: d6:38:c9:98:d8:fc:df:3e:1a:82:f1:bf:58:c0:1d:08:5b:57: bd:b2:08:3b:a7:bf:42:7c:72:a4:cc:2f:18:2b:2b:42:a6:c1: c4:26:a6:37:da:5f:0c:e0:74:8d:a0:df:d2:21:2c:d5:86:e3: c6:01:28:c7:c9:c8:20:61:bf:70:e5:56:2a:e3:88:6c:f7:32: f2:bc:d3:e3:e3:f1:94:12:07:71:db:ee:ec:a5:26:b3:1e:f5: 55:0b:18:fe:da:66:dc:07:6e:15:b8:f7:62:ff:06:a4:bc:da: 70:3b:af:8b:72:9b:9f:13:a9:2e:70:29:d9:f6:b9:d4:f6:e8: 63:a0:a7:31:13:4d:be:a5:ec:e7:90:43:ed:5c:e1:fd:cd:65: 6a:ba:51:22:30:25:35:99:06:04:47:7c:68:33:4a:09:09:b9: a7:29:56:e2:5c:03:f1:be:b1:32:8b:e2:5f:2e:fc:50:92:ab: 3f:55:98:01:24:cf:4a:27:be:52:68:79:2b:5c:45:50:36:81: fe:84:c4:c6 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUWtOsZXrz28Km6kmDiYOXRklWe/YwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDgzMVoX DTI3MDMwMzA2MTMzMVowMzExMC8GA1UEAxMoNEY1NjU1N0VGNkE4RjgzOUUzQjBF OTlFRDU2MzhCRUU0OTQ5NEZCOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKRx3aLSZYFZkvKLYASYblViNRWrPY6UuVcsJ8XTE6jghcTl6yybMwIrnVz/ PIn5dl4vXwmSJmWPi4eggWJ760lGLH6g/Qc9gTuHXPWQZ+T1ClaRtLF8Wl0m4vA6 KDGt7K4mKWkLrDwCU0vN3+UHejuUmof4ABLv2NANh5M0fPD7VH8LmlMrZRDjERt+ qFPRuT046rMl2PthdT443E/jeSi9dgdLmJJjfJBttgkJwpnDw7rm6lg7KKibSLvm c7pPROsJgwMCwbQwW8TCADyJ4Mz/Ag+jO5aRCgA3aif2KIUy6aNopwW5raROhaAZ ICVgWhI1e0C4sTziTGuh4dIQcq8CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRPVlV+ 9qj4OeOw6Z7VY4vuSUlPuTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDM1Ni5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK pqowDQYJKoZIhvcNAQELBQADggEBAMWzAMma252vCRdCG8aVnxW/WuWWTs16fxGR 7U/0MNk+6sqoQNhmGJEl8WpQb8kLSdgdTWsB3dY4yZjY/N8+GoLxv1jAHQhbV72y CDunv0J8cqTMLxgrK0KmwcQmpjfaXwzgdI2g39IhLNWG48YBKMfJyCBhv3DlVirj iGz3MvK80+Pj8ZQSB3Hb7uylJrMe9VULGP7aZtwHbhW492L/BqS82nA7r4tym58T qS5wKdn2udT26GOgpzETTb6l7OeQQ+1c4f3NZWq6USIwJTWZBgRHfGgzSgkJuacp VuJcA/G+sTKL4l8u/FCSqz9VmAEkz0onvlJoeStcRVA2gf6ExMY= -----END CERTIFICATE-----Generated at Sat Mar 28 11:41:41 2026 by rpki-client