$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144358.roa File: AS144358.roa (raw, json) Hash identifier: 4glUvY9W3hU223hymhMxiot4he2CWYUrgyd1XWmZAN8= Subject key identifier: 54:B5:17:3F:AF:D0:88:87:9B:81:C0:26:AA:73:0E:80:31:1C:C3:A3 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 6A3E952D2DF1847308315E9328E9E175FE01A99C Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144358.roa Signing time: Wed 04 Mar 2026 06:12:36 +0000 ROA not before: Wed 04 Mar 2026 06:07:36 +0000 ROA not after: Wed 03 Mar 2027 06:12:36 +0000 asID: 144358 IP address blocks: 240a:a6ac::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:3e:95:2d:2d:f1:84:73:08:31:5e:93:28:e9:e1:75:fe:01:a9:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:07:36 2026 GMT Not After : Mar 3 06:12:36 2027 GMT Subject: CN=54B5173FAFD088879B81C026AA730E80311CC3A3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:28:3d:44:dc:75:20:b6:ba:42:88:e0:fc:62: 74:a5:cf:d0:eb:69:58:8e:7e:31:64:d0:fa:3c:75: 91:64:c2:aa:2d:39:b5:91:e2:35:04:a8:80:bd:0c: a2:3a:56:9a:c3:bb:80:31:7a:32:6f:25:cc:97:5e: c5:f0:aa:51:36:a3:30:2b:37:59:41:43:5c:68:d4: cb:d8:48:46:cb:3b:2c:1c:3c:4f:c5:f4:ef:4d:38: 1d:fc:dc:07:c4:c7:c4:36:95:65:60:9f:e3:e2:f5: 27:3d:08:7a:9e:96:93:71:7a:43:96:6e:19:69:05: 9b:cb:89:f0:f5:6b:57:8f:45:f3:f0:d5:4d:7a:eb: b2:77:1e:63:6c:b4:b8:7e:64:89:75:48:04:2e:3f: 40:93:a3:a6:9b:d3:dd:52:35:0e:82:cf:e0:c9:3c: 21:1b:77:6c:d4:00:31:c8:a8:21:e1:91:2f:21:d5: 29:36:f6:f8:44:d2:d6:19:b2:85:f3:4b:b7:d9:7d: 07:ef:9a:35:dc:d1:4d:ca:73:7e:d4:46:2c:4f:6b: 47:77:fd:0c:46:67:d3:96:58:3f:64:45:4e:14:9a: 6f:9c:93:d5:c1:a7:66:64:ef:f3:62:93:42:12:0c: 14:10:6b:f3:4b:33:c0:1a:b3:72:2b:7e:70:33:f8: a0:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:B5:17:3F:AF:D0:88:87:9B:81:C0:26:AA:73:0E:80:31:1C:C3:A3 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144358.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a6ac::/32 Signature Algorithm: sha256WithRSAEncryption 1a:df:4e:ed:86:49:a5:da:a3:45:b1:1d:70:25:da:5a:2b:7f: d4:f0:e8:c1:f5:70:c3:33:46:a5:d0:6d:7f:0c:1a:37:66:aa: 3e:20:d8:08:10:ac:94:1a:fa:1b:a7:4c:aa:8f:a6:bc:55:44: b0:07:60:25:1b:36:48:05:24:01:d4:d6:7c:c1:bf:70:b9:95: ef:fc:f2:00:81:4a:ac:44:82:a3:2e:34:1b:0c:75:f9:be:25: 05:d4:32:0a:c9:e0:b3:ce:9c:2f:d8:a9:04:8a:76:fd:f6:0c: 89:29:8d:33:76:44:50:0f:bb:29:24:ce:86:2f:60:5e:d5:64: 15:cb:28:92:95:4c:44:ce:b5:8c:5b:de:e0:d1:90:ae:ae:b4: 85:3c:cf:49:72:95:65:60:4f:61:b2:52:57:01:b7:d7:e9:7d: 26:d2:90:f9:af:fe:61:f3:29:7c:e7:ab:fd:36:c6:65:2b:83: d3:07:aa:bc:42:5d:d2:b7:ac:db:6f:3d:3f:57:56:a8:b5:ef: f3:cd:c0:16:dc:fe:76:4d:20:26:e5:15:d6:e5:9b:88:58:c9: 7a:56:eb:26:28:eb:5d:3c:e2:21:7d:7f:7e:74:2b:a1:f0:bf: 24:2e:ab:43:e0:3c:fe:c5:7b:0a:30:fb:7f:39:18:23:3d:1a: 22:3c:11:94 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUaj6VLS3xhHMIMV6TKOnhdf4BqZwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDczNloX DTI3MDMwMzA2MTIzNlowMzExMC8GA1UEAxMoNTRCNTE3M0ZBRkQwODg4NzlCODFD MDI2QUE3MzBFODAzMTFDQzNBMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALgoPUTcdSC2ukKI4PxidKXP0OtpWI5+MWTQ+jx1kWTCqi05tZHiNQSogL0M ojpWmsO7gDF6Mm8lzJdexfCqUTajMCs3WUFDXGjUy9hIRss7LBw8T8X07004Hfzc B8THxDaVZWCf4+L1Jz0Iep6Wk3F6Q5ZuGWkFm8uJ8PVrV49F8/DVTXrrsnceY2y0 uH5kiXVIBC4/QJOjppvT3VI1DoLP4Mk8IRt3bNQAMcioIeGRLyHVKTb2+ETS1hmy hfNLt9l9B++aNdzRTcpzftRGLE9rR3f9DEZn05ZYP2RFThSab5yT1cGnZmTv82KT QhIMFBBr80szwBqzcit+cDP4oFMCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRUtRc/ r9CIh5uBwCaqcw6AMRzDozAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDM1OC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK pqwwDQYJKoZIhvcNAQELBQADggEBABrfTu2GSaXao0WxHXAl2lorf9Tw6MH1cMMz RqXQbX8MGjdmqj4g2AgQrJQa+hunTKqPprxVRLAHYCUbNkgFJAHU1nzBv3C5le/8 8gCBSqxEgqMuNBsMdfm+JQXUMgrJ4LPOnC/YqQSKdv32DIkpjTN2RFAPuykkzoYv YF7VZBXLKJKVTETOtYxb3uDRkK6utIU8z0lylWVgT2GyUlcBt9fpfSbSkPmv/mHz KXznq/02xmUrg9MHqrxCXdK3rNtvPT9XVqi17/PNwBbc/nZNICblFdblm4hYyXpW 6yYo61084iF9f350K6HwvyQuq0PgPP7Fewow+385GCM9GiI8EZQ= -----END CERTIFICATE-----Generated at Sat Mar 28 11:42:38 2026 by rpki-client