$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144359.roa File: AS144359.roa (raw, json) Hash identifier: JD98rW3mygYK+kRKzrz6aiUTz6tKx7a19XlYWvbhnLs= Subject key identifier: F5:10:CC:F5:69:6D:E0:1F:2A:CA:DA:65:97:A1:17:5A:04:A8:B4:29 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 5033EBBF4A1546AD52E0C5512E1E70F46975A44F Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144359.roa Signing time: Wed 04 Mar 2026 06:14:28 +0000 ROA not before: Wed 04 Mar 2026 06:09:28 +0000 ROA not after: Wed 03 Mar 2027 06:14:28 +0000 asID: 144359 IP address blocks: 240a:a6ad::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:33:eb:bf:4a:15:46:ad:52:e0:c5:51:2e:1e:70:f4:69:75:a4:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:09:28 2026 GMT Not After : Mar 3 06:14:28 2027 GMT Subject: CN=F510CCF5696DE01F2ACADA6597A1175A04A8B429 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:c6:a5:e5:1b:71:47:88:7f:70:cd:d7:ee:11: 0a:0b:18:c4:f6:38:51:bb:c8:22:6e:00:3d:20:b5: 9d:3f:42:b3:9f:39:17:88:49:bc:74:0a:1e:17:05: d1:1c:d8:8e:d6:81:ae:26:72:4e:b2:f1:a3:14:d5: f9:b4:89:15:59:4c:f6:da:21:b9:ab:02:2f:73:03: f8:b6:8d:40:1c:c2:46:ad:41:42:7e:5a:90:96:5b: 60:d3:e2:3a:8c:32:ee:8c:97:8d:21:cc:53:a3:03: bf:e8:85:85:31:ae:8e:e4:1b:79:6b:79:a3:68:8f: 82:fd:ee:b1:a9:49:98:61:83:6f:f4:10:35:da:d5: 42:bd:9e:a7:e8:48:f5:6e:aa:a8:29:aa:25:8b:12: 5c:68:18:c6:73:db:e8:9c:85:66:24:f7:44:7c:37: 1b:fe:2f:44:9a:7d:7d:f5:fd:61:33:85:62:44:b4: 1d:7d:0f:76:76:e3:4c:e6:d7:ed:58:04:4a:00:ff: 86:97:c3:2c:53:01:8a:46:b0:00:bb:8c:cc:1e:b4: 0c:77:82:83:99:5f:5c:fa:5b:a2:98:0c:16:70:ef: a3:62:91:6a:4d:4e:c8:ce:10:23:64:22:a8:1a:99: 3b:e1:22:f0:fa:3c:35:93:b6:ff:38:c0:23:73:7a: 44:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:10:CC:F5:69:6D:E0:1F:2A:CA:DA:65:97:A1:17:5A:04:A8:B4:29 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144359.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a6ad::/32 Signature Algorithm: sha256WithRSAEncryption ad:7a:78:ea:06:26:df:3f:e2:4e:af:bb:a8:42:e6:63:a4:23: c0:c7:1e:d0:ed:07:2c:42:b4:56:e1:08:90:a8:2c:74:23:2d: a1:0c:6f:c6:50:4f:29:f5:74:cf:b4:b8:f8:56:f2:c3:c0:3e: cb:fa:e2:97:34:e4:84:1c:a2:32:4f:ce:26:22:10:22:03:19: 3f:51:84:ab:dd:25:42:8b:37:3e:3e:15:b0:5b:2b:1a:eb:f7: 5a:f3:96:f8:28:d9:5b:7a:82:aa:51:64:9d:2b:72:1f:4e:37: 1b:43:d6:aa:d3:e1:de:3d:d3:19:82:79:b8:06:96:e6:87:39: f9:31:12:f4:62:f3:5e:d9:d1:34:09:ea:4b:2f:42:74:02:7f: fc:1b:b9:79:c7:dc:f9:0c:96:8b:f9:30:49:e7:e1:2a:f2:09: 67:07:94:07:6d:fe:90:a4:10:eb:8b:e8:a8:b3:26:8b:6d:5d: 24:f3:7f:3f:0b:c9:6b:06:16:40:f6:72:2b:21:38:7a:4c:99: a4:d9:56:d3:62:59:8e:9c:b0:d2:a5:50:97:40:3a:04:6e:ec: 39:8e:35:65:07:82:4b:43:32:3c:b3:2d:18:0f:54:8b:50:3a: 33:7c:25:f2:96:49:d0:97:bd:2f:b9:8f:e3:eb:db:b6:f4:c0: 9d:3b:1d:f1 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUUDPrv0oVRq1S4MVRLh5w9Gl1pE8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDkyOFoX DTI3MDMwMzA2MTQyOFowMzExMC8GA1UEAxMoRjUxMENDRjU2OTZERTAxRjJBQ0FE QTY1OTdBMTE3NUEwNEE4QjQyOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANfGpeUbcUeIf3DN1+4RCgsYxPY4UbvIIm4APSC1nT9Cs585F4hJvHQKHhcF 0RzYjtaBriZyTrLxoxTV+bSJFVlM9tohuasCL3MD+LaNQBzCRq1BQn5akJZbYNPi Oowy7oyXjSHMU6MDv+iFhTGujuQbeWt5o2iPgv3usalJmGGDb/QQNdrVQr2ep+hI 9W6qqCmqJYsSXGgYxnPb6JyFZiT3RHw3G/4vRJp9ffX9YTOFYkS0HX0PdnbjTObX 7VgESgD/hpfDLFMBikawALuMzB60DHeCg5lfXPpbopgMFnDvo2KRak1OyM4QI2Qi qBqZO+Ei8Po8NZO2/zjAI3N6RFkCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBT1EMz1 aW3gHyrK2mWXoRdaBKi0KTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDM1OS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK pq0wDQYJKoZIhvcNAQELBQADggEBAK16eOoGJt8/4k6vu6hC5mOkI8DHHtDtByxC tFbhCJCoLHQjLaEMb8ZQTyn1dM+0uPhW8sPAPsv64pc05IQcojJPziYiECIDGT9R hKvdJUKLNz4+FbBbKxrr91rzlvgo2Vt6gqpRZJ0rch9ONxtD1qrT4d490xmCebgG luaHOfkxEvRi817Z0TQJ6ksvQnQCf/wbuXnH3PkMlov5MEnn4SryCWcHlAdt/pCk EOuL6KizJottXSTzfz8LyWsGFkD2cishOHpMmaTZVtNiWY6csNKlUJdAOgRu7DmO NWUHgktDMjyzLRgPVItQOjN8JfKWSdCXvS+5j+Pr27b0wJ07HfE= -----END CERTIFICATE-----Generated at Sat Mar 28 11:45:41 2026 by rpki-client