$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144375.roa File: AS144375.roa (raw, json) Hash identifier: dmBVXnsKHd/72ZhP3KIKvMvp0Hm4auIT6nIqaKcRQ1g= Subject key identifier: FC:9E:4A:D3:E5:04:C9:79:B8:41:BB:0B:61:BF:17:A6:04:2D:65:D5 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 29B89AB2FDCB30A26051F0E2D7E6C5791211CF03 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144375.roa Signing time: Wed 04 Mar 2026 06:13:15 +0000 ROA not before: Wed 04 Mar 2026 06:08:15 +0000 ROA not after: Wed 03 Mar 2027 06:13:15 +0000 asID: 144375 IP address blocks: 240a:a6bd::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:b8:9a:b2:fd:cb:30:a2:60:51:f0:e2:d7:e6:c5:79:12:11:cf:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:08:15 2026 GMT Not After : Mar 3 06:13:15 2027 GMT Subject: CN=FC9E4AD3E504C979B841BB0B61BF17A6042D65D5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:39:12:db:c1:f5:99:38:04:97:03:52:a5:3f: 95:4f:13:07:13:82:a3:9a:45:26:eb:97:db:f0:73: bc:98:b6:95:d2:9d:6a:5d:c4:ed:03:b6:b3:e1:12: b7:ce:d3:df:0b:7b:f5:04:a5:13:a8:f5:27:ff:89: 04:3e:6a:fd:e3:31:cd:3f:08:c8:fe:12:d4:ed:3f: 47:ff:ff:64:cf:57:0c:9d:12:66:73:48:ca:fd:f7: b4:ca:69:ea:c4:72:a2:91:0d:03:10:88:b4:24:bc: ef:bd:33:d8:18:89:78:18:67:fe:44:16:6a:16:76: 60:56:4b:4d:0e:3e:12:ad:5d:e6:b6:d4:75:76:51: 84:4d:4b:bd:8b:ed:3a:31:5c:9b:8c:13:14:59:92: e5:80:d7:a9:f8:36:fc:f2:6a:f5:96:56:eb:c8:e8: 40:bb:5c:73:46:b7:c2:82:4f:b5:75:3d:fc:fe:39: a6:4e:e8:6e:ad:3e:b5:45:82:d3:89:43:b1:da:36: db:e7:67:d2:5e:2d:74:b8:6b:e5:12:f0:e3:1a:23: a9:1e:a5:b3:f8:1c:79:73:88:19:bc:b4:aa:0e:a7: 40:ce:88:9d:23:86:55:ef:ff:23:32:ea:1f:05:85: b8:25:28:65:f1:82:6e:13:c4:ed:bf:fb:3e:f8:0a: 7c:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:9E:4A:D3:E5:04:C9:79:B8:41:BB:0B:61:BF:17:A6:04:2D:65:D5 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144375.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a6bd::/32 Signature Algorithm: sha256WithRSAEncryption 37:ce:1f:c0:85:e3:f2:cf:02:11:ee:50:e3:54:97:cc:b6:54: a5:72:67:cf:6e:e3:11:08:57:ad:8f:ad:cd:8c:82:f4:55:0f: bf:98:da:f4:ea:00:87:4c:ef:2e:ed:2d:a2:6f:f9:12:75:b7: c7:f1:00:6f:ea:d0:90:aa:77:74:48:fa:7f:1b:ea:9e:00:f2: 66:75:fd:53:f4:ff:6d:e8:9b:87:d1:7b:49:47:f5:e4:ee:5b: fa:9b:d3:87:29:a6:35:e0:49:25:21:c2:cc:8f:3b:be:09:36: ed:55:ce:87:68:09:85:05:a3:0b:bf:d1:f8:4c:82:34:49:41: b1:ab:09:69:2d:ce:87:c8:eb:0c:82:bd:a8:d3:53:66:85:9c: ad:62:f9:35:95:3a:95:d4:0f:ff:83:4c:e8:42:48:3f:ce:6e: 47:f2:77:1b:f4:97:aa:2d:b6:aa:3d:92:67:da:e6:d8:97:09: 09:73:7f:a5:5c:90:a5:1a:3a:2e:0a:3c:46:fc:b6:4e:8d:ca: 7d:96:4b:6c:b8:d7:04:b8:43:b3:ce:06:53:e4:34:89:1c:25: 52:45:2e:24:3c:b4:39:06:62:45:ba:7d:8b:8f:34:df:63:09: 19:e3:20:3f:a9:af:ad:95:b1:78:62:f1:5c:d9:ba:41:82:ad: 80:04:a2:93 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUKbiasv3LMKJgUfDi1+bFeRIRzwMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDgxNVoX DTI3MDMwMzA2MTMxNVowMzExMC8GA1UEAxMoRkM5RTRBRDNFNTA0Qzk3OUI4NDFC QjBCNjFCRjE3QTYwNDJENjVENTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKc5EtvB9Zk4BJcDUqU/lU8TBxOCo5pFJuuX2/BzvJi2ldKdal3E7QO2s+ES t87T3wt79QSlE6j1J/+JBD5q/eMxzT8IyP4S1O0/R///ZM9XDJ0SZnNIyv33tMpp 6sRyopENAxCItCS8770z2BiJeBhn/kQWahZ2YFZLTQ4+Eq1d5rbUdXZRhE1LvYvt OjFcm4wTFFmS5YDXqfg2/PJq9ZZW68joQLtcc0a3woJPtXU9/P45pk7obq0+tUWC 04lDsdo22+dn0l4tdLhr5RLw4xojqR6ls/gceXOIGby0qg6nQM6InSOGVe//IzLq HwWFuCUoZfGCbhPE7b/7PvgKfP8CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBT8nkrT 5QTJebhBuwthvxemBC1l1TAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDM3NS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK pr0wDQYJKoZIhvcNAQELBQADggEBADfOH8CF4/LPAhHuUONUl8y2VKVyZ89u4xEI V62Prc2MgvRVD7+Y2vTqAIdM7y7tLaJv+RJ1t8fxAG/q0JCqd3RI+n8b6p4A8mZ1 /VP0/23om4fRe0lH9eTuW/qb04cppjXgSSUhwsyPO74JNu1VzodoCYUFowu/0fhM gjRJQbGrCWktzofI6wyCvajTU2aFnK1i+TWVOpXUD/+DTOhCSD/Obkfydxv0l6ot tqo9kmfa5tiXCQlzf6VckKUaOi4KPEb8tk6Nyn2WS2y41wS4Q7POBlPkNIkcJVJF LiQ8tDkGYkW6fYuPNN9jCRnjID+pr62VsXhi8VzZukGCrYAEopM= -----END CERTIFICATE-----Generated at Sat Mar 28 11:42:20 2026 by rpki-client