$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144377.roa File: AS144377.roa (raw, json) Hash identifier: Wr07MENC57UTnPJ21vXrKBGdeUcQWJ26QehPD2e/zjQ= Subject key identifier: AD:86:1F:53:CB:06:F7:4C:D6:46:5C:B5:3C:C1:D3:DD:53:AC:44:D8 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 23CD9D82E2922A5EB9CC2F1B5CCBC004F2A95880 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144377.roa Signing time: Wed 04 Mar 2026 06:13:52 +0000 ROA not before: Wed 04 Mar 2026 06:08:52 +0000 ROA not after: Wed 03 Mar 2027 06:13:52 +0000 asID: 144377 IP address blocks: 240a:a6bf::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:cd:9d:82:e2:92:2a:5e:b9:cc:2f:1b:5c:cb:c0:04:f2:a9:58:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:08:52 2026 GMT Not After : Mar 3 06:13:52 2027 GMT Subject: CN=AD861F53CB06F74CD6465CB53CC1D3DD53AC44D8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:6e:f0:0f:13:5a:e5:33:cf:fc:f9:c6:8f:a2: ae:f9:0b:2f:03:1c:75:fb:f9:1a:83:43:ef:27:28: bb:d9:7d:cf:9a:b3:cc:b3:a3:0d:30:d9:df:21:cc: 9a:df:d7:3f:62:b7:60:88:37:7a:29:9e:dc:71:3c: a6:0a:e1:c2:78:09:0b:ab:75:62:58:2a:89:8f:12: 79:cd:ee:a7:44:a3:e7:0d:8f:07:3e:84:a4:d1:9b: 59:db:05:6c:9f:59:52:e7:c7:51:f1:75:29:94:3a: 5d:fa:06:f8:b3:f4:43:ff:07:d6:ea:18:eb:93:10: 0a:15:49:d3:e9:dd:bc:fb:69:12:d1:a8:66:3c:d2: d1:60:da:69:c9:a9:47:df:66:97:c9:74:26:73:e0: c9:71:a7:66:53:72:8c:74:24:8b:c3:f2:48:b8:bd: 6e:ee:14:ce:2b:9e:a5:17:16:00:6f:0f:9a:42:48: 54:7e:2f:d5:5c:66:82:a9:1a:3f:9d:99:12:79:f8: 08:0d:09:3d:be:80:e8:fd:18:aa:be:03:2a:58:5a: 63:7c:58:6e:45:d4:d2:22:ff:da:66:dd:f8:0d:b3: d5:e3:66:c5:fa:e8:f8:64:a6:4f:4b:b7:d1:43:46: 3b:0d:26:01:4f:6f:8f:de:f9:15:ae:f8:5d:f1:63: b1:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:86:1F:53:CB:06:F7:4C:D6:46:5C:B5:3C:C1:D3:DD:53:AC:44:D8 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144377.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a6bf::/32 Signature Algorithm: sha256WithRSAEncryption b8:1b:49:cc:da:fd:e4:23:66:dc:1c:39:8a:c8:a3:b1:b0:73: 77:f9:b1:33:1a:56:3f:5a:15:d8:1f:c9:18:d6:2f:7b:b6:a1: 4a:c1:24:5e:53:ab:45:72:b4:e5:91:3d:d5:7b:6c:b1:9d:00: 1c:a9:1a:2d:32:26:9e:f9:16:d4:e6:6e:d2:f4:8f:8a:14:4a: 35:33:3b:64:06:75:b7:9f:4b:c3:f2:12:a9:21:db:a2:5e:e6: 2e:90:37:dc:27:a7:3f:35:3e:e8:d7:e9:a4:4b:2a:99:95:05: e2:9b:61:04:1b:4a:62:c7:26:09:48:30:29:b3:de:48:e7:67: ef:e6:6c:64:dc:35:84:3f:1a:b0:b2:bf:6b:2f:ae:07:a8:69: aa:ac:f9:63:81:51:32:af:8b:68:34:ae:91:c4:9f:c0:4f:df: 9d:ba:af:9d:1c:84:61:e4:cb:d9:26:d8:47:a2:4f:13:88:54: d3:99:26:f3:eb:e5:25:9e:f3:01:dd:81:c3:89:e2:7b:d4:f3: d6:62:cf:a7:7a:ff:37:38:3d:23:86:83:a1:91:ce:fa:08:c5: f2:f6:1a:58:ee:2e:64:c7:2b:68:cc:e0:f7:e1:41:bb:aa:6c: e0:fc:fb:40:29:1d:d3:8f:e4:45:da:52:de:6e:a3:10:32:c4: cc:ae:21:5d -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUI82dguKSKl65zC8bXMvABPKpWIAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDg1MloX DTI3MDMwMzA2MTM1MlowMzExMC8GA1UEAxMoQUQ4NjFGNTNDQjA2Rjc0Q0Q2NDY1 Q0I1M0NDMUQzREQ1M0FDNDREODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKNu8A8TWuUzz/z5xo+irvkLLwMcdfv5GoND7ycou9l9z5qzzLOjDTDZ3yHM mt/XP2K3YIg3eime3HE8pgrhwngJC6t1YlgqiY8Sec3up0Sj5w2PBz6EpNGbWdsF bJ9ZUufHUfF1KZQ6XfoG+LP0Q/8H1uoY65MQChVJ0+ndvPtpEtGoZjzS0WDaacmp R99ml8l0JnPgyXGnZlNyjHQki8PySLi9bu4UziuepRcWAG8PmkJIVH4v1Vxmgqka P52ZEnn4CA0JPb6A6P0Yqr4DKlhaY3xYbkXU0iL/2mbd+A2z1eNmxfro+GSmT0u3 0UNGOw0mAU9vj975Fa74XfFjsY8CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSthh9T ywb3TNZGXLU8wdPdU6xE2DAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDM3Ny5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK pr8wDQYJKoZIhvcNAQELBQADggEBALgbScza/eQjZtwcOYrIo7Gwc3f5sTMaVj9a FdgfyRjWL3u2oUrBJF5Tq0VytOWRPdV7bLGdABypGi0yJp75FtTmbtL0j4oUSjUz O2QGdbefS8PyEqkh26Je5i6QN9wnpz81PujX6aRLKpmVBeKbYQQbSmLHJglIMCmz 3kjnZ+/mbGTcNYQ/GrCyv2svrgeoaaqs+WOBUTKvi2g0rpHEn8BP3526r50chGHk y9km2EeiTxOIVNOZJvPr5SWe8wHdgcOJ4nvU89Ziz6d6/zc4PSOGg6GRzvoIxfL2 GljuLmTHK2jM4PfhQbuqbOD8+0ApHdOP5EXaUt5uoxAyxMyuIV0= -----END CERTIFICATE-----Generated at Sat Mar 28 11:45:04 2026 by rpki-client