$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144378.roa File: AS144378.roa (raw, json) Hash identifier: smKZUEpROvblPlbViZtK/67upVvWWMi6TRH0eRzokOE= Subject key identifier: 08:E7:B9:56:AC:17:88:F3:60:2C:D6:45:72:6F:5C:AF:6D:0A:52:FD Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 64014D8EA0B908C0AF8FA1D80ECD75BCB7A178AE Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144378.roa Signing time: Wed 04 Mar 2026 06:12:57 +0000 ROA not before: Wed 04 Mar 2026 06:07:57 +0000 ROA not after: Wed 03 Mar 2027 06:12:57 +0000 asID: 144378 IP address blocks: 240a:a6c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:01:4d:8e:a0:b9:08:c0:af:8f:a1:d8:0e:cd:75:bc:b7:a1:78:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:07:57 2026 GMT Not After : Mar 3 06:12:57 2027 GMT Subject: CN=08E7B956AC1788F3602CD645726F5CAF6D0A52FD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:18:76:e5:39:c8:51:94:b1:ea:4b:6f:0d:1a: 69:ae:39:a4:77:e1:a3:1f:f5:5e:27:b7:47:92:6a: 2e:e1:25:f8:46:c2:8e:ca:53:92:79:d4:ab:0c:95: 13:17:be:ef:3f:0f:a8:1d:85:f5:22:f2:9e:d7:21: 56:21:b7:b4:20:4c:5c:88:40:7e:ae:73:c2:ae:73: 6c:9e:99:c2:e6:d5:36:b2:56:d1:72:24:b6:86:a8: 38:de:cd:b6:47:d4:bd:41:a1:b8:c5:2b:74:27:ba: 44:16:fd:c0:20:be:2d:31:59:14:7b:cf:25:92:83: 2f:6e:9e:db:38:34:ad:b9:27:3b:6f:e8:9c:32:16: 9b:8e:2e:8d:83:fe:0d:f4:45:22:6d:d5:80:63:df: 42:f4:98:6f:6c:db:c4:7d:db:98:c5:9a:be:a8:02: 6d:34:e4:9c:c3:e5:8a:b3:2b:5f:21:00:15:6f:07: ce:e3:0f:9d:2a:23:d0:2b:d9:8d:47:7d:b4:bb:c3: 98:82:ae:e4:6a:ff:b5:11:1a:80:9a:a2:09:a8:b4: e2:f4:cd:33:cb:d5:76:f1:65:b5:ef:8e:e1:1d:30: 01:76:8a:97:22:1b:5b:43:bf:5e:2b:68:f1:ba:7e: cf:c3:06:5a:04:97:84:44:ff:fc:e2:7b:99:a6:b6: 1d:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:E7:B9:56:AC:17:88:F3:60:2C:D6:45:72:6F:5C:AF:6D:0A:52:FD X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144378.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a6c0::/32 Signature Algorithm: sha256WithRSAEncryption da:9f:92:14:1b:5b:8e:7d:0b:16:a1:70:92:f8:5c:11:36:1a: 34:dc:9c:a4:f0:71:8b:9b:a7:dd:11:68:cf:5e:57:53:3e:6b: 80:cf:93:3d:35:c8:40:5e:ea:07:ce:1f:74:04:a2:b6:9c:ab: 68:0e:ae:d5:7e:b2:e3:81:97:2d:ca:7a:26:d9:a9:73:aa:d4: b9:6e:11:22:13:2b:44:b0:b1:06:cc:14:9e:fc:07:75:89:3f: 4c:c7:49:5e:f2:80:c2:71:fe:db:8d:89:3e:56:ef:4b:9c:4f: a8:da:b4:5e:25:03:2d:5c:5c:a9:00:f5:06:80:b8:fd:70:23: 14:fc:72:09:75:43:40:92:bc:3c:87:8d:95:23:c0:e1:df:69: 4f:3b:4d:86:64:6f:bd:63:27:9e:10:90:07:69:1c:04:de:23: f3:35:57:b9:c5:aa:7f:36:3d:93:14:c0:14:50:71:a3:37:e1: b8:37:dd:af:03:ef:41:41:1a:6e:8a:8e:1d:78:9d:8b:bc:5e: 96:84:c7:2e:20:1a:b6:5f:d6:13:1d:38:9e:f2:27:99:de:96: 8f:91:4e:b8:3a:3b:a0:8c:b2:48:80:f4:b3:fb:71:72:49:2d: 7d:4e:88:e4:c9:16:dd:08:45:b1:f3:57:3a:8f:8a:6e:c1:d8: d7:9c:30:8d -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUZAFNjqC5CMCvj6HYDs11vLeheK4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDc1N1oX DTI3MDMwMzA2MTI1N1owMzExMC8GA1UEAxMoMDhFN0I5NTZBQzE3ODhGMzYwMkNE NjQ1NzI2RjVDQUY2RDBBNTJGRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANoYduU5yFGUsepLbw0aaa45pHfhox/1Xie3R5JqLuEl+EbCjspTknnUqwyV Exe+7z8PqB2F9SLyntchViG3tCBMXIhAfq5zwq5zbJ6ZwubVNrJW0XIktoaoON7N tkfUvUGhuMUrdCe6RBb9wCC+LTFZFHvPJZKDL26e2zg0rbknO2/onDIWm44ujYP+ DfRFIm3VgGPfQvSYb2zbxH3bmMWavqgCbTTknMPlirMrXyEAFW8HzuMPnSoj0CvZ jUd9tLvDmIKu5Gr/tREagJqiCai04vTNM8vVdvFlte+O4R0wAXaKlyIbW0O/Xito 8bp+z8MGWgSXhET//OJ7maa2HdcCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQI57lW rBeI82As1kVyb1yvbQpS/TAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDM3OC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK psAwDQYJKoZIhvcNAQELBQADggEBANqfkhQbW459CxahcJL4XBE2GjTcnKTwcYub p90RaM9eV1M+a4DPkz01yEBe6gfOH3QEoracq2gOrtV+suOBly3KeibZqXOq1Llu ESITK0SwsQbMFJ78B3WJP0zHSV7ygMJx/tuNiT5W70ucT6jatF4lAy1cXKkA9QaA uP1wIxT8cgl1Q0CSvDyHjZUjwOHfaU87TYZkb71jJ54QkAdpHATeI/M1V7nFqn82 PZMUwBRQcaM34bg33a8D70FBGm6Kjh14nYu8XpaExy4gGrZf1hMdOJ7yJ5nelo+R Trg6O6CMskiA9LP7cXJJLX1OiOTJFt0IRbHzVzqPim7B2NecMI0= -----END CERTIFICATE-----Generated at Sat Mar 28 11:45:32 2026 by rpki-client