$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144381.roa File: AS144381.roa (raw, json) Hash identifier: 5ReGzOGjdwsjnLRKM4tqBXNctKCCPWS2BYYQz5TLqWo= Subject key identifier: 69:51:9D:2C:75:18:D2:A0:A3:0A:3F:34:58:22:43:78:00:32:AE:BD Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 1751871ABB0653CBCD2E07250B7A6CF101733073 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144381.roa Signing time: Wed 04 Mar 2026 06:15:13 +0000 ROA not before: Wed 04 Mar 2026 06:10:13 +0000 ROA not after: Wed 03 Mar 2027 06:15:13 +0000 asID: 144381 IP address blocks: 240a:a6c3::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:51:87:1a:bb:06:53:cb:cd:2e:07:25:0b:7a:6c:f1:01:73:30:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:10:13 2026 GMT Not After : Mar 3 06:15:13 2027 GMT Subject: CN=69519D2C7518D2A0A30A3F34582243780032AEBD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:3d:dd:cc:39:5a:2e:ae:a7:b9:0d:1e:d7:de: 22:c6:d7:84:0e:b5:09:30:a3:c3:c8:e7:08:74:cf: 38:55:f4:78:a3:4f:f5:39:cf:7c:73:43:30:31:53: eb:5e:82:5d:ea:24:b9:a0:57:1b:f3:27:30:64:4d: db:9c:17:9e:11:f8:f5:84:8a:66:bd:54:e7:fe:37: 13:d3:c4:8f:5c:63:eb:47:bf:bd:83:69:f1:f6:ef: 5b:2d:c6:f9:c9:d6:4f:66:9c:24:e0:83:92:9d:88: 68:14:fa:53:5f:18:2b:f3:3f:e2:14:4d:28:f1:8a: d7:f8:b1:6b:9d:7f:11:b6:95:a6:a6:45:98:9f:21: 50:77:31:9e:88:f5:c8:c9:60:70:ad:a2:3d:98:26: 56:49:38:f5:94:63:b2:39:73:21:46:8d:f3:52:cd: 48:11:c2:63:2f:cd:3d:ee:a8:1d:eb:10:2a:24:e3: 89:52:eb:7f:bb:69:d8:aa:8e:75:8f:52:08:9a:c4: c6:d8:6c:79:53:7d:1d:2a:a5:b1:e3:1b:9a:c3:fc: 58:3c:2b:d3:7c:af:41:4a:31:ec:0a:f1:b0:5c:9a: f7:9d:02:e1:38:dc:50:c1:69:50:b8:a9:c6:5e:dc: 1a:e0:b4:a7:52:26:12:0f:41:af:53:ae:81:ba:7c: ad:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:51:9D:2C:75:18:D2:A0:A3:0A:3F:34:58:22:43:78:00:32:AE:BD X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144381.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a6c3::/32 Signature Algorithm: sha256WithRSAEncryption 51:6f:5d:ee:66:d2:c0:42:68:bb:60:2b:b9:ee:70:06:df:02: fe:cc:af:48:83:ac:87:8c:15:bd:4a:89:b5:62:e5:2f:aa:b5: ce:d1:7b:af:b8:f9:c2:48:c2:9e:d7:d4:9a:3c:9b:c0:7c:f4: 57:32:54:9a:24:d1:3e:fd:b1:89:81:20:52:da:8c:1b:e9:1e: 87:76:5d:dc:25:04:a4:cc:5c:44:31:a4:19:4b:b6:71:d4:cc: 3c:f7:8c:58:12:a7:df:d8:39:6c:b0:07:00:7e:7b:7b:76:a8: 3f:c7:3d:23:13:ec:fc:21:47:71:e3:fc:51:a0:e2:0c:a9:ed: 77:e3:ba:d2:7d:40:23:9a:b7:82:61:39:dd:69:db:98:e1:22: f9:54:4f:ea:2b:c8:c0:46:3d:42:57:ff:79:5f:24:e1:25:da: ea:79:07:35:ce:c9:4c:13:af:5a:cf:90:63:97:09:4e:e9:77: 1f:60:50:07:a9:b9:68:c9:5f:da:98:98:5a:a8:98:0c:f8:f3: 92:2d:d2:51:a7:a8:8c:3f:2e:24:7b:2c:52:f5:31:60:14:33: 47:f2:ed:45:b9:6a:76:db:b9:01:7f:fa:6e:e8:f5:66:28:6a: 1d:f1:5e:1a:b5:fc:9c:43:73:e7:18:95:71:b9:dc:3f:39:f7: c8:02:76:c8 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUF1GHGrsGU8vNLgclC3ps8QFzMHMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTAxM1oX DTI3MDMwMzA2MTUxM1owMzExMC8GA1UEAxMoNjk1MTlEMkM3NTE4RDJBMEEzMEEz RjM0NTgyMjQzNzgwMDMyQUVCRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK493cw5Wi6up7kNHtfeIsbXhA61CTCjw8jnCHTPOFX0eKNP9TnPfHNDMDFT 616CXeokuaBXG/MnMGRN25wXnhH49YSKZr1U5/43E9PEj1xj60e/vYNp8fbvWy3G +cnWT2acJOCDkp2IaBT6U18YK/M/4hRNKPGK1/ixa51/EbaVpqZFmJ8hUHcxnoj1 yMlgcK2iPZgmVkk49ZRjsjlzIUaN81LNSBHCYy/NPe6oHesQKiTjiVLrf7tp2KqO dY9SCJrExthseVN9HSqlseMbmsP8WDwr03yvQUox7ArxsFya950C4TjcUMFpULip xl7cGuC0p1ImEg9Br1Ougbp8rQ0CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRpUZ0s dRjSoKMKPzRYIkN4ADKuvTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDM4MS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK psMwDQYJKoZIhvcNAQELBQADggEBAFFvXe5m0sBCaLtgK7nucAbfAv7Mr0iDrIeM Fb1KibVi5S+qtc7Re6+4+cJIwp7X1Jo8m8B89FcyVJok0T79sYmBIFLajBvpHod2 XdwlBKTMXEQxpBlLtnHUzDz3jFgSp9/YOWywBwB+e3t2qD/HPSMT7PwhR3Hj/FGg 4gyp7XfjutJ9QCOat4JhOd1p25jhIvlUT+oryMBGPUJX/3lfJOEl2up5BzXOyUwT r1rPkGOXCU7pdx9gUAepuWjJX9qYmFqomAz485It0lGnqIw/LiR7LFL1MWAUM0fy 7UW5anbbuQF/+m7o9WYoah3xXhq1/JxDc+cYlXG53D8598gCdsg= -----END CERTIFICATE-----Generated at Sat Mar 28 11:44:47 2026 by rpki-client