$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144382.roa File: AS144382.roa (raw, json) Hash identifier: GurN1UiF5vGOQWViI6TYktwLkIENxpfWrfWALxJqu8U= Subject key identifier: 76:BB:5B:CF:DC:0F:35:B4:57:71:84:5A:65:E7:C7:CE:FD:BA:0C:43 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 42E204322D11067CCE7FD4373DFEC28941A93E83 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144382.roa Signing time: Wed 04 Mar 2026 06:14:24 +0000 ROA not before: Wed 04 Mar 2026 06:09:24 +0000 ROA not after: Wed 03 Mar 2027 06:14:24 +0000 asID: 144382 IP address blocks: 240a:a6c4::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:e2:04:32:2d:11:06:7c:ce:7f:d4:37:3d:fe:c2:89:41:a9:3e:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:09:24 2026 GMT Not After : Mar 3 06:14:24 2027 GMT Subject: CN=76BB5BCFDC0F35B45771845A65E7C7CEFDBA0C43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:da:89:11:6d:4a:73:a2:75:d4:c9:14:7b:2c: d8:fe:83:78:ad:ee:66:bb:e6:fb:b6:8a:8d:b4:2b: be:62:06:53:34:c5:f8:04:81:68:55:7b:c0:eb:28: c7:d7:73:44:d0:89:f4:ae:27:42:de:49:0b:7e:c7: 75:8f:8c:8a:b8:5f:46:0d:45:12:25:e7:e9:c4:87: 0b:86:90:8f:db:ad:0d:d0:35:2f:69:f4:67:3a:e5: 31:aa:49:12:bc:b5:71:cd:48:bf:0c:75:3f:73:e4: de:0c:ec:05:84:84:cd:12:6c:0d:9f:0d:94:14:bc: bb:1c:9a:95:ae:34:4f:4b:5d:ac:65:47:6c:3b:17: 07:21:60:56:50:3a:09:8b:5e:ae:5a:4d:9d:cb:02: dc:01:74:af:60:45:4f:25:69:b3:ab:60:68:94:98: a1:3c:59:e6:a3:06:08:fb:8b:c8:a3:6d:c1:6e:16: 54:7a:9c:b8:a4:56:a2:23:8b:69:f3:47:dd:96:aa: 2b:7a:a0:ec:6e:c9:c7:16:46:99:b1:60:66:85:41: c5:7c:04:ed:f5:3f:ef:2f:5f:d7:25:76:5d:fe:ea: 72:45:f8:86:f9:ce:86:a4:62:20:b4:7d:1f:8b:9e: c7:ce:fb:58:53:8d:f9:75:da:6d:8c:ec:e6:9f:ee: 7b:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:BB:5B:CF:DC:0F:35:B4:57:71:84:5A:65:E7:C7:CE:FD:BA:0C:43 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144382.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a6c4::/32 Signature Algorithm: sha256WithRSAEncryption 52:89:59:bf:41:3c:57:65:47:40:d5:22:13:65:bc:6a:07:c1: e8:2f:39:9b:77:0c:9d:b2:59:ff:c8:38:d8:a4:61:f1:69:68: f8:01:81:09:e9:9d:c2:16:19:f5:89:30:7d:84:4f:7f:1e:c8: 51:75:fd:2b:7e:24:c6:68:31:1a:b0:01:df:30:62:5e:0b:25: 74:93:5e:06:07:9b:23:d7:6d:6f:2d:e3:41:a8:d0:ae:18:8a: 00:b5:20:f8:ad:0b:e4:c2:c7:54:4c:fa:e7:2a:c9:af:6b:5c: 63:bc:4a:2d:cf:71:85:d7:65:56:f9:6b:ad:cf:92:11:db:01: 0f:62:27:c8:13:25:e4:09:63:cf:ea:05:e6:15:8d:1e:47:1b: 2f:90:01:ab:42:95:c5:15:6f:1d:56:f9:b9:74:ca:43:f3:a1: e3:8c:f1:68:d9:7a:10:83:af:cf:04:f8:a6:1b:a4:48:ef:27: f7:a9:49:5b:4a:af:f7:a1:14:c9:ac:d9:72:90:52:08:e7:bd: 16:c0:a8:22:ac:67:88:6c:cd:49:1b:68:86:ea:8d:c8:e7:fc: 12:12:7c:41:d5:22:38:89:45:1c:9f:1c:5c:fc:2d:36:38:d3: 5c:b7:2f:8b:ff:ed:c4:4b:d4:4a:44:a9:98:3a:be:3d:c9:06: c7:9f:52:fb -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUQuIEMi0RBnzOf9Q3Pf7CiUGpPoMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDkyNFoX DTI3MDMwMzA2MTQyNFowMzExMC8GA1UEAxMoNzZCQjVCQ0ZEQzBGMzVCNDU3NzE4 NDVBNjVFN0M3Q0VGREJBMEM0MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAO7aiRFtSnOiddTJFHss2P6DeK3uZrvm+7aKjbQrvmIGUzTF+ASBaFV7wOso x9dzRNCJ9K4nQt5JC37HdY+MirhfRg1FEiXn6cSHC4aQj9utDdA1L2n0ZzrlMapJ Ery1cc1Ivwx1P3Pk3gzsBYSEzRJsDZ8NlBS8uxyala40T0tdrGVHbDsXByFgVlA6 CYterlpNncsC3AF0r2BFTyVps6tgaJSYoTxZ5qMGCPuLyKNtwW4WVHqcuKRWoiOL afNH3ZaqK3qg7G7JxxZGmbFgZoVBxXwE7fU/7y9f1yV2Xf7qckX4hvnOhqRiILR9 H4uex877WFON+XXabYzs5p/ue/sCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBR2u1vP 3A81tFdxhFpl58fO/boMQzAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDM4Mi5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK psQwDQYJKoZIhvcNAQELBQADggEBAFKJWb9BPFdlR0DVIhNlvGoHwegvOZt3DJ2y Wf/IONikYfFpaPgBgQnpncIWGfWJMH2ET38eyFF1/St+JMZoMRqwAd8wYl4LJXST XgYHmyPXbW8t40Go0K4YigC1IPitC+TCx1RM+ucqya9rXGO8Si3PcYXXZVb5a63P khHbAQ9iJ8gTJeQJY8/qBeYVjR5HGy+QAatClcUVbx1W+bl0ykPzoeOM8WjZehCD r88E+KYbpEjvJ/epSVtKr/ehFMms2XKQUgjnvRbAqCKsZ4hszUkbaIbqjcjn/BIS fEHVIjiJRRyfHFz8LTY401y3L4v/7cRL1EpEqZg6vj3JBsefUvs= -----END CERTIFICATE-----Generated at Sat Mar 28 11:46:19 2026 by rpki-client