$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144387.roa File: AS144387.roa (raw, json) Hash identifier: cSpdx9tpa76MgfXoPpAPo6nuO6JmS6Sd+mHm1YGRpp8= Subject key identifier: 82:B6:3A:C8:DC:53:76:F0:99:D0:A7:6F:FF:26:03:A8:0B:28:37:15 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 24CA730B34BA9386DD5CD52CFEEBA1BE378ED7D1 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144387.roa Signing time: Wed 04 Mar 2026 06:15:19 +0000 ROA not before: Wed 04 Mar 2026 06:10:19 +0000 ROA not after: Wed 03 Mar 2027 06:15:19 +0000 asID: 144387 IP address blocks: 240a:a6c9::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:ca:73:0b:34:ba:93:86:dd:5c:d5:2c:fe:eb:a1:be:37:8e:d7:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:10:19 2026 GMT Not After : Mar 3 06:15:19 2027 GMT Subject: CN=82B63AC8DC5376F099D0A76FFF2603A80B283715 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:71:77:bc:1f:c3:ad:c6:79:52:f2:e4:57:73: a0:2c:b3:24:cb:c9:fc:5d:4c:22:50:89:a7:23:dc: fe:f9:56:b7:22:46:56:da:ac:06:1d:a1:2f:16:3a: 96:1c:1e:72:c7:a8:29:36:1e:0a:db:75:d2:42:34: 66:33:9f:39:d1:7c:67:fc:e6:06:31:ac:aa:b2:bd: 26:a5:db:21:7a:23:cd:fb:b3:86:b1:b6:2f:71:d6: b0:d6:97:04:11:0f:91:e4:6b:a5:72:5a:57:ed:b8: f6:92:73:4c:5c:df:87:af:46:3e:b2:b6:10:8b:8b: df:e8:8e:1e:19:bd:94:08:d0:d6:b7:1c:77:b3:d2: bc:8f:8a:5a:8b:0f:30:77:ed:e5:12:09:69:4a:2b: 74:b5:59:55:fe:dc:6d:e3:2b:32:a5:ec:b8:9b:67: 57:76:b9:a2:f5:ba:b0:91:1b:fc:52:46:ea:52:3a: b1:50:c1:79:aa:40:e6:4d:8e:d3:fd:35:87:1e:81: ee:a7:c9:1f:93:28:2b:6b:05:1f:d7:5e:a8:18:ca: a1:f5:98:86:b6:74:28:c4:5e:58:54:49:d0:32:09: 57:7a:e9:51:67:f6:aa:66:16:77:2b:73:33:7f:40: f8:ee:4e:6f:02:c4:de:8f:e3:62:6c:f8:b7:7a:b2: bd:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:B6:3A:C8:DC:53:76:F0:99:D0:A7:6F:FF:26:03:A8:0B:28:37:15 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144387.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a6c9::/32 Signature Algorithm: sha256WithRSAEncryption cc:a5:11:c2:ba:7d:08:aa:68:fc:1f:f9:c2:cc:48:6a:75:7a: 01:3e:97:4e:7b:5c:a3:c7:9f:68:89:23:15:22:97:c8:cd:e9: 40:2f:aa:5d:63:aa:e9:a5:1f:65:c5:e5:f7:fd:a1:cb:79:74: 2f:1c:49:d0:40:1a:42:6a:95:98:10:b9:ee:9c:53:49:63:7d: 74:57:1f:72:2e:2a:16:47:9d:f7:2b:7b:b7:6e:66:39:2f:a8: 7a:c3:0f:60:48:51:94:1f:7b:6b:35:b0:4a:b3:91:fc:bf:57: bd:70:f2:ff:98:a8:bf:e4:48:14:72:82:f0:a7:ef:ed:6d:1d: 4f:b6:89:fd:83:e4:96:16:f4:5d:f1:26:24:16:16:da:37:d6: 1b:5f:62:6c:4e:25:af:0f:26:1b:a7:9f:aa:ad:3f:81:08:33: 94:27:bd:16:83:53:86:b3:a1:78:64:f4:77:f8:62:13:7e:a8: 23:e9:af:84:88:e1:85:57:3d:d0:1e:c3:e7:6e:19:2b:e8:4a: 90:a8:4f:c0:7f:92:cc:16:88:db:57:3c:be:09:38:3c:d7:7b: 11:dd:53:0e:dd:43:15:62:40:7f:ca:97:be:b0:a6:80:df:41: 2d:29:28:7e:22:84:be:b1:1c:aa:ff:fc:47:60:b5:20:31:f7: c6:24:8a:ac -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUJMpzCzS6k4bdXNUs/uuhvjeO19EwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTAxOVoX DTI3MDMwMzA2MTUxOVowMzExMC8GA1UEAxMoODJCNjNBQzhEQzUzNzZGMDk5RDBB NzZGRkYyNjAzQTgwQjI4MzcxNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM5xd7wfw63GeVLy5FdzoCyzJMvJ/F1MIlCJpyPc/vlWtyJGVtqsBh2hLxY6 lhwecseoKTYeCtt10kI0ZjOfOdF8Z/zmBjGsqrK9JqXbIXojzfuzhrG2L3HWsNaX BBEPkeRrpXJaV+249pJzTFzfh69GPrK2EIuL3+iOHhm9lAjQ1rccd7PSvI+KWosP MHft5RIJaUordLVZVf7cbeMrMqXsuJtnV3a5ovW6sJEb/FJG6lI6sVDBeapA5k2O 0/01hx6B7qfJH5MoK2sFH9deqBjKofWYhrZ0KMReWFRJ0DIJV3rpUWf2qmYWdytz M39A+O5ObwLE3o/jYmz4t3qyvWUCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSCtjrI 3FN28JnQp2//JgOoCyg3FTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDM4Ny5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK pskwDQYJKoZIhvcNAQELBQADggEBAMylEcK6fQiqaPwf+cLMSGp1egE+l057XKPH n2iJIxUil8jN6UAvql1jqumlH2XF5ff9oct5dC8cSdBAGkJqlZgQue6cU0ljfXRX H3IuKhZHnfcre7duZjkvqHrDD2BIUZQfe2s1sEqzkfy/V71w8v+YqL/kSBRygvCn 7+1tHU+2if2D5JYW9F3xJiQWFto31htfYmxOJa8PJhunn6qtP4EIM5QnvRaDU4az oXhk9Hf4YhN+qCPpr4SI4YVXPdAew+duGSvoSpCoT8B/kswWiNtXPL4JODzXexHd Uw7dQxViQH/Kl76wpoDfQS0pKH4ihL6xHKr//EdgtSAx98Ykiqw= -----END CERTIFICATE-----Generated at Sat Mar 28 11:43:58 2026 by rpki-client