$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144388.roa File: AS144388.roa (raw, json) Hash identifier: mzB6EtvDen4KhmBht8hhVDdrmE4nS/sAfjEo+nGCXdM= Subject key identifier: 14:2C:DD:81:B3:3D:8B:32:F6:33:2B:28:52:17:60:0D:70:07:31:95 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 4E8B79D86C679679F9376F4F172FAB050AE3BF32 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144388.roa Signing time: Wed 04 Mar 2026 06:12:27 +0000 ROA not before: Wed 04 Mar 2026 06:07:27 +0000 ROA not after: Wed 03 Mar 2027 06:12:27 +0000 asID: 144388 IP address blocks: 240a:a6ca::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:8b:79:d8:6c:67:96:79:f9:37:6f:4f:17:2f:ab:05:0a:e3:bf:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:07:27 2026 GMT Not After : Mar 3 06:12:27 2027 GMT Subject: CN=142CDD81B33D8B32F6332B285217600D70073195 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:e5:18:90:e2:24:d3:51:9a:0f:69:f7:f9:ae: 3e:52:3b:f3:80:00:e4:b7:c4:27:1a:cd:c5:0e:06: 68:27:68:d9:06:b4:55:16:4d:93:62:a6:e5:cd:88: 43:e3:d7:20:d2:fa:21:ae:06:cd:eb:98:34:ea:34: 90:92:13:a8:44:23:c7:aa:e7:ce:97:33:31:12:7e: b0:40:ec:cd:93:92:61:a5:11:4a:66:ab:6f:2a:72: 84:7b:d1:5c:fc:57:74:45:34:43:8e:54:81:32:77: 04:a1:9b:8e:76:3c:b4:8a:bd:82:5a:d8:fe:92:45: 6c:5d:1f:fd:fc:80:f1:22:7e:ab:0a:a0:f8:a2:cf: f0:99:8c:78:52:fe:3f:31:2a:5e:f0:20:32:ab:95: 92:6b:ac:05:5f:cf:45:94:10:57:12:03:81:3b:47: d7:e9:03:2d:87:b6:0d:cc:20:40:2e:61:e3:7b:8b: 8e:12:70:1d:66:1d:a2:24:e6:f7:c4:da:47:b9:8c: 19:c7:93:17:33:2a:80:18:f9:9f:c9:5b:f1:4f:ae: 8f:2a:12:57:25:39:12:7f:b0:8b:c5:7a:9c:54:f6: fc:51:40:a4:54:2f:67:90:1f:d4:11:80:b3:ca:68: fd:60:f2:c3:a5:fd:c0:27:6f:05:36:ac:ec:13:6b: e9:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:2C:DD:81:B3:3D:8B:32:F6:33:2B:28:52:17:60:0D:70:07:31:95 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144388.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a6ca::/32 Signature Algorithm: sha256WithRSAEncryption 7e:b0:05:1a:49:51:31:cc:cd:81:25:77:e1:3f:29:63:a9:48: ba:f2:2d:06:e0:61:77:da:2f:c8:e8:a9:79:49:89:db:55:e5: 58:07:a4:c6:2d:47:6b:ee:dd:c2:61:db:8e:5e:3b:ff:a2:f6: 31:5e:d3:e5:94:32:6f:4c:57:41:39:e5:b8:fd:02:be:ff:91: c0:d7:b4:73:f7:57:32:f3:8b:b8:5c:c3:28:d9:f6:86:20:0f: 1f:db:bd:3a:13:77:e0:89:b8:2f:19:de:82:b0:8c:d0:40:b3: 2b:08:08:91:bb:40:c6:45:7b:04:c8:4d:b1:b5:5c:89:af:61: 47:f4:8e:31:91:66:c5:75:51:af:b0:5f:a1:4a:43:29:dd:37: 8b:ee:92:68:2a:f0:c9:04:fb:23:c9:c0:bd:ba:23:e1:1d:5d: a9:39:29:c0:5d:07:0e:6e:c6:ce:68:15:72:1b:7b:ec:fa:b9: e7:f8:41:b5:df:7a:74:68:c0:4c:73:38:ef:f2:0a:2f:db:1b: e0:0d:f6:30:b2:27:46:08:97:6d:b5:e5:07:cf:9e:9f:83:04: f8:18:06:bb:48:be:d0:29:fa:d5:c1:7e:ca:58:20:dc:24:08: fc:49:8f:df:61:44:45:45:e5:2a:8c:bf:7c:fc:df:00:50:6d: bb:5d:5c:46 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUTot52Gxnlnn5N29PFy+rBQrjvzIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDcyN1oX DTI3MDMwMzA2MTIyN1owMzExMC8GA1UEAxMoMTQyQ0REODFCMzNEOEIzMkY2MzMy QjI4NTIxNzYwMEQ3MDA3MzE5NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAN/lGJDiJNNRmg9p9/muPlI784AA5LfEJxrNxQ4GaCdo2Qa0VRZNk2Km5c2I Q+PXINL6Ia4GzeuYNOo0kJITqEQjx6rnzpczMRJ+sEDszZOSYaURSmarbypyhHvR XPxXdEU0Q45UgTJ3BKGbjnY8tIq9glrY/pJFbF0f/fyA8SJ+qwqg+KLP8JmMeFL+ PzEqXvAgMquVkmusBV/PRZQQVxIDgTtH1+kDLYe2DcwgQC5h43uLjhJwHWYdoiTm 98TaR7mMGceTFzMqgBj5n8lb8U+ujyoSVyU5En+wi8V6nFT2/FFApFQvZ5Af1BGA s8po/WDyw6X9wCdvBTas7BNr6TUCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQULN2B sz2LMvYzKyhSF2ANcAcxlTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDM4OC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK psowDQYJKoZIhvcNAQELBQADggEBAH6wBRpJUTHMzYEld+E/KWOpSLryLQbgYXfa L8joqXlJidtV5VgHpMYtR2vu3cJh245eO/+i9jFe0+WUMm9MV0E55bj9Ar7/kcDX tHP3VzLzi7hcwyjZ9oYgDx/bvToTd+CJuC8Z3oKwjNBAsysICJG7QMZFewTITbG1 XImvYUf0jjGRZsV1Ua+wX6FKQyndN4vukmgq8MkE+yPJwL26I+EdXak5KcBdBw5u xs5oFXIbe+z6uef4QbXfenRowExzOO/yCi/bG+AN9jCyJ0YIl2215QfPnp+DBPgY BrtIvtAp+tXBfspYINwkCPxJj99hREVF5SqMv3z83wBQbbtdXEY= -----END CERTIFICATE-----Generated at Sat Mar 28 11:43:02 2026 by rpki-client