$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144401.roa File: AS144401.roa (raw, json) Hash identifier: sA5q8w3C43VyHXJbisikR0Qk7Bk6da0b/J3AiUaHSu0= Subject key identifier: 7B:60:97:27:E2:7D:34:A4:AC:1D:C5:8C:2B:37:12:86:05:60:82:7C Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 43D3ED12C3D4E76F363AEAF5699F5EF97CBC629A Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144401.roa Signing time: Wed 04 Mar 2026 06:12:31 +0000 ROA not before: Wed 04 Mar 2026 06:07:31 +0000 ROA not after: Wed 03 Mar 2027 06:12:31 +0000 asID: 144401 IP address blocks: 240a:a6d7::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:d3:ed:12:c3:d4:e7:6f:36:3a:ea:f5:69:9f:5e:f9:7c:bc:62:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:07:31 2026 GMT Not After : Mar 3 06:12:31 2027 GMT Subject: CN=7B609727E27D34A4AC1DC58C2B3712860560827C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:4e:06:ae:04:0e:cc:17:08:9b:98:46:3f:50: 73:24:26:79:3f:fe:9e:22:6d:62:40:3f:cd:b0:a5: 83:4d:a0:fb:65:62:19:fb:bf:41:d2:a0:11:6b:d0: 43:06:76:85:d5:49:6b:1a:73:3e:77:2a:b5:32:1f: fe:cc:da:da:51:67:88:0d:c8:4c:f9:a8:d2:e7:5d: bd:6c:3a:bd:27:6e:13:53:93:c9:32:66:93:ba:b9: 4a:5c:c9:aa:2b:04:e4:0a:77:cb:be:ec:41:c4:c1: ec:53:c5:76:57:9e:94:be:65:ff:68:16:1a:37:9c: 4f:18:10:6f:1b:ae:c1:e9:ea:00:de:6f:fc:2f:97: 05:28:48:c0:43:19:53:63:45:ad:cd:72:49:f9:3d: 16:c0:de:08:8b:b4:48:ef:0e:95:04:81:8c:3f:0d: 8f:ae:20:da:0e:7f:1a:33:9d:f0:65:3c:fc:48:87: 9b:22:29:b9:ca:1b:d6:4d:4b:04:1e:0d:eb:7d:5b: ca:90:75:62:af:22:f3:c7:72:e8:8b:97:2a:bd:7b: ef:99:b4:99:17:6a:1b:95:85:9b:18:b9:a7:a2:b5: 3a:05:3b:0d:fe:b5:62:27:de:e4:f2:2a:7d:44:ab: 0b:70:94:31:76:f7:64:fa:7b:7b:27:60:31:76:38: 18:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:60:97:27:E2:7D:34:A4:AC:1D:C5:8C:2B:37:12:86:05:60:82:7C X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144401.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a6d7::/32 Signature Algorithm: sha256WithRSAEncryption 8c:ef:f6:12:5b:b8:be:05:e0:00:ba:4d:ec:8a:ca:52:54:95: 7f:68:e8:ef:96:8f:f9:ec:d5:56:32:85:34:94:e7:18:37:08: 34:e1:24:d9:39:4f:cb:99:d0:bd:fd:fc:90:d8:10:b2:df:47: 6a:c3:07:ed:ab:4f:89:21:b3:5c:d2:ad:fa:56:da:c8:17:4a: ad:50:7e:fd:c7:2d:b2:e7:72:a0:bf:f6:c7:ec:09:b6:c4:65: e9:11:28:5e:ca:32:bc:b4:20:74:a7:ee:fc:13:11:00:3f:7b: 95:03:92:10:db:e3:24:14:02:2d:e4:bc:f1:d4:fe:06:2c:74: e4:ff:2b:e2:11:0e:65:17:5e:1a:95:e0:b6:fc:bd:b9:b5:62: 84:ef:e6:97:cf:fa:62:a8:d3:00:75:e9:fd:08:f5:23:be:fd: 37:f3:c4:20:d3:a3:fa:da:50:68:ea:00:9d:ac:23:99:9c:a9: 55:d8:f0:eb:02:f8:27:b8:58:39:83:6a:ba:09:5d:f0:48:40: a5:c0:0a:b5:7d:43:bd:5e:ec:b7:75:47:3d:39:7a:f8:2e:5a: f0:42:5a:b1:db:4f:cc:b6:6e:f1:ca:27:8f:1c:56:c4:56:41: ec:29:2f:12:05:ed:10:cf:7b:40:4d:63:93:05:67:95:5b:99: ee:84:80:9d -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUQ9PtEsPU5282Our1aZ9e+Xy8YpowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDczMVoX DTI3MDMwMzA2MTIzMVowMzExMC8GA1UEAxMoN0I2MDk3MjdFMjdEMzRBNEFDMURD NThDMkIzNzEyODYwNTYwODI3QzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKhOBq4EDswXCJuYRj9QcyQmeT/+niJtYkA/zbClg02g+2ViGfu/QdKgEWvQ QwZ2hdVJaxpzPncqtTIf/sza2lFniA3ITPmo0uddvWw6vSduE1OTyTJmk7q5SlzJ qisE5Ap3y77sQcTB7FPFdleelL5l/2gWGjecTxgQbxuuwenqAN5v/C+XBShIwEMZ U2NFrc1ySfk9FsDeCIu0SO8OlQSBjD8Nj64g2g5/GjOd8GU8/EiHmyIpucob1k1L BB4N631bypB1Yq8i88dy6IuXKr1775m0mRdqG5WFmxi5p6K1OgU7Df61Yife5PIq fUSrC3CUMXb3ZPp7eydgMXY4GHcCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBR7YJcn 4n00pKwdxYwrNxKGBWCCfDAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDQwMS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK ptcwDQYJKoZIhvcNAQELBQADggEBAIzv9hJbuL4F4AC6TeyKylJUlX9o6O+Wj/ns 1VYyhTSU5xg3CDThJNk5T8uZ0L39/JDYELLfR2rDB+2rT4khs1zSrfpW2sgXSq1Q fv3HLbLncqC/9sfsCbbEZekRKF7KMry0IHSn7vwTEQA/e5UDkhDb4yQUAi3kvPHU /gYsdOT/K+IRDmUXXhqV4Lb8vbm1YoTv5pfP+mKo0wB16f0I9SO+/TfzxCDTo/ra UGjqAJ2sI5mcqVXY8OsC+Ce4WDmDaroJXfBIQKXACrV9Q71e7Ld1Rz05evguWvBC WrHbT8y2bvHKJ48cVsRWQewpLxIF7RDPe0BNY5MFZ5Vbme6EgJ0= -----END CERTIFICATE-----Generated at Sat Mar 28 11:41:23 2026 by rpki-client