$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144405.roa File: AS144405.roa (raw, json) Hash identifier: JyX2avrG9U3/n/wy/jgVv9JIzPFTDz6xHbuOUsulT6A= Subject key identifier: 21:B4:B6:A6:B8:79:23:48:93:2E:FA:DE:5E:9B:5F:A0:EE:56:7A:2D Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 553B0D592DB0DCD3C021ECE9E8A09516ACCC972C Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144405.roa Signing time: Wed 04 Mar 2026 06:15:36 +0000 ROA not before: Wed 04 Mar 2026 06:10:36 +0000 ROA not after: Wed 03 Mar 2027 06:15:36 +0000 asID: 144405 IP address blocks: 240a:a6db::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:3b:0d:59:2d:b0:dc:d3:c0:21:ec:e9:e8:a0:95:16:ac:cc:97:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:10:36 2026 GMT Not After : Mar 3 06:15:36 2027 GMT Subject: CN=21B4B6A6B8792348932EFADE5E9B5FA0EE567A2D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:57:36:0c:8a:27:1e:34:2c:e6:f6:17:30:7f: cd:a9:40:1f:65:26:b5:f5:89:61:5e:ed:82:45:52: b8:c8:ac:cf:70:a9:83:6e:17:6b:df:9c:43:9b:ca: 9f:0c:6d:1e:21:45:d5:5a:85:53:8e:06:6e:e0:b6: 38:69:24:60:49:54:95:09:a7:7b:bc:fe:6c:ef:92: d1:d0:13:7f:6e:82:7f:de:e8:89:bf:85:00:39:42: af:c0:91:55:e0:02:e5:35:92:05:6a:c7:95:c5:33: a8:99:72:f0:df:0b:e9:52:9c:1e:ee:20:19:59:13: 35:99:71:dc:b1:38:0b:9b:50:be:42:4e:0f:ec:b9: 74:4c:03:63:ba:ed:7d:96:89:84:dc:74:bc:6e:2e: 0a:9f:c2:53:7a:38:a6:ef:eb:39:5c:08:c7:10:ba: 91:ad:32:80:2a:80:72:a3:a5:be:1b:2a:0c:49:ac: 35:86:9a:62:b2:5c:71:43:47:96:a4:3c:24:ca:b9: 94:64:d1:8c:14:94:a9:11:bd:b6:49:55:93:53:55: b0:e9:e5:11:a8:80:19:19:f5:43:75:50:5a:85:3a: 7f:bd:b5:4d:b0:5e:d5:ee:7b:7e:ac:73:16:44:8a: 3d:26:46:8c:a2:91:2d:cc:d0:75:88:4e:2c:74:6e: 2f:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:B4:B6:A6:B8:79:23:48:93:2E:FA:DE:5E:9B:5F:A0:EE:56:7A:2D X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144405.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a6db::/32 Signature Algorithm: sha256WithRSAEncryption 17:e2:a9:f3:2e:df:1d:61:ed:49:ed:75:1a:61:15:20:10:08: 45:9b:6f:f6:e7:1a:4e:4e:87:2c:2d:de:e5:df:b1:d1:53:4b: 0f:c0:77:63:91:57:3b:62:c3:59:fe:1a:cf:da:a6:96:ba:23: f1:99:dc:89:23:10:e5:4b:2e:57:82:e5:67:85:4a:e4:c7:86: b2:0f:2e:fe:5e:11:8a:be:74:a1:fc:ce:53:6b:08:55:ab:54: c2:89:45:68:c5:45:ef:52:ea:95:4a:89:a6:26:53:fb:55:6f: ba:8f:63:97:3e:54:54:f3:1b:48:8d:70:76:01:7d:bd:13:20: f6:a9:06:53:b6:f9:97:cc:ce:96:3d:7f:aa:25:9f:79:d3:27: ff:32:7b:1b:20:68:45:8f:df:ed:54:07:2b:44:13:17:24:e6: ea:e2:43:65:b5:34:1d:de:6f:bd:cb:c4:d9:53:3a:39:24:10: 18:0e:b7:30:80:e7:0f:57:03:8a:15:0d:69:8d:1d:9f:78:98: be:27:b5:3b:d9:e8:fd:a2:d5:f1:db:81:85:d2:ed:a3:c5:82: 67:ef:d2:ec:fe:ec:b4:8e:dc:3b:86:a8:47:0c:9d:4b:e8:19: 1a:86:d7:d3:32:61:47:3b:fc:b2:50:01:46:04:51:ea:7e:a5: 0c:5e:e2:85 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUVTsNWS2w3NPAIezp6KCVFqzMlywwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTAzNloX DTI3MDMwMzA2MTUzNlowMzExMC8GA1UEAxMoMjFCNEI2QTZCODc5MjM0ODkzMkVG QURFNUU5QjVGQTBFRTU2N0EyRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL9XNgyKJx40LOb2FzB/zalAH2UmtfWJYV7tgkVSuMisz3Cpg24Xa9+cQ5vK nwxtHiFF1VqFU44GbuC2OGkkYElUlQmne7z+bO+S0dATf26Cf97oib+FADlCr8CR VeAC5TWSBWrHlcUzqJly8N8L6VKcHu4gGVkTNZlx3LE4C5tQvkJOD+y5dEwDY7rt fZaJhNx0vG4uCp/CU3o4pu/rOVwIxxC6ka0ygCqAcqOlvhsqDEmsNYaaYrJccUNH lqQ8JMq5lGTRjBSUqRG9tklVk1NVsOnlEaiAGRn1Q3VQWoU6f721TbBe1e57fqxz FkSKPSZGjKKRLczQdYhOLHRuLwMCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQhtLam uHkjSJMu+t5em1+g7lZ6LTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDQwNS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK ptswDQYJKoZIhvcNAQELBQADggEBABfiqfMu3x1h7UntdRphFSAQCEWbb/bnGk5O hywt3uXfsdFTSw/Ad2ORVztiw1n+Gs/appa6I/GZ3IkjEOVLLleC5WeFSuTHhrIP Lv5eEYq+dKH8zlNrCFWrVMKJRWjFRe9S6pVKiaYmU/tVb7qPY5c+VFTzG0iNcHYB fb0TIPapBlO2+ZfMzpY9f6oln3nTJ/8yexsgaEWP3+1UBytEExck5uriQ2W1NB3e b73LxNlTOjkkEBgOtzCA5w9XA4oVDWmNHZ94mL4ntTvZ6P2i1fHbgYXS7aPFgmfv 0uz+7LSO3DuGqEcMnUvoGRqG19MyYUc7/LJQAUYEUep+pQxe4oU= -----END CERTIFICATE-----Generated at Sat Mar 28 13:14:06 2026 by rpki-client