$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144410.roa File: AS144410.roa (raw, json) Hash identifier: 6GgYzPvuTD29OC+k+/1gJR9uVzNwe5i8DNZ9hFghH+I= Subject key identifier: B7:81:53:24:56:3F:32:33:64:BC:85:E2:F5:6F:80:9B:B2:E7:AA:97 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 78229AC27B73B1D66D5F91119B9F42F16BF5B747 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144410.roa Signing time: Wed 04 Mar 2026 06:15:43 +0000 ROA not before: Wed 04 Mar 2026 06:10:43 +0000 ROA not after: Wed 03 Mar 2027 06:15:43 +0000 asID: 144410 IP address blocks: 240a:a6e0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:22:9a:c2:7b:73:b1:d6:6d:5f:91:11:9b:9f:42:f1:6b:f5:b7:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:10:43 2026 GMT Not After : Mar 3 06:15:43 2027 GMT Subject: CN=B7815324563F323364BC85E2F56F809BB2E7AA97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:16:d8:b7:72:28:10:62:d9:db:67:2c:06:38: 47:0d:70:78:f2:04:48:b6:23:af:09:71:2b:ef:ea: ac:8e:62:30:fb:5e:59:a2:dc:22:fc:66:23:ec:3e: c0:8d:ef:0e:ac:f7:b0:d0:15:07:0e:8c:c1:1a:92: 95:76:40:c7:51:03:d7:a4:87:b1:70:ca:ad:92:82: bf:6b:ff:0a:41:ba:2d:eb:08:f6:8c:be:57:07:8c: 03:c1:73:02:8a:99:a4:87:c2:a0:f5:9c:49:4e:23: b6:0a:6c:03:f9:3b:15:5b:6d:27:b1:2b:fa:0a:a3: 1d:cf:79:33:93:6b:85:c5:19:ab:79:ae:cc:b1:78: 01:6e:65:7d:dc:39:5f:25:5e:33:0b:99:35:37:71: 2d:f8:dc:eb:47:8b:da:e5:56:fc:e3:6e:97:4a:f3: 41:3d:bc:bc:be:e1:37:54:e0:26:2b:35:de:18:68: e2:7b:e1:67:cf:6e:21:54:93:13:05:af:14:e3:85: e0:a6:3f:1f:d6:97:27:3f:18:f5:d2:c8:fa:90:2b: e6:bb:94:45:c0:b9:df:39:3f:b8:ba:b2:4e:40:3a: af:19:8c:77:3a:39:af:5b:bd:0c:9a:46:4a:c2:49: d7:f7:bd:8e:1a:82:29:94:0d:ae:ed:3b:04:36:ef: a4:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:81:53:24:56:3F:32:33:64:BC:85:E2:F5:6F:80:9B:B2:E7:AA:97 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144410.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a6e0::/32 Signature Algorithm: sha256WithRSAEncryption 0b:ff:97:bc:10:82:8c:d8:30:00:89:5b:3f:0f:2a:72:88:71: 72:e0:f7:18:3c:9a:a9:45:d2:ee:19:05:10:c2:5b:4a:3c:3b: d7:f0:4c:01:10:6b:51:07:bb:f9:51:5d:27:de:b2:5f:45:c5: a7:76:b1:1a:92:2a:7a:e0:45:55:02:54:7b:04:5f:ad:af:0a: e8:54:a3:3d:53:55:73:ef:6a:bc:e1:5b:48:31:4e:ce:5e:27: 71:99:ad:1c:2f:ee:40:dc:2e:c4:f3:59:34:eb:d9:01:3d:a0: 84:07:b4:59:7c:4a:ee:20:b6:1d:bf:fc:76:30:00:91:87:01: cd:d7:00:5f:e8:3b:67:a7:55:f7:6e:3a:75:50:c5:3f:6b:7a: 4a:fd:58:81:6d:22:a8:c1:a9:73:20:1f:91:ca:6b:86:19:28: 0a:4f:b1:b7:a5:e5:1f:34:16:eb:c5:67:89:28:95:8b:4d:7e: 5d:f1:f8:93:57:9b:44:bf:89:85:77:ad:1c:f0:1f:ce:e7:16: 99:69:98:6b:b4:4e:34:20:25:6f:e1:4b:5d:37:d9:e2:ad:fe: 1a:66:87:d0:f3:70:6b:7a:0d:2e:a3:8b:be:81:8d:bf:ba:52: f8:4d:27:a0:72:ee:e6:c8:7a:4b:28:24:ca:a9:b3:19:cc:31: 9b:2b:fc:0b -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUeCKawntzsdZtX5ERm59C8Wv1t0cwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTA0M1oX DTI3MDMwMzA2MTU0M1owMzExMC8GA1UEAxMoQjc4MTUzMjQ1NjNGMzIzMzY0QkM4 NUUyRjU2RjgwOUJCMkU3QUE5NzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMUW2LdyKBBi2dtnLAY4Rw1wePIESLYjrwlxK+/qrI5iMPteWaLcIvxmI+w+ wI3vDqz3sNAVBw6MwRqSlXZAx1ED16SHsXDKrZKCv2v/CkG6LesI9oy+VweMA8Fz AoqZpIfCoPWcSU4jtgpsA/k7FVttJ7Er+gqjHc95M5NrhcUZq3muzLF4AW5lfdw5 XyVeMwuZNTdxLfjc60eL2uVW/ONul0rzQT28vL7hN1TgJis13hho4nvhZ89uIVST EwWvFOOF4KY/H9aXJz8Y9dLI+pAr5ruURcC53zk/uLqyTkA6rxmMdzo5r1u9DJpG SsJJ1/e9jhqCKZQNru07BDbvpJcCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBS3gVMk Vj8yM2S8heL1b4CbsueqlzAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDQxMC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK puAwDQYJKoZIhvcNAQELBQADggEBAAv/l7wQgozYMACJWz8PKnKIcXLg9xg8mqlF 0u4ZBRDCW0o8O9fwTAEQa1EHu/lRXSfesl9Fxad2sRqSKnrgRVUCVHsEX62vCuhU oz1TVXPvarzhW0gxTs5eJ3GZrRwv7kDcLsTzWTTr2QE9oIQHtFl8Su4gth2//HYw AJGHAc3XAF/oO2enVfduOnVQxT9rekr9WIFtIqjBqXMgH5HKa4YZKApPsbel5R80 FuvFZ4kolYtNfl3x+JNXm0S/iYV3rRzwH87nFplpmGu0TjQgJW/hS1032eKt/hpm h9DzcGt6DS6ji76Bjb+6UvhNJ6By7ubIeksoJMqpsxnMMZsr/As= -----END CERTIFICATE-----Generated at Sat Mar 28 15:54:48 2026 by rpki-client