$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144413.roa File: AS144413.roa (raw, json) Hash identifier: qMC+P1hWBjoXtAa9UwxGpZ6mVXj3CAIQWXRogo7AYZY= Subject key identifier: 62:3B:BB:40:C1:1B:1D:61:BE:B7:1A:C0:5B:0B:E5:93:C1:EF:85:5D Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 31B1E157038FCF2E5013C05F0EDFA02CFBC804BC Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144413.roa Signing time: Wed 04 Mar 2026 06:14:10 +0000 ROA not before: Wed 04 Mar 2026 06:09:10 +0000 ROA not after: Wed 03 Mar 2027 06:14:10 +0000 asID: 144413 IP address blocks: 240a:a6e3::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:b1:e1:57:03:8f:cf:2e:50:13:c0:5f:0e:df:a0:2c:fb:c8:04:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:09:10 2026 GMT Not After : Mar 3 06:14:10 2027 GMT Subject: CN=623BBB40C11B1D61BEB71AC05B0BE593C1EF855D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:d5:d2:bd:db:db:c8:57:84:d5:5a:52:00:86: 03:41:c0:59:0f:ff:f6:7d:cd:0f:65:5c:ae:a7:7d: 12:e0:fd:16:c2:d7:d0:a6:fa:e1:e5:5a:23:ee:8f: c6:d7:5e:07:33:2a:88:28:1b:e8:86:39:43:0d:70: c0:84:f3:b8:9a:b5:42:ad:d4:af:2e:9a:82:3f:01: 68:f2:ab:0a:93:51:11:d4:27:b3:87:a7:dc:81:42: e4:de:aa:6f:79:77:15:f3:0a:d9:85:fb:d2:72:00: c0:a8:99:c1:09:b3:c8:0b:e2:83:cb:e1:94:91:ec: 69:a3:8e:ca:11:25:68:f3:c5:6c:0a:d4:5e:79:8c: b2:3d:ef:eb:a9:5d:e5:91:d8:fe:ff:92:d7:c4:a3: b4:36:db:2b:f6:1f:04:f2:93:e7:11:38:fb:74:70: 61:ee:40:03:4c:0a:59:97:24:64:8c:7d:c4:79:9e: 03:39:cb:06:8c:ad:87:34:30:74:a0:02:7c:f7:f3: 13:91:d1:c3:31:f0:48:88:3b:92:5b:1b:dd:17:6a: 48:19:76:8c:10:d1:73:15:10:a4:45:5f:6b:c7:cb: 4a:9c:da:75:a7:5f:67:de:2b:f4:48:06:d5:23:78: 23:9b:42:67:b4:12:8c:7b:60:a5:46:3a:6b:65:c4: a7:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:3B:BB:40:C1:1B:1D:61:BE:B7:1A:C0:5B:0B:E5:93:C1:EF:85:5D X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144413.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a6e3::/32 Signature Algorithm: sha256WithRSAEncryption 5b:a8:98:f2:40:06:74:a8:ef:3d:5e:ca:a9:87:ec:3f:d2:0a: 9b:f8:aa:64:10:f9:f2:c4:e3:6b:e6:10:c6:28:38:8f:ad:3b: e8:89:88:05:a1:af:e9:da:4f:9b:e8:4f:79:e1:e8:06:bb:38: 1d:a8:4e:0a:d1:7a:d5:fd:74:2d:d7:c2:d9:6f:a1:07:38:a1: 6e:95:9b:d7:a3:dc:f9:6f:d6:91:36:fb:e1:91:d8:43:2c:d0: d5:93:7f:00:f0:18:3d:a2:85:f7:32:db:cd:03:22:d7:ab:27: 87:66:b3:85:1e:b4:0e:45:92:be:2c:95:b3:7a:17:05:eb:29: 6d:90:75:23:87:58:d8:a6:e0:55:c7:69:bd:8a:31:55:da:95: cc:00:51:85:5a:0b:1b:b9:6f:92:0a:16:0d:6c:41:cd:5f:7f: 62:aa:f0:ef:42:07:88:55:81:3b:3b:d9:97:ba:2d:d8:5e:04: ba:df:8a:69:c9:81:ff:75:ea:7a:67:ee:5e:15:98:6e:fd:89: 33:82:3e:2b:ac:19:97:bb:f3:6d:15:be:c0:a5:d2:95:81:56: 99:5b:88:e4:b7:ad:30:dd:2a:8b:88:5c:4d:dc:5e:e2:96:09: 56:64:a1:2d:e6:87:c9:c8:33:5a:b0:00:fb:fa:7e:ba:ad:51: 76:36:55:d0 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUMbHhVwOPzy5QE8BfDt+gLPvIBLwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDkxMFoX DTI3MDMwMzA2MTQxMFowMzExMC8GA1UEAxMoNjIzQkJCNDBDMTFCMUQ2MUJFQjcx QUMwNUIwQkU1OTNDMUVGODU1RDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJbV0r3b28hXhNVaUgCGA0HAWQ//9n3ND2Vcrqd9EuD9FsLX0Kb64eVaI+6P xtdeBzMqiCgb6IY5Qw1wwITzuJq1Qq3Ury6agj8BaPKrCpNREdQns4en3IFC5N6q b3l3FfMK2YX70nIAwKiZwQmzyAvig8vhlJHsaaOOyhElaPPFbArUXnmMsj3v66ld 5ZHY/v+S18SjtDbbK/YfBPKT5xE4+3RwYe5AA0wKWZckZIx9xHmeAznLBoythzQw dKACfPfzE5HRwzHwSIg7klsb3RdqSBl2jBDRcxUQpEVfa8fLSpzadadfZ94r9EgG 1SN4I5tCZ7QSjHtgpUY6a2XEp/MCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRiO7tA wRsdYb63GsBbC+WTwe+FXTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDQxMy5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK puMwDQYJKoZIhvcNAQELBQADggEBAFuomPJABnSo7z1eyqmH7D/SCpv4qmQQ+fLE 42vmEMYoOI+tO+iJiAWhr+naT5voT3nh6Aa7OB2oTgrRetX9dC3XwtlvoQc4oW6V m9ej3Plv1pE2++GR2EMs0NWTfwDwGD2ihfcy280DIterJ4dms4UetA5Fkr4slbN6 FwXrKW2QdSOHWNim4FXHab2KMVXalcwAUYVaCxu5b5IKFg1sQc1ff2Kq8O9CB4hV gTs72Ze6LdheBLrfimnJgf916npn7l4VmG79iTOCPiusGZe7820VvsCl0pWBVplb iOS3rTDdKouIXE3cXuKWCVZkoS3mh8nIM1qwAPv6frqtUXY2VdA= -----END CERTIFICATE-----Generated at Sat Mar 28 13:18:21 2026 by rpki-client