$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144419.roa File: AS144419.roa (raw, json) Hash identifier: v+5pngNjVEmHVhywLsylFVvuIoccvD/ZzndhjHADtpA= Subject key identifier: A6:BA:A2:27:32:29:E5:30:D8:1B:ED:37:7B:88:2A:64:A3:B4:CA:F5 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 585D1822917789CA648AF4A733F54985E3D02A6C Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144419.roa Signing time: Wed 04 Mar 2026 06:14:34 +0000 ROA not before: Wed 04 Mar 2026 06:09:34 +0000 ROA not after: Wed 03 Mar 2027 06:14:34 +0000 asID: 144419 IP address blocks: 240a:a6e9::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:5d:18:22:91:77:89:ca:64:8a:f4:a7:33:f5:49:85:e3:d0:2a:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:09:34 2026 GMT Not After : Mar 3 06:14:34 2027 GMT Subject: CN=A6BAA2273229E530D81BED377B882A64A3B4CAF5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:a5:f9:14:11:a6:a0:71:a0:4f:89:b3:83:53: cf:08:04:c7:2f:91:84:1c:9a:f2:8b:5f:4a:c8:6d: cc:62:f1:41:93:d4:31:3d:6a:90:bd:0f:f5:30:8e: 4b:0b:fe:b8:44:65:60:7b:ce:aa:be:ad:9a:5a:7a: 1e:e2:25:aa:c1:6c:8d:31:b1:0f:8f:fd:d4:01:8e: ab:e3:5d:02:a1:cb:d8:ee:89:0e:b0:0d:d9:70:be: 2d:f0:54:b3:30:02:84:47:28:78:3a:1e:a7:e9:e8: 44:e2:68:5e:aa:bc:85:22:93:53:52:fd:c4:e9:09: 6f:99:4b:25:a3:04:d3:57:87:c2:3a:b4:b1:f7:c9: 1c:e4:1c:3b:29:2a:5b:2d:53:ce:d7:df:cf:4a:5e: 28:d7:1d:5a:fb:4e:a1:38:8b:3b:12:cf:ef:14:86: ab:e6:dd:75:6d:10:93:40:ad:7b:90:4e:aa:94:09: ab:ae:f4:2c:65:cf:9c:6d:63:fd:df:86:2f:2c:b1: 1d:9c:e7:00:4c:49:20:f7:07:d4:6e:2e:2f:01:60: 4d:63:04:70:d3:f0:68:0a:90:cc:ef:14:d9:a2:5a: d8:44:e1:44:4a:01:a8:b8:4f:ab:e3:f6:14:72:a6: c5:08:72:5e:fd:78:3c:e5:c9:6d:fb:1a:50:c6:e5: 05:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:BA:A2:27:32:29:E5:30:D8:1B:ED:37:7B:88:2A:64:A3:B4:CA:F5 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144419.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a6e9::/32 Signature Algorithm: sha256WithRSAEncryption 39:17:f2:a1:26:8d:93:e1:74:10:98:25:e5:0e:37:38:77:bb: 21:46:c7:98:25:98:7b:64:6e:ff:e5:bc:db:4f:da:ba:12:ee: 6c:2c:00:37:eb:af:b7:0f:96:e6:0a:55:fb:47:a9:4b:ab:73: bd:82:c8:9b:4e:00:2f:3b:48:62:57:70:98:cb:de:61:eb:c4: 92:09:a9:a2:10:12:18:32:2b:30:99:47:5b:d4:b6:cf:df:27: 3b:b2:e8:5b:ab:6e:5c:b8:f4:fd:08:dd:62:0a:2a:50:e3:3c: 0b:ff:c5:96:6f:01:63:7d:59:e0:c8:f5:42:32:a3:be:21:26: 05:f7:05:f6:83:51:d7:aa:35:49:11:4a:00:4c:93:d2:90:5f: 53:5b:7e:62:1b:30:fd:53:6e:24:b0:f0:8c:e2:41:fc:93:29: 23:76:66:c7:53:78:e2:a0:9c:d5:30:5f:55:bb:20:11:f6:2b: bc:8c:30:c4:dd:51:c1:a4:c6:b4:4a:ce:57:29:46:07:39:61: 34:37:d3:26:90:38:6e:ad:22:46:e5:d6:97:5f:e6:53:b3:45: 19:37:5f:c4:f5:46:c7:26:65:28:79:fd:4b:c9:d1:3e:81:1d: 3c:78:c8:f2:3a:5c:4d:98:c0:60:f2:59:b6:28:7b:e3:48:25: 0a:d8:00:88 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUWF0YIpF3icpkivSnM/VJhePQKmwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDkzNFoX DTI3MDMwMzA2MTQzNFowMzExMC8GA1UEAxMoQTZCQUEyMjczMjI5RTUzMEQ4MUJF RDM3N0I4ODJBNjRBM0I0Q0FGNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKul+RQRpqBxoE+Js4NTzwgExy+RhBya8otfSshtzGLxQZPUMT1qkL0P9TCO Swv+uERlYHvOqr6tmlp6HuIlqsFsjTGxD4/91AGOq+NdAqHL2O6JDrAN2XC+LfBU szAChEcoeDoep+noROJoXqq8hSKTU1L9xOkJb5lLJaME01eHwjq0sffJHOQcOykq Wy1Tztffz0peKNcdWvtOoTiLOxLP7xSGq+bddW0Qk0Cte5BOqpQJq670LGXPnG1j /d+GLyyxHZznAExJIPcH1G4uLwFgTWMEcNPwaAqQzO8U2aJa2EThREoBqLhPq+P2 FHKmxQhyXv14POXJbfsaUMblBWUCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSmuqIn MinlMNgb7Td7iCpko7TK9TAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDQxOS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK pukwDQYJKoZIhvcNAQELBQADggEBADkX8qEmjZPhdBCYJeUONzh3uyFGx5glmHtk bv/lvNtP2roS7mwsADfrr7cPluYKVftHqUurc72CyJtOAC87SGJXcJjL3mHrxJIJ qaIQEhgyKzCZR1vUts/fJzuy6Furbly49P0I3WIKKlDjPAv/xZZvAWN9WeDI9UIy o74hJgX3BfaDUdeqNUkRSgBMk9KQX1NbfmIbMP1TbiSw8IziQfyTKSN2ZsdTeOKg nNUwX1W7IBH2K7yMMMTdUcGkxrRKzlcpRgc5YTQ30yaQOG6tIkbl1pdf5lOzRRk3 X8T1RscmZSh5/UvJ0T6BHTx4yPI6XE2YwGDyWbYoe+NIJQrYAIg= -----END CERTIFICATE-----Generated at Sat Mar 28 14:26:37 2026 by rpki-client