$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144433.roa File: AS144433.roa (raw, json) Hash identifier: 9LoNZivqjoitAIQ9zsXKmGLWt9itRTipB455JXupo2k= Subject key identifier: 91:62:52:4F:E0:72:06:30:38:BD:DB:48:F2:37:CE:E6:29:A5:D3:CC Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 4215365FC0E67DFAAF65267DE1450E219A17CE04 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144433.roa Signing time: Wed 04 Mar 2026 06:12:37 +0000 ROA not before: Wed 04 Mar 2026 06:07:37 +0000 ROA not after: Wed 03 Mar 2027 06:12:37 +0000 asID: 144433 IP address blocks: 240a:a6f7::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:15:36:5f:c0:e6:7d:fa:af:65:26:7d:e1:45:0e:21:9a:17:ce:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:07:37 2026 GMT Not After : Mar 3 06:12:37 2027 GMT Subject: CN=9162524FE072063038BDDB48F237CEE629A5D3CC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:c3:7a:2f:79:e1:46:21:56:d9:94:d5:37:96: 3a:a9:cd:41:27:1b:11:87:2c:25:18:40:63:92:76: ce:94:1c:97:52:e0:c1:85:9c:7f:7e:f1:d3:c8:13: 4e:10:eb:6f:7b:a3:27:5e:65:2b:c7:02:17:af:d8: 42:d9:90:bf:9c:26:fc:87:5c:d7:7b:5d:4d:ee:dd: 38:30:80:20:99:8f:8d:a4:3c:5c:ee:60:b8:f5:20: 30:37:8f:01:3a:8c:2b:09:e6:f8:73:de:c2:28:a1: 24:69:ab:a4:e3:1e:7e:90:9b:74:85:9b:dc:4b:9d: 9b:59:f1:ca:85:ab:20:ee:e2:5c:bd:7c:72:36:a6: 7f:97:5f:ed:74:27:c0:95:78:d1:da:29:e0:07:5e: d6:57:f7:bd:33:8c:3e:9c:2b:f4:19:48:12:d7:6d: da:d0:c6:5d:2e:41:4b:b0:8f:c3:68:e5:d4:27:f8: 16:ae:4b:ee:bd:8c:34:c1:91:b3:12:97:52:a5:3a: 9f:6f:ba:50:1a:c4:95:97:a0:54:59:5d:fe:69:40: 36:83:84:66:6e:79:e0:df:c7:a0:64:85:2d:3a:1d: f5:88:59:df:23:90:17:b9:70:67:23:ca:a3:3c:e4: f9:a7:4e:d7:dc:af:dc:e6:81:4f:c6:03:93:d2:78: 48:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:62:52:4F:E0:72:06:30:38:BD:DB:48:F2:37:CE:E6:29:A5:D3:CC X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144433.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a6f7::/32 Signature Algorithm: sha256WithRSAEncryption be:19:5d:13:78:3b:44:af:61:db:57:84:f0:07:4c:71:bd:53: 59:ab:34:a8:2d:7f:1a:50:7b:8e:13:42:fa:71:d1:e1:20:81: b4:ac:f8:5c:3d:c1:00:e1:60:00:21:c1:60:ef:3a:7a:70:62: cf:20:5d:24:0c:83:4a:95:22:a5:21:96:28:93:ca:11:c3:a5: 15:71:9e:e6:67:5f:c0:24:43:68:6b:72:21:66:25:36:68:c4: 06:aa:6c:b0:9b:9b:a7:c6:1c:b2:9d:e6:8d:d3:fa:03:04:81: 7f:be:3c:06:be:96:b2:9b:a3:2e:81:13:32:3e:b3:d3:aa:d0: 9a:d1:41:e0:2c:c5:56:ee:74:b1:6a:6a:1b:a2:d0:7d:dd:5c: e0:a3:9a:a9:24:0d:46:5c:dc:e4:e5:09:34:6e:3f:3e:d4:d1: 36:c6:47:58:fc:b9:9c:b7:19:ae:6a:dd:5d:b6:fd:3d:e7:57: c5:86:24:d9:a1:65:63:6a:77:ed:ee:ad:c3:52:21:bb:9e:b3: 71:7d:cf:63:75:02:09:1b:d0:9b:83:2e:3b:53:0b:82:02:07: 0b:7e:7c:7a:24:20:13:cb:82:71:3d:80:15:58:56:79:53:b0: e4:74:0b:ee:3f:02:10:55:bc:05:92:52:fd:06:4f:b3:d0:67: 32:40:8b:7a -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUQhU2X8DmffqvZSZ94UUOIZoXzgQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDczN1oX DTI3MDMwMzA2MTIzN1owMzExMC8GA1UEAxMoOTE2MjUyNEZFMDcyMDYzMDM4QkRE QjQ4RjIzN0NFRTYyOUE1RDNDQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALPDei954UYhVtmU1TeWOqnNQScbEYcsJRhAY5J2zpQcl1LgwYWcf37x08gT ThDrb3ujJ15lK8cCF6/YQtmQv5wm/Idc13tdTe7dODCAIJmPjaQ8XO5guPUgMDeP ATqMKwnm+HPewiihJGmrpOMefpCbdIWb3Eudm1nxyoWrIO7iXL18cjamf5df7XQn wJV40dop4Ade1lf3vTOMPpwr9BlIEtdt2tDGXS5BS7CPw2jl1Cf4Fq5L7r2MNMGR sxKXUqU6n2+6UBrElZegVFld/mlANoOEZm554N/HoGSFLTod9YhZ3yOQF7lwZyPK ozzk+adO19yv3OaBT8YDk9J4SG8CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSRYlJP 4HIGMDi920jyN87mKaXTzDAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDQzMy5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK pvcwDQYJKoZIhvcNAQELBQADggEBAL4ZXRN4O0SvYdtXhPAHTHG9U1mrNKgtfxpQ e44TQvpx0eEggbSs+Fw9wQDhYAAhwWDvOnpwYs8gXSQMg0qVIqUhliiTyhHDpRVx nuZnX8AkQ2hrciFmJTZoxAaqbLCbm6fGHLKd5o3T+gMEgX++PAa+lrKboy6BEzI+ s9Oq0JrRQeAsxVbudLFqahui0H3dXOCjmqkkDUZc3OTlCTRuPz7U0TbGR1j8uZy3 Ga5q3V22/T3nV8WGJNmhZWNqd+3urcNSIbues3F9z2N1Agkb0JuDLjtTC4ICBwt+ fHokIBPLgnE9gBVYVnlTsOR0C+4/AhBVvAWSUv0GT7PQZzJAi3o= -----END CERTIFICATE-----Generated at Sat Mar 28 11:41:08 2026 by rpki-client