$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144437.roa File: AS144437.roa (raw, json) Hash identifier: QS0DLjsJbtsyIIH7YFIFU4zSGAhDqMxtqShPVPA/+K8= Subject key identifier: BD:F8:97:46:AF:65:9E:4F:A2:72:2C:A4:D3:62:D3:CC:FD:A6:64:67 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 10AE0BFB5098AE922448289025C26A7D5FF1CE28 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144437.roa Signing time: Wed 04 Mar 2026 06:14:17 +0000 ROA not before: Wed 04 Mar 2026 06:09:17 +0000 ROA not after: Wed 03 Mar 2027 06:14:17 +0000 asID: 144437 IP address blocks: 240a:a6fb::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:ae:0b:fb:50:98:ae:92:24:48:28:90:25:c2:6a:7d:5f:f1:ce:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:09:17 2026 GMT Not After : Mar 3 06:14:17 2027 GMT Subject: CN=BDF89746AF659E4FA2722CA4D362D3CCFDA66467 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:f9:27:d5:17:35:ca:f9:da:ca:71:42:a2:23: 0b:dd:c8:a9:fb:35:3f:95:35:0f:eb:54:08:3e:b0: 60:b4:e9:14:fb:b1:39:1b:0d:1a:f7:0c:91:8f:90: ab:57:41:4e:c4:e4:ed:cd:a7:9b:27:6a:e4:51:91: 18:e3:4d:34:99:62:e5:d4:e5:4a:40:9c:15:4f:cf: 88:04:73:80:27:25:2a:0a:31:5e:2b:f4:c4:9b:59: d6:c5:39:9f:e3:cf:84:5e:32:07:59:bf:08:92:e1: 2f:17:dd:a5:ed:4d:f5:de:c5:36:77:58:f8:e2:8e: 34:69:1d:ce:0f:f2:ea:3b:48:e1:f9:74:8c:54:51: 6e:1e:9b:fa:80:c6:10:c1:ed:a6:93:28:02:81:48: dd:24:b8:8f:ea:9a:68:9d:7c:fe:15:93:e6:e2:fe: ff:cc:27:b8:06:0b:eb:a9:a7:04:01:90:46:e8:49: 4c:e6:01:63:45:1a:b7:ff:12:e4:4a:04:63:60:a7: d7:4d:66:43:da:ed:a6:d4:33:7a:52:68:f2:80:54: c8:7b:9b:ec:30:24:70:ea:b8:e1:65:46:92:00:8f: fe:dc:a0:40:92:dc:de:4f:ce:7a:69:e9:0c:f1:f4: 62:b8:67:4d:a9:a3:30:c0:9a:2e:ce:20:f9:0c:07: 11:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:F8:97:46:AF:65:9E:4F:A2:72:2C:A4:D3:62:D3:CC:FD:A6:64:67 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144437.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a6fb::/32 Signature Algorithm: sha256WithRSAEncryption 6b:85:43:33:f3:be:af:4f:f9:f2:11:3d:17:31:7f:72:a8:c6: 64:5e:d7:cd:02:17:6d:3b:15:40:7f:aa:50:c7:43:1e:91:c5: d0:f4:10:b1:03:a2:46:c3:f6:f5:cf:51:dd:74:8e:7f:42:2f: 4f:1b:c0:99:17:c5:cd:19:fa:c3:b2:72:61:fe:b1:e5:db:da: 52:0c:09:25:93:f4:af:b3:2f:a2:f4:e8:7c:88:29:22:dc:ff: bd:92:e7:9d:e5:7b:0c:6d:d1:f2:37:86:a6:6d:cc:5d:4a:cc: 40:34:ae:48:22:c7:65:ff:55:04:a6:d4:a3:a5:1b:da:52:df: 57:5f:06:78:b8:ff:14:22:03:49:94:76:4a:b7:16:69:50:7d: c3:2a:9b:ba:69:5a:ca:57:f2:83:f4:91:4f:c1:9d:18:3d:d6: c4:88:c0:f3:74:4a:fa:67:bd:f7:dd:ba:97:07:4f:46:8c:00: 2c:37:85:a2:5c:a4:24:84:19:da:06:f1:ba:49:4a:5c:b3:ae: ec:21:67:9e:4c:6f:b7:84:37:0e:ae:13:75:1a:3a:da:95:ad: 8e:a6:36:9f:5d:5f:0c:7e:cc:06:79:9d:98:09:e7:fe:b0:67: ab:c4:f4:f9:67:1e:61:8c:c1:54:63:e1:77:8a:f5:ed:fa:88: 27:86:4f:29 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUEK4L+1CYrpIkSCiQJcJqfV/xzigwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDkxN1oX DTI3MDMwMzA2MTQxN1owMzExMC8GA1UEAxMoQkRGODk3NDZBRjY1OUU0RkEyNzIy Q0E0RDM2MkQzQ0NGREE2NjQ2NzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM/5J9UXNcr52spxQqIjC93Iqfs1P5U1D+tUCD6wYLTpFPuxORsNGvcMkY+Q q1dBTsTk7c2nmydq5FGRGONNNJli5dTlSkCcFU/PiARzgCclKgoxXiv0xJtZ1sU5 n+PPhF4yB1m/CJLhLxfdpe1N9d7FNndY+OKONGkdzg/y6jtI4fl0jFRRbh6b+oDG EMHtppMoAoFI3SS4j+qaaJ18/hWT5uL+/8wnuAYL66mnBAGQRuhJTOYBY0Uat/8S 5EoEY2Cn101mQ9rtptQzelJo8oBUyHub7DAkcOq44WVGkgCP/tygQJLc3k/Oemnp DPH0YrhnTamjMMCaLs4g+QwHEYkCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBS9+JdG r2WeT6JyLKTTYtPM/aZkZzAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDQzNy5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK pvswDQYJKoZIhvcNAQELBQADggEBAGuFQzPzvq9P+fIRPRcxf3KoxmRe180CF207 FUB/qlDHQx6RxdD0ELEDokbD9vXPUd10jn9CL08bwJkXxc0Z+sOycmH+seXb2lIM CSWT9K+zL6L06HyIKSLc/72S553lewxt0fI3hqZtzF1KzEA0rkgix2X/VQSm1KOl G9pS31dfBni4/xQiA0mUdkq3FmlQfcMqm7ppWspX8oP0kU/BnRg91sSIwPN0Svpn vffdupcHT0aMACw3haJcpCSEGdoG8bpJSlyzruwhZ55Mb7eENw6uE3UaOtqVrY6m Np9dXwx+zAZ5nZgJ5/6wZ6vE9PlnHmGMwVRj4XeK9e36iCeGTyk= -----END CERTIFICATE-----Generated at Sat Mar 28 11:41:38 2026 by rpki-client