$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144447.roa File: AS144447.roa (raw, json) Hash identifier: k9N4DCAlJ3JZcXHfbF7835plABkUT4BTYQLlCoPWCCM= Subject key identifier: F0:C6:E3:E7:04:4A:0E:62:D1:B3:1E:00:69:8C:3B:26:A0:5D:86:D4 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 64C2D1D049FDE0CE5BD1FA362844025A8BA81ED6 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144447.roa Signing time: Wed 04 Mar 2026 06:13:24 +0000 ROA not before: Wed 04 Mar 2026 06:08:24 +0000 ROA not after: Wed 03 Mar 2027 06:13:24 +0000 asID: 144447 IP address blocks: 240a:a705::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:c2:d1:d0:49:fd:e0:ce:5b:d1:fa:36:28:44:02:5a:8b:a8:1e:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:08:24 2026 GMT Not After : Mar 3 06:13:24 2027 GMT Subject: CN=F0C6E3E7044A0E62D1B31E00698C3B26A05D86D4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:9e:ea:1d:81:50:b7:f6:5b:cc:8d:73:6e:d0: 86:0a:29:b0:b4:12:60:bd:eb:8e:25:b4:06:d8:b3: a5:28:a8:ed:3d:66:5a:ee:d9:df:1f:39:f7:0c:ae: db:32:10:e9:5e:ee:6f:a1:d4:21:f4:0e:68:51:78: b5:39:04:dd:d1:c3:ae:0e:e2:53:52:6a:9c:cf:2d: 12:60:ee:1e:c5:f4:08:e6:cc:6c:c8:9f:83:ef:0d: 52:35:ee:ee:da:48:9a:ea:7d:2d:b0:73:60:c8:37: 1f:fa:99:bc:f8:d6:7e:f8:83:b4:e6:3e:75:6c:18: a2:ed:ac:34:b3:28:c2:48:6b:7c:23:6a:16:c2:0c: 56:5e:56:2b:19:ae:12:a2:e5:a0:0a:a1:3e:17:10: e1:41:d3:f5:e8:33:00:c5:8c:c9:c7:0a:82:33:bc: 06:c6:86:5c:30:36:ee:26:cd:76:44:51:84:80:78: a2:b4:2d:de:2f:24:b4:35:66:f9:80:52:dd:38:f2: a1:c5:2c:92:33:15:8e:5b:ed:61:5c:13:f9:84:30: 41:bd:cb:6d:0d:b2:6f:11:56:a2:99:64:f6:73:56: 3f:c3:6a:01:f8:18:9f:a7:8d:5c:45:b9:6a:56:10: 6a:6c:ff:de:9e:90:35:db:c1:f4:46:f6:b3:93:43: 61:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:C6:E3:E7:04:4A:0E:62:D1:B3:1E:00:69:8C:3B:26:A0:5D:86:D4 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144447.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a705::/32 Signature Algorithm: sha256WithRSAEncryption 0d:c1:05:90:ae:8d:be:74:49:89:3e:87:bd:89:7d:b4:20:d0: 91:1c:36:cc:05:49:dd:6e:ab:31:87:6d:27:a2:f5:a7:d1:d1: 34:cd:3b:6f:ef:17:39:47:90:4e:94:db:64:b4:db:c8:5a:03: a5:38:ce:be:3d:df:1d:4a:21:ec:17:e4:ac:32:74:5f:fd:1f: 10:44:fe:07:3f:c6:ca:c5:41:70:28:c6:dd:7c:78:bf:ff:1f: 79:24:d1:e8:72:62:e8:3a:9d:4c:a9:4d:75:34:b1:0d:32:7b: 07:b3:03:34:8d:53:19:35:70:e2:a3:53:2e:db:b9:08:d6:9f: 0f:2c:62:07:77:90:6a:e2:ad:7f:91:7b:df:e3:fb:a1:42:80: b7:f3:2b:1d:10:e9:61:30:e2:cd:4a:af:3c:22:0d:5b:6a:56: 68:5a:ac:d2:65:87:08:94:d2:e0:80:b2:c5:1a:54:31:14:8d: 95:b9:2c:42:5c:04:ad:77:d2:df:a2:6b:46:50:bd:d5:7c:a3: 16:3e:50:93:9c:d5:fb:f8:63:1c:68:1c:a2:b1:57:eb:12:28: 8a:c2:cf:e4:b6:ed:f7:35:7c:28:18:eb:0d:a3:25:d8:99:ad: 6e:01:03:86:2d:34:bf:3c:fa:c6:c6:7e:78:27:52:fa:28:27: cf:fc:20:bf -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUZMLR0En94M5b0fo2KEQCWouoHtYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDgyNFoX DTI3MDMwMzA2MTMyNFowMzExMC8GA1UEAxMoRjBDNkUzRTcwNDRBMEU2MkQxQjMx RTAwNjk4QzNCMjZBMDVEODZENDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL6e6h2BULf2W8yNc27QhgopsLQSYL3rjiW0BtizpSio7T1mWu7Z3x859wyu 2zIQ6V7ub6HUIfQOaFF4tTkE3dHDrg7iU1JqnM8tEmDuHsX0CObMbMifg+8NUjXu 7tpImup9LbBzYMg3H/qZvPjWfviDtOY+dWwYou2sNLMowkhrfCNqFsIMVl5WKxmu EqLloAqhPhcQ4UHT9egzAMWMyccKgjO8BsaGXDA27ibNdkRRhIB4orQt3i8ktDVm +YBS3TjyocUskjMVjlvtYVwT+YQwQb3LbQ2ybxFWoplk9nNWP8NqAfgYn6eNXEW5 alYQamz/3p6QNdvB9Eb2s5NDYd8CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBTwxuPn BEoOYtGzHgBpjDsmoF2G1DAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDQ0Ny5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK pwUwDQYJKoZIhvcNAQELBQADggEBAA3BBZCujb50SYk+h72JfbQg0JEcNswFSd1u qzGHbSei9afR0TTNO2/vFzlHkE6U22S028haA6U4zr493x1KIewX5KwydF/9HxBE /gc/xsrFQXAoxt18eL//H3kk0ehyYug6nUypTXU0sQ0yewezAzSNUxk1cOKjUy7b uQjWnw8sYgd3kGrirX+Re9/j+6FCgLfzKx0Q6WEw4s1KrzwiDVtqVmharNJlhwiU 0uCAssUaVDEUjZW5LEJcBK130t+ia0ZQvdV8oxY+UJOc1fv4YxxoHKKxV+sSKIrC z+S27fc1fCgY6w2jJdiZrW4BA4YtNL88+sbGfngnUvooJ8/8IL8= -----END CERTIFICATE-----Generated at Sat Mar 28 14:30:37 2026 by rpki-client