$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144450.roa File: AS144450.roa (raw, json) Hash identifier: ZdnxK8JDdfCkIo1lSQQqQcqzAVuvC0ftGtZyg60plAk= Subject key identifier: 55:F7:69:91:A4:D9:78:23:4A:FF:E4:62:FC:B4:A9:3C:04:BD:0E:66 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 5E6974DF0EB3FED9A4E52D6AA90F672CD130CCF7 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144450.roa Signing time: Wed 04 Mar 2026 06:13:48 +0000 ROA not before: Wed 04 Mar 2026 06:08:48 +0000 ROA not after: Wed 03 Mar 2027 06:13:48 +0000 asID: 144450 IP address blocks: 240a:a708::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:69:74:df:0e:b3:fe:d9:a4:e5:2d:6a:a9:0f:67:2c:d1:30:cc:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:08:48 2026 GMT Not After : Mar 3 06:13:48 2027 GMT Subject: CN=55F76991A4D978234AFFE462FCB4A93C04BD0E66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:04:03:0d:4d:f5:5d:19:96:5f:2a:75:1a:54: f0:58:cd:54:54:9c:39:82:f0:50:bd:db:29:78:b2: 0b:87:44:f5:2a:16:e3:d4:31:13:39:81:1b:ca:85: 96:c2:70:fb:b0:8d:b8:e5:b1:cd:81:e3:01:d1:2e: 65:2c:35:40:d9:cd:47:cd:f9:9b:4b:e9:11:3c:2c: 89:26:c9:06:de:c0:ce:66:77:10:0c:cd:62:96:b1: ee:70:22:b8:6d:9d:15:8c:7d:bb:44:fd:0f:76:1b: 8d:73:96:e2:19:af:f5:21:e1:02:d2:e9:bf:ae:98: 1a:65:ef:05:01:41:85:76:9a:f1:2a:61:3c:d0:90: af:42:42:f1:53:a9:1b:d0:d5:e2:ee:da:23:f7:b4: a4:d8:d1:83:3e:37:2a:a6:14:c1:0c:1b:f9:36:7b: ba:4c:a5:95:35:7c:87:f0:43:f4:26:ab:bf:1a:1e: 55:da:90:29:67:cf:00:1b:88:4c:e2:22:3f:e4:56: 68:e1:7b:73:5f:60:c4:93:da:d5:f8:63:fe:0a:62: 8e:6b:23:40:57:23:0b:52:c3:ac:4a:92:b7:64:0f: fc:fd:5e:a9:5f:6b:1f:6a:9f:e9:f8:50:32:2e:7e: 9f:04:6e:c6:66:b4:9a:d8:6c:39:1b:f1:2a:15:9a: 4a:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:F7:69:91:A4:D9:78:23:4A:FF:E4:62:FC:B4:A9:3C:04:BD:0E:66 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144450.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a708::/32 Signature Algorithm: sha256WithRSAEncryption 86:6c:9c:62:61:72:78:3a:d6:50:04:c5:2c:88:10:8e:85:1c: e9:b5:5a:98:4e:38:d5:39:d2:08:d9:03:4e:d3:42:e5:01:80: 98:53:f2:cc:e2:6e:3b:97:9e:7f:10:b7:56:92:85:cd:f6:e8: e8:7d:f0:48:a0:c9:69:0b:d1:68:09:cf:78:cc:52:7c:fc:fe: 7a:fe:2e:2a:d4:87:40:9f:eb:05:7c:66:f6:d5:79:51:e6:a4: e1:42:af:f4:a7:1d:6d:6e:82:94:65:19:83:8a:97:8e:f1:ee: bf:24:26:ed:33:db:49:77:7a:ac:ba:d0:96:99:13:c6:5f:72: 81:25:e1:f8:29:1e:3d:55:7c:6e:ef:3f:cd:e7:a4:17:ee:06: 7e:4b:ad:3a:af:95:5d:e0:9b:96:d6:8f:3c:f8:46:f4:27:59: 8e:81:2d:05:cd:a8:a9:96:58:21:e2:f6:0b:bc:ef:9a:56:bb: ea:97:c1:5a:7b:0e:6c:4d:c3:43:23:72:c1:70:62:5c:24:4d: 38:27:d0:81:3b:24:05:84:74:cd:d8:83:80:25:69:39:f8:b1: b3:76:b0:7d:c8:2f:f7:55:5c:b2:74:2a:52:c9:68:8e:31:62: f2:e7:aa:b1:fa:67:cd:c4:91:0f:b3:58:ab:ad:69:14:18:ae: 2a:76:e3:3c -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUXml03w6z/tmk5S1qqQ9nLNEwzPcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDg0OFoX DTI3MDMwMzA2MTM0OFowMzExMC8GA1UEAxMoNTVGNzY5OTFBNEQ5NzgyMzRBRkZF NDYyRkNCNEE5M0MwNEJEMEU2NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOQEAw1N9V0Zll8qdRpU8FjNVFScOYLwUL3bKXiyC4dE9SoW49QxEzmBG8qF lsJw+7CNuOWxzYHjAdEuZSw1QNnNR835m0vpETwsiSbJBt7AzmZ3EAzNYpax7nAi uG2dFYx9u0T9D3YbjXOW4hmv9SHhAtLpv66YGmXvBQFBhXaa8SphPNCQr0JC8VOp G9DV4u7aI/e0pNjRgz43KqYUwQwb+TZ7ukyllTV8h/BD9CarvxoeVdqQKWfPABuI TOIiP+RWaOF7c19gxJPa1fhj/gpijmsjQFcjC1LDrEqSt2QP/P1eqV9rH2qf6fhQ Mi5+nwRuxma0mthsORvxKhWaSrsCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRV92mR pNl4I0r/5GL8tKk8BL0OZjAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDQ1MC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK pwgwDQYJKoZIhvcNAQELBQADggEBAIZsnGJhcng61lAExSyIEI6FHOm1WphOONU5 0gjZA07TQuUBgJhT8szibjuXnn8Qt1aShc326Oh98EigyWkL0WgJz3jMUnz8/nr+ LirUh0Cf6wV8ZvbVeVHmpOFCr/SnHW1ugpRlGYOKl47x7r8kJu0z20l3eqy60JaZ E8ZfcoEl4fgpHj1VfG7vP83npBfuBn5LrTqvlV3gm5bWjzz4RvQnWY6BLQXNqKmW WCHi9gu875pWu+qXwVp7DmxNw0MjcsFwYlwkTTgn0IE7JAWEdM3Yg4AlaTn4sbN2 sH3IL/dVXLJ0KlLJaI4xYvLnqrH6Z83EkQ+zWKutaRQYrip24zw= -----END CERTIFICATE-----Generated at Sat Mar 28 11:41:44 2026 by rpki-client