$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144452.roa File: AS144452.roa (raw, json) Hash identifier: dKG+1iWFT/qvJWGkhsHQkUsJIiPhpryd8CC48OZi1IY= Subject key identifier: 0B:3F:62:DF:AD:C6:98:0A:25:25:49:71:CE:B7:8F:1C:88:60:CE:B3 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 7F38C0768E6D08E001C8CA73EB56A18EA36F9E1B Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144452.roa Signing time: Wed 04 Mar 2026 06:14:55 +0000 ROA not before: Wed 04 Mar 2026 06:09:55 +0000 ROA not after: Wed 03 Mar 2027 06:14:55 +0000 asID: 144452 IP address blocks: 240a:a70a::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:38:c0:76:8e:6d:08:e0:01:c8:ca:73:eb:56:a1:8e:a3:6f:9e:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:09:55 2026 GMT Not After : Mar 3 06:14:55 2027 GMT Subject: CN=0B3F62DFADC6980A25254971CEB78F1C8860CEB3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:02:c0:ce:58:68:23:f0:69:e7:b1:79:27:e2: 16:c3:1d:7c:16:21:e0:f5:41:98:b6:e7:7c:7e:b0: c3:33:dc:25:6a:22:d0:53:10:9d:03:56:91:64:3c: 19:24:f5:46:5d:e7:41:cf:aa:11:91:e2:42:da:fb: cd:3d:cb:10:91:12:0e:9f:3b:66:95:dd:07:fb:5d: c7:aa:8a:8e:8b:f6:27:2b:0b:4f:43:2f:3e:03:29: 13:cf:0d:fb:16:97:7e:40:fc:9c:12:ef:96:59:7e: 89:22:7c:b9:7e:92:fc:b5:63:46:aa:b7:f8:96:57: be:5f:86:e5:51:6f:04:6b:d4:2d:0f:64:a4:9f:4e: 65:a0:ba:df:8c:71:c6:10:fc:64:af:54:c3:16:89: 0b:cc:7c:55:80:38:b2:bb:32:21:9c:63:6a:64:38: 9d:22:e4:22:64:3c:a4:54:f0:b1:19:0f:54:cf:47: 8f:18:d9:d0:3f:12:20:73:5c:8e:fe:a2:66:75:9f: 7b:2f:0d:c0:4f:15:db:c3:94:3d:4d:2c:f9:68:54: 82:e0:8e:cb:c7:ff:19:ce:6d:55:d6:72:cc:ea:22: ae:7e:3b:f9:83:b4:04:66:d8:88:82:2d:f1:56:b8: 5d:07:86:44:c6:5b:9e:69:55:26:25:d9:64:7a:55: 32:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:3F:62:DF:AD:C6:98:0A:25:25:49:71:CE:B7:8F:1C:88:60:CE:B3 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144452.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a70a::/32 Signature Algorithm: sha256WithRSAEncryption 22:91:02:f0:fd:c9:14:d6:c0:d1:5c:6e:8d:6c:33:9b:e4:80: 25:14:7e:2b:59:98:89:17:2a:c8:55:04:91:a4:44:3c:b4:79: 6c:22:75:88:c5:bc:4e:29:98:cc:86:83:6e:93:19:cb:da:f8: 7b:e1:90:9e:c0:ad:b6:b3:63:4b:73:fe:ef:35:b8:cb:5e:a6: 65:b2:24:08:5e:21:ae:22:34:e3:47:9a:4d:9e:62:16:66:7f: f4:9f:20:eb:09:63:6d:9d:0b:d8:d0:39:3f:fb:26:52:33:74: f5:53:f3:83:8d:4f:b0:24:20:50:84:e4:a6:75:00:18:ad:55: 6f:35:08:c0:bd:35:f6:2b:13:5d:98:af:fc:33:08:f4:fc:c9: a6:51:84:be:86:01:96:c7:1c:4b:25:41:48:3c:2f:68:a7:6b: c1:65:a7:21:74:1e:2c:4a:22:e4:17:36:31:51:e2:05:2c:d7: 95:d8:6e:ec:4d:79:33:f5:4c:71:24:45:43:2e:74:e7:28:d1: 80:0e:c2:50:64:74:0a:0f:24:2d:5c:fa:af:84:d6:c1:64:8e: f5:4b:79:b3:b3:e8:01:da:6e:e1:79:d6:5b:a4:18:73:26:77: ff:d7:30:6f:8f:33:a6:fa:2f:46:da:12:93:8d:a1:76:47:f0: 6c:00:43:ed -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUfzjAdo5tCOAByMpz61ahjqNvnhswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDk1NVoX DTI3MDMwMzA2MTQ1NVowMzExMC8GA1UEAxMoMEIzRjYyREZBREM2OTgwQTI1MjU0 OTcxQ0VCNzhGMUM4ODYwQ0VCMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALYCwM5YaCPwaeexeSfiFsMdfBYh4PVBmLbnfH6wwzPcJWoi0FMQnQNWkWQ8 GST1Rl3nQc+qEZHiQtr7zT3LEJESDp87ZpXdB/tdx6qKjov2JysLT0MvPgMpE88N +xaXfkD8nBLvlll+iSJ8uX6S/LVjRqq3+JZXvl+G5VFvBGvULQ9kpJ9OZaC634xx xhD8ZK9UwxaJC8x8VYA4srsyIZxjamQ4nSLkImQ8pFTwsRkPVM9HjxjZ0D8SIHNc jv6iZnWfey8NwE8V28OUPU0s+WhUguCOy8f/Gc5tVdZyzOoirn47+YO0BGbYiIIt 8Va4XQeGRMZbnmlVJiXZZHpVMlkCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQLP2Lf rcaYCiUlSXHOt48ciGDOszAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDQ1Mi5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK pwowDQYJKoZIhvcNAQELBQADggEBACKRAvD9yRTWwNFcbo1sM5vkgCUUfitZmIkX KshVBJGkRDy0eWwidYjFvE4pmMyGg26TGcva+HvhkJ7ArbazY0tz/u81uMtepmWy JAheIa4iNONHmk2eYhZmf/SfIOsJY22dC9jQOT/7JlIzdPVT84ONT7AkIFCE5KZ1 ABitVW81CMC9NfYrE12Yr/wzCPT8yaZRhL6GAZbHHEslQUg8L2ina8FlpyF0HixK IuQXNjFR4gUs15XYbuxNeTP1THEkRUMudOco0YAOwlBkdAoPJC1c+q+E1sFkjvVL ebOz6AHabuF51lukGHMmd//XMG+PM6b6L0baEpONoXZH8GwAQ+0= -----END CERTIFICATE-----Generated at Sat Mar 28 11:44:22 2026 by rpki-client