$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144458.roa File: AS144458.roa (raw, json) Hash identifier: g9AvDTDDWkEqJHZxoNI4kzhJkH7zdF02vf2tVeQ/ILw= Subject key identifier: 86:97:9B:49:30:1D:06:EA:FD:BC:25:A8:B1:17:54:36:B0:19:49:43 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 536D2137FF5C864F60BAB92A2CE6D89CEDF9EF23 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144458.roa Signing time: Wed 04 Mar 2026 06:14:33 +0000 ROA not before: Wed 04 Mar 2026 06:09:33 +0000 ROA not after: Wed 03 Mar 2027 06:14:33 +0000 asID: 144458 IP address blocks: 240a:a710::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:6d:21:37:ff:5c:86:4f:60:ba:b9:2a:2c:e6:d8:9c:ed:f9:ef:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:09:33 2026 GMT Not After : Mar 3 06:14:33 2027 GMT Subject: CN=86979B49301D06EAFDBC25A8B1175436B0194943 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:2d:93:77:e0:10:2e:90:b3:93:50:06:e5:93: 2d:c1:de:15:30:ff:5e:a7:da:ed:97:d5:f8:74:af: ff:df:bb:ff:f2:00:24:a1:03:65:53:ef:00:06:6d: 1a:43:94:a2:c7:8d:53:b7:31:e6:08:f1:e9:1d:f7: a2:d5:b1:cb:52:39:73:17:cd:31:0c:ad:15:bd:74: 61:0d:83:e4:80:2f:8b:76:77:99:89:6c:e9:89:69: 8b:be:3c:ff:00:b3:cd:7c:00:56:9f:31:52:ec:41: 04:75:98:44:c3:99:6b:43:82:7d:64:7b:79:e2:a5: 7f:92:20:5d:a7:03:77:e0:bf:ad:a0:13:32:a1:57: b8:6f:a1:f9:5c:a8:36:fc:d5:d8:83:77:f1:0f:aa: 52:3b:9b:12:ef:b5:5c:98:7a:5f:e9:a5:ce:3e:54: ce:4f:7f:7b:37:3a:cf:e5:39:27:6c:cc:88:1f:54: c7:5e:fa:1c:ff:19:4b:ff:dc:99:c7:a4:7f:27:0d: a4:c9:1d:44:e9:a9:a5:f1:ea:a7:9f:0c:d1:e0:45: 56:d5:19:7e:13:50:df:4b:22:41:4f:75:52:9e:37: ad:6c:49:39:91:c2:ad:33:e3:86:93:bf:4b:3e:fa: 9b:be:6f:7b:34:1b:38:d6:93:5f:da:64:cb:f5:9c: 94:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:97:9B:49:30:1D:06:EA:FD:BC:25:A8:B1:17:54:36:B0:19:49:43 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144458.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a710::/32 Signature Algorithm: sha256WithRSAEncryption 44:ba:9f:ca:8c:dc:ff:e6:24:49:f2:7b:8c:63:78:2b:ee:ea: c7:42:a7:2a:e0:88:ee:60:b2:d8:b1:fd:fb:6b:ea:48:8a:59: c3:f4:3f:54:51:28:b3:ce:60:20:24:3e:c0:21:fe:0e:0f:bc: fa:0b:44:fc:b5:77:d0:70:ab:06:94:6c:ea:7f:b0:1d:07:48: b1:af:ca:13:3b:fd:b1:e2:cd:d1:0b:12:64:28:26:82:75:95: eb:aa:13:6c:69:db:b5:9f:b5:5e:a3:c0:23:2b:02:ac:b7:04: ea:98:f3:af:ea:52:1e:80:82:76:34:7c:1a:d4:41:c9:4e:12: c1:32:ff:78:06:e3:0b:a9:b3:59:fe:37:b1:ef:d9:b1:b2:0d: 8c:6a:44:f8:98:28:e0:1b:9b:3a:4a:4f:d1:a6:99:a4:5e:eb: 3b:cd:4e:e6:d8:9c:af:cc:8e:18:8b:e8:cc:05:53:24:1f:05: 5c:11:1f:b5:05:bb:8d:f0:d6:58:23:7b:eb:a8:1e:9c:bb:39: ce:a9:73:4c:07:fd:32:ff:a0:48:17:c5:dd:62:32:ea:1b:55: 13:a8:d0:4b:dc:ca:52:da:d1:31:ca:1c:03:8d:b8:a9:90:a3: e0:96:73:63:b3:e8:cb:98:5f:cf:d1:5a:13:ef:57:7f:e4:f2: 6a:d5:cf:e7 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUU20hN/9chk9gurkqLObYnO357yMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDkzM1oX DTI3MDMwMzA2MTQzM1owMzExMC8GA1UEAxMoODY5NzlCNDkzMDFEMDZFQUZEQkMy NUE4QjExNzU0MzZCMDE5NDk0MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANctk3fgEC6Qs5NQBuWTLcHeFTD/Xqfa7ZfV+HSv/9+7//IAJKEDZVPvAAZt GkOUoseNU7cx5gjx6R33otWxy1I5cxfNMQytFb10YQ2D5IAvi3Z3mYls6Ylpi748 /wCzzXwAVp8xUuxBBHWYRMOZa0OCfWR7eeKlf5IgXacDd+C/raATMqFXuG+h+Vyo NvzV2IN38Q+qUjubEu+1XJh6X+mlzj5Uzk9/ezc6z+U5J2zMiB9Ux176HP8ZS//c mcekfycNpMkdROmppfHqp58M0eBFVtUZfhNQ30siQU91Up43rWxJOZHCrTPjhpO/ Sz76m75vezQbONaTX9pky/WclB0CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSGl5tJ MB0G6v28JaixF1Q2sBlJQzAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDQ1OC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK pxAwDQYJKoZIhvcNAQELBQADggEBAES6n8qM3P/mJEnye4xjeCvu6sdCpyrgiO5g stix/ftr6kiKWcP0P1RRKLPOYCAkPsAh/g4PvPoLRPy1d9BwqwaUbOp/sB0HSLGv yhM7/bHizdELEmQoJoJ1leuqE2xp27WftV6jwCMrAqy3BOqY86/qUh6AgnY0fBrU QclOEsEy/3gG4wups1n+N7Hv2bGyDYxqRPiYKOAbmzpKT9GmmaRe6zvNTubYnK/M jhiL6MwFUyQfBVwRH7UFu43w1lgje+uoHpy7Oc6pc0wH/TL/oEgXxd1iMuobVROo 0EvcylLa0THKHAONuKmQo+CWc2Oz6MuYX8/RWhPvV3/k8mrVz+c= -----END CERTIFICATE-----Generated at Sat Mar 28 14:30:40 2026 by rpki-client