$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144460.roa File: AS144460.roa (raw, json) Hash identifier: bcZ9IryC48Sr6mcAFzPPPLPIIfJVCtqlVHn4IH6XKkI= Subject key identifier: 47:98:63:B8:50:B5:D4:4B:7D:D7:97:A8:F5:FA:7C:3C:32:9B:15:5A Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 5FD4DA0E626E83CBE9825CDF44E23714863950C9 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144460.roa Signing time: Wed 04 Mar 2026 06:14:35 +0000 ROA not before: Wed 04 Mar 2026 06:09:35 +0000 ROA not after: Wed 03 Mar 2027 06:14:35 +0000 asID: 144460 IP address blocks: 240a:a712::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:d4:da:0e:62:6e:83:cb:e9:82:5c:df:44:e2:37:14:86:39:50:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:09:35 2026 GMT Not After : Mar 3 06:14:35 2027 GMT Subject: CN=479863B850B5D44B7DD797A8F5FA7C3C329B155A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:a3:cf:a7:f9:e5:44:7b:2d:5b:9b:93:16:cc: 70:e5:06:8a:a2:ee:5f:e6:f7:3f:5b:a6:af:7a:24: 28:8b:66:20:3e:bd:d6:0c:02:44:dd:a5:7e:de:0f: c7:f1:1b:ef:79:1b:ea:dd:33:15:0c:23:4a:d0:f3: 2f:ef:cb:b0:7a:ff:73:29:8f:10:94:02:16:ae:1e: 08:da:e3:f6:77:45:21:da:77:1d:94:0e:5c:9c:9a: bc:bd:79:17:99:06:bd:aa:eb:f4:fa:9b:22:32:a2: 99:95:c0:d3:90:40:27:4c:4c:f5:25:d0:ba:0f:37: a1:02:1a:5e:e8:5a:f3:e4:64:83:6d:db:19:de:23: ab:a3:d0:c2:7d:2c:a9:3c:54:08:5e:d5:54:af:ca: e8:4c:0b:7b:0c:c0:70:6d:68:e5:0e:7e:b9:33:ac: e9:1e:ed:cf:83:c1:f7:e4:01:ef:dc:32:7b:a3:b7: 79:48:fc:0e:89:1b:a0:93:d6:77:74:78:da:f3:75: 17:08:28:74:6d:c6:05:c9:08:4c:54:4f:66:fc:f6: 77:4e:b5:2e:98:9a:53:5f:44:78:b5:f3:c5:7d:00: 52:5b:88:56:db:6b:4e:8b:40:4c:7b:5b:64:87:f0: a4:78:c7:a1:ad:e7:56:be:82:95:cc:0e:64:e7:f7: ac:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:98:63:B8:50:B5:D4:4B:7D:D7:97:A8:F5:FA:7C:3C:32:9B:15:5A X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144460.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a712::/32 Signature Algorithm: sha256WithRSAEncryption 98:1b:ab:6a:36:f6:64:49:b0:91:39:68:d2:ba:22:af:28:59: bf:52:d3:21:3b:8c:56:c8:70:a2:a5:f7:63:83:6d:3d:e2:7f: 4e:47:1c:3f:21:f9:f1:17:ad:81:f0:32:93:ce:4e:30:2c:76: 43:b4:fc:d1:a0:50:ff:f8:30:5e:db:30:a0:0c:44:f7:d0:e7: d7:67:54:22:9e:48:35:a1:8a:e0:c9:e7:7e:66:5c:e1:9e:22: 84:ed:91:7c:3d:d8:af:0d:c1:46:e5:29:0f:35:f4:bd:e5:5a: a4:a3:43:a6:4c:b8:7b:8d:87:b2:7d:f7:5f:9b:f6:f1:09:c9: 21:3f:a2:9a:99:aa:68:92:9d:ca:93:47:36:48:26:0f:e8:f1: c4:90:2f:7f:0b:48:fe:90:64:e4:87:3e:39:03:40:18:3f:fc: 03:1c:66:3e:8f:76:bc:a7:21:be:bb:3b:e5:2a:be:41:32:c6: b7:f7:7f:ed:7f:75:a4:b8:4b:59:0e:17:a0:d9:41:81:74:eb: ba:6b:cf:6f:d8:7d:83:e3:60:46:88:e9:81:4a:32:5a:35:1d: f1:1f:12:fa:8f:18:c5:3b:4b:58:b9:8b:29:93:0e:19:51:d1: 26:0e:53:5d:b2:f9:e7:9e:b2:37:76:ca:e9:34:37:20:58:33: 35:09:e1:9f -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUX9TaDmJug8vpglzfROI3FIY5UMkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDkzNVoX DTI3MDMwMzA2MTQzNVowMzExMC8GA1UEAxMoNDc5ODYzQjg1MEI1RDQ0QjdERDc5 N0E4RjVGQTdDM0MzMjlCMTU1QTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAO+jz6f55UR7LVubkxbMcOUGiqLuX+b3P1umr3okKItmID691gwCRN2lft4P x/Eb73kb6t0zFQwjStDzL+/LsHr/cymPEJQCFq4eCNrj9ndFIdp3HZQOXJyavL15 F5kGvarr9PqbIjKimZXA05BAJ0xM9SXQug83oQIaXuha8+Rkg23bGd4jq6PQwn0s qTxUCF7VVK/K6EwLewzAcG1o5Q5+uTOs6R7tz4PB9+QB79wye6O3eUj8DokboJPW d3R42vN1FwgodG3GBckITFRPZvz2d061LpiaU19EeLXzxX0AUluIVttrTotATHtb ZIfwpHjHoa3nVr6ClcwOZOf3rF0CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRHmGO4 ULXUS33Xl6j1+nw8MpsVWjAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDQ2MC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK pxIwDQYJKoZIhvcNAQELBQADggEBAJgbq2o29mRJsJE5aNK6Iq8oWb9S0yE7jFbI cKKl92ODbT3if05HHD8h+fEXrYHwMpPOTjAsdkO0/NGgUP/4MF7bMKAMRPfQ59dn VCKeSDWhiuDJ535mXOGeIoTtkXw92K8NwUblKQ819L3lWqSjQ6ZMuHuNh7J991+b 9vEJySE/opqZqmiSncqTRzZIJg/o8cSQL38LSP6QZOSHPjkDQBg//AMcZj6Pdryn Ib67O+UqvkEyxrf3f+1/daS4S1kOF6DZQYF067prz2/YfYPjYEaI6YFKMlo1HfEf EvqPGMU7S1i5iymTDhlR0SYOU12y+eeesjd2yuk0NyBYMzUJ4Z8= -----END CERTIFICATE-----Generated at Sat Mar 28 11:43:07 2026 by rpki-client