$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144464.roa File: AS144464.roa (raw, json) Hash identifier: pE2uEeoIgye8Yqq6pVeuBpkQ1QUvKauTV16ESzVNtMY= Subject key identifier: 73:38:CF:91:49:85:3B:8A:B7:74:D3:65:9D:FE:4D:46:00:97:23:E6 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 40FA2E57A5F487C270C2C75224E965CDE0F0077C Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144464.roa Signing time: Wed 04 Mar 2026 06:12:41 +0000 ROA not before: Wed 04 Mar 2026 06:07:41 +0000 ROA not after: Wed 03 Mar 2027 06:12:41 +0000 asID: 144464 IP address blocks: 240a:a716::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:fa:2e:57:a5:f4:87:c2:70:c2:c7:52:24:e9:65:cd:e0:f0:07:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:07:41 2026 GMT Not After : Mar 3 06:12:41 2027 GMT Subject: CN=7338CF9149853B8AB774D3659DFE4D46009723E6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:61:7c:79:5f:40:08:9e:7e:c4:69:7e:00:4a: a0:e5:de:09:1e:a1:f0:72:ed:6c:c1:fd:3c:05:13: 71:f4:a8:b8:ae:33:86:a2:20:53:ac:23:fa:ad:a9: 76:68:27:04:1e:5d:a4:3a:9a:31:49:f7:88:ab:c4: d3:de:a7:63:98:c3:fd:a8:0a:d8:70:af:6c:e2:3d: 52:63:e3:d7:d9:d6:0e:a8:5f:16:1e:8f:81:7b:13: ac:03:87:04:ae:f3:dc:a8:7c:4c:60:ce:9e:71:2f: 66:87:8e:b2:e4:16:9f:0e:e9:67:be:3f:51:97:b6: 09:ee:a9:5d:b0:8d:5e:33:61:f7:3b:54:e4:39:1b: eb:fe:68:4c:51:6f:9d:8e:d5:58:e2:4e:26:de:38: 55:82:9a:f0:0a:1f:8a:a1:fe:20:07:5a:24:dd:83: d3:c8:88:9c:ae:b2:74:3b:47:05:1a:38:95:f6:ef: 06:45:b9:6d:3c:83:f2:0e:a3:04:11:51:7a:dd:7b: c5:65:88:42:ab:ad:7d:56:5f:85:6e:3e:08:51:a3: 84:7e:4a:bc:19:b8:38:13:06:67:49:e4:61:32:41: f0:f4:aa:02:30:fd:72:96:4b:63:8c:0f:30:82:8b: bc:bf:e5:94:cc:73:67:9e:4a:c0:13:22:04:02:44: fe:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:38:CF:91:49:85:3B:8A:B7:74:D3:65:9D:FE:4D:46:00:97:23:E6 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144464.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a716::/32 Signature Algorithm: sha256WithRSAEncryption d8:c3:d2:73:17:a4:f5:85:5b:12:de:24:81:da:e9:36:65:b1: 20:9d:d0:2c:fc:a3:b8:ef:2f:49:bb:40:a9:97:98:0a:e6:dd: f8:67:42:a2:08:d6:f5:a0:fa:53:61:15:ec:ab:83:35:97:07: 8e:14:75:dd:2c:56:11:62:c5:3d:dc:6c:87:af:e9:92:f0:af: 09:6c:0c:7c:d8:f3:89:ad:e3:fb:c9:68:c8:de:3c:02:3b:28: a9:72:fa:53:4e:62:cc:6e:57:98:63:2e:0e:b0:de:4b:26:52: f0:76:8e:7a:1b:28:58:d5:a2:2d:98:ca:b8:d3:93:83:53:9a: 9c:bc:2c:a3:bc:e0:9d:ba:5a:7d:cc:07:a6:5a:78:5f:64:6e: 16:a6:4e:df:0d:bd:98:83:b4:85:20:ad:87:58:a2:f8:a1:cd: a2:5f:df:f0:09:9d:43:cb:98:24:35:ce:99:58:f4:de:e6:4c: 66:a3:52:22:d9:5d:f8:53:83:33:50:69:36:ab:33:74:5c:f6: 13:f7:3c:0b:cc:b1:d8:da:ee:1c:65:1c:49:27:e3:b9:66:fe: 6e:32:35:a5:bd:18:7c:3f:5d:66:ab:54:6d:0d:66:0d:d8:85: d6:f3:1d:04:3c:fe:55:e5:44:99:61:f8:82:d8:0a:b1:62:5e: e1:b8:1a:3c -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUQPouV6X0h8JwwsdSJOllzeDwB3wwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDc0MVoX DTI3MDMwMzA2MTI0MVowMzExMC8GA1UEAxMoNzMzOENGOTE0OTg1M0I4QUI3NzRE MzY1OURGRTRENDYwMDk3MjNFNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK1hfHlfQAiefsRpfgBKoOXeCR6h8HLtbMH9PAUTcfSouK4zhqIgU6wj+q2p dmgnBB5dpDqaMUn3iKvE096nY5jD/agK2HCvbOI9UmPj19nWDqhfFh6PgXsTrAOH BK7z3Kh8TGDOnnEvZoeOsuQWnw7pZ74/UZe2Ce6pXbCNXjNh9ztU5Dkb6/5oTFFv nY7VWOJOJt44VYKa8AofiqH+IAdaJN2D08iInK6ydDtHBRo4lfbvBkW5bTyD8g6j BBFRet17xWWIQqutfVZfhW4+CFGjhH5KvBm4OBMGZ0nkYTJB8PSqAjD9cpZLY4wP MIKLvL/llMxzZ55KwBMiBAJE/k8CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRzOM+R SYU7ird002Wd/k1GAJcj5jAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDQ2NC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK pxYwDQYJKoZIhvcNAQELBQADggEBANjD0nMXpPWFWxLeJIHa6TZlsSCd0Cz8o7jv L0m7QKmXmArm3fhnQqII1vWg+lNhFeyrgzWXB44Udd0sVhFixT3cbIev6ZLwrwls DHzY84mt4/vJaMjePAI7KKly+lNOYsxuV5hjLg6w3ksmUvB2jnobKFjVoi2YyrjT k4NTmpy8LKO84J26Wn3MB6ZaeF9kbhamTt8NvZiDtIUgrYdYovihzaJf3/AJnUPL mCQ1zplY9N7mTGajUiLZXfhTgzNQaTarM3Rc9hP3PAvMsdja7hxlHEkn47lm/m4y NaW9GHw/XWarVG0NZg3YhdbzHQQ8/lXlRJlh+ILYCrFiXuG4Gjw= -----END CERTIFICATE-----Generated at Sat Mar 28 15:54:32 2026 by rpki-client