$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144482.roa File: AS144482.roa (raw, json) Hash identifier: yfssiC9O6fAFdeHfoliaHnKbSH0e6n27uW+EZe0r6Ec= Subject key identifier: BC:FB:A8:5D:29:2A:B7:07:CE:29:E8:BF:61:E2:FE:D6:F4:0E:A8:1F Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 18F95AFE8BF33B23442BCACA04EF77FBC6D97D89 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144482.roa Signing time: Wed 04 Mar 2026 06:13:59 +0000 ROA not before: Wed 04 Mar 2026 06:08:59 +0000 ROA not after: Wed 03 Mar 2027 06:13:59 +0000 asID: 144482 IP address blocks: 240a:a728::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:f9:5a:fe:8b:f3:3b:23:44:2b:ca:ca:04:ef:77:fb:c6:d9:7d:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:08:59 2026 GMT Not After : Mar 3 06:13:59 2027 GMT Subject: CN=BCFBA85D292AB707CE29E8BF61E2FED6F40EA81F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:26:45:70:dc:a1:c6:59:5a:75:31:a5:55:e4: d3:3d:79:27:f3:d3:a7:18:f0:f0:0d:20:71:93:f1: a1:12:94:ee:2a:5a:ed:f8:07:13:47:c6:19:75:7e: 81:6b:e0:2c:76:61:aa:21:52:3e:df:83:f1:ee:31: 9a:db:3f:b1:bb:fc:8a:7b:db:ed:d1:48:ae:fe:17: e6:8b:02:6c:08:61:e2:ef:b4:15:89:94:58:d6:72: 09:ed:e9:58:31:33:9c:ea:91:4d:43:63:af:54:91: 86:72:14:52:c9:73:d5:3d:e2:06:91:37:30:9e:9a: 6c:ae:5c:fb:de:06:75:63:8a:af:46:69:1d:ea:07: 2c:81:18:e1:84:da:40:76:2c:79:e1:bd:7e:ea:91: d1:65:78:7b:94:e7:2c:74:d5:11:ca:3a:9d:a7:30: b4:2e:cd:b5:09:0c:b8:80:1a:db:fb:c8:9e:0c:8d: dd:c2:81:7d:64:89:e4:c8:79:38:21:38:12:3e:e3: d7:e9:28:34:39:8c:83:43:b2:72:bd:7d:eb:92:96: c6:05:50:73:c2:fc:6b:3e:86:91:9c:ac:64:b2:31: cd:83:06:68:ee:8b:1f:19:e2:1a:84:e1:8a:60:f6: fd:fe:80:6d:b7:a9:8b:77:75:27:2b:7e:48:c4:a1: 69:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:FB:A8:5D:29:2A:B7:07:CE:29:E8:BF:61:E2:FE:D6:F4:0E:A8:1F X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144482.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a728::/32 Signature Algorithm: sha256WithRSAEncryption 92:3e:27:ff:fa:ca:95:58:32:1f:bc:ed:0a:8e:6b:32:2c:16: d7:ac:07:5d:6b:7f:ff:84:8f:32:d3:b5:5d:3f:c6:3c:db:d5: e8:8a:70:1a:89:ae:c0:bc:cb:e4:a8:1c:e7:c4:1c:4f:54:40: 61:6c:8b:a6:f2:67:e5:c6:55:c3:af:c0:fc:39:9f:23:c1:01: a8:73:5f:ec:5d:39:97:65:66:6e:64:7d:50:a0:43:39:e1:d8: c5:4c:77:45:0a:25:c1:a6:25:4c:77:68:e3:24:ab:16:cf:db: b7:cb:94:7d:cf:e2:0f:a5:7b:a6:9d:ba:20:47:98:ff:a2:45: 07:0e:48:52:d8:91:c5:d9:56:43:ab:6c:f2:74:bf:43:41:23: 48:cc:9e:96:45:b2:61:67:3f:d2:e4:37:9c:66:b0:3c:e9:d4: 92:49:62:f4:b1:c3:a0:e3:61:66:12:a7:5a:dd:da:e9:98:cf: f9:1f:32:92:33:92:a2:b7:20:f6:02:a7:1e:47:87:ee:53:d8: f4:6c:82:30:06:6b:30:9b:3c:d7:44:44:7a:99:fd:3d:ad:4d: 2c:51:08:e5:98:73:46:a1:98:37:6d:da:93:08:c0:5e:62:e2: 30:de:5b:68:2b:98:94:31:a0:30:e8:bc:d5:af:29:6f:cf:52: 2e:76:ca:69 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUGPla/ovzOyNEK8rKBO93+8bZfYkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDg1OVoX DTI3MDMwMzA2MTM1OVowMzExMC8GA1UEAxMoQkNGQkE4NUQyOTJBQjcwN0NFMjlF OEJGNjFFMkZFRDZGNDBFQTgxRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL4mRXDcocZZWnUxpVXk0z15J/PTpxjw8A0gcZPxoRKU7ipa7fgHE0fGGXV+ gWvgLHZhqiFSPt+D8e4xmts/sbv8invb7dFIrv4X5osCbAhh4u+0FYmUWNZyCe3p WDEznOqRTUNjr1SRhnIUUslz1T3iBpE3MJ6abK5c+94GdWOKr0ZpHeoHLIEY4YTa QHYseeG9fuqR0WV4e5TnLHTVEco6nacwtC7NtQkMuIAa2/vIngyN3cKBfWSJ5Mh5 OCE4Ej7j1+koNDmMg0Oycr1965KWxgVQc8L8az6GkZysZLIxzYMGaO6LHxniGoTh imD2/f6Abbepi3d1Jyt+SMShaVECAwEAAaOCAcUwggHBMB0GA1UdDgQWBBS8+6hd KSq3B84p6L9h4v7W9A6oHzAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDQ4Mi5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK pygwDQYJKoZIhvcNAQELBQADggEBAJI+J//6ypVYMh+87QqOazIsFtesB11rf/+E jzLTtV0/xjzb1eiKcBqJrsC8y+SoHOfEHE9UQGFsi6byZ+XGVcOvwPw5nyPBAahz X+xdOZdlZm5kfVCgQznh2MVMd0UKJcGmJUx3aOMkqxbP27fLlH3P4g+le6aduiBH mP+iRQcOSFLYkcXZVkOrbPJ0v0NBI0jMnpZFsmFnP9LkN5xmsDzp1JJJYvSxw6Dj YWYSp1rd2umYz/kfMpIzkqK3IPYCpx5Hh+5T2PRsgjAGazCbPNdERHqZ/T2tTSxR COWYc0ahmDdt2pMIwF5i4jDeW2grmJQxoDDovNWvKW/PUi52ymk= -----END CERTIFICATE-----Generated at Sat Mar 28 11:42:00 2026 by rpki-client