$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144483.roa File: AS144483.roa (raw, json) Hash identifier: fEq7c1SPy8kX9mksQ6m3OPb/qiVyTOpfvE2CkFDVn80= Subject key identifier: 48:69:56:ED:CE:C6:5A:4A:1B:F4:93:4D:09:81:2F:73:51:89:6A:48 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 69F3BA76E0A9B5589F17392616F246BE19CB3E0F Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144483.roa Signing time: Wed 04 Mar 2026 06:15:43 +0000 ROA not before: Wed 04 Mar 2026 06:10:43 +0000 ROA not after: Wed 03 Mar 2027 06:15:43 +0000 asID: 144483 IP address blocks: 240a:a729::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:f3:ba:76:e0:a9:b5:58:9f:17:39:26:16:f2:46:be:19:cb:3e:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:10:43 2026 GMT Not After : Mar 3 06:15:43 2027 GMT Subject: CN=486956EDCEC65A4A1BF4934D09812F7351896A48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:e1:82:7f:a0:73:78:42:16:5c:f2:c6:82:c6: e2:05:fa:34:27:bb:a2:43:b0:32:78:b8:9d:0a:74: f7:68:d2:18:46:6f:08:39:6a:76:82:9f:55:84:a1: e2:ad:37:be:eb:a7:71:f1:34:3b:b7:fd:0e:d9:36: b7:d3:2d:9d:6a:a4:c2:4d:90:71:ee:1c:fa:98:9d: a2:53:0d:d8:b7:5c:77:a6:69:17:fd:11:3d:30:7a: a9:4c:94:9c:cb:66:97:dd:6b:fa:47:5c:0d:00:fa: 09:92:3b:49:9b:a3:be:e2:88:9f:c6:9b:e5:11:49: e1:29:38:3d:7d:65:34:66:c9:eb:d9:b5:e4:d0:04: 2d:f8:9d:56:fa:06:f6:fa:f7:a6:a8:63:7e:30:d6: 03:a7:04:12:8b:11:35:f5:98:99:71:09:de:94:b0: be:d5:29:6a:a0:94:f8:e3:7e:61:f0:af:e3:81:73: 63:30:91:d6:3e:15:ec:61:4a:6a:33:70:45:e4:37: 72:66:65:16:5a:d6:0e:fb:ee:4f:b5:96:ca:67:d9: 3e:24:79:5b:c8:88:9d:2e:0a:b1:00:b7:a8:7d:51: ca:b3:a0:60:05:14:ea:77:67:74:e3:88:41:7a:01: ae:95:c6:79:d9:34:3c:78:e9:c8:17:8a:c4:3f:b3: c9:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:69:56:ED:CE:C6:5A:4A:1B:F4:93:4D:09:81:2F:73:51:89:6A:48 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144483.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a729::/32 Signature Algorithm: sha256WithRSAEncryption 11:7a:49:f9:93:ca:cf:16:6f:67:8b:52:4e:ca:a2:8e:3a:b3: 42:5e:3b:e7:64:6f:2c:52:e4:a6:fc:76:47:8e:53:bd:f5:78: 14:d9:61:bb:8e:86:df:c5:82:2e:20:b4:c8:92:8a:d9:f5:d6: d3:e5:ad:11:b6:fc:fe:05:4c:88:54:61:cc:d0:59:09:bc:af: 77:76:cc:57:ad:97:00:fa:a0:09:2f:82:60:e0:7a:86:d8:47: 9d:6f:4c:76:14:e0:c3:8f:4c:cf:13:1f:00:a0:3b:34:36:2a: aa:1e:35:7e:a3:08:07:b6:f3:80:84:2c:4a:ef:75:4d:96:a8: f7:40:b3:f6:f4:56:43:de:1d:a9:2c:c0:ea:47:39:2e:97:6d: 7c:94:96:92:60:e9:e7:c1:fb:1a:4d:cf:f7:d3:03:d3:dd:12: dd:fe:a5:67:05:31:3a:98:d2:f0:df:9a:2c:5d:c2:92:03:68: d0:6a:e8:9c:56:6a:db:ee:64:3d:56:dd:c3:fd:95:da:53:f4: 6f:97:47:5d:66:d1:3b:05:1a:3e:d3:a2:7a:e6:32:e1:1c:89: 3b:96:93:8b:20:c1:07:3e:6a:7d:6c:44:d6:98:77:18:f9:41: 17:3f:1d:b2:42:2f:29:2d:e5:fa:2f:d0:c4:9c:60:a3:69:cd: da:fa:24:fd -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUafO6duCptVifFzkmFvJGvhnLPg8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTA0M1oX DTI3MDMwMzA2MTU0M1owMzExMC8GA1UEAxMoNDg2OTU2RURDRUM2NUE0QTFCRjQ5 MzREMDk4MTJGNzM1MTg5NkE0ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKfhgn+gc3hCFlzyxoLG4gX6NCe7okOwMni4nQp092jSGEZvCDlqdoKfVYSh 4q03vuuncfE0O7f9Dtk2t9MtnWqkwk2Qce4c+pidolMN2Ldcd6ZpF/0RPTB6qUyU nMtml91r+kdcDQD6CZI7SZujvuKIn8ab5RFJ4Sk4PX1lNGbJ69m15NAELfidVvoG 9vr3pqhjfjDWA6cEEosRNfWYmXEJ3pSwvtUpaqCU+ON+YfCv44FzYzCR1j4V7GFK ajNwReQ3cmZlFlrWDvvuT7WWymfZPiR5W8iInS4KsQC3qH1RyrOgYAUU6ndndOOI QXoBrpXGedk0PHjpyBeKxD+zyV8CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRIaVbt zsZaShv0k00JgS9zUYlqSDAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDQ4My5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK pykwDQYJKoZIhvcNAQELBQADggEBABF6SfmTys8Wb2eLUk7Koo46s0JeO+dkbyxS 5Kb8dkeOU731eBTZYbuOht/Fgi4gtMiSitn11tPlrRG2/P4FTIhUYczQWQm8r3d2 zFetlwD6oAkvgmDgeobYR51vTHYU4MOPTM8THwCgOzQ2KqoeNX6jCAe284CELErv dU2WqPdAs/b0VkPeHakswOpHOS6XbXyUlpJg6efB+xpNz/fTA9PdEt3+pWcFMTqY 0vDfmixdwpIDaNBq6JxWatvuZD1W3cP9ldpT9G+XR11m0TsFGj7TonrmMuEciTuW k4sgwQc+an1sRNaYdxj5QRc/HbJCLykt5fov0MScYKNpzdr6JP0= -----END CERTIFICATE-----Generated at Sat Mar 28 11:41:29 2026 by rpki-client