$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144491.roa File: AS144491.roa (raw, json) Hash identifier: 8ut7YQ76ltQJqz52RvlZbsu4/s8LrRiGeIELGFNIr6o= Subject key identifier: C4:88:69:DD:53:4E:E0:9C:E4:7B:19:29:C0:09:E8:FC:F3:AB:4D:60 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 0657294305F3DB5C4F60D074862AE5BA68CD5034 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144491.roa Signing time: Wed 04 Mar 2026 06:14:36 +0000 ROA not before: Wed 04 Mar 2026 06:09:36 +0000 ROA not after: Wed 03 Mar 2027 06:14:36 +0000 asID: 144491 IP address blocks: 240a:a731::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:57:29:43:05:f3:db:5c:4f:60:d0:74:86:2a:e5:ba:68:cd:50:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:09:36 2026 GMT Not After : Mar 3 06:14:36 2027 GMT Subject: CN=C48869DD534EE09CE47B1929C009E8FCF3AB4D60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:3f:54:54:64:d4:e4:8b:57:65:1e:9b:ae:5b: b7:55:e1:92:1a:fc:4d:99:f1:11:cd:09:71:f8:e8: 3a:15:f8:34:43:65:a7:41:55:86:f1:ed:e5:25:7a: 85:45:71:8d:e2:d7:9c:3c:13:c1:21:bd:7d:66:73: d3:27:0a:ce:60:34:80:b5:fc:f5:8d:75:bf:49:e4: 8e:88:bc:e8:88:d0:e6:c2:a0:6c:8f:91:54:0d:07: f4:8c:76:d4:eb:61:4d:aa:31:f3:72:92:4f:a3:a8: fc:23:49:24:b4:ab:8f:82:b0:68:93:50:c3:f7:14: eb:4e:a4:fc:31:69:5d:7e:b7:97:17:df:f3:4f:48: 83:ca:71:69:2c:d0:5b:8c:2f:cd:3a:5f:1e:8a:d1: 97:2a:98:07:29:1a:46:8d:f5:c9:47:24:43:c0:dd: ad:a4:69:ac:45:11:c6:28:84:e6:3e:6a:3f:cc:0e: aa:be:2a:e0:7f:f7:5e:22:06:0f:7b:1c:73:b6:ab: 80:81:34:b3:dc:c7:3c:fa:46:78:81:2c:1e:5a:98: 4b:9e:95:49:32:0e:15:fc:36:98:3a:9a:e9:6a:cc: af:1d:59:49:1d:6b:a0:bd:f5:87:75:38:8b:bb:34: bf:ce:f3:23:b4:eb:cd:a5:34:d2:b0:f0:59:8c:2c: 41:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:88:69:DD:53:4E:E0:9C:E4:7B:19:29:C0:09:E8:FC:F3:AB:4D:60 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144491.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a731::/32 Signature Algorithm: sha256WithRSAEncryption 8d:36:a9:c8:d6:89:eb:23:b8:c6:3d:2b:7d:ee:8e:95:53:d1: f0:8a:09:a8:35:56:45:d1:d7:f6:5a:22:36:87:8c:2b:f6:c5: 69:62:c1:cf:de:a8:41:85:3e:e8:ca:b1:ec:a8:b0:6f:62:c6: 25:c2:0c:22:e7:91:7c:8c:b4:8a:fd:4e:e8:3a:32:f0:55:ad: e7:95:f7:4f:56:d6:9d:ba:87:15:2c:f3:10:07:1f:ff:d2:cd: 38:5b:2e:fb:40:5b:a8:5b:56:22:6f:b7:b0:2a:7e:bc:6d:81: b7:50:14:3e:9c:b9:82:56:e3:bc:ad:e1:8c:ea:f6:4c:c0:e0: cf:2f:7e:5d:a4:68:47:3d:27:28:78:5e:10:14:ec:e6:67:9d: 92:75:90:bc:bd:cc:cd:16:c1:59:c2:29:7d:be:91:18:22:7e: 1f:48:02:07:aa:67:d6:03:79:e3:1e:5c:f9:88:23:d7:c9:09: 9a:6c:7b:e6:75:4b:8b:06:b0:bf:aa:44:82:66:57:f9:05:7f: d7:db:fa:60:0b:c9:46:32:54:ce:a7:91:bb:93:ae:04:5c:77: 88:96:05:9e:22:9a:8b:92:47:20:39:8d:97:16:3c:e5:97:58: ba:72:aa:ef:48:e0:2c:79:1a:ea:af:9c:cc:42:bb:a3:66:31: 7a:da:6e:96 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUBlcpQwXz21xPYNB0hirlumjNUDQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDkzNloX DTI3MDMwMzA2MTQzNlowMzExMC8GA1UEAxMoQzQ4ODY5REQ1MzRFRTA5Q0U0N0Ix OTI5QzAwOUU4RkNGM0FCNEQ2MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKw/VFRk1OSLV2Uem65bt1Xhkhr8TZnxEc0JcfjoOhX4NENlp0FVhvHt5SV6 hUVxjeLXnDwTwSG9fWZz0ycKzmA0gLX89Y11v0nkjoi86IjQ5sKgbI+RVA0H9Ix2 1OthTaox83KST6Oo/CNJJLSrj4KwaJNQw/cU606k/DFpXX63lxff809Ig8pxaSzQ W4wvzTpfHorRlyqYBykaRo31yUckQ8DdraRprEURxiiE5j5qP8wOqr4q4H/3XiIG D3scc7argIE0s9zHPPpGeIEsHlqYS56VSTIOFfw2mDqa6WrMrx1ZSR1roL31h3U4 i7s0v87zI7TrzaU00rDwWYwsQUUCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBTEiGnd U07gnOR7GSnACej886tNYDAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDQ5MS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK pzEwDQYJKoZIhvcNAQELBQADggEBAI02qcjWiesjuMY9K33ujpVT0fCKCag1VkXR 1/ZaIjaHjCv2xWliwc/eqEGFPujKseyosG9ixiXCDCLnkXyMtIr9Tug6MvBVreeV 909W1p26hxUs8xAHH//SzThbLvtAW6hbViJvt7AqfrxtgbdQFD6cuYJW47yt4Yzq 9kzA4M8vfl2kaEc9Jyh4XhAU7OZnnZJ1kLy9zM0WwVnCKX2+kRgifh9IAgeqZ9YD eeMeXPmII9fJCZpse+Z1S4sGsL+qRIJmV/kFf9fb+mALyUYyVM6nkbuTrgRcd4iW BZ4imouSRyA5jZcWPOWXWLpyqu9I4Cx5GuqvnMxCu6NmMXrabpY= -----END CERTIFICATE-----Generated at Sat Mar 28 11:41:23 2026 by rpki-client