$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144493.roa File: AS144493.roa (raw, json) Hash identifier: Ll4iuSC6a/XCmlDuIibmbFYKkwBcOFFNASXxFoOefDU= Subject key identifier: 71:91:F7:E7:8D:6C:D0:E2:1E:F8:D6:F1:6B:C0:9A:C6:B6:D4:A6:EF Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 5FDDDC802D2934F73F4EC395466E74E8274C8CDF Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144493.roa Signing time: Wed 04 Mar 2026 06:14:32 +0000 ROA not before: Wed 04 Mar 2026 06:09:32 +0000 ROA not after: Wed 03 Mar 2027 06:14:32 +0000 asID: 144493 IP address blocks: 240a:a733::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:dd:dc:80:2d:29:34:f7:3f:4e:c3:95:46:6e:74:e8:27:4c:8c:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:09:32 2026 GMT Not After : Mar 3 06:14:32 2027 GMT Subject: CN=7191F7E78D6CD0E21EF8D6F16BC09AC6B6D4A6EF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:f1:78:04:e1:0a:3e:dd:3e:b4:15:5c:d0:4f: b5:d9:42:ba:73:3a:ea:b7:f2:ef:b8:30:7f:f4:43: e7:2d:9b:67:9b:c6:5a:86:ea:a6:ff:16:df:78:cf: ce:1b:f7:8b:21:cd:e8:d3:ad:7d:b0:cc:16:d4:a3: 60:a6:22:cd:7b:a7:85:0e:bf:0c:4d:20:5f:9e:30: b1:aa:85:23:b6:10:fb:f8:95:7b:07:a4:0a:59:90: 5b:f0:68:bf:6e:e1:c2:9d:71:9a:ec:32:c8:9b:60: 42:1a:5d:75:5a:b4:df:43:d4:e2:e7:e6:07:52:4d: 55:b1:56:75:60:48:24:aa:e3:46:a8:38:28:07:05: 5c:ba:bd:56:d2:13:bd:be:41:a3:6f:3f:6e:74:91: 8b:00:b4:2f:36:dd:ec:66:46:e7:54:ac:2a:4a:f8: fe:5f:de:48:90:56:c7:ab:12:f7:25:6a:4a:b4:c1: 1e:81:b7:e3:e3:86:bc:aa:dc:47:67:aa:53:c2:38: e6:14:92:ec:c0:f1:ed:f1:4c:67:4e:cf:11:07:d7: 1b:72:30:1a:74:28:71:d1:4b:13:5b:a0:8d:8f:db: 7c:c0:bd:d5:6a:d6:b3:bd:80:0f:30:25:da:ea:d7: 1e:96:b4:6b:7e:99:ce:fd:fb:e7:18:33:5b:9a:e1: a1:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:91:F7:E7:8D:6C:D0:E2:1E:F8:D6:F1:6B:C0:9A:C6:B6:D4:A6:EF X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144493.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a733::/32 Signature Algorithm: sha256WithRSAEncryption 85:0c:0f:8c:5b:8c:40:05:77:5a:50:53:b8:f6:8c:6e:c4:3a: 96:46:c7:c7:d7:a4:65:23:ef:bb:54:66:fa:22:6a:de:57:1d: 91:49:2b:85:09:d5:cb:bd:db:6a:a2:91:03:6a:dd:72:e9:64: 7d:bf:5e:4b:8c:72:c1:8d:55:71:39:a5:79:1b:8a:94:6b:5a: 02:a9:08:93:b6:46:14:f7:9b:d6:02:11:4d:60:9c:c2:14:99: a2:aa:74:e4:35:e9:62:ad:74:0c:d9:d4:80:48:8a:31:c4:00: a7:11:19:67:f5:97:97:2a:df:89:39:cd:85:19:d8:b6:51:f3: 49:76:df:89:dc:ff:7c:05:56:77:e8:37:b6:ea:73:73:e7:de: 11:74:63:7c:fd:53:77:51:68:bf:62:93:c1:90:31:5a:82:e9: a2:6b:12:16:35:54:31:35:c0:8a:23:a6:40:ac:5a:a6:49:70: 45:d7:6b:c8:71:b4:38:c0:ef:c7:92:bd:4e:66:b9:ab:b7:55: f2:3b:67:02:e9:13:e0:79:a2:25:15:4e:ed:be:8f:ab:bb:56: 08:b7:74:01:ea:c2:ff:f5:56:97:e5:49:3c:23:40:cb:bf:a2: 81:9b:0b:0b:ab:26:a4:4d:8e:6e:89:20:22:4e:00:45:50:bd: 0a:3d:56:95 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUX93cgC0pNPc/TsOVRm506CdMjN8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDkzMloX DTI3MDMwMzA2MTQzMlowMzExMC8GA1UEAxMoNzE5MUY3RTc4RDZDRDBFMjFFRjhE NkYxNkJDMDlBQzZCNkQ0QTZFRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJXxeAThCj7dPrQVXNBPtdlCunM66rfy77gwf/RD5y2bZ5vGWobqpv8W33jP zhv3iyHN6NOtfbDMFtSjYKYizXunhQ6/DE0gX54wsaqFI7YQ+/iVewekClmQW/Bo v27hwp1xmuwyyJtgQhpddVq030PU4ufmB1JNVbFWdWBIJKrjRqg4KAcFXLq9VtIT vb5Bo28/bnSRiwC0Lzbd7GZG51SsKkr4/l/eSJBWx6sS9yVqSrTBHoG34+OGvKrc R2eqU8I45hSS7MDx7fFMZ07PEQfXG3IwGnQocdFLE1ugjY/bfMC91WrWs72ADzAl 2urXHpa0a36Zzv375xgzW5rhodsCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRxkffn jWzQ4h741vFrwJrGttSm7zAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDQ5My5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK pzMwDQYJKoZIhvcNAQELBQADggEBAIUMD4xbjEAFd1pQU7j2jG7EOpZGx8fXpGUj 77tUZvoiat5XHZFJK4UJ1cu922qikQNq3XLpZH2/XkuMcsGNVXE5pXkbipRrWgKp CJO2RhT3m9YCEU1gnMIUmaKqdOQ16WKtdAzZ1IBIijHEAKcRGWf1l5cq34k5zYUZ 2LZR80l234nc/3wFVnfoN7bqc3Pn3hF0Y3z9U3dRaL9ik8GQMVqC6aJrEhY1VDE1 wIojpkCsWqZJcEXXa8hxtDjA78eSvU5muau3VfI7ZwLpE+B5oiUVTu2+j6u7Vgi3 dAHqwv/1VpflSTwjQMu/ooGbCwurJqRNjm6JICJOAEVQvQo9VpU= -----END CERTIFICATE-----Generated at Sat Mar 28 11:42:26 2026 by rpki-client