$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144498.roa File: AS144498.roa (raw, json) Hash identifier: gb8TJ9c0OlH4x1+XTDS/0pXkVI6F+6z4IycIxHB6sIo= Subject key identifier: 0B:C7:2A:69:AB:75:14:BD:72:E2:14:65:62:33:16:6C:F1:69:28:19 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 515FFFA12DA6012467510C76BEDB265E44F94E8C Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144498.roa Signing time: Wed 04 Mar 2026 06:14:52 +0000 ROA not before: Wed 04 Mar 2026 06:09:52 +0000 ROA not after: Wed 03 Mar 2027 06:14:52 +0000 asID: 144498 IP address blocks: 240a:a738::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:5f:ff:a1:2d:a6:01:24:67:51:0c:76:be:db:26:5e:44:f9:4e:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:09:52 2026 GMT Not After : Mar 3 06:14:52 2027 GMT Subject: CN=0BC72A69AB7514BD72E214656233166CF1692819 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:90:16:ce:c2:19:25:5e:80:45:15:3d:6e:13: bf:7f:02:32:27:03:bf:c9:19:49:c0:29:26:05:58: ff:67:ca:c3:89:69:49:eb:b3:5e:46:6d:f3:1b:4a: b3:0e:91:13:74:1d:32:80:0b:3b:0b:80:3c:01:09: 7c:9d:c1:47:bd:ad:75:72:53:79:48:e9:ee:ab:f1: b3:04:79:f9:e9:cc:a9:f0:e2:bc:46:fc:aa:3f:ee: ea:84:b1:02:94:d0:79:d5:8c:74:32:fe:77:d0:35: 11:0d:18:d3:16:b8:13:56:6f:51:bf:a1:6f:a0:33: 5b:8f:6c:bf:a4:2f:20:c4:ab:9d:51:7a:fb:4e:fe: 5e:66:1a:5f:2f:8f:ae:34:c0:83:73:19:81:a9:07: 99:e0:c2:c6:d9:da:eb:ab:fc:76:29:01:78:a4:63: b2:e9:00:13:47:d0:ff:50:1d:51:56:68:ab:64:ff: 94:0f:1e:df:2f:2d:a3:6c:7c:cf:af:88:06:1f:59: 5c:56:4c:5b:eb:c9:fa:35:fa:a5:bd:e8:10:c1:89: ab:4a:d7:86:c4:16:29:7d:eb:cc:6d:70:7d:9e:65: 19:ae:2e:12:1a:06:f8:1b:1a:1d:58:1e:45:56:07: 4c:47:9a:58:13:b3:08:56:5a:cc:8b:cb:f0:25:d9: a1:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:C7:2A:69:AB:75:14:BD:72:E2:14:65:62:33:16:6C:F1:69:28:19 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144498.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a738::/32 Signature Algorithm: sha256WithRSAEncryption 9a:21:ce:0a:1c:22:cd:64:4a:cd:7b:31:10:65:43:16:02:b9: a6:55:20:11:e5:a7:1b:84:0c:48:7d:fd:11:5b:48:fd:be:a9: 77:f2:a9:d0:67:26:cc:aa:77:99:92:4a:45:b0:ea:32:32:91: d6:17:bd:ee:1a:09:4b:23:d6:6b:eb:b0:d5:cc:75:f3:2e:7d: 72:8e:69:27:ab:e9:dc:e8:ad:c1:72:88:23:04:df:bf:74:6c: 74:15:ff:3a:22:c3:cf:bf:af:32:8a:23:69:c5:01:00:8d:3e: db:9f:70:e7:d6:88:22:25:e4:20:a9:79:c0:00:53:10:06:de: f4:b5:b9:7b:7d:71:af:45:7e:60:c5:d8:2a:4f:00:f7:43:52: e0:90:73:2b:fa:de:a9:c3:6c:1f:42:af:8a:21:92:4c:5d:87: 02:25:ac:2d:6d:e3:b5:52:d3:91:cc:12:ae:c2:4b:b6:8b:c0: 72:4c:a0:32:a4:36:bd:70:38:bc:bb:45:4a:c2:a4:09:50:25: 82:a0:6b:8d:da:35:ac:1d:9b:ec:8e:e6:0a:ba:40:de:be:db: 87:0f:7d:94:da:dc:37:63:bf:b5:2c:58:9e:24:0a:e8:86:ba: 5c:50:a6:8b:3d:fa:53:1b:aa:df:fc:26:8e:b2:b1:cf:a1:66: f1:61:46:0e -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUUV//oS2mASRnUQx2vtsmXkT5TowwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDk1MloX DTI3MDMwMzA2MTQ1MlowMzExMC8GA1UEAxMoMEJDNzJBNjlBQjc1MTRCRDcyRTIx NDY1NjIzMzE2NkNGMTY5MjgxOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANyQFs7CGSVegEUVPW4Tv38CMicDv8kZScApJgVY/2fKw4lpSeuzXkZt8xtK sw6RE3QdMoALOwuAPAEJfJ3BR72tdXJTeUjp7qvxswR5+enMqfDivEb8qj/u6oSx ApTQedWMdDL+d9A1EQ0Y0xa4E1ZvUb+hb6AzW49sv6QvIMSrnVF6+07+XmYaXy+P rjTAg3MZgakHmeDCxtna66v8dikBeKRjsukAE0fQ/1AdUVZoq2T/lA8e3y8to2x8 z6+IBh9ZXFZMW+vJ+jX6pb3oEMGJq0rXhsQWKX3rzG1wfZ5lGa4uEhoG+BsaHVge RVYHTEeaWBOzCFZazIvL8CXZoScCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQLxypp q3UUvXLiFGViMxZs8WkoGTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDQ5OC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK pzgwDQYJKoZIhvcNAQELBQADggEBAJohzgocIs1kSs17MRBlQxYCuaZVIBHlpxuE DEh9/RFbSP2+qXfyqdBnJsyqd5mSSkWw6jIykdYXve4aCUsj1mvrsNXMdfMufXKO aSer6dzorcFyiCME3790bHQV/zoiw8+/rzKKI2nFAQCNPtufcOfWiCIl5CCpecAA UxAG3vS1uXt9ca9FfmDF2CpPAPdDUuCQcyv63qnDbB9Cr4ohkkxdhwIlrC1t47VS 05HMEq7CS7aLwHJMoDKkNr1wOLy7RUrCpAlQJYKga43aNawdm+yO5gq6QN6+24cP fZTa3Ddjv7UsWJ4kCuiGulxQpos9+lMbqt/8Jo6ysc+hZvFhRg4= -----END CERTIFICATE-----Generated at Sat Mar 28 11:41:51 2026 by rpki-client