$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144500.roa File: AS144500.roa (raw, json) Hash identifier: Oja5UcWXcXnt3tZtaFuzE9k0G5ReqC83slEzv4ER5RA= Subject key identifier: FB:75:3B:0B:DB:5A:BA:A1:D8:0E:97:66:44:CD:29:84:48:90:8B:4A Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 474F9638E9F45EE5E5348B019C5399A032E4D848 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144500.roa Signing time: Wed 04 Mar 2026 06:13:59 +0000 ROA not before: Wed 04 Mar 2026 06:08:59 +0000 ROA not after: Wed 03 Mar 2027 06:13:59 +0000 asID: 144500 IP address blocks: 240a:a73a::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:4f:96:38:e9:f4:5e:e5:e5:34:8b:01:9c:53:99:a0:32:e4:d8:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:08:59 2026 GMT Not After : Mar 3 06:13:59 2027 GMT Subject: CN=FB753B0BDB5ABAA1D80E976644CD298448908B4A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:07:b7:b8:0b:66:ed:b3:7f:a4:4a:b4:11:48: 94:11:ca:84:2b:d9:af:89:87:aa:66:d2:6a:7d:28: 7b:71:de:1f:6f:56:ec:21:4a:76:c5:4d:a1:5f:f3: e2:cc:50:3e:8c:6a:d4:c3:3a:58:48:8c:04:17:90: 1a:91:3f:70:6e:38:78:87:2d:2c:1e:74:3b:6a:65: b5:e9:43:6f:52:1a:b2:84:d5:a6:0e:14:03:1a:5c: 57:80:0a:42:55:5d:49:7f:aa:6e:15:3d:bd:19:e8: 5f:d6:66:1d:5b:64:5d:3d:54:93:0b:5a:98:5c:f0: 10:fe:48:67:80:12:06:12:eb:d3:c0:4c:d8:8a:9f: 3c:5f:e3:4b:94:bd:a7:ac:ec:14:9d:08:b2:04:a1: 12:64:0c:cc:0e:73:4a:0e:a0:a1:ac:26:e7:4f:ea: 4b:6c:56:80:92:0c:e1:c6:98:3b:c6:c9:7b:6c:70: 69:a2:0d:77:da:d0:fa:36:55:20:85:46:41:52:53: 4c:c2:ad:69:4b:d7:66:ec:fa:ad:58:c1:39:9c:5a: 50:60:96:0c:26:1d:ca:cd:0d:f4:14:00:80:7e:a5: cb:ae:b1:c5:c0:43:c1:41:26:ba:60:ec:22:c9:72: cf:ef:2d:52:bb:27:1d:4f:0f:d6:7e:e8:49:43:a5: 7d:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:75:3B:0B:DB:5A:BA:A1:D8:0E:97:66:44:CD:29:84:48:90:8B:4A X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144500.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a73a::/32 Signature Algorithm: sha256WithRSAEncryption 3c:f6:60:38:9f:b1:50:fc:d8:c0:ad:8b:16:fe:54:11:fb:1d: f4:b6:cd:c6:86:0a:19:ed:d6:97:58:d1:e6:b4:6b:74:eb:c0: 01:53:11:8c:54:90:4e:59:b1:24:5c:08:b1:31:82:f8:a0:ec: a6:20:3f:5b:80:57:47:66:15:45:2b:ee:7f:88:44:f5:91:a2: 1b:ff:71:83:64:a6:87:a6:3e:fc:c7:b3:09:81:da:18:41:f9: 71:8d:af:33:a9:3f:fe:fa:9e:c1:3a:a3:75:01:b0:e1:85:35: ee:51:ec:0b:cd:cf:9d:56:d6:0f:5c:01:9d:da:8d:42:76:6d: 79:b3:6c:8c:5a:32:7c:2e:26:b0:f3:f6:a5:ce:22:3f:b9:a4: 13:7a:84:70:9a:28:a2:1f:60:9c:f5:89:e7:d1:c3:10:24:33: 9d:60:be:c0:f8:c0:4c:b8:00:2d:86:f9:99:96:16:18:cf:e0: 71:af:41:64:b5:98:87:48:49:53:23:11:82:05:77:d1:65:05: e6:d2:5c:61:7e:dd:b0:c3:62:25:99:67:08:13:e5:82:d8:1b: f4:e5:0f:82:a0:43:2d:c1:30:a9:78:32:44:8b:d4:f6:dd:69: 5a:09:43:0a:88:f5:5a:61:5b:b4:fa:63:36:07:3c:3d:e9:3e: da:1d:86:9a -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUR0+WOOn0XuXlNIsBnFOZoDLk2EgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDg1OVoX DTI3MDMwMzA2MTM1OVowMzExMC8GA1UEAxMoRkI3NTNCMEJEQjVBQkFBMUQ4MEU5 NzY2NDRDRDI5ODQ0ODkwOEI0QTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOYHt7gLZu2zf6RKtBFIlBHKhCvZr4mHqmbSan0oe3HeH29W7CFKdsVNoV/z 4sxQPoxq1MM6WEiMBBeQGpE/cG44eIctLB50O2pltelDb1IasoTVpg4UAxpcV4AK QlVdSX+qbhU9vRnoX9ZmHVtkXT1UkwtamFzwEP5IZ4ASBhLr08BM2IqfPF/jS5S9 p6zsFJ0IsgShEmQMzA5zSg6goawm50/qS2xWgJIM4caYO8bJe2xwaaINd9rQ+jZV IIVGQVJTTMKtaUvXZuz6rVjBOZxaUGCWDCYdys0N9BQAgH6ly66xxcBDwUEmumDs Islyz+8tUrsnHU8P1n7oSUOlfVMCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBT7dTsL 21q6odgOl2ZEzSmESJCLSjAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDUwMC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK pzowDQYJKoZIhvcNAQELBQADggEBADz2YDifsVD82MCtixb+VBH7HfS2zcaGChnt 1pdY0ea0a3TrwAFTEYxUkE5ZsSRcCLExgvig7KYgP1uAV0dmFUUr7n+IRPWRohv/ cYNkpoemPvzHswmB2hhB+XGNrzOpP/76nsE6o3UBsOGFNe5R7AvNz51W1g9cAZ3a jUJ2bXmzbIxaMnwuJrDz9qXOIj+5pBN6hHCaKKIfYJz1iefRwxAkM51gvsD4wEy4 AC2G+ZmWFhjP4HGvQWS1mIdISVMjEYIFd9FlBebSXGF+3bDDYiWZZwgT5YLYG/Tl D4KgQy3BMKl4MkSL1PbdaVoJQwqI9VphW7T6YzYHPD3pPtodhpo= -----END CERTIFICATE-----Generated at Sat Mar 28 11:45:36 2026 by rpki-client