$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144507.roa File: AS144507.roa (raw, json) Hash identifier: YfjYQV52oMRoG+2yv2oFqxm6ys41/2nFrwHQba7vkfo= Subject key identifier: 71:0B:0D:78:E4:F2:58:FA:5B:B1:38:AA:07:23:D0:AE:54:96:C1:B4 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 6E028F1CE97C22B79E8FD60A0F3795BAAE41A488 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144507.roa Signing time: Wed 04 Mar 2026 06:15:39 +0000 ROA not before: Wed 04 Mar 2026 06:10:39 +0000 ROA not after: Wed 03 Mar 2027 06:15:39 +0000 asID: 144507 IP address blocks: 240a:a741::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:02:8f:1c:e9:7c:22:b7:9e:8f:d6:0a:0f:37:95:ba:ae:41:a4:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:10:39 2026 GMT Not After : Mar 3 06:15:39 2027 GMT Subject: CN=710B0D78E4F258FA5BB138AA0723D0AE5496C1B4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:69:23:bc:93:ae:d6:12:a7:2b:48:53:58:3f: 01:e6:4d:d2:1d:3b:7d:20:94:f6:b5:a8:f3:26:c2: 60:92:37:f7:3f:49:04:f4:9d:a4:27:c8:bf:1d:25: b6:e6:53:e4:04:2d:09:4e:e9:c3:2f:0a:ee:aa:27: 08:b6:51:c1:c6:fc:cd:a5:af:67:45:f8:7f:58:ef: 99:ef:1a:5b:ad:85:53:21:b6:4d:15:d7:d9:c8:04: 5c:f8:c2:4c:70:69:d0:ae:d2:d9:cf:d7:ba:f2:99: 86:7f:1e:d5:41:c9:06:46:e2:ad:64:48:b4:1d:05: 02:a9:fd:bc:0e:47:c2:be:1a:85:3c:5b:ee:ee:56: 4b:68:15:02:50:39:ba:c9:08:be:b7:1e:90:a0:38: 22:2d:2c:67:25:e7:ac:12:82:bb:03:77:4f:29:97: 90:e2:ee:d5:c8:f5:6d:ea:5b:48:cf:51:da:93:62: dd:04:63:91:f1:5e:05:4c:62:b4:97:52:3c:60:d4: ec:63:58:2a:9e:34:7b:f6:11:a2:a5:e5:39:f4:c4: 27:20:8e:9f:0d:76:e4:12:f6:c1:c7:22:af:cc:69: 54:d0:32:fe:e0:f5:69:f1:09:1a:2d:87:ee:08:01: 80:18:1c:3f:d7:e2:42:28:35:97:58:27:e2:0c:05: 0b:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:0B:0D:78:E4:F2:58:FA:5B:B1:38:AA:07:23:D0:AE:54:96:C1:B4 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144507.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a741::/32 Signature Algorithm: sha256WithRSAEncryption 61:54:07:d1:01:8e:e3:62:fd:7c:9f:44:87:62:d3:9e:07:e3: c2:25:e4:7a:47:d0:48:c3:5f:54:44:c3:11:5f:6a:6a:87:8f: ca:5f:5f:7b:55:d9:01:26:d4:fd:04:74:b9:44:60:62:8a:30: b6:45:6c:ef:46:53:c8:c7:c8:7f:15:ee:be:d0:83:98:3e:12: 5d:31:10:ee:bc:e8:8c:81:fb:e7:7b:64:55:4f:2f:e4:0d:67: ab:65:ae:56:0a:17:13:84:2f:c3:5d:6d:40:2e:5c:38:ef:29: 3b:67:da:38:83:b1:7b:94:38:de:f0:12:06:10:43:bb:0a:3d: 4f:49:73:cf:7d:bf:aa:31:f5:04:1e:b9:fb:2e:c7:05:d3:ba: 4f:07:34:de:4e:47:a4:da:9a:ac:51:04:3d:9f:16:cf:c6:42: d3:d8:2e:61:84:ee:ea:f5:0f:71:5e:a6:77:51:7c:0d:40:b8: 73:38:2e:44:9e:e0:dc:1e:e4:27:0f:df:86:8d:d6:9b:c7:00: be:f1:21:ac:d0:cc:68:fc:af:8e:51:46:91:ae:6a:94:32:a3: ee:39:1c:40:16:bd:20:ca:c2:6d:be:57:0f:87:75:39:1f:23: 9c:1f:36:ac:f0:85:ae:f2:ce:d9:19:9e:be:49:94:03:59:b8: 87:2f:22:8a -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUbgKPHOl8Ireej9YKDzeVuq5BpIgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTAzOVoX DTI3MDMwMzA2MTUzOVowMzExMC8GA1UEAxMoNzEwQjBENzhFNEYyNThGQTVCQjEz OEFBMDcyM0QwQUU1NDk2QzFCNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKJpI7yTrtYSpytIU1g/AeZN0h07fSCU9rWo8ybCYJI39z9JBPSdpCfIvx0l tuZT5AQtCU7pwy8K7qonCLZRwcb8zaWvZ0X4f1jvme8aW62FUyG2TRXX2cgEXPjC THBp0K7S2c/XuvKZhn8e1UHJBkbirWRItB0FAqn9vA5Hwr4ahTxb7u5WS2gVAlA5 uskIvrcekKA4Ii0sZyXnrBKCuwN3TymXkOLu1cj1bepbSM9R2pNi3QRjkfFeBUxi tJdSPGDU7GNYKp40e/YRoqXlOfTEJyCOnw125BL2wccir8xpVNAy/uD1afEJGi2H 7ggBgBgcP9fiQig1l1gn4gwFC+sCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRxCw14 5PJY+luxOKoHI9CuVJbBtDAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDUwNy5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK p0EwDQYJKoZIhvcNAQELBQADggEBAGFUB9EBjuNi/XyfRIdi054H48Il5HpH0EjD X1REwxFfamqHj8pfX3tV2QEm1P0EdLlEYGKKMLZFbO9GU8jHyH8V7r7Qg5g+El0x EO686IyB++d7ZFVPL+QNZ6tlrlYKFxOEL8NdbUAuXDjvKTtn2jiDsXuUON7wEgYQ Q7sKPU9Jc899v6ox9QQeufsuxwXTuk8HNN5OR6TamqxRBD2fFs/GQtPYLmGE7ur1 D3FepndRfA1AuHM4LkSe4Nwe5CcP34aN1pvHAL7xIazQzGj8r45RRpGuapQyo+45 HEAWvSDKwm2+Vw+HdTkfI5wfNqzwha7yztkZnr5JlANZuIcvIoo= -----END CERTIFICATE-----Generated at Sat Mar 28 11:46:02 2026 by rpki-client