$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144508.roa File: AS144508.roa (raw, json) Hash identifier: JbSyl7mRMKozt/Yd7yDUbggTRQ2EJAdP5CkEpZRW3xw= Subject key identifier: 11:A4:2C:FB:0F:C5:2F:1A:8A:A1:3A:56:CA:56:61:31:7B:98:17:48 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 6F1654F77BF932F814DA3C466D375CA27DC59336 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144508.roa Signing time: Wed 04 Mar 2026 06:21:39 +0000 ROA not before: Wed 04 Mar 2026 06:16:39 +0000 ROA not after: Wed 03 Mar 2027 06:21:39 +0000 asID: 144508 IP address blocks: 240a:a742::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:16:54:f7:7b:f9:32:f8:14:da:3c:46:6d:37:5c:a2:7d:c5:93:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:16:39 2026 GMT Not After : Mar 3 06:21:39 2027 GMT Subject: CN=11A42CFB0FC52F1A8AA13A56CA5661317B981748 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:78:7f:75:b2:e4:fb:9d:ad:2a:47:6b:60:4d: 0a:5b:a8:2c:f0:51:38:d9:b9:62:75:93:9c:2c:f5: 8f:58:f5:eb:e9:34:64:50:11:62:d9:68:92:90:bc: 0d:e3:73:9c:e1:5e:b2:e7:fe:b8:6c:51:6f:6f:4c: 9a:d3:61:da:70:9a:ac:a8:b3:61:d9:6a:13:f4:26: d6:00:79:a4:0e:b5:0c:a6:02:44:a4:5a:de:de:36: 48:ad:d9:63:19:76:f8:6b:0b:f9:71:8d:5d:25:ac: d1:f4:aa:88:07:d3:1a:b0:f9:60:f4:85:ff:98:9d: b9:62:90:23:4b:01:ff:53:b5:b5:28:d4:d2:08:58: 79:70:bb:5c:75:5c:88:4e:df:33:c6:43:df:2e:a3: b3:eb:25:e5:ee:74:99:b7:79:b2:5b:49:48:20:d0: 40:f1:60:0f:9b:a3:ee:c1:ed:64:59:66:f3:ac:e7: 81:7a:7f:a7:6d:fb:48:55:a8:a5:00:5f:64:aa:25: 24:b0:ef:2c:b1:98:3e:27:08:ba:41:94:5e:6e:6c: 08:9f:b8:9a:65:d1:d6:1c:91:3c:03:76:15:f0:ec: 59:d5:de:02:46:f7:ea:c8:2d:c8:f0:7a:ff:d0:fd: 25:62:66:92:3f:85:26:ca:cc:c1:58:6f:6b:38:ec: 1f:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:A4:2C:FB:0F:C5:2F:1A:8A:A1:3A:56:CA:56:61:31:7B:98:17:48 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144508.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a742::/32 Signature Algorithm: sha256WithRSAEncryption 07:66:28:86:78:0e:b5:e1:f3:63:47:31:50:ab:e5:e7:a7:a6: 84:fc:0d:1b:46:72:c8:fc:c5:75:97:c8:af:10:70:2f:5a:81: 9b:3d:e3:cd:05:df:c6:5b:f6:0c:b2:f6:fe:45:4b:4c:8c:18: a9:4e:c1:87:0a:21:69:4b:59:dd:7f:ee:24:82:8e:63:51:ac: d5:51:a1:29:6c:f3:97:a5:74:9e:ba:56:99:e1:f1:fa:45:be: 44:a1:f3:22:90:51:03:ee:f3:0c:1c:b8:f4:35:05:df:d7:73: 3a:1e:ad:a1:dc:9c:e8:a7:5d:19:47:85:8b:cf:7f:06:1e:71: 08:a3:79:6f:2d:45:27:13:85:3a:3e:98:b7:79:1d:27:6e:70: da:ea:9a:ba:04:43:53:c5:3c:2a:42:69:6c:b1:56:af:8d:ba: bf:49:71:e4:a2:eb:ed:ab:62:cf:a3:06:0b:94:51:c6:a5:60: 0f:75:0d:6b:e4:88:31:35:67:db:4f:a0:e2:b2:da:d3:8e:b1: bf:53:e3:cf:be:8d:bf:31:d7:26:41:2a:bd:ee:72:32:83:61: 17:39:a7:a5:34:c7:a5:d7:bb:28:f9:95:66:3a:7a:b4:26:14: 83:9e:b7:61:37:a1:4f:9e:3d:de:38:0a:7e:d6:ea:54:09:32: af:00:50:81 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUbxZU93v5MvgU2jxGbTdcon3FkzYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTYzOVoX DTI3MDMwMzA2MjEzOVowMzExMC8GA1UEAxMoMTFBNDJDRkIwRkM1MkYxQThBQTEz QTU2Q0E1NjYxMzE3Qjk4MTc0ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALx4f3Wy5PudrSpHa2BNCluoLPBRONm5YnWTnCz1j1j16+k0ZFARYtlokpC8 DeNznOFesuf+uGxRb29MmtNh2nCarKizYdlqE/Qm1gB5pA61DKYCRKRa3t42SK3Z Yxl2+GsL+XGNXSWs0fSqiAfTGrD5YPSF/5iduWKQI0sB/1O1tSjU0ghYeXC7XHVc iE7fM8ZD3y6js+sl5e50mbd5sltJSCDQQPFgD5uj7sHtZFlm86zngXp/p237SFWo pQBfZKolJLDvLLGYPicIukGUXm5sCJ+4mmXR1hyRPAN2FfDsWdXeAkb36sgtyPB6 /9D9JWJmkj+FJsrMwVhvazjsH90CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQRpCz7 D8UvGoqhOlbKVmExe5gXSDAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDUwOC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK p0IwDQYJKoZIhvcNAQELBQADggEBAAdmKIZ4DrXh82NHMVCr5eenpoT8DRtGcsj8 xXWXyK8QcC9agZs9480F38Zb9gyy9v5FS0yMGKlOwYcKIWlLWd1/7iSCjmNRrNVR oSls85eldJ66Vpnh8fpFvkSh8yKQUQPu8wwcuPQ1Bd/XczoeraHcnOinXRlHhYvP fwYecQijeW8tRScThTo+mLd5HSducNrqmroEQ1PFPCpCaWyxVq+Nur9JceSi6+2r Ys+jBguUUcalYA91DWvkiDE1Z9tPoOKy2tOOsb9T48++jb8x1yZBKr3ucjKDYRc5 p6U0x6XXuyj5lWY6erQmFIOet2E3oU+ePd44Cn7W6lQJMq8AUIE= -----END CERTIFICATE-----Generated at Sat Mar 28 11:44:37 2026 by rpki-client