$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144513.roa File: AS144513.roa (raw, json) Hash identifier: VXqeN8PSuXpCKo80nAbRWdWbShU6IYggAsrHjg9eXVc= Subject key identifier: C9:51:DF:CB:F3:5F:32:10:DE:51:27:F5:3C:63:70:6A:97:77:0E:6D Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 67065F3977E4A69E11EC33179CC8D84A6A8CF421 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144513.roa Signing time: Wed 04 Mar 2026 06:21:31 +0000 ROA not before: Wed 04 Mar 2026 06:16:31 +0000 ROA not after: Wed 03 Mar 2027 06:21:31 +0000 asID: 144513 IP address blocks: 240a:a747::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:06:5f:39:77:e4:a6:9e:11:ec:33:17:9c:c8:d8:4a:6a:8c:f4:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:16:31 2026 GMT Not After : Mar 3 06:21:31 2027 GMT Subject: CN=C951DFCBF35F3210DE5127F53C63706A97770E6D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:f4:b5:11:d5:19:4b:44:08:0a:56:a8:7b:74: ba:90:31:f9:5c:88:b2:ca:67:42:b3:21:9b:0d:8d: 51:39:ce:89:27:43:7a:20:b2:ab:ce:41:45:c7:6c: 43:ec:fe:d4:91:ef:70:e2:f7:2d:e3:f6:1c:69:13: 71:3c:1d:e5:cd:ec:3b:a6:22:e5:a0:5a:e7:db:03: 14:08:57:59:87:d2:67:17:f3:d4:3e:49:77:c8:74: 9e:25:68:47:a4:5e:a9:17:39:18:2c:74:b5:9f:12: 8d:71:51:3d:fa:ac:fa:81:04:e8:ae:af:22:a0:0f: 1c:07:4c:ad:30:59:8a:dc:f6:a4:f5:78:0f:90:1a: 8e:8e:89:f1:41:62:f7:38:cd:3b:68:7f:4f:f1:c8: 24:c9:5d:48:cf:43:f1:90:31:75:e8:88:4c:11:c9: 08:c3:c9:33:91:ec:1d:59:ec:2f:1a:8e:12:e2:06: 5a:62:b8:43:de:f0:ff:ab:e4:aa:03:35:58:38:af: 28:7e:11:93:a4:8c:26:85:68:a8:28:88:57:7a:88: b4:3d:b0:07:06:a4:63:ce:73:aa:02:84:99:8d:b5: e6:de:bc:a5:14:4c:80:d5:5b:b1:91:09:a1:b3:a9: 05:d5:30:41:31:56:2a:15:23:86:8c:9c:f1:6b:ee: d2:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:51:DF:CB:F3:5F:32:10:DE:51:27:F5:3C:63:70:6A:97:77:0E:6D X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144513.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a747::/32 Signature Algorithm: sha256WithRSAEncryption b2:66:a7:e2:57:62:8c:ac:4c:a4:35:3e:96:04:2f:f5:fa:1d: 8c:d0:b3:fa:32:a4:ed:45:67:78:6a:06:d7:d7:37:a2:da:b6: 33:15:07:ef:e7:91:5e:46:32:98:15:35:a8:3a:c9:3e:b3:50: 8e:23:8c:68:c7:54:d1:23:49:57:3b:08:ed:3a:e2:6a:6a:eb: 4c:e0:ed:1d:ee:f3:f0:1e:e0:11:1a:00:8e:b4:d7:c2:2e:2a: 87:4b:ed:ad:02:5b:76:f2:0e:30:d1:dc:25:e0:30:7e:90:53: 45:be:ae:0a:ab:3e:a5:c9:e5:20:b6:75:28:76:92:41:5d:53: 7d:6c:8d:d3:ce:54:93:f8:19:7d:f8:71:19:8c:19:9d:0d:b0: 31:a8:e5:67:79:f5:e6:bc:0d:88:2a:c5:8c:0b:41:11:90:9d: e4:ea:df:85:06:e7:4c:d4:97:9e:a5:d2:3c:5b:a1:a9:8e:95: 10:4a:ff:64:f5:4b:ee:5f:6f:37:e0:04:18:1a:4b:98:1e:7b: 5d:e8:82:42:27:c9:34:70:92:e3:a9:d1:78:6b:cd:1b:58:bb: b0:b5:8e:6e:b4:4d:05:b0:bb:09:1f:a5:4a:89:39:4c:6c:a0: da:22:05:47:f2:70:c3:f1:ce:ee:61:5d:06:69:0e:4b:0a:52: 0f:f8:51:ea -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUZwZfOXfkpp4R7DMXnMjYSmqM9CEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTYzMVoX DTI3MDMwMzA2MjEzMVowMzExMC8GA1UEAxMoQzk1MURGQ0JGMzVGMzIxMERFNTEy N0Y1M0M2MzcwNkE5Nzc3MEU2RDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM70tRHVGUtECApWqHt0upAx+VyIsspnQrMhmw2NUTnOiSdDeiCyq85BRcds Q+z+1JHvcOL3LeP2HGkTcTwd5c3sO6Yi5aBa59sDFAhXWYfSZxfz1D5Jd8h0niVo R6ReqRc5GCx0tZ8SjXFRPfqs+oEE6K6vIqAPHAdMrTBZitz2pPV4D5Aajo6J8UFi 9zjNO2h/T/HIJMldSM9D8ZAxdeiITBHJCMPJM5HsHVnsLxqOEuIGWmK4Q97w/6vk qgM1WDivKH4Rk6SMJoVoqCiIV3qItD2wBwakY85zqgKEmY215t68pRRMgNVbsZEJ obOpBdUwQTFWKhUjhoyc8Wvu0tsCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBTJUd/L 818yEN5RJ/U8Y3Bql3cObTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDUxMy5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK p0cwDQYJKoZIhvcNAQELBQADggEBALJmp+JXYoysTKQ1PpYEL/X6HYzQs/oypO1F Z3hqBtfXN6LatjMVB+/nkV5GMpgVNag6yT6zUI4jjGjHVNEjSVc7CO064mpq60zg 7R3u8/Ae4BEaAI6018IuKodL7a0CW3byDjDR3CXgMH6QU0W+rgqrPqXJ5SC2dSh2 kkFdU31sjdPOVJP4GX34cRmMGZ0NsDGo5Wd59ea8DYgqxYwLQRGQneTq34UG50zU l56l0jxboamOlRBK/2T1S+5fbzfgBBgaS5gee13ogkInyTRwkuOp0XhrzRtYu7C1 jm60TQWwuwkfpUqJOUxsoNoiBUfycMPxzu5hXQZpDksKUg/4Ueo= -----END CERTIFICATE-----Generated at Sat Mar 28 11:43:12 2026 by rpki-client