$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144525.roa File: AS144525.roa (raw, json) Hash identifier: nsL2Uz/gpBEOulqc7o41WV4Wnp6F88wROH01uBMUNhk= Subject key identifier: 9B:BF:D7:81:0C:BB:ED:54:A2:C2:9C:9B:E2:95:B6:BC:AD:35:74:66 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 7690238FF14182ED39A35306A00040B67027BE3A Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144525.roa Signing time: Wed 04 Mar 2026 06:20:19 +0000 ROA not before: Wed 04 Mar 2026 06:15:19 +0000 ROA not after: Wed 03 Mar 2027 06:20:19 +0000 asID: 144525 IP address blocks: 240a:a753::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:90:23:8f:f1:41:82:ed:39:a3:53:06:a0:00:40:b6:70:27:be:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:15:19 2026 GMT Not After : Mar 3 06:20:19 2027 GMT Subject: CN=9BBFD7810CBBED54A2C29C9BE295B6BCAD357466 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:ba:dd:4f:e0:5f:a9:a9:e8:39:f3:03:51:19: b8:1d:2b:5a:40:c0:a4:81:01:85:80:b8:8b:f2:68: 1d:f2:0b:1d:80:05:16:7b:f0:22:e9:19:d9:0c:7c: 3d:fd:7d:03:d0:67:52:d5:83:03:f5:07:b9:6b:21: bb:07:02:aa:bd:56:fe:3a:ca:37:25:ab:37:9a:c2: 25:b2:9e:21:14:1b:32:5a:b6:dc:5d:64:33:34:03: 0b:49:8f:38:20:8e:79:dc:f0:eb:2b:38:e8:35:6c: 0a:39:b5:59:79:b3:60:64:8a:ca:cc:20:4f:4a:1f: fa:ea:15:91:ce:6a:d1:92:aa:40:59:a7:73:aa:d6: a4:06:18:4c:3a:72:bc:43:4d:5a:a2:ae:4c:d7:4a: d5:af:1a:d6:13:90:ee:0d:72:cf:6b:e3:ac:6e:c8: 7a:07:fa:f8:cf:99:10:49:34:36:f7:41:ee:e3:35: af:97:3c:be:e4:32:21:71:79:20:c9:9c:3a:60:10: 02:19:12:36:1e:59:81:74:3e:51:08:34:06:1b:e5: cc:2e:8c:e9:13:39:0d:bb:b9:af:af:2e:fe:40:e5: a4:c4:90:29:17:90:fc:d2:37:16:e5:bd:4e:78:a5: f4:de:db:68:93:2b:3d:19:50:67:80:ed:57:36:ca: a7:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:BF:D7:81:0C:BB:ED:54:A2:C2:9C:9B:E2:95:B6:BC:AD:35:74:66 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144525.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a753::/32 Signature Algorithm: sha256WithRSAEncryption 6b:21:68:8b:33:91:26:af:0a:83:ac:3f:1b:e8:68:42:2e:85: fc:47:1d:fe:f0:56:c7:8d:39:2a:89:47:87:a5:23:84:e8:d7: d1:01:36:17:27:04:84:4b:59:a4:6b:07:80:0e:0c:a0:7e:07: 9f:4d:19:61:5c:10:84:f0:76:c7:8b:cd:e1:56:cd:ee:e8:84: 0a:98:9d:c3:c8:93:5e:61:b8:78:32:b0:5d:f1:33:54:f0:0b: 9e:7b:96:77:7d:ea:e7:4c:8b:ef:70:bd:93:a5:d3:dc:e8:2b: ee:7c:72:56:e8:77:50:74:75:56:37:4c:6c:e8:b8:ac:dd:a6: bc:72:35:d8:50:b2:2e:f4:2c:cd:87:36:b6:50:e4:f3:45:b3: ca:1a:fb:34:a5:28:2d:3e:97:bb:2e:55:1b:a3:c3:14:2a:a6: e3:e3:9a:e9:31:71:d3:0f:b3:b6:d2:52:0e:e5:38:aa:8c:73: 42:7d:09:62:60:66:ce:37:fa:73:7c:76:b8:22:37:bb:4b:99: aa:97:fb:7e:f2:97:d3:50:f7:c7:26:65:04:27:4a:fd:a4:32: a7:15:87:0d:a1:31:59:0f:d2:17:67:55:0b:88:d7:73:fa:eb: bd:33:b0:87:6d:9b:d9:0c:1b:8c:c1:ac:12:21:42:fc:a4:6e: fb:7e:f8:b1 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUdpAjj/FBgu05o1MGoABAtnAnvjowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTUxOVoX DTI3MDMwMzA2MjAxOVowMzExMC8GA1UEAxMoOUJCRkQ3ODEwQ0JCRUQ1NEEyQzI5 QzlCRTI5NUI2QkNBRDM1NzQ2NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJm63U/gX6mp6DnzA1EZuB0rWkDApIEBhYC4i/JoHfILHYAFFnvwIukZ2Qx8 Pf19A9BnUtWDA/UHuWshuwcCqr1W/jrKNyWrN5rCJbKeIRQbMlq23F1kMzQDC0mP OCCOedzw6ys46DVsCjm1WXmzYGSKyswgT0of+uoVkc5q0ZKqQFmnc6rWpAYYTDpy vENNWqKuTNdK1a8a1hOQ7g1yz2vjrG7Iegf6+M+ZEEk0NvdB7uM1r5c8vuQyIXF5 IMmcOmAQAhkSNh5ZgXQ+UQg0BhvlzC6M6RM5Dbu5r68u/kDlpMSQKReQ/NI3FuW9 Tnil9N7baJMrPRlQZ4DtVzbKpwsCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSbv9eB DLvtVKLCnJvilba8rTV0ZjAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDUyNS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK p1MwDQYJKoZIhvcNAQELBQADggEBAGshaIszkSavCoOsPxvoaEIuhfxHHf7wVseN OSqJR4elI4To19EBNhcnBIRLWaRrB4AODKB+B59NGWFcEITwdseLzeFWze7ohAqY ncPIk15huHgysF3xM1TwC557lnd96udMi+9wvZOl09zoK+58clbod1B0dVY3TGzo uKzdprxyNdhQsi70LM2HNrZQ5PNFs8oa+zSlKC0+l7suVRujwxQqpuPjmukxcdMP s7bSUg7lOKqMc0J9CWJgZs43+nN8drgiN7tLmaqX+37yl9NQ98cmZQQnSv2kMqcV hw2hMVkP0hdnVQuI13P6670zsIdtm9kMG4zBrBIhQvykbvt++LE= -----END CERTIFICATE-----Generated at Sat Mar 28 11:44:50 2026 by rpki-client