$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144526.roa File: AS144526.roa (raw, json) Hash identifier: OiyRophfWR2rNwSwc53bM1Z+sGtMMjfS1b7yCdVlYrQ= Subject key identifier: F2:B3:06:64:FE:E3:93:05:A5:F3:C0:7B:DF:02:E3:51:01:22:EB:C1 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 0157D155C78C96808EA9E2A6E5002F2E2AB5F554 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144526.roa Signing time: Wed 04 Mar 2026 06:19:40 +0000 ROA not before: Wed 04 Mar 2026 06:14:40 +0000 ROA not after: Wed 03 Mar 2027 06:19:40 +0000 asID: 144526 IP address blocks: 240a:a754::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:57:d1:55:c7:8c:96:80:8e:a9:e2:a6:e5:00:2f:2e:2a:b5:f5:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:14:40 2026 GMT Not After : Mar 3 06:19:40 2027 GMT Subject: CN=F2B30664FEE39305A5F3C07BDF02E3510122EBC1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:77:df:18:c2:22:c0:09:28:d9:cf:09:f0:06: 7a:f6:45:bc:34:7c:4e:26:7a:ef:ef:69:ac:46:68: ba:55:3e:a8:39:5e:cc:45:fe:e3:4b:46:75:32:f7: 7d:33:d0:33:d4:04:5f:db:58:08:15:d8:34:2c:c4: ce:4d:df:0b:36:3f:a3:93:5c:00:8a:b0:fd:24:a5: 05:0d:8c:13:6b:0f:78:5e:d7:21:5b:8f:34:55:45: 4b:31:0c:2b:4e:0e:5e:0f:72:0d:9a:3a:e3:42:69: 49:89:29:07:6a:38:2f:ed:80:d5:00:1e:de:24:15: 39:19:f2:f4:67:ac:5f:eb:ba:99:63:5f:17:91:59: 40:6f:1e:94:5e:c8:95:66:7e:04:cb:4d:67:a6:23: 8b:35:03:61:c1:d5:f4:ea:4c:50:36:e0:8e:b1:03: 71:5f:01:76:02:95:73:89:52:65:2f:61:12:a9:d6: 21:9b:e5:d2:64:5b:6a:66:54:9c:26:80:c1:f4:d0: ef:77:65:ac:48:3b:2f:c4:1e:c2:b6:36:f5:14:24: 7f:4c:c0:68:e4:61:53:9f:a2:b0:c3:16:29:b9:39: f0:f1:16:28:f1:6b:34:b7:f5:1e:b8:a9:3f:c6:10: 33:31:1c:68:b3:6c:66:7c:11:c6:7b:e1:d8:8d:25: cb:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:B3:06:64:FE:E3:93:05:A5:F3:C0:7B:DF:02:E3:51:01:22:EB:C1 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144526.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a754::/32 Signature Algorithm: sha256WithRSAEncryption 93:c6:8b:c0:c2:6a:38:3f:57:ba:2b:37:51:a5:99:69:08:14: 0f:33:95:e5:d7:2a:61:5f:b4:2d:e8:24:44:28:e5:49:1a:21: 4a:62:a0:29:d8:8e:e0:9b:c6:20:1c:4d:5c:62:63:39:43:bb: 59:fb:b0:f1:73:f1:e7:bd:51:4d:0c:a6:bb:ab:21:33:8c:6c: eb:2e:55:45:f3:ca:1d:18:6e:69:36:6d:f9:b7:ea:c4:d7:ac: 7c:8f:62:0e:51:ab:16:44:00:4d:e9:57:85:5f:4c:b6:c9:ec: f0:26:2c:33:47:f0:d3:5d:bf:fb:83:75:3d:e7:09:5d:b0:4c: 56:d9:4d:90:8a:96:06:59:12:8b:85:53:53:b9:50:75:a1:ef: 26:13:96:07:33:92:ce:18:0b:c2:75:61:8e:a6:1b:2b:11:5b: 1d:d5:a7:76:f5:45:30:d1:a0:42:6c:cf:ae:1c:99:3f:3f:75: f3:67:a7:55:1b:b4:2e:90:38:12:7a:8c:fa:1f:7f:53:5d:8c: db:45:6b:1f:5a:7f:60:36:1e:a5:df:fe:19:b0:db:7c:ca:82: 36:43:f1:94:ab:50:8a:2f:6d:62:d3:d5:62:19:72:6f:a7:a9: 30:4a:d8:3f:c0:4f:39:fa:ca:e3:01:09:c4:d9:7a:f5:e3:5f: 44:1a:5e:71 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUAVfRVceMloCOqeKm5QAvLiq19VQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTQ0MFoX DTI3MDMwMzA2MTk0MFowMzExMC8GA1UEAxMoRjJCMzA2NjRGRUUzOTMwNUE1RjND MDdCREYwMkUzNTEwMTIyRUJDMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK133xjCIsAJKNnPCfAGevZFvDR8TiZ67+9prEZoulU+qDlezEX+40tGdTL3 fTPQM9QEX9tYCBXYNCzEzk3fCzY/o5NcAIqw/SSlBQ2ME2sPeF7XIVuPNFVFSzEM K04OXg9yDZo640JpSYkpB2o4L+2A1QAe3iQVORny9GesX+u6mWNfF5FZQG8elF7I lWZ+BMtNZ6YjizUDYcHV9OpMUDbgjrEDcV8BdgKVc4lSZS9hEqnWIZvl0mRbamZU nCaAwfTQ73dlrEg7L8QewrY29RQkf0zAaORhU5+isMMWKbk58PEWKPFrNLf1Hrip P8YQMzEcaLNsZnwRxnvh2I0ly/cCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBTyswZk /uOTBaXzwHvfAuNRASLrwTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDUyNi5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK p1QwDQYJKoZIhvcNAQELBQADggEBAJPGi8DCajg/V7orN1GlmWkIFA8zleXXKmFf tC3oJEQo5UkaIUpioCnYjuCbxiAcTVxiYzlDu1n7sPFz8ee9UU0MprurITOMbOsu VUXzyh0Ybmk2bfm36sTXrHyPYg5RqxZEAE3pV4VfTLbJ7PAmLDNH8NNdv/uDdT3n CV2wTFbZTZCKlgZZEouFU1O5UHWh7yYTlgczks4YC8J1YY6mGysRWx3Vp3b1RTDR oEJsz64cmT8/dfNnp1UbtC6QOBJ6jPoff1NdjNtFax9af2A2HqXf/hmw23zKgjZD 8ZSrUIovbWLT1WIZcm+nqTBK2D/ATzn6yuMBCcTZevXjX0QaXnE= -----END CERTIFICATE-----Generated at Sat Mar 28 11:43:55 2026 by rpki-client