$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144527.roa File: AS144527.roa (raw, json) Hash identifier: XY9VGf1huwzOXLV3dF94ZVjq6ZUK4K7ey9cbAtZFdgY= Subject key identifier: 5F:C6:EF:E3:0F:44:12:19:3A:F4:94:07:1B:62:CE:C4:6C:2E:EE:93 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 7A74826D7D35AE546D89E32646A1F23F8379B888 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144527.roa Signing time: Wed 04 Mar 2026 06:21:54 +0000 ROA not before: Wed 04 Mar 2026 06:16:54 +0000 ROA not after: Wed 03 Mar 2027 06:21:54 +0000 asID: 144527 IP address blocks: 240a:a755::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:74:82:6d:7d:35:ae:54:6d:89:e3:26:46:a1:f2:3f:83:79:b8:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:16:54 2026 GMT Not After : Mar 3 06:21:54 2027 GMT Subject: CN=5FC6EFE30F4412193AF494071B62CEC46C2EEE93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:a3:9a:6a:fa:3e:08:9f:ef:a6:e1:66:16:10: 23:a8:a6:52:0b:83:d1:be:33:1d:00:9c:f6:e0:7b: e3:d1:f9:2c:d1:f0:fc:64:c1:af:fc:77:32:35:b2: 3f:69:82:5a:d2:c3:1e:c9:54:4f:df:b1:f4:4b:34: ea:a5:80:e2:6e:61:3d:f3:cc:e5:c7:0c:d4:ba:f7: 04:f4:a8:0a:39:c0:55:91:79:4d:85:fa:d0:7c:26: 10:f6:5c:3b:6f:aa:3f:ee:fd:07:15:91:44:12:02: a3:15:c7:13:d1:8b:84:e6:ec:0f:0e:eb:9f:c4:12: ef:a7:5c:73:3f:6c:9a:3c:8c:8c:09:c7:f5:03:77: 46:c9:51:cf:86:3b:66:12:82:69:3b:76:9b:b5:ac: 4b:fb:3e:43:35:39:6c:9e:88:70:24:4c:2b:d2:1c: 42:d6:dd:8f:b3:33:f5:4f:cc:0e:73:2b:59:61:69: 92:9d:3c:c7:69:22:ce:79:f3:17:4c:8e:e0:a3:ad: 75:b2:d6:b3:08:e2:6e:6c:93:7b:11:3b:11:81:e5: 87:7e:dc:22:d1:61:a8:af:af:d0:94:08:c2:e3:74: 8c:5b:f6:bb:5b:31:6c:67:ac:3a:57:ae:58:49:9f: c8:a5:fa:ba:ed:64:57:53:5f:f5:28:51:73:1d:f7: e6:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:C6:EF:E3:0F:44:12:19:3A:F4:94:07:1B:62:CE:C4:6C:2E:EE:93 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144527.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a755::/32 Signature Algorithm: sha256WithRSAEncryption c3:10:be:87:36:8b:e6:9d:ce:93:fa:f6:04:ff:a9:fa:13:06: 78:2c:3f:1d:52:05:c8:70:e1:97:18:ac:8c:fa:0f:06:bf:de: 27:c8:2c:ea:86:b3:94:6b:78:af:93:be:59:91:54:2d:7e:5a: 6f:57:b0:56:6a:28:e4:6c:d2:97:f4:61:60:b7:6f:ce:71:5b: da:4d:6f:d6:92:cc:51:b4:27:bd:e9:ad:0b:6d:67:4f:65:a5: 41:f1:ff:4e:a2:08:5e:50:00:39:c1:0b:2b:6e:6f:53:84:d0: 9d:d3:88:12:2f:ea:22:86:69:ac:bc:97:aa:2c:7c:8f:59:1a: 68:36:e0:55:78:a2:a3:a6:01:75:7d:67:68:b2:48:6f:23:d5: b9:57:d6:5c:1e:de:6c:20:29:34:6f:8a:cd:a5:69:4e:26:26: 26:46:b7:c4:11:05:03:4c:92:17:f6:78:dd:c2:ce:2c:59:ea: a3:a3:12:6b:e2:bd:71:51:97:e7:7f:88:ce:01:72:97:25:6c: 1d:10:a0:44:82:83:20:e1:00:fa:79:38:f2:83:62:73:a2:2d: 9f:48:e9:80:43:b7:38:a1:57:af:71:f6:2f:75:c5:7f:81:9c: 80:88:e2:76:17:d5:8b:69:e7:e6:f4:cd:21:1c:66:7f:1d:43: 27:e8:63:af -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUenSCbX01rlRtieMmRqHyP4N5uIgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTY1NFoX DTI3MDMwMzA2MjE1NFowMzExMC8GA1UEAxMoNUZDNkVGRTMwRjQ0MTIxOTNBRjQ5 NDA3MUI2MkNFQzQ2QzJFRUU5MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMajmmr6Pgif76bhZhYQI6imUguD0b4zHQCc9uB749H5LNHw/GTBr/x3MjWy P2mCWtLDHslUT9+x9Es06qWA4m5hPfPM5ccM1Lr3BPSoCjnAVZF5TYX60HwmEPZc O2+qP+79BxWRRBICoxXHE9GLhObsDw7rn8QS76dccz9smjyMjAnH9QN3RslRz4Y7 ZhKCaTt2m7WsS/s+QzU5bJ6IcCRMK9IcQtbdj7Mz9U/MDnMrWWFpkp08x2kiznnz F0yO4KOtdbLWswjibmyTexE7EYHlh37cItFhqK+v0JQIwuN0jFv2u1sxbGesOleu WEmfyKX6uu1kV1Nf9ShRcx335mUCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRfxu/j D0QSGTr0lAcbYs7EbC7ukzAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDUyNy5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK p1UwDQYJKoZIhvcNAQELBQADggEBAMMQvoc2i+adzpP69gT/qfoTBngsPx1SBchw 4ZcYrIz6Dwa/3ifILOqGs5RreK+TvlmRVC1+Wm9XsFZqKORs0pf0YWC3b85xW9pN b9aSzFG0J73prQttZ09lpUHx/06iCF5QADnBCytub1OE0J3TiBIv6iKGaay8l6os fI9ZGmg24FV4oqOmAXV9Z2iySG8j1blX1lwe3mwgKTRvis2laU4mJiZGt8QRBQNM khf2eN3CzixZ6qOjEmvivXFRl+d/iM4BcpclbB0QoESCgyDhAPp5OPKDYnOiLZ9I 6YBDtzihV69x9i91xX+BnICI4nYX1Ytp5+b0zSEcZn8dQyfoY68= -----END CERTIFICATE-----Generated at Sat Mar 28 11:43:32 2026 by rpki-client