$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144528.roa File: AS144528.roa (raw, json) Hash identifier: w3slf1jeHaVlIonf6Bu6tmt6Le5l85CzybYGid9kx4U= Subject key identifier: 38:57:82:1B:6B:BB:43:6B:19:D4:B5:D1:28:49:47:87:9B:BB:42:F3 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 1CCB5AFE15B4DE5EB71089AF06FF5C7F918C97FA Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144528.roa Signing time: Wed 04 Mar 2026 06:20:19 +0000 ROA not before: Wed 04 Mar 2026 06:15:19 +0000 ROA not after: Wed 03 Mar 2027 06:20:19 +0000 asID: 144528 IP address blocks: 240a:a756::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:cb:5a:fe:15:b4:de:5e:b7:10:89:af:06:ff:5c:7f:91:8c:97:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:15:19 2026 GMT Not After : Mar 3 06:20:19 2027 GMT Subject: CN=3857821B6BBB436B19D4B5D1284947879BBB42F3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:f6:28:c9:62:fb:d8:85:c9:b1:cd:a5:f2:6a: c5:39:17:09:1e:07:74:28:b0:0b:ff:7b:2a:cf:5e: 28:ae:87:ed:3f:51:59:56:42:1d:9e:4a:48:d7:fd: 0e:5e:04:e7:3c:dd:36:6b:14:13:f0:2d:59:cc:20: ba:5f:96:6e:e9:83:8f:15:a9:d8:6e:05:c3:bf:2c: b2:f5:d4:e3:2b:a6:cd:28:69:75:1c:40:ab:81:8d: 79:98:45:f4:dc:37:38:9b:67:0e:86:51:44:89:25: e8:64:f3:98:8f:10:9b:af:b5:28:38:ba:27:f6:10: a3:cd:ef:01:bb:04:9d:8d:63:21:c5:70:c1:71:d4: f3:d5:8d:e8:45:8a:72:03:1e:2d:b2:2c:dc:36:50: ba:c3:1b:c2:b7:7b:49:38:4e:35:d8:9f:01:f5:7a: 5a:62:a0:42:0e:ae:30:f9:33:32:a2:69:45:20:fe: 44:04:9a:5d:40:cb:25:f9:a2:ef:af:2a:cd:b7:34: 6f:e7:fe:4a:3b:aa:64:52:af:18:4e:e5:9e:95:8b: d4:8f:b1:f3:63:52:87:95:ea:be:ba:ae:19:32:7f: fc:31:dd:e6:d8:bf:11:99:ad:b1:9f:4b:08:35:a7: d7:d1:63:94:8a:37:71:15:13:63:f5:9d:2f:a7:29: ae:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:57:82:1B:6B:BB:43:6B:19:D4:B5:D1:28:49:47:87:9B:BB:42:F3 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144528.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a756::/32 Signature Algorithm: sha256WithRSAEncryption 6e:76:b7:09:22:e6:2d:99:17:d0:21:87:fd:fa:c1:1d:1c:24: ad:df:12:00:49:cc:29:ea:07:91:1b:ea:1b:93:25:65:f8:a9: 9b:e8:8b:33:d2:c8:3e:d8:a7:db:93:79:7a:ef:c3:40:7c:7b: c7:1b:74:94:84:11:11:74:3d:6b:7f:3c:2a:ce:7d:b7:a7:aa: e6:da:43:41:49:7d:a4:51:42:c0:99:b1:75:9a:8d:78:79:25: 8d:4e:dc:8f:01:8a:f4:25:a6:8b:e0:45:7b:c3:05:47:b9:c2: 86:aa:ed:f3:e9:d4:b3:ae:e9:9a:cb:e9:ca:f1:3b:58:b1:24: 8d:d9:7e:d3:e1:62:1e:bd:fd:f5:92:d5:a3:90:5f:73:78:85: 5d:fa:dd:1b:46:6b:21:a3:98:a7:08:06:31:af:72:4a:44:3e: ba:f7:1f:8a:3d:8a:24:8b:05:3a:27:d0:56:66:94:d0:7e:ab: 66:54:69:df:28:6c:46:97:01:b8:8e:f9:2f:8e:3e:85:cd:20: 3c:5f:a1:b4:5d:15:50:c6:a2:e2:3d:8f:34:4d:45:dd:7d:1a: 8f:7b:5d:94:bf:c3:c5:3a:00:26:02:b5:05:5a:e3:58:37:21: 02:8d:f1:8a:15:7d:c3:21:cf:2f:6e:f1:b4:92:5d:5e:64:5f: ea:a4:19:b9 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUHMta/hW03l63EImvBv9cf5GMl/owDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTUxOVoX DTI3MDMwMzA2MjAxOVowMzExMC8GA1UEAxMoMzg1NzgyMUI2QkJCNDM2QjE5RDRC NUQxMjg0OTQ3ODc5QkJCNDJGMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJ72KMli+9iFybHNpfJqxTkXCR4HdCiwC/97Ks9eKK6H7T9RWVZCHZ5KSNf9 Dl4E5zzdNmsUE/AtWcwgul+WbumDjxWp2G4Fw78ssvXU4yumzShpdRxAq4GNeZhF 9Nw3OJtnDoZRRIkl6GTzmI8Qm6+1KDi6J/YQo83vAbsEnY1jIcVwwXHU89WN6EWK cgMeLbIs3DZQusMbwrd7SThONdifAfV6WmKgQg6uMPkzMqJpRSD+RASaXUDLJfmi 768qzbc0b+f+SjuqZFKvGE7lnpWL1I+x82NSh5XqvrquGTJ//DHd5ti/EZmtsZ9L CDWn19FjlIo3cRUTY/WdL6cproUCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQ4V4Ib a7tDaxnUtdEoSUeHm7tC8zAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDUyOC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK p1YwDQYJKoZIhvcNAQELBQADggEBAG52twki5i2ZF9Ahh/36wR0cJK3fEgBJzCnq B5Eb6huTJWX4qZvoizPSyD7Yp9uTeXrvw0B8e8cbdJSEERF0PWt/PCrOfbenquba Q0FJfaRRQsCZsXWajXh5JY1O3I8BivQlpovgRXvDBUe5woaq7fPp1LOu6ZrL6crx O1ixJI3ZftPhYh69/fWS1aOQX3N4hV363RtGayGjmKcIBjGvckpEPrr3H4o9iiSL BTon0FZmlNB+q2ZUad8obEaXAbiO+S+OPoXNIDxfobRdFVDGouI9jzRNRd19Go97 XZS/w8U6ACYCtQVa41g3IQKN8YoVfcMhzy9u8bSSXV5kX+qkGbk= -----END CERTIFICATE-----Generated at Sat Mar 28 14:30:36 2026 by rpki-client