$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144532.roa File: AS144532.roa (raw, json) Hash identifier: qIUAYCoxz/tCl05Dc5cOY7j/ZEjwM2daba8DlXjjaLg= Subject key identifier: 70:67:A5:E0:19:6B:D7:52:B0:4C:11:68:95:E1:A6:97:0D:FF:9E:53 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 0F9D109EECB5215A2D540FBDD1EE71C70662D5EA Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144532.roa Signing time: Wed 04 Mar 2026 06:19:33 +0000 ROA not before: Wed 04 Mar 2026 06:14:33 +0000 ROA not after: Wed 03 Mar 2027 06:19:33 +0000 asID: 144532 IP address blocks: 240a:a75a::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:9d:10:9e:ec:b5:21:5a:2d:54:0f:bd:d1:ee:71:c7:06:62:d5:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:14:33 2026 GMT Not After : Mar 3 06:19:33 2027 GMT Subject: CN=7067A5E0196BD752B04C116895E1A6970DFF9E53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:15:4e:1d:25:17:26:af:ec:d0:20:76:b0:bf: 76:c5:1c:85:42:52:90:4d:f1:12:f1:e3:b1:25:52: b9:7c:e7:1b:9a:84:30:c4:27:f9:5f:b0:86:0a:f5: 4f:ec:be:34:9f:ed:5b:20:9d:46:1a:3a:2c:30:5a: 8f:49:45:b9:be:df:10:18:0d:f8:1a:cd:da:30:0b: 20:a8:5e:30:a4:9b:b6:e6:1b:01:a8:37:8b:1b:f6: 4b:32:d8:18:8c:8d:8d:d3:41:f0:74:b8:36:1d:c3: 98:b3:98:ff:c9:33:3c:28:c2:ad:55:d4:ed:9a:d7: 9e:37:1a:fe:c9:4f:81:cb:5f:4b:20:6d:1d:d6:8e: b1:20:3a:ab:59:c0:f7:8e:42:c0:2d:93:4b:7a:04: f8:bb:62:ea:a5:a5:92:c2:98:d9:8a:c6:1e:28:2c: 70:34:3c:04:3b:d0:0e:99:d4:3c:c6:c7:52:66:bc: 4d:3d:7b:32:9d:92:05:72:e3:ad:b4:7a:45:61:ef: b7:1c:64:b8:0f:86:80:05:94:b0:39:10:5b:35:ab: ee:7d:e5:bb:ea:69:ba:c6:38:ba:9e:b9:9a:60:3f: b4:a4:09:7a:cf:c4:7f:c0:c7:5c:c9:5a:6f:9d:67: 07:da:27:00:58:01:a4:15:a1:cd:f2:64:a9:a7:6d: 8d:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:67:A5:E0:19:6B:D7:52:B0:4C:11:68:95:E1:A6:97:0D:FF:9E:53 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144532.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a75a::/32 Signature Algorithm: sha256WithRSAEncryption 85:98:1e:d6:a1:88:c8:26:8f:29:3d:84:da:bc:c5:55:bf:73: 7f:66:02:51:48:a8:af:8e:4b:1f:88:5e:af:e0:30:c4:f3:f4: 96:d6:e9:90:c1:27:b4:8f:0f:7d:17:70:8f:10:cd:d0:b2:7b: 6f:ee:35:c7:c4:35:11:5e:17:1f:93:8a:42:9a:e9:39:a4:1d: b2:ec:2f:8d:60:d2:a5:6d:a8:7b:ee:5a:8b:88:b3:31:78:63: 3e:30:8a:7e:bd:83:3e:51:f0:24:bb:5d:2d:60:01:14:54:d7: 40:3c:a0:99:da:d7:ab:41:fc:10:cd:ca:e1:8b:fa:20:44:0b: c4:54:ab:99:97:fc:f8:c8:7f:ac:7e:93:9e:47:29:48:db:03: 2f:6a:c6:c3:28:9c:25:f2:0f:4b:16:0a:a4:fd:f8:2c:5c:d3: 59:73:ba:a8:bb:db:af:4a:db:85:cb:a5:2d:92:6c:3b:23:39: 31:ab:b3:b6:aa:a0:26:27:32:09:32:82:59:eb:24:d7:d3:b3: 2f:e9:19:3b:4e:4e:ab:81:a8:b7:2a:a8:cf:d2:26:d6:23:ed: af:eb:b5:73:eb:72:d9:6c:9c:4a:ba:4f:0c:f5:43:49:f8:eb: 33:de:a5:fd:c2:4b:cf:dc:08:e9:f5:33:4d:40:95:8c:3a:ce: 92:d5:89:06 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUD50Qnuy1IVotVA+90e5xxwZi1eowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTQzM1oX DTI3MDMwMzA2MTkzM1owMzExMC8GA1UEAxMoNzA2N0E1RTAxOTZCRDc1MkIwNEMx MTY4OTVFMUE2OTcwREZGOUU1MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJAVTh0lFyav7NAgdrC/dsUchUJSkE3xEvHjsSVSuXznG5qEMMQn+V+whgr1 T+y+NJ/tWyCdRho6LDBaj0lFub7fEBgN+BrN2jALIKheMKSbtuYbAag3ixv2SzLY GIyNjdNB8HS4Nh3DmLOY/8kzPCjCrVXU7ZrXnjca/slPgctfSyBtHdaOsSA6q1nA 945CwC2TS3oE+Lti6qWlksKY2YrGHigscDQ8BDvQDpnUPMbHUma8TT17Mp2SBXLj rbR6RWHvtxxkuA+GgAWUsDkQWzWr7n3lu+ppusY4up65mmA/tKQJes/Ef8DHXMla b51nB9onAFgBpBWhzfJkqadtjVUCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRwZ6Xg GWvXUrBMEWiV4aaXDf+eUzAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDUzMi5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK p1owDQYJKoZIhvcNAQELBQADggEBAIWYHtahiMgmjyk9hNq8xVW/c39mAlFIqK+O Sx+IXq/gMMTz9JbW6ZDBJ7SPD30XcI8QzdCye2/uNcfENRFeFx+TikKa6TmkHbLs L41g0qVtqHvuWouIszF4Yz4win69gz5R8CS7XS1gARRU10A8oJna16tB/BDNyuGL +iBEC8RUq5mX/PjIf6x+k55HKUjbAy9qxsMonCXyD0sWCqT9+Cxc01lzuqi7269K 24XLpS2SbDsjOTGrs7aqoCYnMgkyglnrJNfTsy/pGTtOTquBqLcqqM/SJtYj7a/r tXPrctlsnEq6Twz1Q0n46zPepf3CS8/cCOn1M01AlYw6zpLViQY= -----END CERTIFICATE-----Generated at Sat Mar 28 11:41:58 2026 by rpki-client