$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144533.roa File: AS144533.roa (raw, json) Hash identifier: O26zY97zPfysPYdOqLPK8s6GWRA9dGrNQVc4O5patx0= Subject key identifier: AB:55:BC:DE:00:31:A0:70:7C:DC:2D:B2:6B:B2:1A:E7:66:9B:63:3C Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 350DDF3D1301264BD46005B9D221C5C80ACD27C6 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144533.roa Signing time: Wed 04 Mar 2026 06:21:16 +0000 ROA not before: Wed 04 Mar 2026 06:16:16 +0000 ROA not after: Wed 03 Mar 2027 06:21:16 +0000 asID: 144533 IP address blocks: 240a:a75b::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:0d:df:3d:13:01:26:4b:d4:60:05:b9:d2:21:c5:c8:0a:cd:27:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:16:16 2026 GMT Not After : Mar 3 06:21:16 2027 GMT Subject: CN=AB55BCDE0031A0707CDC2DB26BB21AE7669B633C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:04:f0:e7:c8:2a:d5:12:68:29:78:e7:2d:00: 36:1b:80:63:01:da:81:00:ed:8c:39:5f:cf:6a:e7: 87:4a:54:ac:5c:18:14:48:8b:9c:bd:61:66:ba:9a: e9:ef:c7:a0:59:8a:a4:a8:86:10:df:49:56:b8:49: 29:88:13:7f:bb:f0:18:d2:48:ab:ec:14:80:10:ea: e2:05:7e:10:ad:c6:a9:6c:7d:e4:f8:fb:e4:ec:1d: ca:93:22:7e:9d:26:2e:1a:4f:03:95:f3:05:98:5e: 13:f8:16:c7:e3:21:1f:c8:5d:57:f0:e6:ba:17:b9: fe:82:94:11:b4:4b:3b:de:c4:73:3c:5c:70:12:17: 18:98:85:b9:bc:97:23:4d:0d:61:d6:49:5c:06:15: 35:5e:54:ab:e6:3c:23:a9:84:55:2f:fc:ee:49:ac: 0c:95:c9:01:69:66:3f:95:d9:15:ec:7c:d0:a3:07: 8d:ce:fe:41:e1:c2:37:8c:6f:12:50:5c:ce:11:1c: 36:8c:c7:93:55:63:df:ff:e4:ca:c6:f4:ad:a4:85: 81:57:81:64:a9:38:9a:6c:20:d5:4e:02:96:4e:a6: 1f:26:53:83:2e:1b:6f:73:d1:34:f5:b7:b6:8c:fd: f9:a7:a3:14:86:c4:37:23:aa:f7:f8:4c:eb:40:b8: a0:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:55:BC:DE:00:31:A0:70:7C:DC:2D:B2:6B:B2:1A:E7:66:9B:63:3C X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144533.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a75b::/32 Signature Algorithm: sha256WithRSAEncryption 33:05:b4:15:fb:60:9b:e3:1a:64:71:b9:1e:0f:7a:2d:7b:a4: 34:2b:95:41:5c:a9:1f:2d:8b:1b:be:be:f9:ea:ea:ad:be:46: 49:2e:d0:c6:f4:8e:07:a6:3c:9d:a0:9d:80:20:2c:ee:69:9a: c2:02:e4:86:d2:fe:b4:21:42:cc:51:19:50:f7:00:45:0f:e1: dc:d8:56:ca:eb:f7:5b:61:83:2f:71:26:c3:0f:3b:3e:40:a6: ff:a8:39:e5:b0:14:d0:3c:a7:ac:73:15:3f:ef:4c:06:d7:23: b2:d1:98:16:80:8f:3d:54:e7:80:9a:25:b4:10:94:d6:7d:c8: 97:4d:d4:76:34:23:c4:2c:60:fd:18:b6:91:17:43:69:87:fe: 44:21:80:40:e1:03:28:f8:b9:91:96:a1:52:3a:f6:4d:bb:43: 92:21:02:3f:17:fe:23:e0:a5:4f:09:35:33:2e:ba:d8:9f:4a: 0c:7e:ad:09:73:7e:56:42:e0:1f:89:93:4f:f8:73:6b:a0:d1: 44:d9:8a:43:b1:00:e4:a4:a0:26:04:b1:b0:3a:b2:a8:eb:f5: 3e:a6:25:be:9c:5d:06:1c:8e:c7:0c:89:5d:e7:79:48:81:65: 7e:4b:45:7b:79:4d:47:ee:93:62:fa:28:16:03:22:c6:82:f3: ec:8e:55:04 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUNQ3fPRMBJkvUYAW50iHFyArNJ8YwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTYxNloX DTI3MDMwMzA2MjExNlowMzExMC8GA1UEAxMoQUI1NUJDREUwMDMxQTA3MDdDREMy REIyNkJCMjFBRTc2NjlCNjMzQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKQE8OfIKtUSaCl45y0ANhuAYwHagQDtjDlfz2rnh0pUrFwYFEiLnL1hZrqa 6e/HoFmKpKiGEN9JVrhJKYgTf7vwGNJIq+wUgBDq4gV+EK3GqWx95Pj75OwdypMi fp0mLhpPA5XzBZheE/gWx+MhH8hdV/Dmuhe5/oKUEbRLO97EczxccBIXGJiFubyX I00NYdZJXAYVNV5Uq+Y8I6mEVS/87kmsDJXJAWlmP5XZFex80KMHjc7+QeHCN4xv ElBczhEcNozHk1Vj3//kysb0raSFgVeBZKk4mmwg1U4Clk6mHyZTgy4bb3PRNPW3 toz9+aejFIbENyOq9/hM60C4oGsCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSrVbze ADGgcHzcLbJrshrnZptjPDAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDUzMy5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK p1swDQYJKoZIhvcNAQELBQADggEBADMFtBX7YJvjGmRxuR4Pei17pDQrlUFcqR8t ixu+vvnq6q2+Rkku0Mb0jgemPJ2gnYAgLO5pmsIC5IbS/rQhQsxRGVD3AEUP4dzY Vsrr91thgy9xJsMPOz5Apv+oOeWwFNA8p6xzFT/vTAbXI7LRmBaAjz1U54CaJbQQ lNZ9yJdN1HY0I8QsYP0YtpEXQ2mH/kQhgEDhAyj4uZGWoVI69k27Q5IhAj8X/iPg pU8JNTMuutifSgx+rQlzflZC4B+Jk0/4c2ug0UTZikOxAOSkoCYEsbA6sqjr9T6m Jb6cXQYcjscMiV3neUiBZX5LRXt5TUfuk2L6KBYDIsaC8+yOVQQ= -----END CERTIFICATE-----Generated at Sat Mar 28 15:54:34 2026 by rpki-client