$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144538.roa File: AS144538.roa (raw, json) Hash identifier: eBx+N7H396MqSxVTOs4NCGb9TTvKUrmuqvmyahTVKy4= Subject key identifier: 57:58:AB:B3:30:74:95:16:7D:1B:C8:F5:6E:D0:15:FD:F2:6F:E0:36 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 2519CC13C4881FF366A217FC9AD04CA84F12E316 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144538.roa Signing time: Wed 04 Mar 2026 06:19:25 +0000 ROA not before: Wed 04 Mar 2026 06:14:25 +0000 ROA not after: Wed 03 Mar 2027 06:19:25 +0000 asID: 144538 IP address blocks: 240a:a760::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:19:cc:13:c4:88:1f:f3:66:a2:17:fc:9a:d0:4c:a8:4f:12:e3:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:14:25 2026 GMT Not After : Mar 3 06:19:25 2027 GMT Subject: CN=5758ABB3307495167D1BC8F56ED015FDF26FE036 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:7c:fd:28:1c:85:5b:5d:94:12:26:fd:59:1a: 52:6d:20:ce:c4:ff:6a:a5:fa:66:b8:69:52:2c:3c: 53:cc:fa:46:b9:e4:4b:47:83:2f:ba:59:26:f9:3a: 9f:0c:f4:cc:95:e8:61:60:92:44:73:21:60:74:44: e6:1e:69:33:ff:93:a1:48:fb:2b:33:7b:61:56:76: 30:b6:a8:24:39:41:06:25:e4:4d:ba:ae:fb:46:23: 5b:31:0d:d2:59:12:d0:5a:60:9c:eb:d0:2c:46:55: 48:1a:29:98:5e:ad:b4:a3:8d:19:c4:6f:22:32:29: e4:d7:6b:b3:ad:ba:42:87:3a:f5:c5:37:bf:3c:f4: ef:b6:ed:10:d6:7c:83:68:d9:ae:2b:9b:15:cb:bf: e7:83:33:23:f7:a4:04:55:aa:59:20:ae:a9:ea:2e: 00:b7:1c:c8:96:b3:7a:1e:e9:fb:6d:58:1d:ff:87: 9e:04:d5:5e:15:09:81:80:f7:fc:d1:69:5f:18:d0: ec:c4:c2:bd:b0:89:c7:d8:7d:52:e9:ef:83:eb:c2: 51:ef:42:e5:e5:ab:eb:28:d1:13:c1:c7:09:5a:f1: df:7d:11:3d:ff:2d:08:5a:6b:89:01:7d:78:18:af: a1:49:3e:34:ff:fc:06:89:43:c4:75:1a:6c:8b:32: 44:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:58:AB:B3:30:74:95:16:7D:1B:C8:F5:6E:D0:15:FD:F2:6F:E0:36 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144538.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a760::/32 Signature Algorithm: sha256WithRSAEncryption 81:c2:be:25:49:d2:30:53:ba:f4:cb:4c:f5:5f:eb:ef:c7:97: e5:2e:66:c0:c4:3b:cf:5d:f1:79:34:8d:aa:8d:3b:ee:72:9a: b1:fb:f2:1a:0a:e0:9b:22:61:f1:47:59:88:3d:a7:95:44:26: de:77:ad:dc:d3:48:0e:43:6b:9b:0f:d9:2c:45:67:fa:04:54: 07:21:2d:04:b1:4b:79:65:98:f6:2f:0b:04:6d:aa:7d:78:36: 66:07:70:ad:1f:8d:5a:a0:e1:33:50:b0:34:57:6e:88:e8:9b: 07:09:88:ff:7e:f1:14:e2:66:5b:0d:ce:d7:81:f8:a1:d6:f5: 2e:52:56:73:86:8d:61:3f:3c:1e:ea:25:05:fa:4e:19:20:b6: 7b:f7:bf:7b:e5:43:f8:76:82:62:63:cd:6c:f7:04:b5:36:1f: b5:db:d5:8d:ea:69:ce:a2:34:8e:eb:68:41:67:9b:58:54:e5: 4b:42:5d:7f:6c:6e:a9:56:4f:cd:9f:97:52:58:76:23:e1:12: 6d:21:97:82:01:06:d7:cd:42:37:db:78:e3:8a:c2:fe:1d:5d: 4f:5b:ef:4e:dc:d7:87:63:9a:3c:f3:b7:11:90:73:e4:04:59: 9a:6f:ec:a8:c4:43:73:dc:af:fb:25:5c:a7:4f:62:42:ca:99: c6:32:b0:20 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUJRnME8SIH/Nmohf8mtBMqE8S4xYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTQyNVoX DTI3MDMwMzA2MTkyNVowMzExMC8GA1UEAxMoNTc1OEFCQjMzMDc0OTUxNjdEMUJD OEY1NkVEMDE1RkRGMjZGRTAzNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAPF8/SgchVtdlBIm/VkaUm0gzsT/aqX6ZrhpUiw8U8z6RrnkS0eDL7pZJvk6 nwz0zJXoYWCSRHMhYHRE5h5pM/+ToUj7KzN7YVZ2MLaoJDlBBiXkTbqu+0YjWzEN 0lkS0FpgnOvQLEZVSBopmF6ttKONGcRvIjIp5Ndrs626Qoc69cU3vzz077btENZ8 g2jZriubFcu/54MzI/ekBFWqWSCuqeouALccyJazeh7p+21YHf+HngTVXhUJgYD3 /NFpXxjQ7MTCvbCJx9h9Uunvg+vCUe9C5eWr6yjRE8HHCVrx330RPf8tCFpriQF9 eBivoUk+NP/8BolDxHUabIsyRAUCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRXWKuz MHSVFn0byPVu0BX98m/gNjAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDUzOC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK p2AwDQYJKoZIhvcNAQELBQADggEBAIHCviVJ0jBTuvTLTPVf6+/Hl+UuZsDEO89d 8Xk0jaqNO+5ymrH78hoK4JsiYfFHWYg9p5VEJt53rdzTSA5Da5sP2SxFZ/oEVAch LQSxS3llmPYvCwRtqn14NmYHcK0fjVqg4TNQsDRXbojomwcJiP9+8RTiZlsNzteB +KHW9S5SVnOGjWE/PB7qJQX6Thkgtnv3v3vlQ/h2gmJjzWz3BLU2H7Xb1Y3qac6i NI7raEFnm1hU5UtCXX9sbqlWT82fl1JYdiPhEm0hl4IBBtfNQjfbeOOKwv4dXU9b 707c14djmjzztxGQc+QEWZpv7KjEQ3Pcr/slXKdPYkLKmcYysCA= -----END CERTIFICATE-----Generated at Sat Mar 28 11:44:29 2026 by rpki-client