$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144542.roa File: AS144542.roa (raw, json) Hash identifier: qOcCnaqFMS+eeg3f2RkGTgIIJBQsf1nXOLWOF9NZe7A= Subject key identifier: EA:9A:16:CF:FE:6A:44:94:43:A1:68:61:89:CD:2C:4E:47:A0:BD:07 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 53D167C2E4BCD352C0A8F0D9FE1FFC752DD4D565 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144542.roa Signing time: Wed 04 Mar 2026 06:21:21 +0000 ROA not before: Wed 04 Mar 2026 06:16:21 +0000 ROA not after: Wed 03 Mar 2027 06:21:21 +0000 asID: 144542 IP address blocks: 240a:a764::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:d1:67:c2:e4:bc:d3:52:c0:a8:f0:d9:fe:1f:fc:75:2d:d4:d5:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:16:21 2026 GMT Not After : Mar 3 06:21:21 2027 GMT Subject: CN=EA9A16CFFE6A449443A1686189CD2C4E47A0BD07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:3e:d8:3e:3d:8e:a5:4f:f6:f8:d6:e6:15:c6: b4:e3:49:03:8c:de:8c:05:4e:fe:c1:34:b4:d8:43: 66:7c:e9:d6:c8:96:0f:bf:5d:0f:f6:79:58:50:9a: f9:e8:5c:60:71:29:81:8b:6e:c3:01:7a:57:0a:53: d0:c7:f3:6d:59:74:04:03:df:21:be:0f:69:e8:2a: f7:9c:cc:50:84:25:ae:aa:63:aa:da:bf:00:cf:b2: 0d:66:1a:6e:a7:98:77:e2:14:83:e7:82:75:d8:a9: d8:b5:fb:16:7f:ac:21:09:a6:d4:74:c0:ea:bd:2d: c4:d3:8b:10:95:8c:f9:b1:5b:61:9b:83:e9:fd:bf: 79:91:e5:d5:fd:ef:df:4a:c8:15:f3:95:6c:22:23: 8a:7b:a4:e7:ea:86:a9:82:f2:72:92:14:a1:8d:7b: 16:2e:41:0d:91:1c:2c:d6:ad:7b:90:62:6e:68:c4: 39:29:ba:85:ea:de:86:6e:c6:58:d2:cc:60:64:14: 34:42:dc:2a:c8:88:af:c0:12:6b:90:39:16:64:b1: b8:4e:d3:76:a7:40:ed:75:04:94:d8:8b:17:0d:6d: ab:21:6e:ac:31:09:e3:2c:ac:ee:d4:85:87:0f:84: 5c:d0:81:4b:f0:43:de:06:e9:17:86:91:7e:a5:66: 42:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:9A:16:CF:FE:6A:44:94:43:A1:68:61:89:CD:2C:4E:47:A0:BD:07 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144542.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a764::/32 Signature Algorithm: sha256WithRSAEncryption 05:7d:4e:08:5d:e0:ee:95:64:06:38:ce:20:1b:52:c5:9e:48: f6:e7:d5:6d:4d:2b:b2:eb:ff:a3:98:53:7a:77:86:c5:23:96: 5b:d5:e6:68:a7:f8:90:64:f2:19:65:1e:95:a1:71:44:53:d8: dc:6a:82:6c:87:13:66:26:c0:80:88:1f:a6:fa:2a:5e:73:a7: 11:3d:70:84:44:85:91:4a:b2:2c:af:b6:92:5b:64:54:33:0f: b5:81:08:75:6e:f7:f7:a5:f9:f0:c7:4b:f2:1b:69:74:01:dc: 88:94:0e:55:90:7b:c6:12:32:7b:2d:b1:0b:1d:81:6b:60:17: da:20:d5:86:2c:12:3f:8b:ae:1c:e7:9b:9f:e7:1f:88:98:59: 66:4c:7e:cc:0c:fd:e9:f6:86:c0:8b:d8:56:11:27:8d:de:eb: 43:77:06:fb:16:1c:ed:ba:48:51:34:9d:61:71:f4:69:9f:c6: 2b:6c:eb:34:0d:c5:2a:7d:be:28:f5:69:fd:ba:48:00:90:af: ba:1e:59:94:87:a8:5a:cb:99:14:59:b2:ee:44:b5:68:b6:4c: 45:3c:ea:ed:06:f5:87:a7:f6:a0:08:e5:b4:7c:85:87:3f:ec: df:0a:0b:9e:ee:68:e0:20:62:10:3a:a1:f9:d3:fc:6d:d6:8d: 99:b2:ac:bc -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUU9FnwuS801LAqPDZ/h/8dS3U1WUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTYyMVoX DTI3MDMwMzA2MjEyMVowMzExMC8GA1UEAxMoRUE5QTE2Q0ZGRTZBNDQ5NDQzQTE2 ODYxODlDRDJDNEU0N0EwQkQwNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL0+2D49jqVP9vjW5hXGtONJA4zejAVO/sE0tNhDZnzp1siWD79dD/Z5WFCa +ehcYHEpgYtuwwF6VwpT0MfzbVl0BAPfIb4Paegq95zMUIQlrqpjqtq/AM+yDWYa bqeYd+IUg+eCddip2LX7Fn+sIQmm1HTA6r0txNOLEJWM+bFbYZuD6f2/eZHl1f3v 30rIFfOVbCIjinuk5+qGqYLycpIUoY17Fi5BDZEcLNate5BibmjEOSm6herehm7G WNLMYGQUNELcKsiIr8ASa5A5FmSxuE7TdqdA7XUElNiLFw1tqyFurDEJ4yys7tSF hw+EXNCBS/BD3gbpF4aRfqVmQtECAwEAAaOCAcUwggHBMB0GA1UdDgQWBBTqmhbP /mpElEOhaGGJzSxOR6C9BzAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDU0Mi5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK p2QwDQYJKoZIhvcNAQELBQADggEBAAV9Tghd4O6VZAY4ziAbUsWeSPbn1W1NK7Lr /6OYU3p3hsUjllvV5min+JBk8hllHpWhcURT2NxqgmyHE2YmwICIH6b6Kl5zpxE9 cIREhZFKsiyvtpJbZFQzD7WBCHVu9/el+fDHS/IbaXQB3IiUDlWQe8YSMnstsQsd gWtgF9og1YYsEj+Lrhznm5/nH4iYWWZMfswM/en2hsCL2FYRJ43e60N3BvsWHO26 SFE0nWFx9Gmfxits6zQNxSp9vij1af26SACQr7oeWZSHqFrLmRRZsu5EtWi2TEU8 6u0G9Yen9qAI5bR8hYc/7N8KC57uaOAgYhA6ofnT/G3WjZmyrLw= -----END CERTIFICATE-----Generated at Sat Mar 28 11:46:11 2026 by rpki-client