$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144543.roa File: AS144543.roa (raw, json) Hash identifier: mOYAm3lEsRrgMwKKfIb/ljCrd8aXw6Wc60rmDxLLeK0= Subject key identifier: F5:AD:61:5D:CB:96:04:76:18:EB:3C:82:32:0E:1D:C1:A1:C3:42:32 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 365351BA1BA692DAD928F91738BDAC6007D726E8 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144543.roa Signing time: Wed 04 Mar 2026 06:22:19 +0000 ROA not before: Wed 04 Mar 2026 06:17:19 +0000 ROA not after: Wed 03 Mar 2027 06:22:19 +0000 asID: 144543 IP address blocks: 240a:a765::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:53:51:ba:1b:a6:92:da:d9:28:f9:17:38:bd:ac:60:07:d7:26:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:17:19 2026 GMT Not After : Mar 3 06:22:19 2027 GMT Subject: CN=F5AD615DCB96047618EB3C82320E1DC1A1C34232 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:29:3a:dc:5c:5f:ad:5a:81:eb:7f:63:cd:31: 08:61:b9:3e:35:47:a3:fa:6f:ba:bc:c7:b0:52:95: db:0c:26:7c:15:ee:bd:95:61:e6:c4:db:24:ee:03: b3:0f:62:b1:54:9a:dd:2b:6c:b0:24:f3:19:4c:f6: 46:88:48:01:6b:f9:3b:dc:ec:6a:4a:ea:ba:6d:21: f6:d4:c1:f0:e6:25:a6:96:2b:b2:37:46:f1:69:7b: 7a:f0:81:9d:fe:33:ef:df:b4:79:2f:c4:f0:35:14: f5:a7:00:19:f8:52:28:8b:f3:0e:36:45:5c:c2:01: 7d:96:86:32:44:f3:a2:b2:b9:37:51:1d:4a:c1:49: 54:b2:4c:24:b6:d6:60:80:b3:07:42:73:c8:ab:ac: a7:e4:f3:53:83:1b:b8:01:42:a5:8b:23:e6:92:22: da:5f:ee:49:fb:7c:2f:0f:d7:11:80:19:18:67:e6: 4e:d7:e1:23:35:4f:44:fb:59:44:8c:78:5c:32:b3: d8:ef:bd:71:5b:50:e2:1f:6e:8a:db:97:1a:e3:85: d2:53:6a:ef:03:90:bc:2f:30:94:88:fc:ad:8a:b3: 57:ca:66:8c:7c:bb:d7:61:96:92:5f:93:96:1c:e6: 77:07:47:a1:ed:83:ee:5a:5b:01:c5:e5:3f:5b:c7: b8:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:AD:61:5D:CB:96:04:76:18:EB:3C:82:32:0E:1D:C1:A1:C3:42:32 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144543.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a765::/32 Signature Algorithm: sha256WithRSAEncryption 6d:64:6f:49:fb:a0:0d:4c:75:86:69:c4:d9:a5:1b:9a:27:9f: 47:45:eb:be:8d:cb:03:90:21:eb:ab:9c:16:fb:79:b6:32:f3: 0f:3d:60:43:9f:d8:ee:55:5b:aa:0f:63:b9:7d:5b:df:3f:84: 64:90:7c:8a:33:be:b8:d3:9b:a0:5a:b4:80:6f:8e:dd:20:04: 72:5d:60:9e:a4:f5:8d:44:d7:79:4e:4c:d8:57:63:d3:bf:5a: 69:60:69:59:59:4f:29:e8:b3:a0:04:af:14:34:2f:81:e6:c1: 4c:a6:d2:ab:5d:2b:64:20:05:57:31:9e:59:67:22:b2:3e:eb: 62:61:b3:24:a0:01:09:b1:a8:2a:a6:fe:40:4f:78:68:b4:4f: 22:66:90:20:bf:aa:e5:d8:85:9c:a2:a0:c0:c8:be:ee:44:d8: a7:fd:b9:89:e3:2c:f5:0e:eb:b6:bc:1e:ac:7f:8c:ac:b1:9b: 83:4a:13:60:de:bf:75:9c:e0:d5:16:c2:e0:ea:4d:c1:fd:8e: 11:75:1e:83:94:7c:0c:50:df:2f:ed:59:31:ae:6f:1a:56:e6: 1c:3a:05:06:a6:7f:e6:de:c0:45:98:bc:19:93:8d:44:76:9b: 12:d6:0b:c9:43:28:0d:50:7b:3d:1d:69:0e:86:54:bd:04:9d: de:fd:ed:e9 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUNlNRuhumktrZKPkXOL2sYAfXJugwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTcxOVoX DTI3MDMwMzA2MjIxOVowMzExMC8GA1UEAxMoRjVBRDYxNURDQjk2MDQ3NjE4RUIz QzgyMzIwRTFEQzFBMUMzNDIzMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMcpOtxcX61aget/Y80xCGG5PjVHo/pvurzHsFKV2wwmfBXuvZVh5sTbJO4D sw9isVSa3StssCTzGUz2RohIAWv5O9zsakrqum0h9tTB8OYlppYrsjdG8Wl7evCB nf4z79+0eS/E8DUU9acAGfhSKIvzDjZFXMIBfZaGMkTzorK5N1EdSsFJVLJMJLbW YICzB0JzyKusp+TzU4MbuAFCpYsj5pIi2l/uSft8Lw/XEYAZGGfmTtfhIzVPRPtZ RIx4XDKz2O+9cVtQ4h9uituXGuOF0lNq7wOQvC8wlIj8rYqzV8pmjHy712GWkl+T lhzmdwdHoe2D7lpbAcXlP1vHuKsCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBT1rWFd y5YEdhjrPIIyDh3BocNCMjAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDU0My5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK p2UwDQYJKoZIhvcNAQELBQADggEBAG1kb0n7oA1MdYZpxNmlG5onn0dF676NywOQ IeurnBb7ebYy8w89YEOf2O5VW6oPY7l9W98/hGSQfIozvrjTm6BatIBvjt0gBHJd YJ6k9Y1E13lOTNhXY9O/WmlgaVlZTynos6AErxQ0L4HmwUym0qtdK2QgBVcxnlln IrI+62JhsySgAQmxqCqm/kBPeGi0TyJmkCC/quXYhZyioMDIvu5E2Kf9uYnjLPUO 67a8Hqx/jKyxm4NKE2Dev3Wc4NUWwuDqTcH9jhF1HoOUfAxQ3y/tWTGubxpW5hw6 BQamf+bewEWYvBmTjUR2mxLWC8lDKA1Qez0daQ6GVL0End797ek= -----END CERTIFICATE-----Generated at Sat Mar 28 13:18:15 2026 by rpki-client