$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144545.roa File: AS144545.roa (raw, json) Hash identifier: FNLFF5u1ghnKK8uXbf0I1dHWJyIxnV7hJeWVm7Bkd4o= Subject key identifier: 82:3E:81:3F:D9:93:A6:D5:69:97:4A:2F:85:62:FD:1B:B4:F2:42:34 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 4ECF23AFD02C64ED8D75994A8A092899D830A730 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144545.roa Signing time: Wed 04 Mar 2026 06:21:08 +0000 ROA not before: Wed 04 Mar 2026 06:16:08 +0000 ROA not after: Wed 03 Mar 2027 06:21:08 +0000 asID: 144545 IP address blocks: 240a:a767::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:cf:23:af:d0:2c:64:ed:8d:75:99:4a:8a:09:28:99:d8:30:a7:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:16:08 2026 GMT Not After : Mar 3 06:21:08 2027 GMT Subject: CN=823E813FD993A6D569974A2F8562FD1BB4F24234 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:8c:02:a6:eb:db:65:98:10:29:10:c8:42:c8: 90:a3:35:c7:2f:55:d1:20:4a:e7:4c:a1:13:80:fb: ce:89:10:b5:90:6e:5f:7d:df:b7:d3:e4:53:ad:d8: ca:b1:99:06:08:bc:bd:94:71:f3:17:52:21:c9:a0: 85:fa:48:d5:c1:1e:72:9f:6f:49:86:90:17:08:29: e0:52:43:55:3b:53:48:65:2b:bf:a7:40:ac:61:a5: 39:89:1a:dc:96:d6:6c:c3:2a:9a:33:9b:ed:a2:f7: b1:a9:a0:df:a2:8e:26:ee:f5:11:a3:83:a0:af:6d: 7f:1a:35:2d:8e:8a:4e:7f:f7:1c:fc:f1:25:ce:89: 22:b6:0c:e6:60:7d:9f:41:93:b9:93:cd:9b:4d:36: 24:1e:6c:da:25:6e:fd:2a:c6:52:73:62:7c:fc:d5: 0d:24:9b:c4:3d:06:3e:73:d6:29:2d:29:5c:75:2e: 63:11:36:c2:9c:66:1d:22:85:1a:17:67:ff:37:e1: b1:b7:9d:27:23:c4:20:c4:39:48:a7:18:99:e8:c2: ab:03:bd:8d:1f:f4:8c:07:e8:5c:0b:df:0c:4c:57: 5b:e8:46:39:b8:8c:93:50:14:36:2b:aa:c7:36:61: 8e:9b:ad:06:2c:aa:fe:52:78:41:af:59:ea:bd:6d: 1b:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:3E:81:3F:D9:93:A6:D5:69:97:4A:2F:85:62:FD:1B:B4:F2:42:34 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144545.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a767::/32 Signature Algorithm: sha256WithRSAEncryption a5:c4:25:31:63:38:6e:52:e0:a8:33:ec:a3:7a:bd:67:82:9a: 9b:e9:4c:16:73:fe:e3:1a:6b:0c:b7:08:7d:5d:9e:ad:ea:53: bd:65:0e:ec:ea:99:9d:cb:f4:b5:ca:84:61:d2:bb:ec:e9:e4: df:56:9f:be:20:63:d8:49:5b:0b:38:2f:11:1a:51:29:a8:83: b5:45:6e:fc:a2:43:7b:a2:4c:de:b2:7c:e5:1f:55:b4:02:36: 17:a2:87:00:5f:c1:54:08:d7:0b:ac:6d:84:d1:e3:f3:23:21: 9c:4f:7c:16:cc:76:6e:77:a1:fb:5d:b3:25:be:e3:eb:42:c6: 53:e3:6b:f2:cc:ad:6d:c5:3a:3c:0c:28:dc:14:e3:aa:ff:70: e9:18:8d:1e:8c:2a:8a:d3:15:43:23:15:71:a5:e9:00:2c:1f: 1b:5e:9c:c2:18:01:d0:33:f5:b4:4d:bb:af:fb:15:96:11:99: ca:41:7e:78:70:e1:c6:eb:11:6f:33:c4:8b:e8:02:03:82:a0: 93:5a:bf:93:bc:78:21:7b:17:46:62:63:aa:53:5c:eb:77:31: 73:b2:ec:0d:02:23:dc:20:61:b0:84:c8:42:51:dd:ee:d7:c3: 22:dd:3a:40:20:fb:f8:77:c2:7e:be:49:b2:c8:49:18:7c:0d: 3f:11:fe:e3 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUTs8jr9AsZO2NdZlKigkomdgwpzAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTYwOFoX DTI3MDMwMzA2MjEwOFowMzExMC8GA1UEAxMoODIzRTgxM0ZEOTkzQTZENTY5OTc0 QTJGODU2MkZEMUJCNEYyNDIzNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANGMAqbr22WYECkQyELIkKM1xy9V0SBK50yhE4D7zokQtZBuX33ft9PkU63Y yrGZBgi8vZRx8xdSIcmghfpI1cEecp9vSYaQFwgp4FJDVTtTSGUrv6dArGGlOYka 3JbWbMMqmjOb7aL3samg36KOJu71EaODoK9tfxo1LY6KTn/3HPzxJc6JIrYM5mB9 n0GTuZPNm002JB5s2iVu/SrGUnNifPzVDSSbxD0GPnPWKS0pXHUuYxE2wpxmHSKF Ghdn/zfhsbedJyPEIMQ5SKcYmejCqwO9jR/0jAfoXAvfDExXW+hGObiMk1AUNiuq xzZhjputBiyq/lJ4Qa9Z6r1tG7MCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSCPoE/ 2ZOm1WmXSi+FYv0btPJCNDAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDU0NS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK p2cwDQYJKoZIhvcNAQELBQADggEBAKXEJTFjOG5S4Kgz7KN6vWeCmpvpTBZz/uMa awy3CH1dnq3qU71lDuzqmZ3L9LXKhGHSu+zp5N9Wn74gY9hJWws4LxEaUSmog7VF bvyiQ3uiTN6yfOUfVbQCNheihwBfwVQI1wusbYTR4/MjIZxPfBbMdm53oftdsyW+ 4+tCxlPja/LMrW3FOjwMKNwU46r/cOkYjR6MKorTFUMjFXGl6QAsHxtenMIYAdAz 9bRNu6/7FZYRmcpBfnhw4cbrEW8zxIvoAgOCoJNav5O8eCF7F0ZiY6pTXOt3MXOy 7A0CI9wgYbCEyEJR3e7XwyLdOkAg+/h3wn6+SbLISRh8DT8R/uM= -----END CERTIFICATE-----Generated at Sat Mar 28 11:42:08 2026 by rpki-client