$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144547.roa File: AS144547.roa (raw, json) Hash identifier: usSkJ6WFLW0nOrEmrE8UGDLfhU9N9bbNyxtRVAotTfg= Subject key identifier: 24:B0:57:D9:BF:29:CF:51:4A:E1:93:30:C7:8A:3E:BB:30:0F:12:C6 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 39E5FC19B28A2CE65AD9500407A5B1CBDFA03B60 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144547.roa Signing time: Wed 04 Mar 2026 06:22:24 +0000 ROA not before: Wed 04 Mar 2026 06:17:24 +0000 ROA not after: Wed 03 Mar 2027 06:22:24 +0000 asID: 144547 IP address blocks: 240a:a769::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:e5:fc:19:b2:8a:2c:e6:5a:d9:50:04:07:a5:b1:cb:df:a0:3b:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:17:24 2026 GMT Not After : Mar 3 06:22:24 2027 GMT Subject: CN=24B057D9BF29CF514AE19330C78A3EBB300F12C6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:c7:09:2b:5d:32:5d:10:18:01:8d:ac:68:ef: 29:93:31:01:9e:42:d7:ae:c8:01:12:25:ff:44:47: 62:43:6a:25:2b:68:ee:68:8e:98:18:66:91:3e:74: 28:e4:f3:07:59:b9:bb:c0:ce:02:de:96:87:05:f6: dd:67:1f:d4:30:64:6a:86:43:eb:f4:09:45:cf:74: f1:cd:b1:59:b9:9b:d0:24:db:cb:16:03:0d:99:c6: 52:17:6c:d0:e0:bd:c5:27:f5:2c:9f:78:74:fa:62: 9e:27:51:3b:99:4d:d6:45:e9:9e:ac:cf:3b:96:fa: 4d:95:4e:c6:b1:a8:2a:dd:7b:87:5d:62:e4:28:56: 43:98:f0:e2:18:ac:b5:9a:74:2f:7b:0b:0c:f2:87: c4:2b:80:52:3c:f1:cb:af:29:82:e9:36:98:bb:79: 40:46:32:c6:21:89:a5:34:72:92:65:c3:25:fb:49: 75:93:1b:97:5b:c4:74:40:62:ad:49:72:e6:7d:6d: c6:8a:2d:a4:89:7b:9c:ae:b8:b1:d8:6b:01:5d:ee: b9:b2:0b:e5:91:a6:32:24:a3:fb:06:5a:83:e1:88: 64:20:1c:8e:a3:c5:32:e5:f1:36:bb:df:32:ff:92: e3:83:6c:d2:42:4d:d2:cd:10:e4:b4:d6:cb:c7:b2: ce:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:B0:57:D9:BF:29:CF:51:4A:E1:93:30:C7:8A:3E:BB:30:0F:12:C6 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144547.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a769::/32 Signature Algorithm: sha256WithRSAEncryption 0c:6f:2f:58:82:a1:a3:1b:39:ba:1e:1f:08:e1:5f:56:d9:80: c7:92:0d:7b:bc:a9:df:5f:fb:3d:00:76:e7:bd:e7:80:43:98: a2:a2:f1:45:09:99:ed:47:3f:8a:12:37:73:4e:f2:41:49:e9: 90:54:5e:f6:f0:5d:0d:e9:41:aa:20:b7:e1:f4:93:dd:13:ed: 0b:f7:3c:1c:eb:f7:69:3e:75:2f:12:c9:fd:a9:6b:c0:a7:b7: 75:33:89:5d:57:67:be:f4:a6:4d:b6:6d:18:1c:15:ea:e1:72: e4:55:b1:a9:ef:9e:b9:52:64:8c:8e:45:47:d9:1f:93:54:f7: 5f:8d:cd:a0:8e:5c:16:d8:99:83:d2:19:55:ed:d2:49:6b:76: df:00:0d:6c:dd:9d:37:89:07:f4:49:03:74:98:72:06:b0:eb: 99:a5:c6:9c:91:36:26:0e:65:a1:3c:ee:84:35:97:fa:f4:29: 34:64:c5:f9:84:b7:9d:a7:24:9b:8f:64:cb:1a:93:db:e0:67: e9:fa:b8:bd:af:be:2f:82:22:c8:29:36:85:48:a3:9b:36:68: e7:e0:ed:be:da:dd:56:a9:46:24:69:e6:39:2f:e2:fb:6c:81: 38:05:15:68:f4:b4:c4:9a:34:98:7c:3e:12:0e:e2:a6:02:d9: c0:36:2b:bc -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUOeX8GbKKLOZa2VAEB6Wxy9+gO2AwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTcyNFoX DTI3MDMwMzA2MjIyNFowMzExMC8GA1UEAxMoMjRCMDU3RDlCRjI5Q0Y1MTRBRTE5 MzMwQzc4QTNFQkIzMDBGMTJDNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMfHCStdMl0QGAGNrGjvKZMxAZ5C167IARIl/0RHYkNqJSto7miOmBhmkT50 KOTzB1m5u8DOAt6WhwX23Wcf1DBkaoZD6/QJRc908c2xWbmb0CTbyxYDDZnGUhds 0OC9xSf1LJ94dPpinidRO5lN1kXpnqzPO5b6TZVOxrGoKt17h11i5ChWQ5jw4his tZp0L3sLDPKHxCuAUjzxy68pguk2mLt5QEYyxiGJpTRykmXDJftJdZMbl1vEdEBi rUly5n1txootpIl7nK64sdhrAV3uubIL5ZGmMiSj+wZag+GIZCAcjqPFMuXxNrvf Mv+S44Ns0kJN0s0Q5LTWy8eyztkCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQksFfZ vynPUUrhkzDHij67MA8SxjAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDU0Ny5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK p2kwDQYJKoZIhvcNAQELBQADggEBAAxvL1iCoaMbOboeHwjhX1bZgMeSDXu8qd9f +z0Adue954BDmKKi8UUJme1HP4oSN3NO8kFJ6ZBUXvbwXQ3pQaogt+H0k90T7Qv3 PBzr92k+dS8Syf2pa8Cnt3UziV1XZ770pk22bRgcFerhcuRVsanvnrlSZIyORUfZ H5NU91+NzaCOXBbYmYPSGVXt0klrdt8ADWzdnTeJB/RJA3SYcgaw65mlxpyRNiYO ZaE87oQ1l/r0KTRkxfmEt52nJJuPZMsak9vgZ+n6uL2vvi+CIsgpNoVIo5s2aOfg 7b7a3VapRiRp5jkv4vtsgTgFFWj0tMSaNJh8PhIO4qYC2cA2K7w= -----END CERTIFICATE-----Generated at Sat Mar 28 11:41:51 2026 by rpki-client