$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144553.roa File: AS144553.roa (raw, json) Hash identifier: 3sP9cUTK6hi3j4Ub70mGRnFJC+Gqjh5pXLJOyHJCLqo= Subject key identifier: 2D:9F:D1:36:AA:7D:E6:34:D0:50:78:7F:BF:87:69:52:6C:40:97:AF Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 45C1FD46E3A2CE2D124C9B9E2D5139F6EEB19E43 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144553.roa Signing time: Wed 04 Mar 2026 06:21:38 +0000 ROA not before: Wed 04 Mar 2026 06:16:38 +0000 ROA not after: Wed 03 Mar 2027 06:21:38 +0000 asID: 144553 IP address blocks: 240a:a76f::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:c1:fd:46:e3:a2:ce:2d:12:4c:9b:9e:2d:51:39:f6:ee:b1:9e:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:16:38 2026 GMT Not After : Mar 3 06:21:38 2027 GMT Subject: CN=2D9FD136AA7DE634D050787FBF8769526C4097AF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:1b:8e:4b:f2:5e:73:95:68:36:55:11:ba:a0: fe:36:b4:36:11:6a:60:2d:07:c7:bc:15:c2:c0:6c: e0:aa:c5:60:f0:79:33:34:1c:78:e1:1e:e4:61:de: 75:24:07:6a:a9:50:31:30:0c:89:76:cc:d2:70:ec: 3b:ef:c0:82:12:40:f4:e6:35:c4:f4:94:70:d6:0f: 5b:c5:ef:f1:44:3e:f0:4d:2b:96:91:ce:87:23:bf: b5:34:d3:6d:8e:38:1b:fe:1f:1c:07:b8:93:16:e2: 71:b9:d6:92:3a:76:81:d2:27:dc:3e:1f:ff:39:fa: f4:cd:62:32:d8:09:7f:f6:f0:e9:1d:62:4d:d3:41: 39:54:c9:07:94:29:7d:86:4a:2f:3a:c5:29:a5:01: a1:ea:ab:4e:39:76:f7:91:1c:20:03:4e:34:c7:65: af:85:17:7c:73:96:3e:10:0e:03:26:11:dc:28:3c: f2:e4:92:8f:21:32:30:64:8c:b5:34:55:f3:20:cc: 2e:0c:6a:9d:68:ff:73:cf:b2:17:41:7b:6d:d1:1e: 18:01:5d:e3:f8:30:14:a7:5f:33:b2:53:18:cb:36: 7d:d5:4d:eb:51:bd:50:87:0f:97:32:a9:ca:b5:13: 8d:a2:60:56:6f:10:d5:ca:ce:a6:61:03:f8:b0:f9: 72:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:9F:D1:36:AA:7D:E6:34:D0:50:78:7F:BF:87:69:52:6C:40:97:AF X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144553.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a76f::/32 Signature Algorithm: sha256WithRSAEncryption c4:64:f0:f2:38:7d:c7:ff:51:24:68:ce:95:95:8e:58:39:5b: 31:02:5e:c3:91:62:d6:e5:3f:2d:f3:2c:79:4d:09:3a:92:c6: 2a:ee:ab:4f:2f:eb:c9:62:72:5f:f3:39:9e:b2:25:24:30:bc: 16:d7:cd:e5:58:89:a8:13:13:82:75:b3:cb:01:9a:79:be:0c: 79:40:4b:3f:c3:01:60:aa:2d:a5:53:7d:8f:bb:11:7d:07:ca: 9e:7c:5a:e3:c6:27:a9:7a:78:ae:f8:8c:92:51:80:6d:37:35: bb:74:e5:2a:5b:0b:92:36:b1:13:3c:a1:dd:2e:dc:ae:d6:78: df:10:9b:69:5a:a3:81:bf:51:cd:8c:87:e2:6c:2d:b8:c2:57: a1:d3:33:01:ea:b1:98:ad:34:e4:23:e4:78:d7:6d:bf:36:c9: 75:ec:81:fe:2d:0d:7f:a2:0c:19:2e:ea:4c:91:7b:48:11:2e: be:ef:01:5d:85:af:12:dd:5a:ee:47:8d:2f:53:da:c7:95:41: f4:f0:3a:85:05:4d:14:70:9c:c5:70:95:3e:0e:ef:28:84:40: fe:cb:33:b5:db:0f:8d:16:49:a3:a4:67:31:dc:a8:ca:9d:c5: a5:bd:f6:cb:41:e4:7d:41:41:56:3e:9e:8d:9c:74:7c:c7:27: 7d:52:5d:69 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIURcH9RuOizi0STJueLVE59u6xnkMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTYzOFoX DTI3MDMwMzA2MjEzOFowMzExMC8GA1UEAxMoMkQ5RkQxMzZBQTdERTYzNEQwNTA3 ODdGQkY4NzY5NTI2QzQwOTdBRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMgbjkvyXnOVaDZVEbqg/ja0NhFqYC0Hx7wVwsBs4KrFYPB5MzQceOEe5GHe dSQHaqlQMTAMiXbM0nDsO+/AghJA9OY1xPSUcNYPW8Xv8UQ+8E0rlpHOhyO/tTTT bY44G/4fHAe4kxbicbnWkjp2gdIn3D4f/zn69M1iMtgJf/bw6R1iTdNBOVTJB5Qp fYZKLzrFKaUBoeqrTjl295EcIANONMdlr4UXfHOWPhAOAyYR3Cg88uSSjyEyMGSM tTRV8yDMLgxqnWj/c8+yF0F7bdEeGAFd4/gwFKdfM7JTGMs2fdVN61G9UIcPlzKp yrUTjaJgVm8Q1crOpmED+LD5cqMCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQtn9E2 qn3mNNBQeH+/h2lSbECXrzAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDU1My5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK p28wDQYJKoZIhvcNAQELBQADggEBAMRk8PI4fcf/USRozpWVjlg5WzECXsORYtbl Py3zLHlNCTqSxiruq08v68licl/zOZ6yJSQwvBbXzeVYiagTE4J1s8sBmnm+DHlA Sz/DAWCqLaVTfY+7EX0Hyp58WuPGJ6l6eK74jJJRgG03Nbt05SpbC5I2sRM8od0u 3K7WeN8Qm2lao4G/Uc2Mh+JsLbjCV6HTMwHqsZitNOQj5HjXbb82yXXsgf4tDX+i DBku6kyRe0gRLr7vAV2FrxLdWu5HjS9T2seVQfTwOoUFTRRwnMVwlT4O7yiEQP7L M7XbD40WSaOkZzHcqMqdxaW99stB5H1BQVY+no2cdHzHJ31SXWk= -----END CERTIFICATE-----Generated at Sat Mar 28 14:30:37 2026 by rpki-client