$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144565.roa File: AS144565.roa (raw, json) Hash identifier: iytjBqq7utS6DoBew1oM7LBpwNoq4AHEUuFbS1R4dEA= Subject key identifier: BE:B4:17:B6:A9:9F:0D:89:8A:6A:5E:6F:12:AA:AC:12:5E:8C:B5:5D Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 49109EF000673A57557F6946B941EB8C0FDDDA2C Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144565.roa Signing time: Wed 04 Mar 2026 06:19:28 +0000 ROA not before: Wed 04 Mar 2026 06:14:28 +0000 ROA not after: Wed 03 Mar 2027 06:19:28 +0000 asID: 144565 IP address blocks: 240a:a77b::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:10:9e:f0:00:67:3a:57:55:7f:69:46:b9:41:eb:8c:0f:dd:da:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:14:28 2026 GMT Not After : Mar 3 06:19:28 2027 GMT Subject: CN=BEB417B6A99F0D898A6A5E6F12AAAC125E8CB55D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:59:28:ab:27:6f:da:96:a0:65:3f:25:e6:14: 0d:d5:49:a3:70:de:05:5d:10:b0:95:55:a8:80:05: 9e:27:75:2f:90:aa:79:c2:7b:29:9c:0d:20:cd:ed: 76:13:67:20:dd:85:e6:03:75:20:af:e0:4a:0e:1e: 42:42:c8:6d:3c:cc:a1:c3:1d:3c:1d:3a:84:46:21: 9e:f1:3e:4b:cf:44:e4:ca:cf:78:69:11:67:ea:1e: b8:2b:72:60:ae:25:9e:67:e4:6c:c7:f1:d3:ad:bc: 58:0f:a8:6d:79:d5:fd:09:86:14:1a:5d:dd:89:6a: 97:83:5d:10:16:9d:d3:7f:aa:c3:04:b7:db:47:17: 18:70:f1:ce:92:73:89:1e:8d:d9:7d:63:cb:fa:08: d1:89:a2:b6:f3:c8:ee:89:3e:cc:52:41:79:75:e6: ef:32:58:7d:07:39:5b:b9:45:e8:5f:e5:79:02:d3: 46:b5:7b:52:67:14:e7:b6:f0:6b:c6:ae:2e:fc:af: e5:b9:84:87:dc:b3:11:f9:94:e6:32:4b:ba:9c:ed: 81:3d:dc:94:90:7e:86:57:75:c0:8c:9c:55:8f:57: 8a:71:d7:1a:ad:d0:2f:d0:e4:0d:79:43:14:0e:b7: 7e:4a:e1:06:99:7c:7d:07:7f:bb:bd:2a:10:36:08: 93:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:B4:17:B6:A9:9F:0D:89:8A:6A:5E:6F:12:AA:AC:12:5E:8C:B5:5D X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144565.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a77b::/32 Signature Algorithm: sha256WithRSAEncryption 5e:01:40:75:b7:35:81:a4:62:86:70:dc:a1:81:f4:97:62:76: d1:0b:7d:58:7d:7f:c6:09:1b:4b:dd:6f:af:7f:2f:55:a2:9f: 02:58:e1:e8:30:ad:b1:bf:fd:31:ff:49:e4:03:ae:02:28:e5: 7a:2f:3a:93:00:28:74:7a:35:b1:1a:54:5f:24:5a:a4:6a:67: 6b:c0:01:a6:a3:5a:fc:53:29:93:db:46:01:12:30:4f:d3:40: 07:3a:01:3c:91:b3:a4:b4:f1:96:90:70:a6:c4:bb:4b:a8:fb: cf:90:77:18:b7:4f:07:e0:2b:50:f5:2e:13:a3:f5:c5:64:52: 5f:e8:52:23:b7:34:90:17:7f:64:00:d1:0c:45:72:b2:65:9a: 83:77:62:7b:84:f0:9d:25:c0:f1:43:1b:9c:75:83:f3:e8:8b: 92:00:16:50:ab:2a:93:a1:99:2c:46:b6:e5:48:0d:ad:fc:50: 35:e0:a8:b6:4f:cb:f9:57:93:f3:89:78:60:85:06:92:a7:12: 9f:84:f3:7e:71:c9:2f:09:e6:ba:9b:6e:3b:81:cb:0e:8f:da: 68:c9:f3:c0:3d:3d:51:3d:bc:a6:43:8e:5f:34:a1:be:a9:b7: 56:1f:c8:8b:ec:91:7e:44:71:78:62:48:c7:f5:37:05:de:31: b3:0d:1f:1b -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUSRCe8ABnOldVf2lGuUHrjA/d2iwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTQyOFoX DTI3MDMwMzA2MTkyOFowMzExMC8GA1UEAxMoQkVCNDE3QjZBOTlGMEQ4OThBNkE1 RTZGMTJBQUFDMTI1RThDQjU1RDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANhZKKsnb9qWoGU/JeYUDdVJo3DeBV0QsJVVqIAFnid1L5CqecJ7KZwNIM3t dhNnIN2F5gN1IK/gSg4eQkLIbTzMocMdPB06hEYhnvE+S89E5MrPeGkRZ+oeuCty YK4lnmfkbMfx0628WA+obXnV/QmGFBpd3Ylql4NdEBad03+qwwS320cXGHDxzpJz iR6N2X1jy/oI0YmitvPI7ok+zFJBeXXm7zJYfQc5W7lF6F/leQLTRrV7UmcU57bw a8auLvyv5bmEh9yzEfmU5jJLupztgT3clJB+hld1wIycVY9XinHXGq3QL9DkDXlD FA63fkrhBpl8fQd/u70qEDYIk6UCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBS+tBe2 qZ8NiYpqXm8SqqwSXoy1XTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDU2NS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK p3swDQYJKoZIhvcNAQELBQADggEBAF4BQHW3NYGkYoZw3KGB9JdidtELfVh9f8YJ G0vdb69/L1WinwJY4egwrbG//TH/SeQDrgIo5XovOpMAKHR6NbEaVF8kWqRqZ2vA AaajWvxTKZPbRgESME/TQAc6ATyRs6S08ZaQcKbEu0uo+8+Qdxi3TwfgK1D1LhOj 9cVkUl/oUiO3NJAXf2QA0QxFcrJlmoN3YnuE8J0lwPFDG5x1g/Poi5IAFlCrKpOh mSxGtuVIDa38UDXgqLZPy/lXk/OJeGCFBpKnEp+E835xyS8J5rqbbjuByw6P2mjJ 88A9PVE9vKZDjl80ob6pt1YfyIvskX5EcXhiSMf1NwXeMbMNHxs= -----END CERTIFICATE-----Generated at Sat Mar 28 11:41:07 2026 by rpki-client