$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144571.roa File: AS144571.roa (raw, json) Hash identifier: QWrLM7tJ+fDpvAMsZunh0ni70WIESEvuUWzi9CV3w3A= Subject key identifier: F1:9B:C1:69:C9:BC:E5:F2:EA:EA:59:17:05:63:4C:06:5A:B3:2C:E2 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 62B53D74E41B784EEBCA623C7424F3C265C97508 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144571.roa Signing time: Wed 04 Mar 2026 06:19:19 +0000 ROA not before: Wed 04 Mar 2026 06:14:19 +0000 ROA not after: Wed 03 Mar 2027 06:19:19 +0000 asID: 144571 IP address blocks: 240a:a781::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:b5:3d:74:e4:1b:78:4e:eb:ca:62:3c:74:24:f3:c2:65:c9:75:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:14:19 2026 GMT Not After : Mar 3 06:19:19 2027 GMT Subject: CN=F19BC169C9BCE5F2EAEA591705634C065AB32CE2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:06:35:6c:39:4e:6a:ee:ef:a5:ad:ed:33:87: cf:3c:b5:dd:0b:a5:01:db:94:44:7d:54:bd:48:d8: f5:a7:5f:42:42:9e:cc:93:76:eb:14:ca:95:d7:f2: cf:9e:c9:4b:ce:7e:b5:18:6e:50:1c:c6:da:f3:8b: c1:ae:1e:b6:6e:57:5a:0f:33:1a:22:70:2f:98:59: 67:8d:46:35:9d:06:c5:b6:58:5d:b6:fc:f4:63:a9: d1:21:5d:e0:58:f8:55:31:f6:66:99:b4:f0:f3:16: 88:28:e8:08:c8:bb:e9:7e:0c:1f:11:e2:a9:6c:2d: da:62:c6:d5:34:5b:ae:22:87:7e:76:4b:7d:3e:77: db:1c:b8:38:87:ae:2d:5a:8f:66:8b:1d:9a:61:86: 3d:c6:85:1a:11:d3:dc:a2:3b:f0:d6:8e:db:d4:45: 02:83:a0:d0:13:37:29:15:8a:29:55:9f:e5:35:c5: 4e:e9:5a:68:18:ed:f7:03:a2:bb:15:3b:e9:2b:6d: 92:2c:3a:9e:08:d0:de:48:9f:00:0e:41:77:33:d4: 5d:63:50:cf:c5:ce:89:23:1c:35:0a:e2:a5:d5:ac: 37:f9:75:dd:fa:27:cc:0a:7a:10:b0:b4:af:c9:61: 12:c7:30:9e:e4:84:19:29:d3:cf:c9:b9:1f:3a:3d: 5f:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:9B:C1:69:C9:BC:E5:F2:EA:EA:59:17:05:63:4C:06:5A:B3:2C:E2 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144571.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a781::/32 Signature Algorithm: sha256WithRSAEncryption 2b:79:ad:73:6c:ae:23:7e:a8:cb:cd:96:b7:20:df:78:16:d4: ee:83:8b:b0:af:a3:bd:21:d6:23:ce:7d:3b:bb:0d:29:6b:8c: 38:36:62:c8:cd:dd:29:2a:7a:46:38:09:51:4d:e4:94:0a:fd: 4f:e2:b4:7a:ab:71:91:e6:75:f1:3d:5b:79:2f:de:83:40:23: 57:69:46:d9:22:fe:bb:80:1f:58:04:4c:08:f6:06:5b:6a:9f: 3b:90:e5:f3:88:bd:a5:26:a9:c7:b7:c3:0e:75:9c:7b:3f:42: b2:12:2e:02:db:47:df:9a:df:3b:27:ad:4e:36:4f:1e:06:6d: 11:92:4f:4e:1d:25:58:58:4d:82:db:fb:61:51:21:a1:8b:23: 17:81:7f:e2:61:3a:e7:11:53:8f:6c:a6:66:80:9a:52:a7:24: 66:9f:af:d1:74:f7:31:9b:46:a3:01:e1:81:36:e1:74:9e:46: d1:22:1c:18:70:8a:8e:e0:a2:9b:10:9b:1c:12:c6:c3:40:d7: 75:a3:ff:88:32:df:e5:92:9b:80:40:89:c7:7f:17:eb:e4:48: b0:dd:12:1e:9f:ba:54:7b:29:1b:67:91:8a:b1:f1:e5:92:7f: 52:87:06:9f:6f:64:53:e4:a8:46:21:ee:e0:9e:8f:f6:aa:77: f9:c9:32:4e -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUYrU9dOQbeE7rymI8dCTzwmXJdQgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTQxOVoX DTI3MDMwMzA2MTkxOVowMzExMC8GA1UEAxMoRjE5QkMxNjlDOUJDRTVGMkVBRUE1 OTE3MDU2MzRDMDY1QUIzMkNFMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAIYGNWw5Tmru76Wt7TOHzzy13QulAduURH1UvUjY9adfQkKezJN26xTKldfy z57JS85+tRhuUBzG2vOLwa4etm5XWg8zGiJwL5hZZ41GNZ0GxbZYXbb89GOp0SFd 4Fj4VTH2Zpm08PMWiCjoCMi76X4MHxHiqWwt2mLG1TRbriKHfnZLfT532xy4OIeu LVqPZosdmmGGPcaFGhHT3KI78NaO29RFAoOg0BM3KRWKKVWf5TXFTulaaBjt9wOi uxU76Sttkiw6ngjQ3kifAA5BdzPUXWNQz8XOiSMcNQripdWsN/l13fonzAp6ELC0 r8lhEscwnuSEGSnTz8m5Hzo9XyUCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBTxm8Fp ybzl8urqWRcFY0wGWrMs4jAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDU3MS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK p4EwDQYJKoZIhvcNAQELBQADggEBACt5rXNsriN+qMvNlrcg33gW1O6Di7Cvo70h 1iPOfTu7DSlrjDg2YsjN3SkqekY4CVFN5JQK/U/itHqrcZHmdfE9W3kv3oNAI1dp Rtki/ruAH1gETAj2BltqnzuQ5fOIvaUmqce3ww51nHs/QrISLgLbR9+a3zsnrU42 Tx4GbRGST04dJVhYTYLb+2FRIaGLIxeBf+JhOucRU49spmaAmlKnJGafr9F09zGb RqMB4YE24XSeRtEiHBhwio7gopsQmxwSxsNA13Wj/4gy3+WSm4BAicd/F+vkSLDd Eh6fulR7KRtnkYqx8eWSf1KHBp9vZFPkqEYh7uCej/aqd/nJMk4= -----END CERTIFICATE-----Generated at Sat Mar 28 11:42:18 2026 by rpki-client