$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144578.roa File: AS144578.roa (raw, json) Hash identifier: I8KxcWbK984FZWBZf1+TV/eEYHS6H31eZ4Vje8Q/VjU= Subject key identifier: 00:5B:A8:90:5D:63:35:DE:7A:D6:B0:FD:4E:2B:7F:4F:09:73:81:AA Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 524267A447A6290BE900B2A483F80CF717B12362 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144578.roa Signing time: Wed 04 Mar 2026 06:19:49 +0000 ROA not before: Wed 04 Mar 2026 06:14:49 +0000 ROA not after: Wed 03 Mar 2027 06:19:49 +0000 asID: 144578 IP address blocks: 240a:a788::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:42:67:a4:47:a6:29:0b:e9:00:b2:a4:83:f8:0c:f7:17:b1:23:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:14:49 2026 GMT Not After : Mar 3 06:19:49 2027 GMT Subject: CN=005BA8905D6335DE7AD6B0FD4E2B7F4F097381AA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:ea:fe:c4:0b:a5:46:4e:9f:a0:b3:9c:fb:e1: 09:c7:31:21:3a:f6:e6:2a:39:68:16:2a:e3:45:44: f2:36:29:56:11:0d:0b:b3:3d:36:62:03:a9:d0:52: 4f:be:2d:30:96:e0:30:6f:be:3a:47:da:07:b5:5e: 32:5c:f0:8c:84:63:bc:e2:31:78:de:7e:c3:ce:36: 09:02:40:56:15:2f:43:db:4f:19:df:f1:c7:4e:ca: 2c:47:f6:2e:5d:e3:1e:41:57:e0:19:76:69:82:ca: 82:2b:56:03:f5:b5:d9:54:f6:07:dd:52:55:36:e9: 9b:af:98:84:84:18:08:c3:bb:40:8b:4b:c5:48:a1: 67:e8:37:ad:b1:cc:6b:0e:fa:9a:9e:01:45:4a:e4: 5e:0e:8e:ae:82:d7:51:9b:ef:0f:e2:7a:de:81:7d: a3:5f:54:2d:dc:c4:a3:20:f8:08:5c:f7:e8:b7:e3: 36:ce:25:e0:a4:0c:f7:37:c7:c0:5f:a0:1f:0f:7a: ae:be:54:b1:7e:17:35:d4:30:01:6d:68:43:bb:d6: f1:05:1c:be:06:b9:ce:d9:c1:0f:4a:2a:ca:c8:79: 4e:9b:2b:ff:25:d1:57:cc:17:5d:48:4a:2b:0a:98: 56:52:3b:3a:31:8e:b4:7f:6e:1e:f0:ec:fc:da:bf: 18:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:5B:A8:90:5D:63:35:DE:7A:D6:B0:FD:4E:2B:7F:4F:09:73:81:AA X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144578.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a788::/32 Signature Algorithm: sha256WithRSAEncryption d6:15:20:92:ef:77:82:5b:f9:c0:f8:3b:16:b5:a5:9c:9d:1b: 68:cb:2f:0d:b3:3e:9f:6e:4e:9c:03:24:0b:17:56:d0:f8:ba: 33:36:e8:e0:4f:7c:b5:2a:58:cb:5f:ed:be:b7:a1:8d:f4:cd: 03:3e:51:61:50:2b:31:7f:b7:0c:e0:44:a0:8c:db:d3:24:d9: c8:4a:c3:fb:f9:59:70:d9:62:1e:c1:8d:b9:fe:6e:e0:f2:2e: b7:cb:4f:2a:5e:1e:de:1b:c9:92:4a:00:17:3e:d8:90:46:65: ee:ad:0a:b9:e2:3b:97:b1:8a:5e:fe:74:ac:8e:84:98:87:02: ea:07:4a:ef:2d:66:6a:1b:57:90:f7:69:d2:5e:d5:a7:d8:56: 3b:3c:a2:61:59:6f:31:e9:08:22:3f:cc:c3:f3:d3:49:2e:ea: 92:1d:50:4f:b3:80:b2:24:72:82:69:61:7e:28:03:a5:93:ea: 00:eb:a6:09:a2:50:ff:a0:9e:dc:ee:4c:7f:8a:18:b3:df:a6: 21:5f:98:3c:48:ed:39:7f:b3:67:4d:4d:49:43:1f:0e:10:b0: 81:69:65:7b:fc:4b:d8:9d:51:66:c3:30:8a:a6:8a:a2:cd:13: 54:8e:27:af:53:f0:79:06:d4:33:77:8d:e8:1f:17:37:5d:cc: f2:59:7f:f0 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUUkJnpEemKQvpALKkg/gM9xexI2IwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTQ0OVoX DTI3MDMwMzA2MTk0OVowMzExMC8GA1UEAxMoMDA1QkE4OTA1RDYzMzVERTdBRDZC MEZENEUyQjdGNEYwOTczODFBQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKvq/sQLpUZOn6CznPvhCccxITr25io5aBYq40VE8jYpVhENC7M9NmIDqdBS T74tMJbgMG++OkfaB7VeMlzwjIRjvOIxeN5+w842CQJAVhUvQ9tPGd/xx07KLEf2 Ll3jHkFX4Bl2aYLKgitWA/W12VT2B91SVTbpm6+YhIQYCMO7QItLxUihZ+g3rbHM aw76mp4BRUrkXg6OroLXUZvvD+J63oF9o19ULdzEoyD4CFz36LfjNs4l4KQM9zfH wF+gHw96rr5UsX4XNdQwAW1oQ7vW8QUcvga5ztnBD0oqysh5Tpsr/yXRV8wXXUhK KwqYVlI7OjGOtH9uHvDs/Nq/GDECAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQAW6iQ XWM13nrWsP1OK39PCXOBqjAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDU3OC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK p4gwDQYJKoZIhvcNAQELBQADggEBANYVIJLvd4Jb+cD4Oxa1pZydG2jLLw2zPp9u TpwDJAsXVtD4ujM26OBPfLUqWMtf7b63oY30zQM+UWFQKzF/twzgRKCM29Mk2chK w/v5WXDZYh7Bjbn+buDyLrfLTypeHt4byZJKABc+2JBGZe6tCrniO5exil7+dKyO hJiHAuoHSu8tZmobV5D3adJe1afYVjs8omFZbzHpCCI/zMPz00ku6pIdUE+zgLIk coJpYX4oA6WT6gDrpgmiUP+gntzuTH+KGLPfpiFfmDxI7Tl/s2dNTUlDHw4QsIFp ZXv8S9idUWbDMIqmiqLNE1SOJ69T8HkG1DN3jegfFzddzPJZf/A= -----END CERTIFICATE-----Generated at Sat Mar 28 11:45:33 2026 by rpki-client