$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144590.roa File: AS144590.roa (raw, json) Hash identifier: CxV/Y39f6hCPFORESmr14VauF/ZaRV4/sX35mBMVTH8= Subject key identifier: 5C:F0:01:41:56:10:34:B4:30:03:AF:B4:68:1E:19:DB:43:17:D8:9E Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 059FEFCCBA4704FE28D354B019F0E16C88374A7C Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144590.roa Signing time: Wed 04 Mar 2026 06:20:08 +0000 ROA not before: Wed 04 Mar 2026 06:15:08 +0000 ROA not after: Wed 03 Mar 2027 06:20:08 +0000 asID: 144590 IP address blocks: 240a:a794::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:9f:ef:cc:ba:47:04:fe:28:d3:54:b0:19:f0:e1:6c:88:37:4a:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:15:08 2026 GMT Not After : Mar 3 06:20:08 2027 GMT Subject: CN=5CF00141561034B43003AFB4681E19DB4317D89E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:e2:c9:b5:b0:36:c6:62:a6:88:fa:c5:14:d1: f9:3b:08:a1:0a:50:e4:21:7d:d2:07:b8:28:fc:51: 8d:db:03:ca:0c:2d:b3:92:0b:ea:ab:95:d3:8e:8c: 99:f8:a2:62:a3:29:96:85:f1:b1:31:d3:c6:c1:72: a0:d5:65:12:21:2f:8e:78:ad:dd:bb:36:b3:33:be: e8:1a:83:e2:2d:7c:65:bb:32:a5:7c:d4:85:0d:10: 14:de:03:16:4d:10:bc:9f:46:18:6b:c3:77:7f:50: a3:48:ce:ab:67:90:8d:58:20:f8:d9:7b:5a:c0:96: 47:43:fd:ef:b8:84:75:20:44:93:6a:17:72:10:fe: df:b1:4e:04:cb:53:81:fb:ee:4c:94:de:6c:c5:d2: 85:a3:61:df:f4:7b:04:2a:4e:a6:10:11:a1:19:c8: d8:2d:f1:d7:a4:a4:12:c9:00:5a:1a:07:2d:35:ad: 51:99:74:92:48:3a:aa:1b:82:6f:aa:96:a9:cd:75: d8:10:27:2d:4e:fc:40:33:c0:e0:23:90:6f:09:06: e4:1a:66:ef:38:80:ea:1b:49:cf:98:a4:79:ab:46: f8:da:3c:3a:f4:e2:43:63:37:9d:2e:2f:8d:84:2a: 50:73:23:be:99:5d:6c:14:e3:5a:96:19:44:a6:68: aa:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:F0:01:41:56:10:34:B4:30:03:AF:B4:68:1E:19:DB:43:17:D8:9E X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144590.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a794::/32 Signature Algorithm: sha256WithRSAEncryption 74:ee:7a:11:03:00:01:9e:e2:f1:53:c5:36:85:fe:a8:ce:61: 62:42:e1:9f:5e:46:11:78:16:0b:98:41:55:cf:0b:95:ed:06: 3f:a4:b3:fe:5b:13:d8:57:7d:62:73:e5:8d:19:d5:32:fd:35: 9e:b3:0f:dd:10:61:f3:41:f8:9d:12:14:38:f9:55:58:4c:9a: 0d:2d:31:19:7a:d1:12:d3:86:57:30:e2:29:4c:b8:d0:e2:f0: 6d:ab:77:21:76:fc:28:4c:28:7b:1a:ac:53:fd:f0:fc:f6:f4: 9e:01:34:9b:c4:9f:c6:d4:51:72:a3:22:64:d7:36:bc:34:bf: 6c:55:2d:86:b8:8d:a0:a7:50:ed:be:dc:2b:9b:54:5a:4c:1b: 63:ad:93:9d:a5:ad:8f:35:10:c5:b1:99:52:42:10:0e:5c:60: a3:8d:55:4d:61:bc:42:ca:6b:54:3f:02:6f:bf:34:bd:c3:91: 63:b4:6c:68:10:ca:2d:1e:bb:97:20:b1:ad:5f:59:8f:ff:28: e9:d1:b3:09:7d:0f:d8:3e:97:2a:0f:6f:0e:f5:d9:65:af:21: 64:17:34:c5:80:63:e0:2f:56:06:ca:df:74:4c:8c:82:31:db: fb:5e:0f:b8:7d:1c:aa:9c:ea:3a:f4:4f:db:fd:70:0a:b0:05: a1:cc:38:a5 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUBZ/vzLpHBP4o01SwGfDhbIg3SnwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTUwOFoX DTI3MDMwMzA2MjAwOFowMzExMC8GA1UEAxMoNUNGMDAxNDE1NjEwMzRCNDMwMDNB RkI0NjgxRTE5REI0MzE3RDg5RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAN/iybWwNsZipoj6xRTR+TsIoQpQ5CF90ge4KPxRjdsDygwts5IL6quV046M mfiiYqMploXxsTHTxsFyoNVlEiEvjnit3bs2szO+6BqD4i18ZbsypXzUhQ0QFN4D Fk0QvJ9GGGvDd39Qo0jOq2eQjVgg+Nl7WsCWR0P977iEdSBEk2oXchD+37FOBMtT gfvuTJTebMXShaNh3/R7BCpOphARoRnI2C3x16SkEskAWhoHLTWtUZl0kkg6qhuC b6qWqc112BAnLU78QDPA4COQbwkG5Bpm7ziA6htJz5ikeatG+No8OvTiQ2M3nS4v jYQqUHMjvpldbBTjWpYZRKZoqtsCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRc8AFB VhA0tDADr7RoHhnbQxfYnjAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDU5MC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK p5QwDQYJKoZIhvcNAQELBQADggEBAHTuehEDAAGe4vFTxTaF/qjOYWJC4Z9eRhF4 FguYQVXPC5XtBj+ks/5bE9hXfWJz5Y0Z1TL9NZ6zD90QYfNB+J0SFDj5VVhMmg0t MRl60RLThlcw4ilMuNDi8G2rdyF2/ChMKHsarFP98Pz29J4BNJvEn8bUUXKjImTX Nrw0v2xVLYa4jaCnUO2+3CubVFpMG2Otk52lrY81EMWxmVJCEA5cYKONVU1hvELK a1Q/Am+/NL3DkWO0bGgQyi0eu5cgsa1fWY//KOnRswl9D9g+lyoPbw712WWvIWQX NMWAY+AvVgbK33RMjIIx2/teD7h9HKqc6jr0T9v9cAqwBaHMOKU= -----END CERTIFICATE-----Generated at Sat Mar 28 11:41:57 2026 by rpki-client