$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144603.roa File: AS144603.roa (raw, json) Hash identifier: jM2CpWDL8tJGAED7/TST+h+W5Zr8t3iMncm39VpCnZw= Subject key identifier: F7:C6:AB:76:5E:DC:53:14:02:58:69:86:66:19:98:84:A7:02:14:AF Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 3732FB772752F1D80480B462082C1B1E9D301AB6 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144603.roa Signing time: Wed 04 Mar 2026 06:21:07 +0000 ROA not before: Wed 04 Mar 2026 06:16:07 +0000 ROA not after: Wed 03 Mar 2027 06:21:07 +0000 asID: 144603 IP address blocks: 240a:a7a1::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:32:fb:77:27:52:f1:d8:04:80:b4:62:08:2c:1b:1e:9d:30:1a:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:16:07 2026 GMT Not After : Mar 3 06:21:07 2027 GMT Subject: CN=F7C6AB765EDC53140258698666199884A70214AF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:9d:f2:d8:da:40:4c:d5:76:d9:35:72:07:6e: 3c:71:29:e5:4f:42:10:0a:79:08:c1:3e:79:95:3b: 4a:76:3f:b9:f6:b6:48:e2:70:dc:bb:38:d9:40:ff: dc:bf:49:27:8e:30:5b:a4:67:bb:ba:86:95:58:11: 6a:fc:8d:56:4d:01:cb:85:57:34:56:85:96:0f:ef: 94:2a:a5:11:7f:67:61:69:20:58:70:ce:d8:68:35: c9:6a:c5:c8:c0:e7:7f:49:de:8c:86:7f:07:71:af: f6:0d:64:d3:8c:4f:c1:2e:de:d6:59:de:cc:31:23: 03:96:df:a2:d4:de:06:93:95:db:e6:61:06:76:90: d5:07:89:26:fa:e2:e4:70:59:f3:2c:e6:c8:2e:2b: 51:14:bb:4a:86:12:1d:44:aa:86:b0:6a:df:cb:6f: df:45:77:7a:24:12:3f:24:75:42:62:5d:88:e0:51: 80:f3:5c:a3:27:9d:43:72:d0:bf:47:13:1c:7b:c5: dd:e4:86:f6:4e:47:fb:bb:1e:f0:22:56:ec:48:60: 62:57:9b:ee:87:cb:0c:fe:e3:7d:d0:63:0c:8a:9d: e0:1c:e6:11:8a:a1:51:27:f5:8d:86:e2:17:9c:4a: d8:42:ef:e1:09:2c:86:4f:eb:99:e5:d7:1c:95:1f: 1e:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:C6:AB:76:5E:DC:53:14:02:58:69:86:66:19:98:84:A7:02:14:AF X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144603.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a7a1::/32 Signature Algorithm: sha256WithRSAEncryption b1:6f:1b:d6:12:8a:5d:2d:04:28:1b:58:b2:3d:91:76:74:01: 4b:22:62:a4:3c:68:0e:4a:23:33:f2:cf:14:11:d7:5f:63:dc: a3:aa:99:94:a5:07:52:8d:43:7f:c2:ec:12:cc:0f:41:a5:27: 82:9d:f8:5c:95:7c:23:e2:1f:e7:c9:bf:d6:eb:f4:10:11:9b: ac:ef:01:6f:2f:33:ef:32:48:99:64:88:fb:f1:a0:ec:85:25: 34:ec:49:9b:56:77:38:f1:b1:bc:c3:72:82:8b:a0:ef:ae:bf: cf:09:b1:6c:e9:11:98:52:f7:c6:f1:a9:3d:4d:26:80:f2:73: 66:85:1c:a9:b9:81:f3:80:05:08:ae:02:09:0b:d1:97:38:b2: 13:ee:b1:17:ff:0b:82:91:9d:1e:de:33:f1:1e:12:fc:0a:cb: 1e:54:a3:cc:1b:30:53:64:db:43:46:d1:a1:db:ad:a0:fe:ad: 17:2b:48:ea:b2:67:cf:6a:08:b8:f4:60:b0:12:96:d6:b6:90: 8e:bd:2f:1d:35:ee:e4:19:cc:91:2d:da:c7:ff:76:6b:ff:8c: ed:e7:68:14:ae:ec:1c:22:53:1e:13:ae:07:25:dd:d3:75:92: 04:8c:1f:71:3c:fb:01:db:ee:f3:86:53:56:29:b5:27:33:b4: f3:5d:8c:4d -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUNzL7dydS8dgEgLRiCCwbHp0wGrYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTYwN1oX DTI3MDMwMzA2MjEwN1owMzExMC8GA1UEAxMoRjdDNkFCNzY1RURDNTMxNDAyNTg2 OTg2NjYxOTk4ODRBNzAyMTRBRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKWd8tjaQEzVdtk1cgduPHEp5U9CEAp5CME+eZU7SnY/ufa2SOJw3Ls42UD/ 3L9JJ44wW6Rnu7qGlVgRavyNVk0By4VXNFaFlg/vlCqlEX9nYWkgWHDO2Gg1yWrF yMDnf0nejIZ/B3Gv9g1k04xPwS7e1lnezDEjA5bfotTeBpOV2+ZhBnaQ1QeJJvri 5HBZ8yzmyC4rURS7SoYSHUSqhrBq38tv30V3eiQSPyR1QmJdiOBRgPNcoyedQ3LQ v0cTHHvF3eSG9k5H+7se8CJW7EhgYleb7ofLDP7jfdBjDIqd4BzmEYqhUSf1jYbi F5xK2ELv4Qkshk/rmeXXHJUfHs0CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBT3xqt2 XtxTFAJYaYZmGZiEpwIUrzAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDYwMy5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK p6EwDQYJKoZIhvcNAQELBQADggEBALFvG9YSil0tBCgbWLI9kXZ0AUsiYqQ8aA5K IzPyzxQR119j3KOqmZSlB1KNQ3/C7BLMD0GlJ4Kd+FyVfCPiH+fJv9br9BARm6zv AW8vM+8ySJlkiPvxoOyFJTTsSZtWdzjxsbzDcoKLoO+uv88JsWzpEZhS98bxqT1N JoDyc2aFHKm5gfOABQiuAgkL0Zc4shPusRf/C4KRnR7eM/EeEvwKyx5Uo8wbMFNk 20NG0aHbraD+rRcrSOqyZ89qCLj0YLASlta2kI69Lx017uQZzJEt2sf/dmv/jO3n aBSu7BwiUx4Trgcl3dN1kgSMH3E8+wHb7vOGU1YptScztPNdjE0= -----END CERTIFICATE-----Generated at Sat Mar 28 13:10:26 2026 by rpki-client