$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144607.roa File: AS144607.roa (raw, json) Hash identifier: eQI4tuKvKDOp6V6eqV81u+aBxbJ2fDofJza7+Mb0IXE= Subject key identifier: 76:7E:8E:8D:7C:DC:19:73:BA:16:0E:07:84:8D:6E:F7:1A:E1:1D:72 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 70794DCC7BC7EEE0A8007192D8F679C803358C92 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144607.roa Signing time: Wed 04 Mar 2026 06:22:24 +0000 ROA not before: Wed 04 Mar 2026 06:17:24 +0000 ROA not after: Wed 03 Mar 2027 06:22:24 +0000 asID: 144607 IP address blocks: 240a:a7a5::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:79:4d:cc:7b:c7:ee:e0:a8:00:71:92:d8:f6:79:c8:03:35:8c:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:17:24 2026 GMT Not After : Mar 3 06:22:24 2027 GMT Subject: CN=767E8E8D7CDC1973BA160E07848D6EF71AE11D72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:cb:92:a6:f4:40:0a:73:c6:08:fc:cc:c4:9e: 52:f5:de:b7:93:7f:e1:88:15:6e:9a:30:ff:2f:59: 2a:cc:c0:12:5f:69:be:fa:a4:bc:06:29:72:94:64: 3c:71:4d:ee:73:52:e9:db:c4:d3:af:59:1f:95:28: 40:f4:1f:60:6f:c9:fd:a7:e8:14:c3:46:3e:07:2a: 05:d5:29:d7:29:89:03:79:f7:ef:b9:49:dd:fa:19: 63:c4:7f:84:79:73:40:ae:7c:2b:a5:84:d0:a4:38: 6c:75:9e:60:06:cd:d3:db:a5:55:37:12:db:29:49: e5:3d:be:88:fe:54:13:89:0c:72:0b:b7:42:fb:d8: 3b:40:85:01:e5:69:a2:26:c5:f2:1f:30:dc:21:d4: f4:6d:ae:7c:6e:85:db:03:fa:13:69:a1:8e:8e:14: 2f:00:8a:72:86:45:4f:49:6c:81:d0:d6:76:4a:5e: d7:88:b8:9f:f6:29:31:20:e4:ab:da:d3:3f:be:61: ca:6a:96:8c:d7:91:d2:5f:04:22:95:5f:bb:c1:f9: 3b:68:f3:73:31:3a:41:93:a6:02:7a:b4:04:5d:98: d9:cc:c6:ad:5e:83:5a:1a:8e:90:86:19:dc:4a:17: b0:e2:39:47:39:e0:04:ea:90:e5:5c:81:80:a1:2b: 81:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:7E:8E:8D:7C:DC:19:73:BA:16:0E:07:84:8D:6E:F7:1A:E1:1D:72 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144607.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a7a5::/32 Signature Algorithm: sha256WithRSAEncryption 79:52:e6:48:c5:0d:27:74:66:a9:2f:0a:25:49:be:2e:79:9e: 9c:f0:35:78:12:ae:22:c5:7f:ac:4a:fe:fb:4f:2c:f3:e3:99: 39:0e:13:c8:87:72:69:0e:13:f5:f3:f6:ce:63:02:48:41:e8: 62:78:82:ab:85:a1:b5:df:91:da:d8:ec:14:7c:df:29:a5:eb: 32:34:c7:ae:7f:ff:70:5c:3d:10:aa:50:13:ee:f8:fe:df:be: c9:0b:e3:d7:e3:5e:91:43:fe:62:81:2c:86:31:ea:73:4b:3d: 7d:18:f2:93:96:b8:81:bf:15:e5:5d:be:c7:e3:b5:59:12:3d: 2d:0c:8b:c6:0c:c3:4c:20:e7:d2:7a:f1:33:3a:73:07:67:90: a3:89:a7:f1:29:44:94:80:5e:2d:41:61:48:a7:74:01:43:ea: ad:2f:aa:dc:fb:cb:41:49:05:93:41:f7:ae:79:8a:15:82:31: d2:e3:20:bd:39:24:d8:a2:bc:ce:78:22:f6:76:69:43:07:a6: b6:85:a6:e4:a8:ce:fe:94:e2:f5:89:f0:78:64:54:19:1d:98: 9b:ef:6b:3d:03:78:72:07:ef:64:1d:31:34:2c:3c:70:bf:06: 03:01:64:df:a5:f6:b6:ed:74:0c:ad:76:06:e1:f5:38:ff:cd: 01:cc:5f:f5 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUcHlNzHvH7uCoAHGS2PZ5yAM1jJIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTcyNFoX DTI3MDMwMzA2MjIyNFowMzExMC8GA1UEAxMoNzY3RThFOEQ3Q0RDMTk3M0JBMTYw RTA3ODQ4RDZFRjcxQUUxMUQ3MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAODLkqb0QApzxgj8zMSeUvXet5N/4YgVbpow/y9ZKszAEl9pvvqkvAYpcpRk PHFN7nNS6dvE069ZH5UoQPQfYG/J/afoFMNGPgcqBdUp1ymJA3n377lJ3foZY8R/ hHlzQK58K6WE0KQ4bHWeYAbN09ulVTcS2ylJ5T2+iP5UE4kMcgu3QvvYO0CFAeVp oibF8h8w3CHU9G2ufG6F2wP6E2mhjo4ULwCKcoZFT0lsgdDWdkpe14i4n/YpMSDk q9rTP75hymqWjNeR0l8EIpVfu8H5O2jzczE6QZOmAnq0BF2Y2czGrV6DWhqOkIYZ 3EoXsOI5RzngBOqQ5VyBgKErgfUCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBR2fo6N fNwZc7oWDgeEjW73GuEdcjAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDYwNy5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK p6UwDQYJKoZIhvcNAQELBQADggEBAHlS5kjFDSd0ZqkvCiVJvi55npzwNXgSriLF f6xK/vtPLPPjmTkOE8iHcmkOE/Xz9s5jAkhB6GJ4gquFobXfkdrY7BR83yml6zI0 x65//3BcPRCqUBPu+P7fvskL49fjXpFD/mKBLIYx6nNLPX0Y8pOWuIG/FeVdvsfj tVkSPS0Mi8YMw0wg59J68TM6cwdnkKOJp/EpRJSAXi1BYUindAFD6q0vqtz7y0FJ BZNB9655ihWCMdLjIL05JNiivM54IvZ2aUMHpraFpuSozv6U4vWJ8HhkVBkdmJvv az0DeHIH72QdMTQsPHC/BgMBZN+l9rbtdAytdgbh9Tj/zQHMX/U= -----END CERTIFICATE-----Generated at Sat Mar 28 11:45:11 2026 by rpki-client