$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144631.roa File: AS144631.roa (raw, json) Hash identifier: ZBZh3p2gotQhqloXfPcCho4C4c0stEnxsUqHBpxo+QY= Subject key identifier: 99:76:A3:B3:03:1E:DC:6D:AF:04:08:1C:89:A8:05:34:3B:FE:B9:04 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 5E1B9D348E3BDD68F40206B92D6B8A2AAEE41256 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144631.roa Signing time: Wed 04 Mar 2026 06:19:36 +0000 ROA not before: Wed 04 Mar 2026 06:14:36 +0000 ROA not after: Wed 03 Mar 2027 06:19:36 +0000 asID: 144631 IP address blocks: 240a:a7bd::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:1b:9d:34:8e:3b:dd:68:f4:02:06:b9:2d:6b:8a:2a:ae:e4:12:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:14:36 2026 GMT Not After : Mar 3 06:19:36 2027 GMT Subject: CN=9976A3B3031EDC6DAF04081C89A805343BFEB904 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:b0:6f:f6:12:ca:11:18:90:48:d4:74:4a:96: c8:e4:dc:51:25:1e:49:e3:23:b7:4d:ce:af:b1:37: 37:42:ea:93:6b:9f:e3:d2:6e:45:34:b5:2f:90:ac: cb:17:47:dd:83:dd:22:69:7e:1d:80:9d:65:fc:df: 79:7d:3a:ad:72:ab:66:51:c0:c9:b1:5d:21:76:7b: 57:81:cd:5a:39:77:90:58:d9:58:75:b9:85:64:8a: d9:c4:ca:50:25:e0:4e:f0:c4:67:86:b2:60:39:b8: e4:5d:3e:05:d9:5b:f4:13:22:14:39:12:08:40:43: d0:b1:55:27:73:a8:40:e8:ac:60:79:9c:65:3a:4d: 9e:7f:57:0b:d9:7a:7d:a6:3b:54:08:d5:46:7f:80: 0b:e3:5c:7e:f0:0a:6f:b6:d5:af:40:f1:1a:85:2d: 91:1f:bf:f7:c4:2a:8e:15:e0:26:e4:17:f0:62:93: 8d:4a:52:85:f4:b9:2a:13:8d:02:ed:f5:d3:0e:1a: 0f:c1:f1:67:7d:56:03:a2:67:3a:11:09:f9:1a:6e: 53:a8:43:de:bc:f8:19:23:eb:8a:37:bb:9a:2c:1b: c5:6b:59:e8:74:a8:74:a0:f5:c0:29:56:ee:d5:50: de:8b:b1:26:bc:92:e2:c1:4a:4f:4f:42:68:51:be: 06:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:76:A3:B3:03:1E:DC:6D:AF:04:08:1C:89:A8:05:34:3B:FE:B9:04 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144631.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a7bd::/32 Signature Algorithm: sha256WithRSAEncryption 3e:49:e4:04:e2:d3:d1:63:98:19:e7:1f:9d:28:73:a4:f9:86: 81:ca:2b:15:76:77:8b:a4:a1:f1:a7:aa:6d:46:83:ea:6b:28: 81:fa:71:9e:e1:70:48:e7:b8:27:43:24:c2:a6:44:15:e8:50: cd:92:af:5e:bb:f8:0c:93:ee:6d:7e:0d:af:d9:b0:21:b3:ff: d8:9b:c2:ef:d8:12:a2:d8:90:96:36:9a:a7:be:1c:37:ab:d0: b0:36:12:0c:e6:58:d3:04:ef:7b:de:fb:5d:ab:b5:04:49:9a: 88:36:87:b0:4e:d3:28:04:b8:5b:1a:b2:0f:bc:ac:6c:0b:32: 1c:0b:55:f3:a4:5b:72:78:88:c7:3d:da:fd:81:a1:c1:a7:40: 70:fb:9c:da:30:33:df:15:cf:28:3b:4a:2d:91:c0:be:2e:df: 88:7c:68:4d:e6:dc:e0:69:76:eb:8d:af:13:48:8e:0e:64:16: 1a:6b:be:22:c3:f0:a4:ae:76:18:d3:eb:9a:eb:7f:4e:42:4f: 55:53:d5:98:78:dc:2a:c2:cd:a8:46:7a:a4:b0:94:e2:dd:00: a6:4c:5e:46:df:22:29:b4:ed:29:2f:1f:29:cb:d6:a0:61:79: 55:f2:1b:19:84:8c:ee:77:46:b3:54:d3:28:53:7c:6f:b8:4f: 60:98:c1:48 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUXhudNI473Wj0Aga5LWuKKq7kElYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTQzNloX DTI3MDMwMzA2MTkzNlowMzExMC8GA1UEAxMoOTk3NkEzQjMwMzFFREM2REFGMDQw ODFDODlBODA1MzQzQkZFQjkwNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMmwb/YSyhEYkEjUdEqWyOTcUSUeSeMjt03Or7E3N0Lqk2uf49JuRTS1L5Cs yxdH3YPdIml+HYCdZfzfeX06rXKrZlHAybFdIXZ7V4HNWjl3kFjZWHW5hWSK2cTK UCXgTvDEZ4ayYDm45F0+Bdlb9BMiFDkSCEBD0LFVJ3OoQOisYHmcZTpNnn9XC9l6 faY7VAjVRn+AC+NcfvAKb7bVr0DxGoUtkR+/98QqjhXgJuQX8GKTjUpShfS5KhON Au310w4aD8HxZ31WA6JnOhEJ+RpuU6hD3rz4GSPrije7miwbxWtZ6HSodKD1wClW 7tVQ3ouxJryS4sFKT09CaFG+BiECAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSZdqOz Ax7cba8ECByJqAU0O/65BDAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDYzMS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK p70wDQYJKoZIhvcNAQELBQADggEBAD5J5ATi09FjmBnnH50oc6T5hoHKKxV2d4uk ofGnqm1Gg+prKIH6cZ7hcEjnuCdDJMKmRBXoUM2Sr167+AyT7m1+Da/ZsCGz/9ib wu/YEqLYkJY2mqe+HDer0LA2EgzmWNME73ve+12rtQRJmog2h7BO0ygEuFsasg+8 rGwLMhwLVfOkW3J4iMc92v2BocGnQHD7nNowM98Vzyg7Si2RwL4u34h8aE3m3OBp duuNrxNIjg5kFhprviLD8KSudhjT65rrf05CT1VT1Zh43CrCzahGeqSwlOLdAKZM XkbfIim07SkvHynL1qBheVXyGxmEjO53RrNU0yhTfG+4T2CYwUg= -----END CERTIFICATE-----Generated at Sat Mar 28 11:46:20 2026 by rpki-client