$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144640.roa File: AS144640.roa (raw, json) Hash identifier: Jot/LZZjGepQBuy3IQVnsuN/7JzhvdzE6bJ7beyUlVc= Subject key identifier: 34:9D:46:D0:88:2A:4E:E4:6C:4B:0E:EC:BB:51:EA:CC:2D:5C:61:35 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 75BCA3C1E956829E1684CA519CC320DD727A090D Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144640.roa Signing time: Wed 04 Mar 2026 06:22:18 +0000 ROA not before: Wed 04 Mar 2026 06:17:18 +0000 ROA not after: Wed 03 Mar 2027 06:22:18 +0000 asID: 144640 IP address blocks: 240a:a7c6::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:bc:a3:c1:e9:56:82:9e:16:84:ca:51:9c:c3:20:dd:72:7a:09:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:17:18 2026 GMT Not After : Mar 3 06:22:18 2027 GMT Subject: CN=349D46D0882A4EE46C4B0EECBB51EACC2D5C6135 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:2b:01:b0:7e:4a:fc:a1:39:da:40:48:f2:27: cc:40:93:b5:8e:6d:9c:9d:12:9e:c9:db:3d:f7:fc: 35:b1:e8:94:17:32:c7:50:eb:a4:49:3d:43:70:8a: 91:18:cd:a6:55:98:02:57:af:62:51:3f:1e:12:f9: 8f:3b:6f:0f:92:fd:2f:28:41:47:ed:a3:77:55:ab: ae:d4:9d:27:2b:56:78:37:d6:54:69:e8:61:11:b0: 04:8a:43:da:89:f9:55:c7:19:e9:38:5e:44:0c:7d: b3:41:e8:76:a0:39:2f:e6:e7:90:c9:c3:cc:21:63: eb:4a:b8:de:cb:2c:3e:0f:91:a5:ec:11:3d:83:80: 0c:92:6b:73:55:e8:c3:e1:fe:d3:d7:81:f2:33:2e: 96:49:e6:3b:2a:8c:ad:14:f8:a8:93:c6:40:69:3c: 03:44:f6:c7:ec:1d:56:fd:01:8d:f9:75:89:0e:1e: 0f:15:62:d8:93:36:ec:ab:57:9f:2e:b0:76:9e:63: d7:2f:a5:c7:19:2f:07:91:6c:e5:79:d4:16:7c:98: da:29:42:0e:12:db:ba:84:15:5f:44:a3:54:ff:54: a5:21:b0:aa:08:c0:3c:76:1e:ca:1b:96:6a:e9:a9: 52:a2:df:44:e4:fb:d5:aa:47:33:31:27:1d:07:50: 3f:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:9D:46:D0:88:2A:4E:E4:6C:4B:0E:EC:BB:51:EA:CC:2D:5C:61:35 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144640.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a7c6::/32 Signature Algorithm: sha256WithRSAEncryption b0:8c:b1:78:a3:e8:d2:f7:10:4c:3b:74:2d:12:29:ee:52:77: cd:80:44:f1:37:8d:8d:c6:62:7d:2f:f2:de:0e:18:4b:fc:40: 7a:cb:64:d6:ff:c7:31:70:af:42:4c:d2:e8:5b:ed:12:41:75: 09:e9:50:2f:c8:ff:c8:25:84:f4:78:e4:ab:bf:57:b8:1a:fb: 1b:05:23:92:4a:21:c0:1d:52:c8:bf:de:e8:0a:a7:b1:3e:6c: 8f:d7:81:ff:73:49:00:e2:29:04:71:6e:b6:88:30:a5:77:81: 57:97:97:a4:8a:f5:0b:53:e0:c7:d8:63:27:eb:21:56:cd:e3: c4:8b:03:25:44:4e:10:07:ec:78:9e:75:91:71:93:33:f4:cb: 50:e3:f4:d7:11:2c:ce:f8:1f:8e:d0:7c:50:8f:ab:4b:4f:b0: 3d:f8:66:e9:49:03:05:ab:e3:55:70:90:19:23:14:da:82:f4: 2a:ed:2f:95:c4:bb:a1:eb:c0:86:65:51:69:47:16:0c:87:93: 15:0e:e8:e8:2b:d7:36:60:95:80:1d:56:ce:c8:ef:79:41:b5: 27:ca:a4:f7:7f:c0:7e:35:48:84:1b:a6:21:b5:3a:37:22:6d: 85:12:59:1b:88:a2:d2:16:99:bb:7a:66:f6:07:b1:d7:e0:82: c6:cb:25:f1 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUdbyjwelWgp4WhMpRnMMg3XJ6CQ0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTcxOFoX DTI3MDMwMzA2MjIxOFowMzExMC8GA1UEAxMoMzQ5RDQ2RDA4ODJBNEVFNDZDNEIw RUVDQkI1MUVBQ0MyRDVDNjEzNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKcrAbB+SvyhOdpASPInzECTtY5tnJ0SnsnbPff8NbHolBcyx1DrpEk9Q3CK kRjNplWYAlevYlE/HhL5jztvD5L9LyhBR+2jd1WrrtSdJytWeDfWVGnoYRGwBIpD 2on5VccZ6TheRAx9s0HodqA5L+bnkMnDzCFj60q43sssPg+RpewRPYOADJJrc1Xo w+H+09eB8jMulknmOyqMrRT4qJPGQGk8A0T2x+wdVv0Bjfl1iQ4eDxVi2JM27KtX ny6wdp5j1y+lxxkvB5Fs5XnUFnyY2ilCDhLbuoQVX0SjVP9UpSGwqgjAPHYeyhuW aumpUqLfROT71apHMzEnHQdQP28CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQ0nUbQ iCpO5GxLDuy7UerMLVxhNTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDY0MC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK p8YwDQYJKoZIhvcNAQELBQADggEBALCMsXij6NL3EEw7dC0SKe5Sd82ARPE3jY3G Yn0v8t4OGEv8QHrLZNb/xzFwr0JM0uhb7RJBdQnpUC/I/8glhPR45Ku/V7ga+xsF I5JKIcAdUsi/3ugKp7E+bI/Xgf9zSQDiKQRxbraIMKV3gVeXl6SK9QtT4MfYYyfr IVbN48SLAyVEThAH7HiedZFxkzP0y1Dj9NcRLM74H47QfFCPq0tPsD34ZulJAwWr 41VwkBkjFNqC9CrtL5XEu6HrwIZlUWlHFgyHkxUO6Ogr1zZglYAdVs7I73lBtSfK pPd/wH41SIQbpiG1OjcibYUSWRuIotIWmbt6ZvYHsdfggsbLJfE= -----END CERTIFICATE-----Generated at Sat Mar 28 11:41:39 2026 by rpki-client