$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144643.roa File: AS144643.roa (raw, json) Hash identifier: ZWaQuxLQbv9YyyHW9g90kMQTqU0LfZ3gyL/1BtVi/dM= Subject key identifier: AE:CF:28:C4:B5:09:0E:EC:62:D0:E1:69:CE:34:E1:D4:65:F1:E5:1C Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 163F9D4309408E16953F37AB331EB5ACA6C0A76E Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144643.roa Signing time: Wed 04 Mar 2026 06:22:04 +0000 ROA not before: Wed 04 Mar 2026 06:17:04 +0000 ROA not after: Wed 03 Mar 2027 06:22:04 +0000 asID: 144643 IP address blocks: 240a:a7c9::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:3f:9d:43:09:40:8e:16:95:3f:37:ab:33:1e:b5:ac:a6:c0:a7:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:17:04 2026 GMT Not After : Mar 3 06:22:04 2027 GMT Subject: CN=AECF28C4B5090EEC62D0E169CE34E1D465F1E51C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:cb:36:c0:02:16:54:fc:ed:a6:80:17:42:00: b6:6b:f5:2e:ee:43:23:0e:8b:67:d0:aa:b7:04:e1: 49:b4:da:b0:d3:d7:ae:fa:76:7c:52:4d:11:5d:33: 54:13:32:5c:9f:3c:f6:88:cd:7b:16:d0:a2:a4:7d: 2d:11:5c:a7:c4:78:b9:0c:7b:c3:e7:eb:86:8e:f6: 95:74:8f:68:29:2c:b6:3e:07:c9:59:e1:ef:c9:f8: 86:91:53:ce:d9:2c:4e:a8:23:53:39:64:08:24:b7: b2:8b:7d:34:89:88:e4:eb:58:ad:84:f1:a1:1a:b4: 00:d2:aa:a9:a6:c6:f0:31:1c:b3:e5:d8:52:32:29: 18:49:b6:f5:eb:cc:fb:50:38:3c:16:4f:c0:5e:95: f6:cb:25:06:3f:8f:dc:ff:01:37:97:a1:9e:9b:96: 99:e3:8c:8d:b4:7c:c5:83:b4:07:d2:71:c5:03:47: 03:c5:ca:d9:39:2f:13:23:6a:df:ae:6b:90:75:64: 18:91:df:30:46:76:23:c2:87:27:56:5b:2d:0a:49: 69:4c:87:43:1a:a7:ce:f4:d7:13:b4:a8:c3:8a:42: e8:fa:80:f0:ec:3c:6a:c1:08:37:77:7c:9d:5b:57: 69:79:69:f5:8c:45:ea:d3:24:ed:31:ad:17:1c:08: 72:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:CF:28:C4:B5:09:0E:EC:62:D0:E1:69:CE:34:E1:D4:65:F1:E5:1C X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144643.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a7c9::/32 Signature Algorithm: sha256WithRSAEncryption 41:d8:ad:fe:81:23:54:1d:f2:72:03:08:14:44:20:59:f4:85: 86:38:98:b8:4c:c3:ef:51:c2:17:9a:06:9c:81:cb:8d:cd:21: f7:3a:54:de:cd:28:cf:67:23:ed:74:da:e5:08:0b:33:40:e6: 20:c1:99:4b:d6:7d:b5:f5:04:7b:c3:4f:df:9a:d4:00:75:7f: ba:7f:38:8b:01:9e:5d:22:97:b0:c4:5c:90:86:dd:fd:68:2c: 1e:c6:dd:88:85:17:31:6b:55:be:78:b5:63:f7:f8:46:ea:7d: bf:6e:09:9a:16:87:30:cf:7b:12:49:3c:36:1e:25:43:3c:be: 3c:22:4c:df:54:02:99:d4:e8:13:69:50:b9:d4:1e:34:61:a4: 5c:3e:d6:e8:3b:3a:f1:23:ea:df:61:90:ad:b2:63:0e:fc:dc: d9:bc:47:17:2c:3d:c3:c2:b2:7c:e8:7d:12:09:4f:ab:8c:5e: bc:3e:cb:a9:a6:0f:19:ce:81:99:cb:32:d0:8a:40:b7:0a:9d: 1e:c9:1d:30:2d:81:e6:79:da:fd:3d:36:ff:40:f5:bb:62:ef: d4:e6:a5:e2:26:bb:52:47:69:df:84:c3:da:cb:9f:55:f9:6e: 34:15:b3:b0:05:c5:a8:be:0c:ef:7e:75:66:87:76:f2:ba:90: 3f:fd:3e:2d -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUFj+dQwlAjhaVPzerMx61rKbAp24wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTcwNFoX DTI3MDMwMzA2MjIwNFowMzExMC8GA1UEAxMoQUVDRjI4QzRCNTA5MEVFQzYyRDBF MTY5Q0UzNEUxRDQ2NUYxRTUxQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJjLNsACFlT87aaAF0IAtmv1Lu5DIw6LZ9CqtwThSbTasNPXrvp2fFJNEV0z VBMyXJ889ojNexbQoqR9LRFcp8R4uQx7w+frho72lXSPaCkstj4HyVnh78n4hpFT ztksTqgjUzlkCCS3sot9NImI5OtYrYTxoRq0ANKqqabG8DEcs+XYUjIpGEm29evM +1A4PBZPwF6V9sslBj+P3P8BN5ehnpuWmeOMjbR8xYO0B9JxxQNHA8XK2TkvEyNq 365rkHVkGJHfMEZ2I8KHJ1ZbLQpJaUyHQxqnzvTXE7Sow4pC6PqA8Ow8asEIN3d8 nVtXaXlp9YxF6tMk7TGtFxwIci8CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSuzyjE tQkO7GLQ4WnONOHUZfHlHDAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDY0My5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK p8kwDQYJKoZIhvcNAQELBQADggEBAEHYrf6BI1Qd8nIDCBREIFn0hYY4mLhMw+9R wheaBpyBy43NIfc6VN7NKM9nI+102uUICzNA5iDBmUvWfbX1BHvDT9+a1AB1f7p/ OIsBnl0il7DEXJCG3f1oLB7G3YiFFzFrVb54tWP3+Ebqfb9uCZoWhzDPexJJPDYe JUM8vjwiTN9UApnU6BNpULnUHjRhpFw+1ug7OvEj6t9hkK2yYw783Nm8RxcsPcPC snzofRIJT6uMXrw+y6mmDxnOgZnLMtCKQLcKnR7JHTAtgeZ52v09Nv9A9bti79Tm peImu1JHad+Ew9rLn1X5bjQVs7AFxai+DO9+dWaHdvK6kD/9Pi0= -----END CERTIFICATE-----Generated at Sat Mar 28 13:13:23 2026 by rpki-client