$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144652.roa File: AS144652.roa (raw, json) Hash identifier: xIxYRe766dsGEJcG4jpMItGi7WhK6SIwp5vzJwKpAcw= Subject key identifier: 4A:CF:6A:FD:70:4E:D6:78:66:E8:64:E5:B2:AE:AB:88:0D:D6:CC:64 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 2B6A4E216018FC607477054316CE1B59D32F4F6F Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144652.roa Signing time: Wed 04 Mar 2026 06:22:00 +0000 ROA not before: Wed 04 Mar 2026 06:17:00 +0000 ROA not after: Wed 03 Mar 2027 06:22:00 +0000 asID: 144652 IP address blocks: 240a:a7d2::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:6a:4e:21:60:18:fc:60:74:77:05:43:16:ce:1b:59:d3:2f:4f:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:17:00 2026 GMT Not After : Mar 3 06:22:00 2027 GMT Subject: CN=4ACF6AFD704ED67866E864E5B2AEAB880DD6CC64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:88:dd:aa:16:af:8d:0f:e0:ba:db:29:3d:4a: 7d:55:03:e2:79:ac:e3:d9:ff:c2:1e:ab:df:a4:24: 0a:9b:53:9b:24:85:93:16:30:59:d5:01:03:48:92: ff:ca:5d:c1:a3:f6:3b:c8:03:6d:e1:16:02:0b:00: 75:c2:23:21:56:82:27:35:b9:64:ed:e0:5f:8d:64: 78:28:d8:70:d3:c2:17:5e:0e:0c:e5:c8:23:8d:4a: be:b8:0e:9f:19:d3:9c:0d:fa:39:e3:03:b4:bb:8b: 1d:a3:60:35:1a:92:54:b6:82:0d:fe:4d:65:fb:84: 6f:56:b0:75:3e:21:05:a5:b3:6d:46:de:fc:de:f1: 79:4e:de:c9:95:a5:e0:89:26:76:96:26:f3:d9:36: ce:bf:d4:8a:b5:4b:72:73:08:15:5d:60:c1:f3:ef: 2b:65:83:70:3b:bb:64:65:53:8d:86:8f:50:89:3c: 39:54:2d:12:7d:f9:6c:0d:4b:2d:17:d5:de:82:68: 61:47:ef:fe:8c:28:5d:04:79:97:0d:09:40:33:f9: 24:24:93:ef:75:0c:70:c9:99:25:56:cc:a3:fe:c3: 45:82:83:a0:f9:f2:08:e1:67:a0:40:b0:d5:d9:eb: d5:8c:c0:a3:ad:f8:08:2b:82:f6:4b:71:27:7c:e2: 88:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:CF:6A:FD:70:4E:D6:78:66:E8:64:E5:B2:AE:AB:88:0D:D6:CC:64 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144652.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a7d2::/32 Signature Algorithm: sha256WithRSAEncryption 0c:33:b4:99:d4:82:4e:3f:87:3f:75:3b:65:cd:9b:a6:bd:40: c6:9e:69:65:02:66:20:73:21:d5:f5:59:cb:c2:1b:6f:3c:d2: 4d:70:c7:c4:b5:49:17:c1:e2:b1:1d:b7:26:44:db:4e:92:8c: 34:fb:b3:58:e3:11:12:6e:73:4f:9c:67:5d:29:91:77:6d:81: 7d:13:8b:e0:d2:42:38:55:cd:94:be:61:bb:89:e7:4b:2a:2d: b1:e6:50:45:c7:89:63:22:20:22:68:99:95:b1:26:4d:c0:e9: 2a:83:03:0b:f4:17:6e:06:07:ab:ad:9b:c1:b2:9c:58:51:17: e7:f6:92:c9:e6:cd:0b:91:23:10:da:5b:9b:78:6b:a3:da:c3: 39:fa:6d:55:3e:40:5e:0f:23:03:38:1a:04:27:0d:4b:a1:74: bb:81:94:03:7c:3b:d6:ff:1f:f3:b0:64:0c:8e:cc:a8:30:fb: cb:7c:26:0b:18:fc:23:82:06:18:e1:11:46:63:fb:bf:51:b7: 51:8d:d2:16:c3:db:9d:53:bc:45:8d:98:cc:da:f0:29:4a:90: 79:3a:25:8b:91:d6:f8:c8:48:27:04:bc:cf:87:69:0a:d4:ad: a5:30:83:87:5d:66:4f:f3:7f:cd:7b:ad:ff:fd:ec:53:32:b5: ca:f4:0b:56 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUK2pOIWAY/GB0dwVDFs4bWdMvT28wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTcwMFoX DTI3MDMwMzA2MjIwMFowMzExMC8GA1UEAxMoNEFDRjZBRkQ3MDRFRDY3ODY2RTg2 NEU1QjJBRUFCODgwREQ2Q0M2NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALWI3aoWr40P4LrbKT1KfVUD4nms49n/wh6r36QkCptTmySFkxYwWdUBA0iS /8pdwaP2O8gDbeEWAgsAdcIjIVaCJzW5ZO3gX41keCjYcNPCF14ODOXII41KvrgO nxnTnA36OeMDtLuLHaNgNRqSVLaCDf5NZfuEb1awdT4hBaWzbUbe/N7xeU7eyZWl 4IkmdpYm89k2zr/UirVLcnMIFV1gwfPvK2WDcDu7ZGVTjYaPUIk8OVQtEn35bA1L LRfV3oJoYUfv/owoXQR5lw0JQDP5JCST73UMcMmZJVbMo/7DRYKDoPnyCOFnoECw 1dnr1YzAo634CCuC9ktxJ3ziiNsCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRKz2r9 cE7WeGboZOWyrquIDdbMZDAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDY1Mi5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK p9IwDQYJKoZIhvcNAQELBQADggEBAAwztJnUgk4/hz91O2XNm6a9QMaeaWUCZiBz IdX1WcvCG2880k1wx8S1SRfB4rEdtyZE206SjDT7s1jjERJuc0+cZ10pkXdtgX0T i+DSQjhVzZS+YbuJ50sqLbHmUEXHiWMiICJomZWxJk3A6SqDAwv0F24GB6utm8Gy nFhRF+f2ksnmzQuRIxDaW5t4a6Pawzn6bVU+QF4PIwM4GgQnDUuhdLuBlAN8O9b/ H/OwZAyOzKgw+8t8JgsY/COCBhjhEUZj+79Rt1GN0hbD251TvEWNmMza8ClKkHk6 JYuR1vjISCcEvM+HaQrUraUwg4ddZk/zf817rf/97FMytcr0C1Y= -----END CERTIFICATE-----Generated at Sat Mar 28 13:16:41 2026 by rpki-client