$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144672.roa File: AS144672.roa (raw, json) Hash identifier: F3yEV+IiiYez/Tu9qHgvaEscKE0L3DKqZ1rIzb0DWIM= Subject key identifier: BF:4A:68:B0:32:E4:5D:F9:41:38:AD:68:85:50:49:D8:12:CC:13:1F Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 2E1319E6F4ED8445243DE445E63CAEB510974B30 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144672.roa Signing time: Wed 04 Mar 2026 06:20:58 +0000 ROA not before: Wed 04 Mar 2026 06:15:58 +0000 ROA not after: Wed 03 Mar 2027 06:20:58 +0000 asID: 144672 IP address blocks: 240a:a7e6::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:13:19:e6:f4:ed:84:45:24:3d:e4:45:e6:3c:ae:b5:10:97:4b:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:15:58 2026 GMT Not After : Mar 3 06:20:58 2027 GMT Subject: CN=BF4A68B032E45DF94138AD68855049D812CC131F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:02:29:8f:dd:d4:d4:26:d2:92:d6:f2:53:bc: ee:33:a8:d8:da:61:0e:ba:1f:ac:bd:e2:18:45:06: 1e:a4:22:ad:52:b7:03:4a:39:c1:50:04:4f:05:e2: d5:a7:f1:18:54:b0:97:2c:2b:0b:a1:46:47:da:93: 63:f9:32:7c:a1:7a:bb:53:07:8a:fc:24:4d:3b:bc: f7:9d:eb:41:ae:1b:f8:c8:5b:2e:36:5f:0f:a2:6b: 78:93:e3:fc:a5:7a:1b:3f:9b:b8:57:12:62:cb:6a: b5:27:84:c0:d2:75:0b:2c:06:f7:56:f0:5a:0d:33: b8:71:98:43:fc:0d:64:9b:72:03:e3:33:26:81:98: 40:9a:55:15:2e:ea:24:9b:17:3f:7c:19:aa:56:a3: ba:2d:0f:c5:99:50:1e:76:ef:ca:e7:b0:a0:9e:d6: d6:63:16:71:3b:b9:83:85:44:72:98:87:55:e7:62: 34:cf:f3:12:e3:d1:b0:c8:60:78:40:d5:2a:a6:8d: 47:70:8e:b6:13:8c:46:94:f9:a0:9e:20:1d:ff:9c: fb:7f:0f:9c:b1:69:48:4a:9c:c4:94:f2:d4:ce:20: ff:d3:7a:1f:b5:3d:c8:65:fb:c0:c2:fd:f4:6e:37: f4:4d:6e:2c:c3:44:8a:c4:8c:69:cf:6a:12:b4:e8: d5:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:4A:68:B0:32:E4:5D:F9:41:38:AD:68:85:50:49:D8:12:CC:13:1F X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144672.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a7e6::/32 Signature Algorithm: sha256WithRSAEncryption 1b:df:66:0a:74:30:e0:5e:e6:c8:66:20:d1:ae:ec:08:05:34: 8b:64:38:29:c7:90:d1:b8:e5:76:fb:68:8b:ee:ff:2b:9a:9e: d1:0a:aa:a1:67:60:c0:58:aa:0b:e6:92:7d:36:3e:48:0a:a8: 3c:99:d9:9c:dd:69:d5:5c:ee:35:48:db:39:b7:2f:ab:bb:ab: 0a:d0:9b:78:c9:43:a0:75:fc:c7:a8:d6:91:2f:f8:ef:c7:0e: 20:25:85:c8:a1:08:33:40:d2:67:04:56:9d:20:66:45:52:6f: a1:b1:59:2b:ab:64:e1:49:81:02:2a:eb:29:d1:a2:20:eb:3a: c3:3e:07:28:0f:89:3b:e9:90:d7:48:b7:cb:db:ac:0f:11:88: 7c:33:ff:21:6f:e7:da:d9:e4:81:bd:90:2d:e8:8f:80:5a:5f: 90:3d:fe:ce:ed:eb:07:21:47:5b:1d:20:cf:70:d4:d6:59:a7: 8c:f4:16:f3:c7:1e:a3:37:d5:1e:14:54:f6:30:5a:9d:13:15: b4:4d:ee:bf:bb:9f:15:8d:3e:14:a1:31:16:ba:26:cd:95:f0: 49:80:ad:b3:d7:d7:17:17:ff:81:7b:61:25:30:cf:d9:14:3d: 56:f0:bf:f9:0e:70:85:d1:a0:8f:10:82:ae:80:36:4e:69:06: 06:41:04:10 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIULhMZ5vTthEUkPeRF5jyutRCXSzAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTU1OFoX DTI3MDMwMzA2MjA1OFowMzExMC8GA1UEAxMoQkY0QTY4QjAzMkU0NURGOTQxMzhB RDY4ODU1MDQ5RDgxMkNDMTMxRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAIUCKY/d1NQm0pLW8lO87jOo2NphDrofrL3iGEUGHqQirVK3A0o5wVAETwXi 1afxGFSwlywrC6FGR9qTY/kyfKF6u1MHivwkTTu8953rQa4b+MhbLjZfD6JreJPj /KV6Gz+buFcSYstqtSeEwNJ1CywG91bwWg0zuHGYQ/wNZJtyA+MzJoGYQJpVFS7q JJsXP3wZqlajui0PxZlQHnbvyuewoJ7W1mMWcTu5g4VEcpiHVediNM/zEuPRsMhg eEDVKqaNR3COthOMRpT5oJ4gHf+c+38PnLFpSEqcxJTy1M4g/9N6H7U9yGX7wML9 9G439E1uLMNEisSMac9qErTo1bcCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBS/Smiw MuRd+UE4rWiFUEnYEswTHzAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDY3Mi5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK p+YwDQYJKoZIhvcNAQELBQADggEBABvfZgp0MOBe5shmINGu7AgFNItkOCnHkNG4 5Xb7aIvu/yuantEKqqFnYMBYqgvmkn02PkgKqDyZ2ZzdadVc7jVI2zm3L6u7qwrQ m3jJQ6B1/Meo1pEv+O/HDiAlhcihCDNA0mcEVp0gZkVSb6GxWSurZOFJgQIq6ynR oiDrOsM+BygPiTvpkNdIt8vbrA8RiHwz/yFv59rZ5IG9kC3oj4BaX5A9/s7t6wch R1sdIM9w1NZZp4z0FvPHHqM31R4UVPYwWp0TFbRN7r+7nxWNPhShMRa6Js2V8EmA rbPX1xcX/4F7YSUwz9kUPVbwv/kOcIXRoI8Qgq6ANk5pBgZBBBA= -----END CERTIFICATE-----Generated at Sat Mar 28 11:41:51 2026 by rpki-client