$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144675.roa File: AS144675.roa (raw, json) Hash identifier: TCvh67qAvfbvZ1SaGQwRAR6iTEc/2qGC3L7MIql/RPg= Subject key identifier: B5:1E:F6:7C:EE:4D:A4:6E:E9:43:DE:9B:D1:3C:F1:E9:20:E8:8B:AB Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 432E632D186A705D24A6B4154BEE6D27C7BEB66C Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144675.roa Signing time: Wed 04 Mar 2026 06:20:04 +0000 ROA not before: Wed 04 Mar 2026 06:15:04 +0000 ROA not after: Wed 03 Mar 2027 06:20:04 +0000 asID: 144675 IP address blocks: 240a:a7e9::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:2e:63:2d:18:6a:70:5d:24:a6:b4:15:4b:ee:6d:27:c7:be:b6:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:15:04 2026 GMT Not After : Mar 3 06:20:04 2027 GMT Subject: CN=B51EF67CEE4DA46EE943DE9BD13CF1E920E88BAB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:73:e8:37:51:c5:bf:b5:b8:3d:4c:7d:6a:9a: 7b:ca:e7:c9:d3:72:f5:0f:86:ec:10:24:9b:39:64: dc:92:0f:c2:f8:1f:40:57:a9:dd:ba:63:ad:ab:5d: 74:e3:95:24:09:24:ea:98:a2:27:98:3b:f2:7e:5f: a4:c2:05:d4:ee:70:8a:f9:80:2c:f6:55:17:b8:50: 16:a9:11:69:81:79:35:1c:a1:b1:e4:69:8a:74:af: a2:bf:23:9c:62:70:86:fc:9f:f5:70:ee:39:36:de: 5e:95:07:6c:60:53:4b:38:ec:ee:70:14:f3:a2:f9: bd:af:87:70:d1:8c:2d:26:f3:65:11:37:b5:20:50: 62:4b:b7:c8:c9:76:e6:43:7c:cd:24:48:8b:44:d3: 07:3f:ac:72:cc:89:98:6b:b5:aa:68:18:6e:47:42: fd:c1:69:04:2f:96:30:b9:ec:78:75:c4:3f:09:b1: ec:9d:6e:e4:9d:ae:e5:81:17:2c:ff:3d:89:a4:a8: 52:e4:76:ee:dd:a1:1b:26:e9:dc:26:e4:eb:0b:b9: 76:0a:89:1a:fd:80:de:bd:49:b1:53:90:23:c9:8d: fe:cd:2c:ec:f9:cc:5f:ac:bc:61:57:22:d1:e5:dd: 37:95:73:93:44:5d:e9:88:63:ad:a1:4c:a6:b0:47: 31:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:1E:F6:7C:EE:4D:A4:6E:E9:43:DE:9B:D1:3C:F1:E9:20:E8:8B:AB X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144675.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a7e9::/32 Signature Algorithm: sha256WithRSAEncryption 0e:f2:a9:de:79:aa:33:7c:22:3e:28:5f:ae:f3:57:5b:e9:ab: a8:c6:9b:f6:9b:7c:7b:2d:ec:c9:30:c0:37:ac:6a:80:2b:57: 0f:66:78:62:a3:fb:6f:94:f5:36:d8:fb:96:be:b5:34:be:2f: 55:c1:49:e6:3e:7e:69:72:75:b8:53:1e:c3:11:92:da:da:8e: 86:a5:bd:d5:5e:5f:98:fc:87:46:ee:76:3f:a5:55:aa:45:57: f5:73:25:0e:3a:fa:f4:ad:76:6b:40:86:d4:1f:1f:fb:02:53: 91:70:71:2e:34:e1:1a:7c:c3:68:e3:c1:cf:ee:c8:c8:a2:e5: fb:2d:0e:a2:ca:17:95:43:03:34:39:a6:12:f4:2e:94:d8:f3: fd:d1:5c:68:1b:4d:51:88:d4:2e:29:4c:38:fa:67:9a:1a:68: f1:26:02:4d:47:3c:35:cf:50:09:a9:e1:57:92:a9:18:44:c6: 36:80:c4:74:c6:42:4c:f0:6d:e7:93:23:8b:88:bf:95:4b:5f: ef:b0:82:0f:a3:65:79:40:63:d6:2c:12:ce:f9:2f:18:1d:9a: af:bf:83:f3:03:13:83:de:5e:8d:c1:f3:a5:6f:ae:ae:96:9f: 86:3f:5f:24:cb:7c:76:ed:c5:b0:97:3b:53:4b:5b:fc:48:45: 60:d5:34:a9 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUQy5jLRhqcF0kprQVS+5tJ8e+tmwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTUwNFoX DTI3MDMwMzA2MjAwNFowMzExMC8GA1UEAxMoQjUxRUY2N0NFRTREQTQ2RUU5NDNE RTlCRDEzQ0YxRTkyMEU4OEJBQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKFz6DdRxb+1uD1MfWqae8rnydNy9Q+G7BAkmzlk3JIPwvgfQFep3bpjratd dOOVJAkk6piiJ5g78n5fpMIF1O5wivmALPZVF7hQFqkRaYF5NRyhseRpinSvor8j nGJwhvyf9XDuOTbeXpUHbGBTSzjs7nAU86L5va+HcNGMLSbzZRE3tSBQYku3yMl2 5kN8zSRIi0TTBz+scsyJmGu1qmgYbkdC/cFpBC+WMLnseHXEPwmx7J1u5J2u5YEX LP89iaSoUuR27t2hGybp3Cbk6wu5dgqJGv2A3r1JsVOQI8mN/s0s7PnMX6y8YVci 0eXdN5Vzk0Rd6YhjraFMprBHMUUCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBS1HvZ8 7k2kbulD3pvRPPHpIOiLqzAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDY3NS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK p+kwDQYJKoZIhvcNAQELBQADggEBAA7yqd55qjN8Ij4oX67zV1vpq6jGm/abfHst 7MkwwDesaoArVw9meGKj+2+U9TbY+5a+tTS+L1XBSeY+fmlydbhTHsMRktrajoal vdVeX5j8h0budj+lVapFV/VzJQ46+vStdmtAhtQfH/sCU5FwcS404Rp8w2jjwc/u yMii5fstDqLKF5VDAzQ5phL0LpTY8/3RXGgbTVGI1C4pTDj6Z5oaaPEmAk1HPDXP UAmp4VeSqRhExjaAxHTGQkzwbeeTI4uIv5VLX++wgg+jZXlAY9YsEs75Lxgdmq+/ g/MDE4PeXo3B86Vvrq6Wn4Y/XyTLfHbtxbCXO1NLW/xIRWDVNKk= -----END CERTIFICATE-----Generated at Sat Mar 28 13:14:18 2026 by rpki-client