$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144681.roa File: AS144681.roa (raw, json) Hash identifier: X8As0BWN75IgFT5fO4pg166wqXvJz0Ns2eL7uzinKUE= Subject key identifier: 10:71:CB:7D:D1:F3:AE:20:10:DF:C4:92:6D:7E:00:7A:6B:34:F0:3D Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 34CD6260E43E6E8CB085B5821CB83766371A3C45 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144681.roa Signing time: Wed 04 Mar 2026 06:21:39 +0000 ROA not before: Wed 04 Mar 2026 06:16:39 +0000 ROA not after: Wed 03 Mar 2027 06:21:39 +0000 asID: 144681 IP address blocks: 240a:a7ef::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:cd:62:60:e4:3e:6e:8c:b0:85:b5:82:1c:b8:37:66:37:1a:3c:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:16:39 2026 GMT Not After : Mar 3 06:21:39 2027 GMT Subject: CN=1071CB7DD1F3AE2010DFC4926D7E007A6B34F03D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:bb:10:93:37:6f:32:e8:48:e7:32:5e:d3:8b: e2:3c:9e:09:d2:80:cf:93:a7:cc:56:1e:a0:64:33: 9d:f4:dc:33:3d:6d:10:94:95:eb:5e:b2:a5:25:15: 96:d8:85:4e:9c:01:d1:68:78:0e:5a:6d:5c:06:fd: c8:e2:38:16:f7:76:00:f2:a3:bb:98:a4:ca:1e:f2: 05:f0:63:6d:10:c9:c4:a7:b5:f4:d1:1c:4c:52:e4: 5f:9d:74:b8:e4:28:e4:c3:57:ba:47:2c:fd:9a:61: b8:31:06:e1:58:f3:cf:b8:0a:2c:83:95:e0:89:b0: 46:41:09:b7:4c:4a:51:cf:e7:84:a2:e6:f6:72:7b: 97:23:7e:0e:db:69:2c:8f:6b:ff:3d:52:ff:3f:fb: 12:02:74:64:86:a3:45:b3:2f:0e:d2:b0:8d:1b:5c: 65:88:e7:e9:85:2d:c2:19:96:5e:47:fc:a9:20:a6: 4b:ad:a4:64:18:c5:70:43:3d:77:ae:52:af:99:0f: a0:88:ae:5d:61:33:b7:2a:83:36:f3:54:b6:75:cd: 42:69:51:2f:e1:8c:b5:57:b9:af:8f:6a:5e:d8:4a: ba:63:a1:69:3f:db:3b:6b:68:b3:87:64:3d:1c:84: 5d:d7:7d:e2:a5:4a:18:93:0d:00:b5:a4:36:f1:97: c3:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:71:CB:7D:D1:F3:AE:20:10:DF:C4:92:6D:7E:00:7A:6B:34:F0:3D X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144681.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a7ef::/32 Signature Algorithm: sha256WithRSAEncryption 00:a7:ed:68:7d:9b:db:4b:f2:da:6f:c5:30:94:54:23:c0:d4: 9b:74:69:92:d8:b4:a6:3b:34:71:5f:6c:85:09:fe:de:1a:e8: 8a:ee:38:be:c4:f0:d2:46:e2:2b:f5:7c:6e:61:d1:57:69:dd: da:3e:83:af:72:0d:a4:63:47:4f:03:5d:f2:ef:52:89:52:5b: 33:ac:b6:93:e1:16:d1:46:fb:1c:ec:56:3c:b5:b7:d1:9a:c8: 4c:e5:ea:19:b5:f5:a4:3a:b9:ae:a6:cf:24:92:8e:56:ad:c8: c0:27:30:cf:b1:88:51:f7:38:be:9d:98:0e:d5:a1:dc:31:4f: b7:b8:f4:aa:34:c5:23:04:42:80:b8:5d:88:4f:bc:a9:ac:61: be:8d:cd:a4:e8:c4:fc:d7:96:35:3d:6d:b8:b6:1d:f4:82:66: e7:95:3e:c0:21:b1:21:ec:b2:3f:f6:a2:2f:7b:7f:c3:26:a0: cc:a4:6a:cb:aa:80:c7:0f:41:81:ae:f1:04:73:d4:3d:ea:4f: e0:91:96:7e:e4:18:50:e5:5a:7b:2b:59:b1:fc:93:1d:19:52: 4f:31:6b:d8:b6:41:a6:05:44:08:fd:61:58:f1:18:79:3e:e8: 84:72:2b:99:9a:1d:85:2b:2e:2a:c0:57:29:d7:7c:07:68:61: 5f:45:96:96 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUNM1iYOQ+boywhbWCHLg3ZjcaPEUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTYzOVoX DTI3MDMwMzA2MjEzOVowMzExMC8GA1UEAxMoMTA3MUNCN0REMUYzQUUyMDEwREZD NDkyNkQ3RTAwN0E2QjM0RjAzRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMy7EJM3bzLoSOcyXtOL4jyeCdKAz5OnzFYeoGQznfTcMz1tEJSV616ypSUV ltiFTpwB0Wh4DlptXAb9yOI4Fvd2APKju5ikyh7yBfBjbRDJxKe19NEcTFLkX510 uOQo5MNXukcs/ZphuDEG4Vjzz7gKLIOV4ImwRkEJt0xKUc/nhKLm9nJ7lyN+Dttp LI9r/z1S/z/7EgJ0ZIajRbMvDtKwjRtcZYjn6YUtwhmWXkf8qSCmS62kZBjFcEM9 d65Sr5kPoIiuXWEztyqDNvNUtnXNQmlRL+GMtVe5r49qXthKumOhaT/bO2tos4dk PRyEXdd94qVKGJMNALWkNvGXwwsCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQQcct9 0fOuIBDfxJJtfgB6azTwPTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDY4MS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK p+8wDQYJKoZIhvcNAQELBQADggEBAACn7Wh9m9tL8tpvxTCUVCPA1Jt0aZLYtKY7 NHFfbIUJ/t4a6IruOL7E8NJG4iv1fG5h0Vdp3do+g69yDaRjR08DXfLvUolSWzOs tpPhFtFG+xzsVjy1t9GayEzl6hm19aQ6ua6mzySSjlatyMAnMM+xiFH3OL6dmA7V odwxT7e49Ko0xSMEQoC4XYhPvKmsYb6NzaToxPzXljU9bbi2HfSCZueVPsAhsSHs sj/2oi97f8MmoMykasuqgMcPQYGu8QRz1D3qT+CRln7kGFDlWnsrWbH8kx0ZUk8x a9i2QaYFRAj9YVjxGHk+6IRyK5maHYUrLirAVynXfAdoYV9FlpY= -----END CERTIFICATE-----Generated at Sat Mar 28 11:46:03 2026 by rpki-client