$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144688.roa File: AS144688.roa (raw, json) Hash identifier: a0W6q3yQAq6JohfSEHN+GLe+tds2guvV8T+nzNUg7Xc= Subject key identifier: 01:0A:D7:15:AD:73:56:BC:11:34:7F:BE:66:15:79:E2:3F:10:2B:E3 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 1170A2CD38F13058AC14F2C233ACDA83E0154100 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144688.roa Signing time: Wed 04 Mar 2026 06:21:03 +0000 ROA not before: Wed 04 Mar 2026 06:16:03 +0000 ROA not after: Wed 03 Mar 2027 06:21:03 +0000 asID: 144688 IP address blocks: 240a:a7f6::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:70:a2:cd:38:f1:30:58:ac:14:f2:c2:33:ac:da:83:e0:15:41:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:16:03 2026 GMT Not After : Mar 3 06:21:03 2027 GMT Subject: CN=010AD715AD7356BC11347FBE661579E23F102BE3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:c4:15:e2:63:dc:97:3d:25:d4:57:98:70:a8: c4:a2:74:98:57:aa:d2:5a:68:b5:90:6c:77:89:2e: 5d:d3:e4:e2:d4:4d:88:40:92:cc:4f:93:31:82:b0: e5:8d:4d:94:84:0b:94:24:6f:77:47:6d:e5:4a:05: 9d:2d:12:76:c1:50:fa:9f:7b:14:20:39:13:bb:3c: 3a:a9:9b:bc:4a:9e:e9:0a:fa:5e:42:cc:cc:bc:96: 3e:27:c8:7b:02:c7:32:1b:9e:6a:3e:a3:8f:16:5b: 32:f0:c3:1a:ff:4b:72:22:9d:2d:2b:b4:fc:eb:60: df:c6:d4:a0:c8:50:72:ad:16:52:26:59:45:91:e9: 48:f3:08:f7:74:f1:a6:1f:08:7e:4f:69:f3:78:ba: d7:69:55:31:5d:8c:12:18:6d:a3:90:f8:ef:13:e7: ce:f6:6b:fc:f8:99:93:c5:5a:67:17:db:1b:22:d5: ae:a6:30:6b:d8:c2:47:0e:97:75:f5:77:53:2d:e7: 1c:e8:9e:5d:d5:e9:14:cc:27:9c:b7:7e:c3:12:0b: 91:ec:3c:6e:a6:39:27:46:48:2c:17:bd:b3:50:e1: 1f:84:04:9e:80:c7:7f:35:ae:ad:38:45:1b:db:42: 62:ef:81:67:12:4a:d4:0e:40:e9:92:64:5a:0e:cb: 1e:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:0A:D7:15:AD:73:56:BC:11:34:7F:BE:66:15:79:E2:3F:10:2B:E3 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144688.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a7f6::/32 Signature Algorithm: sha256WithRSAEncryption 19:91:62:46:8b:8c:a2:e1:67:ee:a4:14:60:49:8b:83:1d:bf: 51:0d:25:62:80:b6:33:c2:b2:dc:cd:16:1f:46:db:22:1f:87: 9f:b1:f6:92:1c:eb:06:00:b4:0f:58:1a:68:04:d1:8b:72:a5: 7b:d5:53:ce:27:f6:d3:bf:ca:42:45:c9:bd:22:0e:9f:00:91: 83:f2:83:f4:3d:d7:e9:9b:f9:16:92:f4:70:7d:6c:d5:34:6a: 72:6e:bc:f0:c4:e2:4a:99:f6:cb:6d:d2:a8:b3:51:3e:de:72: 35:af:7a:ff:48:5c:8b:0e:b9:be:56:33:18:13:80:d5:0b:19: c3:3d:99:43:42:2c:63:af:26:d2:bf:42:dd:70:31:1d:17:6e: 8c:f5:34:7a:b9:41:fb:66:a1:a9:4b:37:1a:01:91:d6:9f:01: ac:b8:24:72:05:fd:5b:49:28:16:dd:34:c8:e6:b5:f0:31:8e: 69:93:2d:32:16:8f:5f:92:0c:df:df:81:c0:37:22:41:6b:2e: 04:2f:26:e9:bf:f5:16:04:41:a1:60:2c:7b:34:61:af:a7:fb: ac:dc:94:f4:8b:c0:3b:e9:2d:5e:f3:eb:60:0b:e7:83:e6:d6: 6e:df:e7:bc:04:f8:24:13:c3:35:20:e5:3e:e1:9a:ab:1a:ac: 1e:76:f0:da -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUEXCizTjxMFisFPLCM6zag+AVQQAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTYwM1oX DTI3MDMwMzA2MjEwM1owMzExMC8GA1UEAxMoMDEwQUQ3MTVBRDczNTZCQzExMzQ3 RkJFNjYxNTc5RTIzRjEwMkJFMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOHEFeJj3Jc9JdRXmHCoxKJ0mFeq0lpotZBsd4kuXdPk4tRNiECSzE+TMYKw 5Y1NlIQLlCRvd0dt5UoFnS0SdsFQ+p97FCA5E7s8OqmbvEqe6Qr6XkLMzLyWPifI ewLHMhueaj6jjxZbMvDDGv9LciKdLSu0/Otg38bUoMhQcq0WUiZZRZHpSPMI93Tx ph8Ifk9p83i612lVMV2MEhhto5D47xPnzvZr/PiZk8VaZxfbGyLVrqYwa9jCRw6X dfV3Uy3nHOieXdXpFMwnnLd+wxILkew8bqY5J0ZILBe9s1DhH4QEnoDHfzWurThF G9tCYu+BZxJK1A5A6ZJkWg7LHiMCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQBCtcV rXNWvBE0f75mFXniPxAr4zAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDY4OC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK p/YwDQYJKoZIhvcNAQELBQADggEBABmRYkaLjKLhZ+6kFGBJi4Mdv1ENJWKAtjPC stzNFh9G2yIfh5+x9pIc6wYAtA9YGmgE0YtypXvVU84n9tO/ykJFyb0iDp8AkYPy g/Q91+mb+RaS9HB9bNU0anJuvPDE4kqZ9stt0qizUT7ecjWvev9IXIsOub5WMxgT gNULGcM9mUNCLGOvJtK/Qt1wMR0Xboz1NHq5QftmoalLNxoBkdafAay4JHIF/VtJ KBbdNMjmtfAxjmmTLTIWj1+SDN/fgcA3IkFrLgQvJum/9RYEQaFgLHs0Ya+n+6zc lPSLwDvpLV7z62AL54Pm1m7f57wE+CQTwzUg5T7hmqsarB528No= -----END CERTIFICATE-----Generated at Sat Mar 28 11:43:32 2026 by rpki-client