$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144723.roa File: AS144723.roa (raw, json) Hash identifier: Xk57d9SBYJml2AplF3cxPjPH702c/XQ6vJMcwjfya0A= Subject key identifier: 34:6A:38:06:3F:B6:35:00:8E:A0:2F:FB:57:C6:0E:34:7E:72:B2:E5 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 4C287583E56D27E0D9860E09F6108938071C2A3F Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144723.roa Signing time: Wed 04 Mar 2026 06:22:31 +0000 ROA not before: Wed 04 Mar 2026 06:17:31 +0000 ROA not after: Wed 03 Mar 2027 06:22:31 +0000 asID: 144723 IP address blocks: 240a:a819::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:28:75:83:e5:6d:27:e0:d9:86:0e:09:f6:10:89:38:07:1c:2a:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:17:31 2026 GMT Not After : Mar 3 06:22:31 2027 GMT Subject: CN=346A38063FB635008EA02FFB57C60E347E72B2E5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:88:d0:ba:e8:21:e2:6a:21:24:3e:a0:03:f0: fc:4b:78:02:10:3f:1d:a3:d4:64:45:28:ac:53:2a: a1:50:f0:39:bf:5b:a6:63:f2:25:bd:98:ea:b7:80: d7:e6:4e:22:6c:db:96:65:da:5c:7a:58:4a:3a:b4: eb:af:7b:b4:82:a0:a4:55:1c:79:fe:f9:62:46:ce: 21:b1:92:3c:1e:b0:4e:0a:9b:50:53:13:3b:77:15: 29:f0:79:e7:3a:70:43:d4:32:40:56:e6:ca:53:b8: 24:69:56:8c:8d:04:14:41:ff:80:94:e3:14:28:08: 2b:2f:f1:0f:b7:87:3b:d7:a4:c1:98:3b:c7:6a:8d: 7c:aa:9d:a7:1c:5b:ac:51:0c:98:ff:a7:8d:7b:e0: bd:4e:74:68:27:d4:a0:95:d2:8b:18:82:22:ac:c6: b5:9f:10:61:69:3c:eb:c2:af:2f:d5:7a:4a:e6:1d: 6a:ac:04:dd:2f:07:22:3a:1b:59:a0:c1:fb:59:83: 93:c5:08:b1:41:7b:95:5a:b4:a4:b5:9c:ec:1c:ec: a4:ef:94:27:57:8a:69:d9:d6:ba:09:a7:ab:ee:26: c5:a4:ac:c7:40:3b:77:eb:87:5e:a6:54:f2:4f:d2: 89:b3:4c:4f:dd:02:57:bc:d7:55:bf:fe:72:82:fc: a4:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:6A:38:06:3F:B6:35:00:8E:A0:2F:FB:57:C6:0E:34:7E:72:B2:E5 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144723.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a819::/32 Signature Algorithm: sha256WithRSAEncryption 62:9d:14:f1:98:66:c9:c1:39:1d:28:27:79:b4:16:78:c0:a5: e3:6d:1a:19:08:c2:8e:17:e8:f0:00:57:5d:98:b3:97:df:c1: 18:cf:1a:25:d6:b0:5a:55:92:73:51:c1:80:b9:6f:18:eb:58: 60:af:8f:f0:a0:49:3c:e7:ab:50:2a:9d:71:d7:89:7b:3d:68: 3e:86:41:87:13:8a:1c:8a:d3:33:3f:be:82:5f:3e:44:77:28: 13:0a:05:81:46:bd:6c:e3:ec:50:c5:c8:05:a1:a2:fd:20:0d: ca:bf:7e:5a:92:42:bd:67:90:2b:83:6b:03:53:1f:d7:b9:05: a1:f7:08:6c:25:06:dc:e0:dc:9b:35:80:9c:46:3e:f6:b0:31: a2:a5:a6:f2:e5:86:09:0d:ea:93:be:52:51:ae:66:cc:87:77: 8a:01:8c:7e:d8:03:b5:b2:5d:c0:d1:a6:cb:f8:f6:f8:cf:78: ae:d4:57:e4:e8:7e:ee:98:a0:5f:c6:cd:c3:7c:1f:72:be:17: 58:39:a6:d7:bf:24:96:eb:d4:fd:16:0c:67:e4:82:25:14:86: 8c:9a:da:75:ce:39:c2:43:f2:0e:fe:f4:f3:81:81:d2:b9:d2: c0:75:d9:df:ad:8c:ff:43:78:1f:f2:4c:17:fd:49:e9:d5:b8: 68:67:ad:61 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUTCh1g+VtJ+DZhg4J9hCJOAccKj8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTczMVoX DTI3MDMwMzA2MjIzMVowMzExMC8GA1UEAxMoMzQ2QTM4MDYzRkI2MzUwMDhFQTAy RkZCNTdDNjBFMzQ3RTcyQjJFNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALSI0LroIeJqISQ+oAPw/Et4AhA/HaPUZEUorFMqoVDwOb9bpmPyJb2Y6reA 1+ZOImzblmXaXHpYSjq06697tIKgpFUcef75YkbOIbGSPB6wTgqbUFMTO3cVKfB5 5zpwQ9QyQFbmylO4JGlWjI0EFEH/gJTjFCgIKy/xD7eHO9ekwZg7x2qNfKqdpxxb rFEMmP+njXvgvU50aCfUoJXSixiCIqzGtZ8QYWk868KvL9V6SuYdaqwE3S8HIjob WaDB+1mDk8UIsUF7lVq0pLWc7BzspO+UJ1eKadnWugmnq+4mxaSsx0A7d+uHXqZU 8k/SibNMT90CV7zXVb/+coL8pKECAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQ0ajgG P7Y1AI6gL/tXxg40fnKy5TAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDcyMy5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qBkwDQYJKoZIhvcNAQELBQADggEBAGKdFPGYZsnBOR0oJ3m0FnjApeNtGhkIwo4X 6PAAV12Ys5ffwRjPGiXWsFpVknNRwYC5bxjrWGCvj/CgSTznq1AqnXHXiXs9aD6G QYcTihyK0zM/voJfPkR3KBMKBYFGvWzj7FDFyAWhov0gDcq/flqSQr1nkCuDawNT H9e5BaH3CGwlBtzg3Js1gJxGPvawMaKlpvLlhgkN6pO+UlGuZsyHd4oBjH7YA7Wy XcDRpsv49vjPeK7UV+Tofu6YoF/GzcN8H3K+F1g5pte/JJbr1P0WDGfkgiUUhoya 2nXOOcJD8g7+9POBgdK50sB12d+tjP9DeB/yTBf9SenVuGhnrWE= -----END CERTIFICATE-----Generated at Sat Mar 28 11:42:29 2026 by rpki-client