$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144724.roa File: AS144724.roa (raw, json) Hash identifier: jQQpNGrEK5bxmzykshnEmgLyrtMVCri3kMYJWAQJjps= Subject key identifier: B8:88:05:B6:49:D6:2F:DC:07:AA:DD:53:7F:40:69:F3:E6:7F:B3:10 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 6542DF924FF4ACF357E02B1A19C854E06363F76C Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144724.roa Signing time: Wed 04 Mar 2026 06:21:12 +0000 ROA not before: Wed 04 Mar 2026 06:16:12 +0000 ROA not after: Wed 03 Mar 2027 06:21:12 +0000 asID: 144724 IP address blocks: 240a:a81a::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:42:df:92:4f:f4:ac:f3:57:e0:2b:1a:19:c8:54:e0:63:63:f7:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:16:12 2026 GMT Not After : Mar 3 06:21:12 2027 GMT Subject: CN=B88805B649D62FDC07AADD537F4069F3E67FB310 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:8f:0c:e3:37:1d:81:35:a8:31:9e:2a:63:a2: f3:7b:b3:d5:34:fb:ca:c0:b4:42:9a:55:73:f5:12: 75:e1:67:5e:d4:11:76:ce:ab:37:e8:5e:49:a7:a7: b8:d1:59:51:5c:9c:1f:f6:7b:4f:57:1f:6b:97:22: a9:ad:17:33:c4:aa:a2:48:7a:07:bf:b2:6f:b8:63: 3f:87:78:9c:bf:37:7e:9f:61:89:c4:c5:df:93:77: 80:a6:f7:32:c2:6e:18:a5:1a:4d:e1:ee:11:cf:b4: 66:71:2f:49:63:1e:57:cf:61:eb:f9:1e:00:6e:be: d0:2f:e8:ef:3a:a2:fc:24:b8:61:29:80:74:6d:c6: a6:65:f4:4c:8a:70:41:31:85:30:1a:04:fd:c7:35: 2f:2b:76:32:11:d9:e6:c9:21:17:8c:f0:4a:ed:6e: f9:17:10:2f:55:52:ad:f7:f9:09:ef:ee:80:45:f7: 51:76:c0:c7:b1:46:fa:2b:cd:bc:5f:95:5d:22:de: e7:c8:17:5f:e6:fb:d7:e8:de:af:16:69:7f:a2:39: 44:05:37:bd:1c:27:bf:8d:70:4d:38:ad:9c:82:dc: 09:af:ab:26:f1:a7:91:8d:93:9c:9d:fe:f2:b3:fe: fc:de:f8:c5:66:04:7a:66:69:7b:fc:8a:af:1e:dd: bd:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:88:05:B6:49:D6:2F:DC:07:AA:DD:53:7F:40:69:F3:E6:7F:B3:10 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144724.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a81a::/32 Signature Algorithm: sha256WithRSAEncryption 00:85:9f:24:43:39:d7:1e:f4:95:9b:50:41:c2:29:9f:cf:a1: 5d:e0:05:20:8c:05:85:54:67:cb:03:c0:ff:8d:e0:0e:49:80: 2b:24:de:60:9b:b2:fc:dc:c3:8d:19:15:66:b8:b0:68:25:ed: 95:5f:f8:9f:38:1a:c6:7c:5f:b7:a0:9e:0c:5e:15:55:19:b6: 67:ce:00:ac:4d:ce:7e:95:ce:84:e9:ed:8a:59:a2:b4:7a:f2: e5:62:3c:6d:3e:3a:bc:c8:7b:69:14:b0:ec:14:28:27:1e:97: d3:f3:65:e0:ec:10:48:e6:66:f2:ea:2c:76:27:62:fb:21:1c: d2:c3:c4:24:5c:8a:64:3e:55:48:de:48:40:97:14:ec:d9:68: 2d:ec:5c:44:72:0a:8f:ed:b6:2c:32:6f:59:4a:74:d1:a3:16: 08:39:d5:a3:d4:b5:6e:a8:3c:8d:e1:e8:7f:2d:ba:bc:c6:9f: db:62:0d:d6:8d:be:50:ae:17:68:54:65:62:f1:17:61:65:79: ad:c2:42:b9:53:5f:c4:96:fe:45:58:3d:fa:61:c8:85:d2:26: 8d:69:b5:80:07:d1:21:fb:60:aa:d5:67:93:de:b9:e0:60:22: 2d:c8:ea:12:ed:6e:c8:5f:2f:aa:de:47:f2:d3:f0:e8:cd:a9: 1c:51:fe:35 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUZULfkk/0rPNX4CsaGchU4GNj92wwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTYxMloX DTI3MDMwMzA2MjExMlowMzExMC8GA1UEAxMoQjg4ODA1QjY0OUQ2MkZEQzA3QUFE RDUzN0Y0MDY5RjNFNjdGQjMxMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK6PDOM3HYE1qDGeKmOi83uz1TT7ysC0QppVc/USdeFnXtQRds6rN+heSaen uNFZUVycH/Z7T1cfa5ciqa0XM8Sqokh6B7+yb7hjP4d4nL83fp9hicTF35N3gKb3 MsJuGKUaTeHuEc+0ZnEvSWMeV89h6/keAG6+0C/o7zqi/CS4YSmAdG3GpmX0TIpw QTGFMBoE/cc1Lyt2MhHZ5skhF4zwSu1u+RcQL1VSrff5Ce/ugEX3UXbAx7FG+ivN vF+VXSLe58gXX+b71+jerxZpf6I5RAU3vRwnv41wTTitnILcCa+rJvGnkY2TnJ3+ 8rP+/N74xWYEemZpe/yKrx7dvVkCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBS4iAW2 SdYv3Aeq3VN/QGnz5n+zEDAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDcyNC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qBowDQYJKoZIhvcNAQELBQADggEBAACFnyRDOdce9JWbUEHCKZ/PoV3gBSCMBYVU Z8sDwP+N4A5JgCsk3mCbsvzcw40ZFWa4sGgl7ZVf+J84GsZ8X7egngxeFVUZtmfO AKxNzn6VzoTp7YpZorR68uViPG0+OrzIe2kUsOwUKCcel9PzZeDsEEjmZvLqLHYn YvshHNLDxCRcimQ+VUjeSECXFOzZaC3sXERyCo/ttiwyb1lKdNGjFgg51aPUtW6o PI3h6H8turzGn9tiDdaNvlCuF2hUZWLxF2Flea3CQrlTX8SW/kVYPfphyIXSJo1p tYAH0SH7YKrVZ5PeueBgIi3I6hLtbshfL6reR/LT8OjNqRxR/jU= -----END CERTIFICATE-----Generated at Sat Mar 28 11:44:25 2026 by rpki-client