$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144732.roa File: AS144732.roa (raw, json) Hash identifier: jfhMcxX2twZhmo52OAqhHAzJ6zYnlj9pkZJEwUbTp4I= Subject key identifier: 8D:89:05:21:AD:BF:32:C9:73:2C:14:D6:B6:D1:99:00:AF:8E:62:0C Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 376451E3BAF6F90B500DE84BE50E9E9347B5B373 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144732.roa Signing time: Wed 04 Mar 2026 06:19:32 +0000 ROA not before: Wed 04 Mar 2026 06:14:32 +0000 ROA not after: Wed 03 Mar 2027 06:19:32 +0000 asID: 144732 IP address blocks: 240a:a822::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:64:51:e3:ba:f6:f9:0b:50:0d:e8:4b:e5:0e:9e:93:47:b5:b3:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:14:32 2026 GMT Not After : Mar 3 06:19:32 2027 GMT Subject: CN=8D890521ADBF32C9732C14D6B6D19900AF8E620C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:d5:76:35:88:c1:30:12:e1:15:2c:3e:2c:9b: 3a:5c:b5:28:b7:95:59:14:c0:ff:69:af:ba:10:f9: 07:51:dc:d8:cc:35:77:69:c6:70:75:8b:78:57:ce: 27:b6:23:56:d7:4e:6d:28:2d:bc:a5:94:f7:46:9b: 5f:00:7a:13:5d:04:5c:b0:ac:20:da:35:78:79:07: 57:76:64:ec:c3:2e:90:4e:6e:d1:0e:af:74:e8:0a: 6c:62:a4:d1:4e:fe:eb:74:36:72:7f:47:0b:7d:20: e4:8f:0c:e4:39:16:66:f7:1f:0a:66:8a:a7:e9:e7: e6:a7:59:14:d2:ab:0f:04:9e:13:fc:68:12:cc:b8: 89:5f:15:d6:7b:7e:23:dc:f6:4b:de:6e:fa:e9:26: 14:ea:cc:bd:3a:eb:13:b5:d1:3e:7a:3e:ae:46:e3: ae:71:48:e9:f2:a2:8e:46:90:e5:c0:ee:d8:82:e8: 32:5d:cd:b8:52:b5:5a:fc:ab:56:ce:6a:c7:92:17: aa:91:83:74:ac:37:55:aa:d8:70:26:73:8e:b9:f8: 0f:22:6e:9f:c0:dd:a2:59:a5:49:dc:63:74:90:57: 6b:73:9b:64:0d:4a:5a:5e:5e:40:cc:00:d0:aa:bf: 5c:f9:fa:43:86:03:cd:b9:00:8a:6a:ae:24:c6:6e: 06:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:89:05:21:AD:BF:32:C9:73:2C:14:D6:B6:D1:99:00:AF:8E:62:0C X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144732.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a822::/32 Signature Algorithm: sha256WithRSAEncryption 76:5e:b3:2d:b5:e3:fc:83:40:75:8b:32:53:2d:b2:c2:2b:5b: 8a:26:06:88:a3:99:1f:c9:39:ed:f4:bc:47:d8:08:ce:50:8f: 70:30:86:da:30:a8:a3:b2:47:84:43:f0:14:08:27:2d:25:37: fb:39:2f:91:a9:ca:d8:75:58:f9:33:c3:a6:7e:9c:06:3d:96: 70:21:0c:99:34:17:57:93:93:0e:60:a1:7f:2b:df:c7:a9:37: e6:59:f8:94:c3:7b:77:2d:79:a4:83:e0:37:cb:88:a0:e6:d1: 25:01:bf:6f:44:6f:48:4c:4c:e1:40:fa:63:c6:9a:04:19:f6: 10:05:a4:f9:af:3c:ea:f7:80:dd:92:4e:55:8f:68:17:3d:88: 3f:9e:75:c9:dd:8c:01:ec:42:09:f2:25:ec:1d:4d:5e:76:4d: 07:a8:b4:88:84:56:a2:27:4c:9f:3a:04:89:b9:c4:03:0e:28: 42:84:f5:55:ee:03:08:c9:dd:32:77:c1:c3:2f:04:7b:88:71: de:b9:c1:f6:f8:8e:80:cd:4b:0b:3c:27:b6:19:b1:f2:18:26: 40:eb:07:ff:f0:e2:85:2d:ef:32:41:0b:2b:13:05:6f:05:da: fb:42:82:90:d5:95:3a:a3:06:f8:f7:6a:a5:f2:36:cc:41:d7: e4:0d:4c:13 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUN2RR47r2+QtQDehL5Q6ek0e1s3MwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTQzMloX DTI3MDMwMzA2MTkzMlowMzExMC8GA1UEAxMoOEQ4OTA1MjFBREJGMzJDOTczMkMx NEQ2QjZEMTk5MDBBRjhFNjIwQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL3VdjWIwTAS4RUsPiybOly1KLeVWRTA/2mvuhD5B1Hc2Mw1d2nGcHWLeFfO J7YjVtdObSgtvKWU90abXwB6E10EXLCsINo1eHkHV3Zk7MMukE5u0Q6vdOgKbGKk 0U7+63Q2cn9HC30g5I8M5DkWZvcfCmaKp+nn5qdZFNKrDwSeE/xoEsy4iV8V1nt+ I9z2S95u+ukmFOrMvTrrE7XRPno+rkbjrnFI6fKijkaQ5cDu2ILoMl3NuFK1Wvyr Vs5qx5IXqpGDdKw3VarYcCZzjrn4DyJun8DdolmlSdxjdJBXa3ObZA1KWl5eQMwA 0Kq/XPn6Q4YDzbkAimquJMZuBnECAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSNiQUh rb8yyXMsFNa20ZkAr45iDDAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDczMi5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qCIwDQYJKoZIhvcNAQELBQADggEBAHZesy214/yDQHWLMlMtssIrW4omBoijmR/J Oe30vEfYCM5Qj3AwhtowqKOyR4RD8BQIJy0lN/s5L5Gpyth1WPkzw6Z+nAY9lnAh DJk0F1eTkw5goX8r38epN+ZZ+JTDe3cteaSD4DfLiKDm0SUBv29Eb0hMTOFA+mPG mgQZ9hAFpPmvPOr3gN2STlWPaBc9iD+edcndjAHsQgnyJewdTV52TQeotIiEVqIn TJ86BIm5xAMOKEKE9VXuAwjJ3TJ3wcMvBHuIcd65wfb4joDNSws8J7YZsfIYJkDr B//w4oUt7zJBCysTBW8F2vtCgpDVlTqjBvj3aqXyNsxB1+QNTBM= -----END CERTIFICATE-----Generated at Sat Mar 28 11:42:36 2026 by rpki-client