$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144733.roa File: AS144733.roa (raw, json) Hash identifier: lIYHYlSaw1fmFuFYnNatJtyuZjviNlBKljotqAkQjcw= Subject key identifier: B8:0D:47:1F:D3:F5:1D:31:40:D1:93:15:E5:F4:AC:B1:F4:1D:74:87 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 70EAF2D590309900FAC2B92F2D847EBB9C68269F Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144733.roa Signing time: Wed 04 Mar 2026 06:19:56 +0000 ROA not before: Wed 04 Mar 2026 06:14:56 +0000 ROA not after: Wed 03 Mar 2027 06:19:56 +0000 asID: 144733 IP address blocks: 240a:a823::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:ea:f2:d5:90:30:99:00:fa:c2:b9:2f:2d:84:7e:bb:9c:68:26:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:14:56 2026 GMT Not After : Mar 3 06:19:56 2027 GMT Subject: CN=B80D471FD3F51D3140D19315E5F4ACB1F41D7487 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:ac:55:4c:52:c9:73:2b:85:43:79:a4:d6:14: 2c:76:f2:81:39:26:b9:e5:c4:6b:b5:c8:a1:6f:47: ba:c5:b0:e7:0a:71:5b:be:8f:56:5a:93:76:22:3d: 63:7f:46:8e:d7:b7:ce:46:a4:c2:f7:bd:f7:8f:f9: 35:72:f1:b8:4c:0c:10:c3:82:96:bc:57:2c:2a:86: 1b:e1:b3:36:61:c9:93:2d:74:ce:7a:db:9d:49:6d: 1e:62:8f:b9:fe:c1:41:24:ca:19:f4:d7:9d:df:d3: d7:aa:67:5b:fe:6d:14:63:3c:60:aa:83:fa:84:31: b8:0a:a4:30:de:9e:13:08:31:e8:74:05:29:65:2d: 4e:ef:49:e2:b2:3b:b2:81:bb:f6:e9:73:21:57:be: 7a:14:41:75:91:75:38:e4:1c:0a:a2:a0:50:57:f3: f0:83:c9:30:87:7a:e7:55:f7:c4:06:a0:2b:ad:07: b2:cc:1c:84:36:0f:c0:44:c3:a4:64:8d:90:d3:c9: 1b:4f:a6:e9:94:e4:0c:3b:68:05:c0:66:de:b3:fb: 92:46:0e:2d:6e:78:31:5b:00:91:86:97:f0:1d:73: e8:b5:ff:69:11:5f:36:2d:68:e2:e4:44:99:2e:84: d8:7f:96:4a:2d:73:12:dc:bc:8f:27:fe:eb:2c:56: d9:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:0D:47:1F:D3:F5:1D:31:40:D1:93:15:E5:F4:AC:B1:F4:1D:74:87 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144733.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a823::/32 Signature Algorithm: sha256WithRSAEncryption 91:97:10:e5:92:c5:f6:43:9f:4b:42:f5:e2:5e:73:bd:90:54: ae:67:13:02:4c:88:e5:fa:68:88:43:c1:0f:9a:1b:02:40:48: 15:32:87:cd:3d:ce:cf:f4:71:94:da:bb:d5:81:2c:9c:0e:3a: 20:a9:df:5c:1c:f1:92:36:cf:07:4b:66:6e:1e:c6:1d:e9:d6: 03:30:5e:64:60:78:f2:7a:c5:64:0e:dd:a5:0a:19:47:86:6b: 00:77:6a:f6:b7:aa:ef:4c:17:25:90:fb:1c:a8:c5:02:ea:ad: 51:27:b2:25:bb:95:87:1b:15:60:38:bc:92:ef:13:9e:96:fd: 30:97:c1:91:26:1d:d4:ad:12:a4:b2:9a:49:44:f1:fc:f4:58: 28:04:0f:b1:a5:8c:a3:d0:c1:5b:96:c3:f7:f0:b7:60:36:d1: ea:6f:f1:91:e4:e2:e3:86:b0:73:fa:f2:b5:a7:52:db:f2:a7: cc:f0:39:53:b4:c1:0d:2c:7a:0e:fb:e8:70:a0:f4:06:a0:a5: 03:47:55:9b:f8:99:42:88:04:4b:36:e9:32:82:18:6a:fd:aa: 64:37:20:f0:ee:c9:a5:62:11:0e:82:1b:c7:ed:0c:a6:2b:7a: 6e:fd:4e:c9:cf:80:66:05:b3:57:b5:f9:f4:94:e3:f0:02:e7: 0c:ef:44:3c -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUcOry1ZAwmQD6wrkvLYR+u5xoJp8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTQ1NloX DTI3MDMwMzA2MTk1NlowMzExMC8GA1UEAxMoQjgwRDQ3MUZEM0Y1MUQzMTQwRDE5 MzE1RTVGNEFDQjFGNDFENzQ4NzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANSsVUxSyXMrhUN5pNYULHbygTkmueXEa7XIoW9HusWw5wpxW76PVlqTdiI9 Y39Gjte3zkakwve994/5NXLxuEwMEMOClrxXLCqGG+GzNmHJky10znrbnUltHmKP uf7BQSTKGfTXnd/T16pnW/5tFGM8YKqD+oQxuAqkMN6eEwgx6HQFKWUtTu9J4rI7 soG79ulzIVe+ehRBdZF1OOQcCqKgUFfz8IPJMId651X3xAagK60HsswchDYPwETD pGSNkNPJG0+m6ZTkDDtoBcBm3rP7kkYOLW54MVsAkYaX8B1z6LX/aRFfNi1o4uRE mS6E2H+WSi1zEty8jyf+6yxW2cECAwEAAaOCAcUwggHBMB0GA1UdDgQWBBS4DUcf 0/UdMUDRkxXl9Kyx9B10hzAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDczMy5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qCMwDQYJKoZIhvcNAQELBQADggEBAJGXEOWSxfZDn0tC9eJec72QVK5nEwJMiOX6 aIhDwQ+aGwJASBUyh809zs/0cZTau9WBLJwOOiCp31wc8ZI2zwdLZm4exh3p1gMw XmRgePJ6xWQO3aUKGUeGawB3ava3qu9MFyWQ+xyoxQLqrVEnsiW7lYcbFWA4vJLv E56W/TCXwZEmHdStEqSymklE8fz0WCgED7GljKPQwVuWw/fwt2A20epv8ZHk4uOG sHP68rWnUtvyp8zwOVO0wQ0seg776HCg9AagpQNHVZv4mUKIBEs26TKCGGr9qmQ3 IPDuyaViEQ6CG8ftDKYrem79TsnPgGYFs1e1+fSU4/AC5wzvRDw= -----END CERTIFICATE-----Generated at Sat Mar 28 11:42:45 2026 by rpki-client