$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144743.roa File: AS144743.roa (raw, json) Hash identifier: HMNmJXpD17NMRbqfMWZkLRsH7aNHB6qz9kIXClImxF0= Subject key identifier: 48:E7:04:76:FC:48:8E:C0:29:BC:3C:C9:3D:46:05:3B:4F:C7:43:1B Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 38C199782C9726F47EDCF6A9E7699AAE8DBE4062 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144743.roa Signing time: Wed 04 Mar 2026 06:21:49 +0000 ROA not before: Wed 04 Mar 2026 06:16:49 +0000 ROA not after: Wed 03 Mar 2027 06:21:49 +0000 asID: 144743 IP address blocks: 240a:a82d::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:c1:99:78:2c:97:26:f4:7e:dc:f6:a9:e7:69:9a:ae:8d:be:40:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:16:49 2026 GMT Not After : Mar 3 06:21:49 2027 GMT Subject: CN=48E70476FC488EC029BC3CC93D46053B4FC7431B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:cf:6d:8c:24:41:dc:39:0b:f4:5a:6d:19:42: c8:bd:c4:68:17:85:d6:a1:bc:ca:cb:d0:bd:32:a2: 70:55:c9:7d:da:84:24:9e:93:eb:34:e1:b0:95:65: ea:75:0d:08:b3:7f:9b:55:df:76:fa:73:26:44:13: d6:b0:8b:39:e4:fb:9b:cb:a7:e9:79:59:37:23:b9: 35:ac:fb:10:61:65:f6:c1:52:14:db:fe:26:d8:c4: b3:d2:a6:09:27:3a:7d:6c:86:05:fd:ae:0f:c7:a6: b7:01:c9:b6:23:29:d5:01:8a:57:50:aa:a9:3f:1d: 94:72:88:a9:67:c4:1b:0d:8e:39:cb:46:8c:b0:de: e9:c9:3a:15:58:19:b9:bc:69:ba:b1:3e:6e:b8:fe: d0:74:eb:a4:10:df:7b:14:a8:ee:29:65:b5:17:da: d4:57:3c:0f:e3:97:9d:ed:89:3c:8d:cf:1e:f0:03: 9c:4d:c2:f5:a9:3d:a4:97:7b:5e:df:bb:6c:66:e3: 06:78:92:4b:e6:dc:d7:52:79:4a:a6:3d:2c:b5:6f: 7a:4f:14:25:eb:82:a2:77:55:9a:74:6a:a5:8f:f5: 55:e2:f1:60:38:38:c6:da:8c:8f:e6:b5:f5:7d:12: c9:d7:d2:42:24:c8:cf:72:f6:66:c4:cf:3c:31:75: 92:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:E7:04:76:FC:48:8E:C0:29:BC:3C:C9:3D:46:05:3B:4F:C7:43:1B X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144743.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a82d::/32 Signature Algorithm: sha256WithRSAEncryption 17:75:da:11:86:47:34:8d:d5:59:b0:4b:74:30:e2:ac:71:fd: e8:eb:b6:e6:83:89:01:96:db:2a:04:54:1a:1c:4a:c1:68:40: 8a:fa:54:17:da:1f:20:a4:af:a5:47:cf:ff:fb:b5:d2:26:ab: 64:85:6d:02:73:58:26:f6:02:c0:1e:34:4a:b9:7f:52:cf:74: 0e:01:d9:cc:8a:da:10:f1:98:04:71:ca:cc:a4:d6:c2:8e:da: 3e:18:f9:32:3f:36:10:d7:2d:8c:e2:8e:c7:97:9d:f6:58:fc: 1c:7b:71:0f:7d:d5:68:8c:fd:f4:6c:c7:0a:13:31:00:7d:f4: ab:b7:68:1c:60:ef:1d:a3:fc:55:f6:14:35:6e:51:7a:7f:9a: 75:22:a1:39:46:05:80:ad:ef:0f:e4:29:20:81:27:57:56:58: d4:df:60:ba:97:27:f6:4e:82:30:75:38:18:7d:ad:d7:cb:f1: a9:0a:4e:cb:73:a2:c9:e4:18:25:ca:70:9e:5d:6f:4f:ad:bc: 93:b7:25:6a:d8:0f:c9:b6:17:bf:bf:8a:f0:8d:55:7e:cd:75: b3:ca:67:cf:09:7c:42:90:08:89:a8:11:b1:97:13:ce:1b:9a: 2e:14:60:07:bb:e4:5f:7f:7c:21:f4:05:b8:b7:66:3e:3d:9c: 4a:f2:31:c0 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUOMGZeCyXJvR+3Pap52maro2+QGIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTY0OVoX DTI3MDMwMzA2MjE0OVowMzExMC8GA1UEAxMoNDhFNzA0NzZGQzQ4OEVDMDI5QkMz Q0M5M0Q0NjA1M0I0RkM3NDMxQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMXPbYwkQdw5C/RabRlCyL3EaBeF1qG8ysvQvTKicFXJfdqEJJ6T6zThsJVl 6nUNCLN/m1XfdvpzJkQT1rCLOeT7m8un6XlZNyO5Naz7EGFl9sFSFNv+JtjEs9Km CSc6fWyGBf2uD8emtwHJtiMp1QGKV1CqqT8dlHKIqWfEGw2OOctGjLDe6ck6FVgZ ubxpurE+brj+0HTrpBDfexSo7illtRfa1Fc8D+OXne2JPI3PHvADnE3C9ak9pJd7 Xt+7bGbjBniSS+bc11J5SqY9LLVvek8UJeuCondVmnRqpY/1VeLxYDg4xtqMj+a1 9X0SydfSQiTIz3L2ZsTPPDF1koECAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRI5wR2 /EiOwCm8PMk9RgU7T8dDGzAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDc0My5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qC0wDQYJKoZIhvcNAQELBQADggEBABd12hGGRzSN1VmwS3Qw4qxx/ejrtuaDiQGW 2yoEVBocSsFoQIr6VBfaHyCkr6VHz//7tdImq2SFbQJzWCb2AsAeNEq5f1LPdA4B 2cyK2hDxmARxysyk1sKO2j4Y+TI/NhDXLYzijseXnfZY/Bx7cQ991WiM/fRsxwoT MQB99Ku3aBxg7x2j/FX2FDVuUXp/mnUioTlGBYCt7w/kKSCBJ1dWWNTfYLqXJ/ZO gjB1OBh9rdfL8akKTstzosnkGCXKcJ5db0+tvJO3JWrYD8m2F7+/ivCNVX7NdbPK Z88JfEKQCImoEbGXE84bmi4UYAe75F9/fCH0Bbi3Zj49nEryMcA= -----END CERTIFICATE-----Generated at Sat Mar 28 11:43:41 2026 by rpki-client