$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144753.roa File: AS144753.roa (raw, json) Hash identifier: UA4T8NYbRmQrmWX3Vv5Lr/Bts3EtrfwCKdvK45mp/8c= Subject key identifier: 85:EF:7B:17:6E:2D:B5:B1:05:7B:0A:6F:EF:85:74:CB:10:D2:EC:C0 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 29A3A4BA8BE7210155EB48114AD3145CE8060A0A Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144753.roa Signing time: Wed 04 Mar 2026 06:19:29 +0000 ROA not before: Wed 04 Mar 2026 06:14:29 +0000 ROA not after: Wed 03 Mar 2027 06:19:29 +0000 asID: 144753 IP address blocks: 240a:a837::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:a3:a4:ba:8b:e7:21:01:55:eb:48:11:4a:d3:14:5c:e8:06:0a:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:14:29 2026 GMT Not After : Mar 3 06:19:29 2027 GMT Subject: CN=85EF7B176E2DB5B1057B0A6FEF8574CB10D2ECC0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:3b:ba:69:d0:a3:22:48:6e:55:43:67:98:8f: 7d:2c:34:c0:d4:57:f5:4e:61:2a:98:67:53:20:2b: ed:8d:58:85:4f:84:a5:70:5e:32:8a:45:7b:68:ed: fa:a8:1a:d2:11:df:61:4d:03:d3:ee:48:c9:c2:f1: 3c:e3:e2:46:76:d7:bb:1d:72:0a:f1:a2:f0:f4:c8: 6c:25:68:6d:bb:1e:99:4d:3b:33:63:33:e2:a8:4b: a9:a5:11:1d:bf:1d:07:89:e6:e5:ab:f6:ba:27:bd: 81:37:fc:5f:12:1f:49:c2:5a:24:39:b9:8d:85:89: 35:47:19:9d:f5:6a:95:84:fc:c0:0f:d8:e4:a7:99: ec:dc:2a:3a:33:c8:74:7a:21:21:92:62:c1:30:e7: 84:7d:a3:dc:65:3e:bb:47:ef:f0:17:d6:78:b6:30: 15:88:53:99:85:0e:2b:91:ba:41:65:d1:55:81:e9: 6d:f4:f2:97:f5:86:3c:3e:8e:50:86:32:3a:ae:c3: a3:fb:3d:1d:52:5d:87:87:b3:0a:93:27:40:9f:c0: 33:be:95:9c:a7:7c:1e:a7:44:ad:2c:9c:fb:9c:93: 88:76:84:76:8f:01:db:3c:13:a9:6d:e5:dc:af:bd: 9c:70:17:8c:34:df:60:b6:f5:ee:c8:a7:38:ed:e9: 90:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:EF:7B:17:6E:2D:B5:B1:05:7B:0A:6F:EF:85:74:CB:10:D2:EC:C0 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144753.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a837::/32 Signature Algorithm: sha256WithRSAEncryption 71:7d:5d:4b:98:cb:80:9a:1f:45:8c:db:89:06:7c:4f:3c:bd: d9:49:6f:83:21:69:9a:c5:c4:4a:24:81:d5:62:be:0b:f6:55: f2:48:02:99:77:de:61:15:a3:95:2c:b3:82:b7:3e:84:a0:a3: 82:2c:1d:ac:cb:3a:67:fd:60:16:85:69:f2:df:3d:1e:99:a9: 95:a8:20:f8:e7:4f:6f:71:9d:9a:9b:34:44:9b:68:c9:f0:b4: dd:36:8d:d6:0d:2d:4c:b8:1d:40:0b:6c:63:3c:5d:6e:b0:cc: 85:b2:eb:4e:77:ff:48:57:9e:6c:48:d3:de:ec:7d:4b:8d:1d: 99:f3:72:ea:d3:cb:aa:c5:3b:72:93:ac:41:89:17:1d:df:f7: e7:98:99:14:9f:93:e8:b2:b1:56:bb:f6:79:6e:0d:f3:b8:ad: b3:2f:01:90:bb:a8:da:4e:08:71:2e:6c:f8:c5:f7:e7:c5:bb: bb:42:74:c2:92:81:db:b1:a9:a8:90:75:df:d9:21:e2:84:02: 37:52:6d:3a:e0:35:f2:4c:15:ea:f3:56:c0:9f:82:10:71:e2: 1c:8e:16:f0:82:ea:7b:36:ea:ab:42:f5:db:7d:d7:7e:5c:4e: ac:0c:6c:f9:4c:36:3f:d1:60:d7:5f:32:26:3e:eb:0a:be:33: d8:c2:f0:cd -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUKaOkuovnIQFV60gRStMUXOgGCgowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTQyOVoX DTI3MDMwMzA2MTkyOVowMzExMC8GA1UEAxMoODVFRjdCMTc2RTJEQjVCMTA1N0Iw QTZGRUY4NTc0Q0IxMEQyRUNDMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMY7umnQoyJIblVDZ5iPfSw0wNRX9U5hKphnUyAr7Y1YhU+EpXBeMopFe2jt +qga0hHfYU0D0+5IycLxPOPiRnbXux1yCvGi8PTIbCVobbsemU07M2Mz4qhLqaUR Hb8dB4nm5av2uie9gTf8XxIfScJaJDm5jYWJNUcZnfVqlYT8wA/Y5KeZ7NwqOjPI dHohIZJiwTDnhH2j3GU+u0fv8BfWeLYwFYhTmYUOK5G6QWXRVYHpbfTyl/WGPD6O UIYyOq7Do/s9HVJdh4ezCpMnQJ/AM76VnKd8HqdErSyc+5yTiHaEdo8B2zwTqW3l 3K+9nHAXjDTfYLb17sinOO3pkGMCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSF73sX bi21sQV7Cm/vhXTLENLswDAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDc1My5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qDcwDQYJKoZIhvcNAQELBQADggEBAHF9XUuYy4CaH0WM24kGfE88vdlJb4MhaZrF xEokgdVivgv2VfJIApl33mEVo5Uss4K3PoSgo4IsHazLOmf9YBaFafLfPR6ZqZWo IPjnT29xnZqbNESbaMnwtN02jdYNLUy4HUALbGM8XW6wzIWy6053/0hXnmxI097s fUuNHZnzcurTy6rFO3KTrEGJFx3f9+eYmRSfk+iysVa79nluDfO4rbMvAZC7qNpO CHEubPjF9+fFu7tCdMKSgduxqaiQdd/ZIeKEAjdSbTrgNfJMFerzVsCfghBx4hyO FvCC6ns26qtC9dt9135cTqwMbPlMNj/RYNdfMiY+6wq+M9jC8M0= -----END CERTIFICATE-----Generated at Sat Mar 28 11:42:57 2026 by rpki-client