$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144757.roa File: AS144757.roa (raw, json) Hash identifier: lUk3XYsvGA5ZDVlLQPIA8vSZHqqHgXAW3nYmv7daC5g= Subject key identifier: 67:AD:D3:9B:FC:FE:E7:F6:BA:30:B8:80:3C:DD:EA:C3:97:68:D8:E7 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 575524BC9637AC0B649FF0AECB0D205B6AE5FEAC Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144757.roa Signing time: Wed 04 Mar 2026 06:22:25 +0000 ROA not before: Wed 04 Mar 2026 06:17:25 +0000 ROA not after: Wed 03 Mar 2027 06:22:25 +0000 asID: 144757 IP address blocks: 240a:a83b::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:55:24:bc:96:37:ac:0b:64:9f:f0:ae:cb:0d:20:5b:6a:e5:fe:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:17:25 2026 GMT Not After : Mar 3 06:22:25 2027 GMT Subject: CN=67ADD39BFCFEE7F6BA30B8803CDDEAC39768D8E7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:72:a8:5d:9a:0e:ec:dc:a1:a4:c5:9d:35:d6: 18:9f:e8:87:32:c6:4b:64:54:bf:a4:80:e0:f9:80: e2:48:49:5d:10:3e:7e:6f:3d:ff:b4:64:99:5b:8b: e8:f4:c7:e2:77:80:a1:7a:f1:cb:9c:4b:c6:09:f1: ce:bc:8b:78:84:fd:21:92:9f:67:a1:32:b9:8e:19: 7b:70:dd:b2:ba:47:f6:4a:28:f3:56:77:ea:ec:04: a0:b8:d2:51:a2:6a:36:2f:f1:25:22:c2:3f:7a:3a: 4b:9b:69:f1:af:85:7a:3c:81:6a:0e:89:c2:99:af: b8:1a:dc:af:2f:bb:cd:17:08:ce:9c:d5:2a:77:7f: 75:8b:75:7f:8a:44:6b:1f:36:1c:48:e5:61:3e:d1: ab:62:d0:43:d7:08:62:39:92:e9:1a:56:a3:0f:52: 25:66:6e:86:37:a4:a7:c4:f8:8e:1c:4d:5d:b2:0b: b8:1f:28:32:4d:b0:f3:c1:0a:cc:1d:79:93:54:6b: 71:4a:3d:7a:eb:4e:5c:41:31:86:b0:72:1a:00:74: 04:07:1a:d1:07:df:38:b3:b4:b1:0e:ca:44:99:97: 36:8f:c7:86:d2:71:ea:d4:f6:04:fc:20:54:92:20: 69:d1:c4:1b:4d:7b:84:c5:ef:4d:b1:7b:7a:3f:b2: 00:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:AD:D3:9B:FC:FE:E7:F6:BA:30:B8:80:3C:DD:EA:C3:97:68:D8:E7 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144757.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a83b::/32 Signature Algorithm: sha256WithRSAEncryption d5:69:40:0e:07:4d:a3:b6:b4:e8:a8:bb:65:52:47:f6:1a:b9: ed:20:a4:85:55:7b:bd:23:ce:88:74:1d:43:f5:77:48:a3:f1: 35:39:9c:5e:a3:f4:39:0c:82:32:ce:26:48:4e:e6:2f:4f:8d: 15:71:34:db:4b:5d:09:ad:b0:ad:c4:4e:44:d5:dd:9d:ab:96: ae:59:48:a0:4e:cb:60:b5:a6:77:da:7f:82:39:3c:8e:48:d2: 02:76:ee:3b:07:7b:fb:b0:f2:58:46:d1:6c:f3:6b:1b:ed:a1: 58:60:cc:62:7f:dd:27:9d:9d:7e:ac:d1:c0:c9:b9:5d:eb:5e: b8:76:de:9c:a0:9d:b6:27:69:7d:0b:50:94:20:ca:15:69:89: da:a6:0e:c9:75:2e:98:b4:94:10:a2:bf:10:d7:a6:a5:3c:df: cf:02:14:71:78:fa:52:a4:0e:af:be:a0:45:1a:69:87:28:7b: 7d:96:c1:6d:24:7d:34:59:0f:67:d4:96:f4:b8:30:48:a5:e2: 6c:12:eb:76:3c:3f:ec:5c:fb:fc:ed:93:37:81:89:65:72:88: 1d:43:0e:b2:15:5f:95:e5:38:4d:e4:74:61:3b:81:6a:c5:ac: 02:79:5d:4c:15:2c:8b:41:41:24:b5:01:57:3c:15:f8:be:08: 88:27:0d:89 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUV1UkvJY3rAtkn/Cuyw0gW2rl/qwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTcyNVoX DTI3MDMwMzA2MjIyNVowMzExMC8GA1UEAxMoNjdBREQzOUJGQ0ZFRTdGNkJBMzBC ODgwM0NEREVBQzM5NzY4RDhFNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKNyqF2aDuzcoaTFnTXWGJ/ohzLGS2RUv6SA4PmA4khJXRA+fm89/7RkmVuL 6PTH4neAoXrxy5xLxgnxzryLeIT9IZKfZ6EyuY4Ze3DdsrpH9koo81Z36uwEoLjS UaJqNi/xJSLCP3o6S5tp8a+FejyBag6JwpmvuBrcry+7zRcIzpzVKnd/dYt1f4pE ax82HEjlYT7Rq2LQQ9cIYjmS6RpWow9SJWZuhjekp8T4jhxNXbILuB8oMk2w88EK zB15k1RrcUo9eutOXEExhrByGgB0BAca0QffOLO0sQ7KRJmXNo/HhtJx6tT2BPwg VJIgadHEG017hMXvTbF7ej+yAEsCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRnrdOb /P7n9rowuIA83erDl2jY5zAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDc1Ny5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qDswDQYJKoZIhvcNAQELBQADggEBANVpQA4HTaO2tOiou2VSR/Yaue0gpIVVe70j zoh0HUP1d0ij8TU5nF6j9DkMgjLOJkhO5i9PjRVxNNtLXQmtsK3ETkTV3Z2rlq5Z SKBOy2C1pnfaf4I5PI5I0gJ27jsHe/uw8lhG0WzzaxvtoVhgzGJ/3SednX6s0cDJ uV3rXrh23pygnbYnaX0LUJQgyhVpidqmDsl1Lpi0lBCivxDXpqU8388CFHF4+lKk Dq++oEUaaYcoe32WwW0kfTRZD2fUlvS4MEil4mwS63Y8P+xc+/ztkzeBiWVyiB1D DrIVX5XlOE3kdGE7gWrFrAJ5XUwVLItBQSS1AVc8Ffi+CIgnDYk= -----END CERTIFICATE-----Generated at Sat Mar 28 11:42:33 2026 by rpki-client