$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144759.roa File: AS144759.roa (raw, json) Hash identifier: gnmPYcMyM/Np4yOfbK0IasmfqYFvpUP7cYFTM4qBbRI= Subject key identifier: 23:3D:F4:9B:1A:77:E6:84:22:C2:69:0B:4B:6D:4F:41:A3:D7:19:A5 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 6EFDD2844141A9F0289D6583F81B19261B90ADE6 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144759.roa Signing time: Wed 04 Mar 2026 06:21:14 +0000 ROA not before: Wed 04 Mar 2026 06:16:14 +0000 ROA not after: Wed 03 Mar 2027 06:21:14 +0000 asID: 144759 IP address blocks: 240a:a83d::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:fd:d2:84:41:41:a9:f0:28:9d:65:83:f8:1b:19:26:1b:90:ad:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:16:14 2026 GMT Not After : Mar 3 06:21:14 2027 GMT Subject: CN=233DF49B1A77E68422C2690B4B6D4F41A3D719A5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:77:f4:cd:08:4e:d9:f3:00:6e:56:c7:30:5f: ec:05:49:b6:9c:6f:43:f6:6c:e0:96:a5:81:2d:9b: 6a:c1:58:2b:40:dc:be:76:b8:e0:11:ca:72:3c:12: 0f:2c:7f:62:9e:d0:75:5b:39:e8:8d:1d:89:ea:dc: b5:17:9e:31:fc:a7:42:d4:80:0c:de:2d:90:f3:9a: da:93:62:80:74:2c:c4:b9:a0:f9:99:77:5c:79:51: aa:5d:29:bd:4b:b4:a9:33:f6:2a:5c:2a:0e:ce:d9: 66:3d:6f:f1:f9:07:06:20:19:23:cf:9c:1f:52:0e: e5:ee:29:e3:f4:6d:0d:e8:f9:2a:89:98:5e:a6:e2: 07:b1:37:80:57:c7:6d:73:12:38:d0:c9:b3:6b:53: a4:06:71:ea:ef:ab:ab:e2:d0:4d:b2:dc:a0:4a:5c: 6e:31:0a:be:21:cf:a5:9f:f1:ba:81:b5:70:7b:01: 16:b6:59:3d:9a:06:fc:7b:70:b4:31:86:55:0f:82: c5:1d:f8:57:b4:83:8a:d3:43:55:11:73:37:40:df: 9a:99:c0:4f:c9:77:94:49:c4:58:33:ee:86:6d:b9: b6:8d:ce:39:85:e4:0a:53:ea:a5:85:13:87:d0:8f: 03:a4:5a:5f:20:c0:0a:a7:66:88:df:7e:42:fc:e9: ee:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:3D:F4:9B:1A:77:E6:84:22:C2:69:0B:4B:6D:4F:41:A3:D7:19:A5 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144759.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a83d::/32 Signature Algorithm: sha256WithRSAEncryption a1:8f:24:49:8d:bf:3d:7c:a3:94:f3:8e:28:25:67:c0:2f:aa: 48:8f:01:6d:30:17:00:c9:58:07:14:83:e4:f9:71:ec:f8:d5: 47:e7:ab:b5:7f:2a:e8:37:b7:78:de:28:e2:d8:2f:8c:e0:60: a5:9e:6e:b2:89:24:cf:8c:64:89:5f:df:6e:63:e4:6a:99:81: 6e:6e:67:14:c6:3c:5e:69:4d:55:52:88:71:7b:e8:38:af:73: fa:60:43:c5:43:3b:11:9e:8e:f7:f2:f4:86:c7:b2:67:88:e8: fb:78:7d:85:70:6f:aa:aa:90:04:4a:03:63:27:d1:f8:42:d2: 28:ff:01:6a:51:75:47:23:7b:98:db:6a:31:91:26:04:a5:67: c0:50:f7:ae:27:c2:d8:aa:02:b3:3d:46:20:6f:b4:fd:31:64: b4:fd:8c:3c:44:a6:a7:64:1d:9c:60:14:8d:58:c5:c1:73:12: a8:3e:58:58:3b:84:d0:37:dc:1b:98:1d:56:20:3d:33:2c:71: 0a:ee:13:45:74:d8:99:07:68:92:e9:55:ce:e4:fc:29:ab:35: 28:42:ef:ee:49:6c:5b:23:63:3b:90:6d:2e:f8:50:64:be:aa: b2:92:20:85:a9:29:38:79:2a:2f:0a:98:b3:44:28:ea:eb:e0: 66:9d:72:38 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUbv3ShEFBqfAonWWD+BsZJhuQreYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTYxNFoX DTI3MDMwMzA2MjExNFowMzExMC8GA1UEAxMoMjMzREY0OUIxQTc3RTY4NDIyQzI2 OTBCNEI2RDRGNDFBM0Q3MTlBNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALh39M0ITtnzAG5WxzBf7AVJtpxvQ/Zs4JalgS2basFYK0Dcvna44BHKcjwS Dyx/Yp7QdVs56I0dierctReeMfynQtSADN4tkPOa2pNigHQsxLmg+Zl3XHlRql0p vUu0qTP2KlwqDs7ZZj1v8fkHBiAZI8+cH1IO5e4p4/RtDej5KomYXqbiB7E3gFfH bXMSONDJs2tTpAZx6u+rq+LQTbLcoEpcbjEKviHPpZ/xuoG1cHsBFrZZPZoG/Htw tDGGVQ+CxR34V7SDitNDVRFzN0DfmpnAT8l3lEnEWDPuhm25to3OOYXkClPqpYUT h9CPA6RaXyDACqdmiN9+Qvzp7vMCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQjPfSb GnfmhCLCaQtLbU9Bo9cZpTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDc1OS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qD0wDQYJKoZIhvcNAQELBQADggEBAKGPJEmNvz18o5TzjiglZ8AvqkiPAW0wFwDJ WAcUg+T5cez41Ufnq7V/Kug3t3jeKOLYL4zgYKWebrKJJM+MZIlf325j5GqZgW5u ZxTGPF5pTVVSiHF76Divc/pgQ8VDOxGejvfy9IbHsmeI6Pt4fYVwb6qqkARKA2Mn 0fhC0ij/AWpRdUcje5jbajGRJgSlZ8BQ964nwtiqArM9RiBvtP0xZLT9jDxEpqdk HZxgFI1YxcFzEqg+WFg7hNA33BuYHVYgPTMscQruE0V02JkHaJLpVc7k/CmrNShC 7+5JbFsjYzuQbS74UGS+qrKSIIWpKTh5Ki8KmLNEKOrr4Gadcjg= -----END CERTIFICATE-----Generated at Sat Mar 28 11:43:54 2026 by rpki-client