$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144813.roa File: AS144813.roa (raw, json) Hash identifier: cNu/4EfWGIVlgtOl8zYltF71pz2KO+YEvWaE041+P4U= Subject key identifier: 6B:07:2C:70:37:24:4C:DF:CB:FE:18:27:23:CE:EC:6B:02:30:93:2A Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 373C7812294894F95883E0280C3A19A2942EEC36 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144813.roa Signing time: Wed 04 Mar 2026 06:19:32 +0000 ROA not before: Wed 04 Mar 2026 06:14:32 +0000 ROA not after: Wed 03 Mar 2027 06:19:32 +0000 asID: 144813 IP address blocks: 240a:a873::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:3c:78:12:29:48:94:f9:58:83:e0:28:0c:3a:19:a2:94:2e:ec:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:14:32 2026 GMT Not After : Mar 3 06:19:32 2027 GMT Subject: CN=6B072C7037244CDFCBFE182723CEEC6B0230932A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:33:8b:0e:90:2c:ff:a2:74:e9:87:23:85:d0: da:62:a7:4c:75:b6:07:d0:ed:5d:f0:b2:8b:42:c5: d9:79:68:71:d6:a5:6d:ff:30:be:58:1b:39:16:f6: cc:38:d0:de:29:5e:c1:49:0b:ce:55:05:4b:78:60: 81:74:35:23:97:7a:dd:9a:b7:c1:36:f0:3f:f6:9e: 27:93:e9:c8:05:94:a1:c1:a5:59:5d:a0:72:5c:2c: 4c:a2:c6:0e:e3:a2:e2:a6:0d:cf:33:9f:93:49:1e: 5c:50:04:2c:63:16:87:a6:d1:df:00:6f:d1:0f:26: 66:7a:08:3d:df:fb:2a:29:50:f4:2b:79:ed:88:20: 0e:56:fd:05:41:5e:79:a6:14:a3:8d:be:b6:8b:3d: 81:3a:33:9c:c3:71:4d:7d:a7:d6:e0:41:8e:59:e8: d3:e2:3b:b7:b1:d7:eb:73:49:e6:2d:06:f9:74:87: d9:00:32:ae:39:b7:9e:31:8c:31:70:e5:40:ae:e3: 8c:f4:43:3e:5a:18:ef:1c:be:90:b6:b1:bf:59:88: d6:8c:7d:0e:12:92:44:03:58:fb:0a:8c:38:1d:e4: 9b:4d:3f:ee:cc:fa:fc:83:cb:80:bf:4b:45:be:7e: 83:f2:0a:a6:e0:52:cd:5a:76:e9:a7:a9:7a:83:5b: 16:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:07:2C:70:37:24:4C:DF:CB:FE:18:27:23:CE:EC:6B:02:30:93:2A X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144813.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a873::/32 Signature Algorithm: sha256WithRSAEncryption cf:91:03:a9:55:c4:be:d6:8c:dc:ef:32:dc:9a:8a:ac:2d:3e: be:2f:e7:de:e2:59:fe:75:42:31:b4:e0:89:62:f4:a4:11:22: 0d:f4:90:dd:85:de:df:ee:25:c2:4a:87:c6:96:a3:02:50:94: 2d:3b:4c:e4:22:00:af:a5:a6:5c:8c:97:0c:75:b3:78:24:92: 05:41:86:46:19:92:92:c8:4e:87:ae:30:de:a4:12:9e:93:18: 68:63:67:61:bd:74:38:91:9c:80:7d:bf:a5:5e:0c:af:ed:89: 98:fc:79:a6:40:0a:4e:eb:88:ff:cb:de:22:e5:ae:7f:39:7a: 55:cf:e7:60:f7:38:4c:88:99:df:b0:56:c5:5f:31:b4:f9:c1: 1a:32:79:41:bd:b9:cd:10:59:45:94:6d:ed:54:a9:41:e9:32: 06:f7:2b:e7:aa:ad:e7:52:d2:b4:7c:97:b5:8f:60:7d:1e:04: d9:8f:87:84:3e:3b:dc:26:04:3a:6c:a9:57:02:12:6c:7d:d5: ec:8c:60:ed:af:9d:e9:34:cc:41:a1:9c:a1:ea:b8:bc:b5:5d: 8e:98:8e:d3:be:a7:ef:c8:36:96:44:62:be:ef:30:72:82:95: 79:72:9c:e4:61:06:af:2f:82:bd:2b:59:d5:18:eb:23:8e:6d: 14:64:3f:97 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUNzx4EilIlPlYg+AoDDoZopQu7DYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTQzMloX DTI3MDMwMzA2MTkzMlowMzExMC8GA1UEAxMoNkIwNzJDNzAzNzI0NENERkNCRkUx ODI3MjNDRUVDNkIwMjMwOTMyQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMsziw6QLP+idOmHI4XQ2mKnTHW2B9DtXfCyi0LF2Xlocdalbf8wvlgbORb2 zDjQ3ilewUkLzlUFS3hggXQ1I5d63Zq3wTbwP/aeJ5PpyAWUocGlWV2gclwsTKLG DuOi4qYNzzOfk0keXFAELGMWh6bR3wBv0Q8mZnoIPd/7KilQ9Ct57YggDlb9BUFe eaYUo42+tos9gToznMNxTX2n1uBBjlno0+I7t7HX63NJ5i0G+XSH2QAyrjm3njGM MXDlQK7jjPRDPloY7xy+kLaxv1mI1ox9DhKSRANY+wqMOB3km00/7sz6/IPLgL9L Rb5+g/IKpuBSzVp26aepeoNbFskCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRrByxw NyRM38v+GCcjzuxrAjCTKjAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDgxMy5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qHMwDQYJKoZIhvcNAQELBQADggEBAM+RA6lVxL7WjNzvMtyaiqwtPr4v597iWf51 QjG04Ili9KQRIg30kN2F3t/uJcJKh8aWowJQlC07TOQiAK+lplyMlwx1s3gkkgVB hkYZkpLIToeuMN6kEp6TGGhjZ2G9dDiRnIB9v6VeDK/tiZj8eaZACk7riP/L3iLl rn85elXP52D3OEyImd+wVsVfMbT5wRoyeUG9uc0QWUWUbe1UqUHpMgb3K+eqredS 0rR8l7WPYH0eBNmPh4Q+O9wmBDpsqVcCEmx91eyMYO2vnek0zEGhnKHquLy1XY6Y jtO+p+/INpZEYr7vMHKClXlynORhBq8vgr0rWdUY6yOObRRkP5c= -----END CERTIFICATE-----Generated at Sat Mar 28 11:45:03 2026 by rpki-client