$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144923.roa File: AS144923.roa (raw, json) Hash identifier: xkFIHwcoVbtX9zGZKwX8n7PnFjQnj4/IqdEllfvD0aQ= Subject key identifier: 5E:AF:DC:89:EE:03:75:28:B0:A3:03:8F:68:D9:66:C4:FC:2F:8C:2F Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 5F5E7955901D1A7612A4FB924E307E91B1469DFE Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144923.roa Signing time: Wed 04 Mar 2026 06:21:31 +0000 ROA not before: Wed 04 Mar 2026 06:16:31 +0000 ROA not after: Wed 03 Mar 2027 06:21:31 +0000 asID: 144923 IP address blocks: 240a:a8e1::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:5e:79:55:90:1d:1a:76:12:a4:fb:92:4e:30:7e:91:b1:46:9d:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:16:31 2026 GMT Not After : Mar 3 06:21:31 2027 GMT Subject: CN=5EAFDC89EE037528B0A3038F68D966C4FC2F8C2F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:83:77:de:05:3e:da:c9:a0:23:cd:57:ed:74: 3a:46:89:c3:64:21:52:d3:fa:87:f1:7e:fe:34:0a: 9f:28:77:66:7c:3e:f5:b8:32:a8:10:ca:c8:11:34: 1a:c3:cf:9c:7d:bf:b7:ff:65:04:5c:50:1f:bc:56: 19:e7:a0:29:c0:42:51:81:ab:c4:19:54:de:1e:28: 71:a1:ce:26:73:86:75:82:57:66:51:99:5b:1f:c5: 34:b8:a6:5b:da:38:32:dd:20:da:bc:3a:f4:a7:de: 8b:81:11:6e:30:21:f2:ad:28:7f:e4:7f:5c:f1:f8: f4:10:44:62:7b:34:be:e8:8e:17:78:38:5d:69:6c: fb:57:5e:73:d9:ac:36:c7:5a:d7:02:af:e1:3c:3c: 09:40:6d:f0:1e:61:2a:3d:08:a0:99:94:f5:ef:a7: a9:7f:da:df:ca:9c:f7:ff:33:44:75:4d:a6:84:5c: 31:e8:74:b9:8e:f6:8f:3b:9a:6c:40:37:12:c9:52: 13:9b:26:f9:ee:fb:fe:8a:ca:49:39:0c:83:e3:41: c5:9c:44:0a:01:c6:4b:29:83:80:34:12:9b:78:07: 4c:1d:ec:28:b5:7c:81:4c:b6:84:4c:dd:b0:32:88: 5d:b1:7a:43:d3:53:3b:87:dd:25:64:b9:be:91:a8: a3:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:AF:DC:89:EE:03:75:28:B0:A3:03:8F:68:D9:66:C4:FC:2F:8C:2F X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144923.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a8e1::/32 Signature Algorithm: sha256WithRSAEncryption d5:65:d9:64:7b:30:65:bb:6d:84:a1:06:04:1d:5c:ae:80:e1: c1:b7:06:6d:d7:ab:4a:39:ce:39:5d:7b:4f:ff:c8:20:2c:a3: b6:af:04:b3:25:9a:a2:09:a4:1b:63:b3:72:98:3b:c9:46:12: 81:0e:4c:0b:f8:c1:d2:60:36:bc:30:6b:86:df:04:ee:71:1c: 40:5c:bc:82:2e:64:a3:ec:9d:92:48:91:d9:02:cf:d9:fd:d5: 00:35:2c:3d:18:5a:1c:13:4c:e9:ae:62:e7:96:9c:23:96:71: 70:fc:2d:03:6d:c1:ea:2d:4d:83:af:6d:7f:94:7d:fd:53:b6: cd:e4:72:07:6f:b1:d6:56:c7:41:27:93:72:4e:b8:77:81:93: ef:04:0d:21:6d:4b:1c:10:ff:73:16:9b:59:c8:a8:c1:52:ac: ba:a3:6c:5c:6c:54:8b:d4:b9:ad:c1:2a:d1:87:91:6a:f2:ac: 4e:d1:25:f5:5f:05:78:76:cf:cc:33:f7:e3:b9:a3:e7:8b:9a: a7:72:78:c8:81:de:46:97:0d:46:ca:0a:30:7b:cf:4f:81:bb: e5:09:89:f4:26:0d:fc:1c:40:b5:11:94:1c:88:4e:f8:76:cd: 90:4f:8a:52:8a:99:06:2d:6f:64:dd:83:97:ad:ab:80:cf:a5: f4:8a:8d:11 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUX155VZAdGnYSpPuSTjB+kbFGnf4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTYzMVoX DTI3MDMwMzA2MjEzMVowMzExMC8GA1UEAxMoNUVBRkRDODlFRTAzNzUyOEIwQTMw MzhGNjhEOTY2QzRGQzJGOEMyRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKODd94FPtrJoCPNV+10OkaJw2QhUtP6h/F+/jQKnyh3Znw+9bgyqBDKyBE0 GsPPnH2/t/9lBFxQH7xWGeegKcBCUYGrxBlU3h4ocaHOJnOGdYJXZlGZWx/FNLim W9o4Mt0g2rw69Kfei4ERbjAh8q0of+R/XPH49BBEYns0vuiOF3g4XWls+1dec9ms Nsda1wKv4Tw8CUBt8B5hKj0IoJmU9e+nqX/a38qc9/8zRHVNpoRcMeh0uY72jzua bEA3EslSE5sm+e77/orKSTkMg+NBxZxECgHGSymDgDQSm3gHTB3sKLV8gUy2hEzd sDKIXbF6Q9NTO4fdJWS5vpGooxMCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRer9yJ 7gN1KLCjA49o2WbE/C+MLzAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDkyMy5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qOEwDQYJKoZIhvcNAQELBQADggEBANVl2WR7MGW7bYShBgQdXK6A4cG3Bm3Xq0o5 zjlde0//yCAso7avBLMlmqIJpBtjs3KYO8lGEoEOTAv4wdJgNrwwa4bfBO5xHEBc vIIuZKPsnZJIkdkCz9n91QA1LD0YWhwTTOmuYueWnCOWcXD8LQNtweotTYOvbX+U ff1Tts3kcgdvsdZWx0Enk3JOuHeBk+8EDSFtSxwQ/3MWm1nIqMFSrLqjbFxsVIvU ua3BKtGHkWryrE7RJfVfBXh2z8wz9+O5o+eLmqdyeMiB3kaXDUbKCjB7z0+Bu+UJ ifQmDfwcQLURlByITvh2zZBPilKKmQYtb2Tdg5etq4DPpfSKjRE= -----END CERTIFICATE-----Generated at Sat Mar 28 11:46:16 2026 by rpki-client