$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144997.roa File: AS144997.roa (raw, json) Hash identifier: 1OzQCm2lsc1aNXM3KhfDXNHPK1gUlu4/7M+lrbsq/2o= Subject key identifier: C5:3D:EE:49:24:A7:0D:CB:08:4A:47:CA:83:D0:E4:64:39:50:A1:66 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 68C833014D9A077EA5BD5F5F9C4F84B69E90B15F Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144997.roa Signing time: Wed 04 Mar 2026 06:21:21 +0000 ROA not before: Wed 04 Mar 2026 06:16:21 +0000 ROA not after: Wed 03 Mar 2027 06:21:21 +0000 asID: 144997 IP address blocks: 240a:a92b::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:c8:33:01:4d:9a:07:7e:a5:bd:5f:5f:9c:4f:84:b6:9e:90:b1:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:16:21 2026 GMT Not After : Mar 3 06:21:21 2027 GMT Subject: CN=C53DEE4924A70DCB084A47CA83D0E4643950A166 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:91:76:a4:9b:34:91:e8:bb:43:c3:12:f2:8c: 7c:2b:34:ee:5e:21:98:18:95:6e:7e:70:69:34:dd: 4c:91:cd:d2:2b:2b:d2:98:3c:e1:b7:ea:98:d9:10: 89:0a:71:e7:69:77:b6:d3:f1:61:45:f8:8e:38:7b: 36:73:91:d0:bf:75:21:e8:29:2c:57:8c:61:50:73: 2c:9b:0c:84:8a:d1:0c:6d:6b:78:57:2d:14:b4:da: 91:08:ad:d2:71:92:6d:fa:af:c3:64:17:0d:50:7f: d7:38:07:b1:71:a4:32:18:f3:f8:f7:62:c7:d4:39: d3:d8:8a:9e:6b:8b:bd:f6:b1:ea:a5:04:95:f6:ab: 1a:17:99:bb:f3:6b:cd:55:2c:d7:0a:ea:4b:12:4f: bd:6c:85:cc:f3:08:20:5d:42:af:4f:4a:8d:82:9b: 24:ff:d3:7e:bc:c4:81:52:13:b0:f5:81:0e:b8:1a: 7e:af:5e:58:ff:79:0b:b1:96:11:6d:0e:38:c3:7a: 74:4a:71:c5:03:6e:ea:be:a3:5d:9d:ff:32:47:ee: ae:bf:d2:44:c0:02:05:c7:31:1d:00:ea:f2:4f:2e: 43:6d:04:1b:c2:1d:d1:61:65:95:fb:7b:7e:16:0b: 9b:e9:ef:df:fe:0d:53:f0:10:b1:f3:39:b1:56:02: 09:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:3D:EE:49:24:A7:0D:CB:08:4A:47:CA:83:D0:E4:64:39:50:A1:66 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144997.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a92b::/32 Signature Algorithm: sha256WithRSAEncryption 45:96:bf:b3:8b:d4:5c:d1:91:af:8c:93:1d:ca:3e:15:c6:a1: d6:26:69:10:d2:e9:90:aa:1e:35:2c:1d:17:13:e7:1a:57:ae: 33:96:50:57:37:79:03:2d:85:9c:cf:25:5f:75:6b:79:ad:4b: 93:59:42:54:67:0f:07:46:bd:cf:a2:df:ac:e8:62:2e:e2:0f: fd:26:02:4f:af:d6:c6:a1:fe:26:82:56:a6:4f:0f:fb:7e:c5: b3:c5:73:2a:8d:25:2a:9c:77:85:25:fa:39:1f:ad:c1:f9:43: c9:39:ad:0f:31:ff:e2:58:b4:53:19:d3:71:af:61:40:ca:3f: a8:d8:c6:b9:81:e7:3c:19:9a:ef:fa:2c:d2:cb:28:eb:7b:d3: 12:12:16:0f:ad:b8:f1:df:61:d1:7c:27:87:54:ef:ca:96:f3: e2:52:d3:64:9c:6f:5e:03:c3:52:cd:1f:fb:e0:ab:55:10:92: aa:55:88:25:0a:35:cc:31:6e:30:e0:ad:c8:52:6a:ba:6a:81: c3:d3:27:bb:50:e1:cf:c5:c5:ba:88:ec:ec:23:a0:74:b0:64: 0b:99:95:d2:ff:2e:63:59:01:e7:71:6e:58:f0:e2:59:0f:57: c8:a2:9a:60:e7:3b:4f:34:1c:1d:92:c0:79:23:06:eb:cb:88: 78:31:1d:db -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUaMgzAU2aB36lvV9fnE+Etp6QsV8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTYyMVoX DTI3MDMwMzA2MjEyMVowMzExMC8GA1UEAxMoQzUzREVFNDkyNEE3MERDQjA4NEE0 N0NBODNEMEU0NjQzOTUwQTE2NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAN6RdqSbNJHou0PDEvKMfCs07l4hmBiVbn5waTTdTJHN0isr0pg84bfqmNkQ iQpx52l3ttPxYUX4jjh7NnOR0L91IegpLFeMYVBzLJsMhIrRDG1reFctFLTakQit 0nGSbfqvw2QXDVB/1zgHsXGkMhjz+Pdix9Q509iKnmuLvfax6qUElfarGheZu/Nr zVUs1wrqSxJPvWyFzPMIIF1Cr09KjYKbJP/TfrzEgVITsPWBDrgafq9eWP95C7GW EW0OOMN6dEpxxQNu6r6jXZ3/Mkfurr/SRMACBccxHQDq8k8uQ20EG8Id0WFllft7 fhYLm+nv3/4NU/AQsfM5sVYCCT0CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBTFPe5J JKcNywhKR8qD0ORkOVChZjAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDk5Ny5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qSswDQYJKoZIhvcNAQELBQADggEBAEWWv7OL1FzRka+Mkx3KPhXGodYmaRDS6ZCq HjUsHRcT5xpXrjOWUFc3eQMthZzPJV91a3mtS5NZQlRnDwdGvc+i36zoYi7iD/0m Ak+v1sah/iaCVqZPD/t+xbPFcyqNJSqcd4Ul+jkfrcH5Q8k5rQ8x/+JYtFMZ03Gv YUDKP6jYxrmB5zwZmu/6LNLLKOt70xISFg+tuPHfYdF8J4dU78qW8+JS02Scb14D w1LNH/vgq1UQkqpViCUKNcwxbjDgrchSarpqgcPTJ7tQ4c/FxbqI7OwjoHSwZAuZ ldL/LmNZAedxbljw4lkPV8iimmDnO080HB2SwHkjBuvLiHgxHds= -----END CERTIFICATE-----Generated at Sat Mar 28 11:41:53 2026 by rpki-client