$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144078.roa File: AS144078.roa (raw, json) Hash identifier: Xh6IcJdEinQrQLRU3cQ6eAgHsTolPSR9jF5WN/RC67s= Subject key identifier: 80:75:25:83:6D:92:B0:DF:86:A0:0A:7F:9A:FB:AE:4C:AA:15:65:B4 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 1CB8E6D593833E83EBB1525F7E1262526C80E76F Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144078.roa Signing time: Wed 04 Mar 2026 06:13:15 +0000 ROA not before: Wed 04 Mar 2026 06:08:15 +0000 ROA not after: Wed 03 Mar 2027 06:13:15 +0000 asID: 144078 IP address blocks: 240a:a594::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:b8:e6:d5:93:83:3e:83:eb:b1:52:5f:7e:12:62:52:6c:80:e7:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:08:15 2026 GMT Not After : Mar 3 06:13:15 2027 GMT Subject: CN=807525836D92B0DF86A00A7F9AFBAE4CAA1565B4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:1d:23:50:fb:e9:3f:00:96:d4:87:fa:c1:79: 90:ed:c0:fd:97:61:18:f9:e4:6f:43:7a:57:24:06: 4f:f8:3f:1e:b2:f4:f1:73:a7:b3:92:58:ba:25:df: d4:83:62:f7:2f:8e:1c:c3:23:2b:42:ef:4c:2b:59: 16:28:87:6d:ba:e6:7e:f7:c0:2c:62:f7:67:cd:3c: 07:b1:23:61:33:85:a2:da:86:1b:4b:0c:24:1c:76: 57:82:17:c5:2d:4c:69:4e:e3:17:b1:42:05:67:ed: b4:37:44:4d:e4:f5:b8:b9:3e:5c:9a:1e:de:83:63: be:42:3f:88:8e:1c:b6:1a:d2:67:72:f7:0f:6e:95: 8a:ca:b6:ba:20:37:3e:f4:8b:04:42:a2:e6:5e:3a: fa:d9:47:5e:1b:19:53:2b:cf:82:8a:ec:b4:bc:a3: ff:c2:fe:9f:7f:92:89:9d:20:ad:c7:41:93:ef:41: 8b:99:3a:19:d7:f7:93:2d:91:71:80:03:0c:cd:a2: 50:f1:2f:4c:ef:23:d6:87:c2:43:93:6b:1f:30:b6: 1a:05:78:4b:8d:95:66:02:e1:4c:94:ee:a0:05:c5: da:c2:bb:51:15:90:76:14:57:d0:89:ab:73:15:d7: 03:23:c4:ef:ea:1a:bb:e7:1c:17:43:9f:68:bb:59: 06:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:75:25:83:6D:92:B0:DF:86:A0:0A:7F:9A:FB:AE:4C:AA:15:65:B4 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144078.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a594::/32 Signature Algorithm: sha256WithRSAEncryption 67:c0:2f:25:a0:96:d0:3c:09:08:94:81:15:b2:0a:5c:5b:09: 2e:82:1d:df:f7:15:d0:f3:2b:6f:28:4c:af:2e:a8:e0:10:f3: df:e5:ce:6e:f6:75:25:59:ed:a8:81:31:de:7f:03:6f:a9:aa: c8:13:20:14:3e:b7:a0:6e:53:94:c4:f4:4e:81:6a:e1:71:40: 7b:4c:7f:8c:e9:19:72:a9:c4:49:3c:92:42:c6:3f:19:4e:5c: 93:77:0a:9d:1d:ac:cf:96:a5:03:59:85:30:f8:30:c0:d4:4c: 5b:eb:0c:4b:4a:f9:eb:41:97:27:c6:33:12:e5:61:58:62:44: 7b:c4:28:7e:f5:9e:64:42:24:8f:46:48:02:50:52:b6:78:a2: f1:3d:00:68:c2:d6:c7:3a:2d:bb:d2:b3:63:f5:90:ce:e3:b9: 53:5a:9c:a9:c9:d5:61:b2:f7:60:c2:c0:07:19:ba:c7:2d:03: c7:56:4c:c7:8e:fc:96:56:2f:08:9b:49:65:7a:17:5a:33:a1: e7:5a:c2:33:3a:2e:9b:0b:9f:6c:09:53:4c:8e:b0:e1:d4:46: f6:3e:46:0f:32:a2:b5:08:f3:47:9a:9e:fe:5d:cb:ed:ac:95: 8a:18:18:00:42:be:7d:2d:83:0f:e4:13:97:92:1a:80:09:b7: df:d3:6d:8e -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUHLjm1ZODPoPrsVJffhJiUmyA528wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDgxNVoX DTI3MDMwMzA2MTMxNVowMzExMC8GA1UEAxMoODA3NTI1ODM2RDkyQjBERjg2QTAw QTdGOUFGQkFFNENBQTE1NjVCNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM8dI1D76T8AltSH+sF5kO3A/ZdhGPnkb0N6VyQGT/g/HrL08XOns5JYuiXf 1INi9y+OHMMjK0LvTCtZFiiHbbrmfvfALGL3Z808B7EjYTOFotqGG0sMJBx2V4IX xS1MaU7jF7FCBWfttDdETeT1uLk+XJoe3oNjvkI/iI4cthrSZ3L3D26Visq2uiA3 PvSLBEKi5l46+tlHXhsZUyvPgorstLyj/8L+n3+SiZ0grcdBk+9Bi5k6Gdf3ky2R cYADDM2iUPEvTO8j1ofCQ5NrHzC2GgV4S42VZgLhTJTuoAXF2sK7URWQdhRX0Imr cxXXAyPE7+oau+ccF0OfaLtZBiMCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSAdSWD bZKw34agCn+a+65MqhVltDAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDA3OC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK pZQwDQYJKoZIhvcNAQELBQADggEBAGfALyWgltA8CQiUgRWyClxbCS6CHd/3FdDz K28oTK8uqOAQ89/lzm72dSVZ7aiBMd5/A2+pqsgTIBQ+t6BuU5TE9E6BauFxQHtM f4zpGXKpxEk8kkLGPxlOXJN3Cp0drM+WpQNZhTD4MMDUTFvrDEtK+etBlyfGMxLl YVhiRHvEKH71nmRCJI9GSAJQUrZ4ovE9AGjC1sc6LbvSs2P1kM7juVNanKnJ1WGy 92DCwAcZusctA8dWTMeO/JZWLwibSWV6F1ozoedawjM6LpsLn2wJU0yOsOHURvY+ Rg8yorUI80eanv5dy+2slYoYGABCvn0tgw/kE5eSGoAJt9/TbY4= -----END CERTIFICATE-----Generated at Sat Mar 28 11:44:24 2026 by rpki-client