$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144086.roa File: AS144086.roa (raw, json) Hash identifier: LZzBGZfKsdBRP83mJVI3R78QJvy8QDVOCKAlqvsKYE8= Subject key identifier: 92:82:FA:63:9A:F2:38:F0:CE:7D:89:63:F7:B5:50:5C:76:2F:0D:43 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 28CAED5B0B1DADD4C72BB653868723BC84B1247E Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144086.roa Signing time: Wed 04 Mar 2026 06:12:30 +0000 ROA not before: Wed 04 Mar 2026 06:07:30 +0000 ROA not after: Wed 03 Mar 2027 06:12:30 +0000 asID: 144086 IP address blocks: 240a:a59c::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:ca:ed:5b:0b:1d:ad:d4:c7:2b:b6:53:86:87:23:bc:84:b1:24:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:07:30 2026 GMT Not After : Mar 3 06:12:30 2027 GMT Subject: CN=9282FA639AF238F0CE7D8963F7B5505C762F0D43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:f0:c8:d8:31:07:5d:4d:25:09:92:ed:ef:5e: 58:c1:b7:66:2d:87:45:b0:bd:43:fc:18:16:86:2c: 14:39:ec:d7:86:83:b5:bb:01:61:13:ea:ad:aa:da: 21:fb:48:d2:e1:0e:ff:12:d2:fd:c6:fd:2a:44:02: bd:64:f6:46:f8:57:b9:13:94:9b:b2:f5:eb:d0:08: 61:8f:24:70:0e:40:a4:4d:26:4f:bb:9a:78:6d:ba: 85:f3:2e:5e:8c:df:a5:a3:34:db:3b:54:61:a9:da: 78:6c:f9:69:86:f5:97:90:60:4d:e1:c7:c5:3f:c8: 7e:6c:d1:09:99:22:64:1b:91:39:90:83:fb:02:50: 00:b8:ea:7c:09:fd:45:60:18:d2:ed:a8:1b:f1:a5: 96:eb:11:1e:03:ca:4f:fc:e4:b8:50:85:1d:5d:aa: 93:4a:f4:55:b9:cb:19:1e:72:db:ae:54:07:3d:11: f4:11:f0:b0:ef:6e:fb:71:3f:f9:a4:1d:fe:3d:a6: b3:a6:5d:f8:4c:a3:61:99:e5:99:38:99:cc:5b:9d: 5b:10:16:46:1f:fc:47:3a:4a:d2:2e:1d:1a:b6:49: ca:14:59:6e:93:60:4b:7c:f9:61:49:be:64:c3:71: 4f:90:8b:91:1b:0f:b9:5f:93:6c:3b:dd:e4:b2:10: d8:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:82:FA:63:9A:F2:38:F0:CE:7D:89:63:F7:B5:50:5C:76:2F:0D:43 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144086.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a59c::/32 Signature Algorithm: sha256WithRSAEncryption 51:85:b8:9a:38:d3:b9:8d:0d:22:1d:e4:50:83:1f:66:32:ec: 9e:d0:23:b6:a7:b7:d4:4c:3b:ea:d8:5a:2e:a4:42:dd:07:fd: fc:04:19:94:9a:22:55:de:4e:bc:26:7c:4e:f9:47:53:ac:0d: a2:46:42:9a:08:33:08:d3:a5:78:99:e1:da:f1:e7:99:a6:b1: b7:40:6b:a8:a2:df:d3:bb:d2:65:13:86:31:69:4b:35:8a:9f: d8:2b:62:af:fe:f5:2a:2f:1f:25:66:72:2b:f2:06:59:95:6c: 0d:90:13:91:74:1e:ad:ba:40:bf:84:eb:f0:08:a0:e8:74:e2: 99:05:d0:7d:0f:9c:42:04:af:5d:62:53:c2:7d:b6:39:34:83: fb:30:d4:64:73:42:16:99:e5:aa:0b:95:43:37:99:5e:f6:c7: 97:1c:6d:a4:9c:3f:36:7f:6f:43:3f:4e:b3:45:74:21:4f:84: f2:14:60:60:59:f6:64:b6:4e:f2:89:a6:9f:8e:ea:7e:43:ed: 06:dd:be:d1:02:4f:bf:a8:4a:4c:e7:71:8d:dd:a9:64:ee:9d: f0:c0:fd:f3:8f:60:4b:a5:de:4a:7c:e6:c2:38:73:14:66:7a: 6b:d6:57:e1:69:b7:96:f6:a2:f9:56:bf:e5:1e:a0:c3:90:9d: c4:a0:26:d2 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUKMrtWwsdrdTHK7ZThocjvISxJH4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDczMFoX DTI3MDMwMzA2MTIzMFowMzExMC8GA1UEAxMoOTI4MkZBNjM5QUYyMzhGMENFN0Q4 OTYzRjdCNTUwNUM3NjJGMEQ0MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMTwyNgxB11NJQmS7e9eWMG3Zi2HRbC9Q/wYFoYsFDns14aDtbsBYRPqrara IftI0uEO/xLS/cb9KkQCvWT2RvhXuROUm7L169AIYY8kcA5ApE0mT7uaeG26hfMu XozfpaM02ztUYanaeGz5aYb1l5BgTeHHxT/IfmzRCZkiZBuROZCD+wJQALjqfAn9 RWAY0u2oG/GllusRHgPKT/zkuFCFHV2qk0r0VbnLGR5y265UBz0R9BHwsO9u+3E/ +aQd/j2ms6Zd+EyjYZnlmTiZzFudWxAWRh/8RzpK0i4dGrZJyhRZbpNgS3z5YUm+ ZMNxT5CLkRsPuV+TbDvd5LIQ2OECAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSSgvpj mvI48M59iWP3tVBcdi8NQzAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDA4Ni5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK pZwwDQYJKoZIhvcNAQELBQADggEBAFGFuJo407mNDSId5FCDH2Yy7J7QI7ant9RM O+rYWi6kQt0H/fwEGZSaIlXeTrwmfE75R1OsDaJGQpoIMwjTpXiZ4drx55mmsbdA a6ii39O70mUThjFpSzWKn9grYq/+9SovHyVmcivyBlmVbA2QE5F0Hq26QL+E6/AI oOh04pkF0H0PnEIEr11iU8J9tjk0g/sw1GRzQhaZ5aoLlUM3mV72x5ccbaScPzZ/ b0M/TrNFdCFPhPIUYGBZ9mS2TvKJpp+O6n5D7QbdvtECT7+oSkzncY3dqWTunfDA /fOPYEul3kp85sI4cxRmemvWV+Fpt5b2ovlWv+UeoMOQncSgJtI= -----END CERTIFICATE-----Generated at Sat Mar 28 11:42:09 2026 by rpki-client