$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144186.roa File: AS144186.roa (raw, json) Hash identifier: wjBrb4h2/bYh707fpUAxr861brO7lt9Nxs1TQYI4Dnk= Subject key identifier: 26:22:BF:D0:94:8D:DC:23:A6:66:2C:88:6C:82:62:74:41:B6:98:36 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 3B1F4A68939A2C7BE0EC5653A6FB204AAC428746 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144186.roa Signing time: Wed 04 Mar 2026 06:13:10 +0000 ROA not before: Wed 04 Mar 2026 06:08:10 +0000 ROA not after: Wed 03 Mar 2027 06:13:10 +0000 asID: 144186 IP address blocks: 240a:a600::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:1f:4a:68:93:9a:2c:7b:e0:ec:56:53:a6:fb:20:4a:ac:42:87:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:08:10 2026 GMT Not After : Mar 3 06:13:10 2027 GMT Subject: CN=2622BFD0948DDC23A6662C886C82627441B69836 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:df:38:b2:a4:9a:13:3c:c9:58:9d:11:a6:f5: 16:78:e6:6c:fd:83:76:d3:75:74:2a:11:b8:5b:da: 34:60:14:e9:86:e2:ae:9d:94:71:e2:b4:d8:b8:4b: b7:85:fe:02:b3:ab:00:73:36:6f:21:6d:2a:cd:6d: 08:46:bf:99:eb:53:75:db:3a:6c:1a:9a:9b:1d:5c: f6:79:2e:46:02:bb:75:26:ac:bb:4e:64:1e:9d:a1: 10:95:26:02:08:29:d6:f8:21:53:97:a7:71:7b:80: f5:99:0d:86:08:1e:d9:17:a7:ca:b4:43:9a:db:2a: b8:ed:92:0a:77:86:02:2b:af:b0:6d:55:f5:f5:58: 4c:76:b8:97:fd:73:1e:af:75:26:d3:63:f9:79:6a: 8c:51:a0:6a:80:92:46:89:ff:d9:ab:ca:74:34:eb: 9b:83:53:64:ee:ff:52:b6:6b:22:76:dc:0e:4d:74: c8:ef:f0:ae:0e:b3:20:36:4d:46:b6:73:87:d4:37: 69:bf:f5:6b:06:0d:b1:22:ff:cb:c8:57:36:16:4c: de:b3:46:da:11:13:48:d2:3c:e2:07:31:90:f8:e3: ef:c6:ac:17:68:ec:b3:b6:b0:01:54:72:aa:00:20: 3c:3a:1c:dc:36:16:eb:2d:42:65:eb:69:5b:69:a3: 0e:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:22:BF:D0:94:8D:DC:23:A6:66:2C:88:6C:82:62:74:41:B6:98:36 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144186.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a600::/32 Signature Algorithm: sha256WithRSAEncryption ae:8c:7c:25:fe:d6:4a:99:93:a2:da:49:4e:4f:81:46:74:fa: 7b:c8:b7:54:87:ce:40:b9:1e:66:d8:b0:e1:c0:ab:54:20:8a: 4f:8b:d0:3a:e3:3f:12:0a:2e:52:c3:bf:42:49:da:9a:4a:ad: 61:7d:78:96:2a:a7:59:cd:0b:36:5c:18:e6:3a:a5:10:17:de: 52:53:f8:0c:68:0e:a2:f1:2a:ea:80:c6:43:5c:7c:e9:1b:6e: b2:c5:be:fb:8a:a8:17:93:e7:d5:43:2f:93:9d:bf:97:d0:2b: 1f:af:cc:bf:68:5f:42:71:e3:7f:d3:28:5f:1c:63:60:bc:51: e0:db:43:24:87:b3:1c:01:1e:cc:bf:8e:43:83:bc:1a:fc:3d: 1b:5f:45:16:4c:2f:c6:54:b5:be:91:59:57:cc:86:b5:71:d5: 42:54:9b:a2:c7:7d:e1:df:9b:34:c1:bd:f1:03:d0:61:ad:c5: 20:6d:81:ee:7a:44:32:8a:5d:c3:81:11:0a:38:b5:cf:d2:d9: 20:9c:ee:e4:8c:42:24:c9:62:ad:77:14:0c:05:cb:5e:49:ed: da:c2:84:88:ce:c2:b3:31:20:ed:88:5b:df:86:64:8a:34:6f: 7f:20:f2:96:e3:08:71:ff:76:21:a7:03:cb:e1:31:8f:8d:55: 85:d2:69:28 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUOx9KaJOaLHvg7FZTpvsgSqxCh0YwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDgxMFoX DTI3MDMwMzA2MTMxMFowMzExMC8GA1UEAxMoMjYyMkJGRDA5NDhEREMyM0E2NjYy Qzg4NkM4MjYyNzQ0MUI2OTgzNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKLfOLKkmhM8yVidEab1FnjmbP2DdtN1dCoRuFvaNGAU6Ybirp2UceK02LhL t4X+ArOrAHM2byFtKs1tCEa/metTdds6bBqamx1c9nkuRgK7dSasu05kHp2hEJUm Aggp1vghU5encXuA9ZkNhgge2RenyrRDmtsquO2SCneGAiuvsG1V9fVYTHa4l/1z Hq91JtNj+XlqjFGgaoCSRon/2avKdDTrm4NTZO7/UrZrInbcDk10yO/wrg6zIDZN RrZzh9Q3ab/1awYNsSL/y8hXNhZM3rNG2hETSNI84gcxkPjj78asF2jss7awAVRy qgAgPDoc3DYW6y1CZetpW2mjDokCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQmIr/Q lI3cI6ZmLIhsgmJ0QbaYNjAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDE4Ni5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK pgAwDQYJKoZIhvcNAQELBQADggEBAK6MfCX+1kqZk6LaSU5PgUZ0+nvIt1SHzkC5 HmbYsOHAq1Qgik+L0DrjPxIKLlLDv0JJ2ppKrWF9eJYqp1nNCzZcGOY6pRAX3lJT +AxoDqLxKuqAxkNcfOkbbrLFvvuKqBeT59VDL5Odv5fQKx+vzL9oX0Jx43/TKF8c Y2C8UeDbQySHsxwBHsy/jkODvBr8PRtfRRZML8ZUtb6RWVfMhrVx1UJUm6LHfeHf mzTBvfED0GGtxSBtge56RDKKXcOBEQo4tc/S2SCc7uSMQiTJYq13FAwFy15J7drC hIjOwrMxIO2IW9+GZIo0b38g8pbjCHH/diGnA8vhMY+NVYXSaSg= -----END CERTIFICATE-----Generated at Sat Mar 28 11:44:25 2026 by rpki-client