$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144199.roa File: AS144199.roa (raw, json) Hash identifier: ZFlHqIcQ4ubuKO7MzoYFb8ySwPMxrC55ejq+BtV/ImE= Subject key identifier: 11:72:D9:11:4F:CD:81:EC:5B:51:6B:28:95:2C:B1:03:D2:B5:85:4D Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 38798AD856CB6B1A1AD4FC25AD1CC745F037BE3F Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144199.roa Signing time: Wed 04 Mar 2026 06:13:29 +0000 ROA not before: Wed 04 Mar 2026 06:08:29 +0000 ROA not after: Wed 03 Mar 2027 06:13:29 +0000 asID: 144199 IP address blocks: 240a:a60d::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:79:8a:d8:56:cb:6b:1a:1a:d4:fc:25:ad:1c:c7:45:f0:37:be:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:08:29 2026 GMT Not After : Mar 3 06:13:29 2027 GMT Subject: CN=1172D9114FCD81EC5B516B28952CB103D2B5854D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:31:f0:e5:26:f5:6e:41:05:00:27:b8:a6:85: 82:18:6e:3e:4d:f7:b6:40:5c:9a:09:f3:0d:56:bf: a2:45:5b:f4:55:cb:bb:fb:71:28:d8:6e:0f:ff:8d: d9:e5:1f:3b:96:10:5c:60:18:33:f0:8c:c4:00:6f: 5e:6c:9b:c2:52:7e:55:dc:cb:41:36:06:34:d8:b5: b7:85:bf:7e:ce:e3:57:c1:5a:d3:7a:af:bd:1a:1c: c0:d6:6f:cf:91:a7:5d:23:17:05:84:8a:05:7f:96: 71:48:cb:71:1f:48:fb:4a:30:b0:0f:e6:3f:c2:38: b8:88:eb:67:aa:e0:56:88:1a:4a:e2:10:87:bf:0d: 0d:f5:47:e1:24:16:36:4e:93:5f:48:51:a4:cb:7b: f3:3e:2e:f3:91:a5:a2:2d:6d:c5:84:68:a1:bb:5e: 87:48:9f:ea:e5:d4:95:7b:78:24:ed:64:b0:9c:56: b2:e3:fb:77:e5:3d:d4:47:86:db:e7:38:0e:c5:d4: da:da:ac:72:9f:57:da:c2:f0:48:52:f1:f3:e4:8d: 8f:31:56:df:80:c5:e9:2a:0c:02:12:f7:65:88:a5: eb:93:1b:75:ae:22:56:58:55:fd:50:c1:c9:0b:6b: b5:01:a2:40:30:44:e8:2d:3f:46:38:76:9d:29:ef: 3d:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:72:D9:11:4F:CD:81:EC:5B:51:6B:28:95:2C:B1:03:D2:B5:85:4D X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144199.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a60d::/32 Signature Algorithm: sha256WithRSAEncryption 7e:9c:94:eb:ec:52:bb:60:4f:09:60:d6:c6:90:0e:a5:a5:2e: cb:eb:65:b6:62:05:d5:60:84:6b:78:84:9e:91:d0:c6:d2:06: 90:a9:a6:b0:63:4c:b0:12:2d:e2:4c:ea:35:f6:9f:d9:6e:3e: 19:cb:ac:c6:a1:21:5a:cb:13:a9:67:d2:9e:02:25:77:fc:f8: 2d:e0:7a:f1:3d:da:4d:f3:a3:a5:b4:89:6e:bc:51:38:c0:6a: 8f:b9:eb:9c:4e:88:02:ce:d1:94:73:f7:a0:45:21:c1:dc:eb: c3:de:e4:7d:cd:11:27:41:68:e0:c3:59:22:63:b2:ad:4e:9e: aa:5b:07:15:eb:b1:55:4e:f6:c1:d1:d6:c3:20:21:f8:96:01: fa:e3:db:5f:b9:2b:63:23:66:75:b7:da:72:09:35:50:50:e8: c4:a5:a6:fa:a1:54:90:55:f8:ad:cf:ba:34:62:05:d9:dc:8f: 3c:ff:c5:74:0a:d0:3d:a9:e4:aa:2c:d2:e2:4a:ae:5d:cb:a0: 9c:47:de:29:19:c8:c3:ba:b6:3e:83:3e:b1:ea:e5:e5:c6:84: da:03:0e:ba:45:b3:8c:95:d0:50:db:69:b5:de:56:9b:42:76: 23:63:77:a1:27:36:d7:a2:b8:d1:b6:3f:9a:5b:18:01:5f:0f: 7d:b6:66:1a -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUOHmK2FbLaxoa1PwlrRzHRfA3vj8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDgyOVoX DTI3MDMwMzA2MTMyOVowMzExMC8GA1UEAxMoMTE3MkQ5MTE0RkNEODFFQzVCNTE2 QjI4OTUyQ0IxMDNEMkI1ODU0RDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANgx8OUm9W5BBQAnuKaFghhuPk33tkBcmgnzDVa/okVb9FXLu/txKNhuD/+N 2eUfO5YQXGAYM/CMxABvXmybwlJ+VdzLQTYGNNi1t4W/fs7jV8Fa03qvvRocwNZv z5GnXSMXBYSKBX+WcUjLcR9I+0owsA/mP8I4uIjrZ6rgVogaSuIQh78NDfVH4SQW Nk6TX0hRpMt78z4u85Gloi1txYRoobteh0if6uXUlXt4JO1ksJxWsuP7d+U91EeG 2+c4DsXU2tqscp9X2sLwSFLx8+SNjzFW34DF6SoMAhL3ZYil65Mbda4iVlhV/VDB yQtrtQGiQDBE6C0/Rjh2nSnvPT0CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQRctkR T82B7FtRayiVLLED0rWFTTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDE5OS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK pg0wDQYJKoZIhvcNAQELBQADggEBAH6clOvsUrtgTwlg1saQDqWlLsvrZbZiBdVg hGt4hJ6R0MbSBpCpprBjTLASLeJM6jX2n9luPhnLrMahIVrLE6ln0p4CJXf8+C3g evE92k3zo6W0iW68UTjAao+565xOiALO0ZRz96BFIcHc68Pe5H3NESdBaODDWSJj sq1OnqpbBxXrsVVO9sHR1sMgIfiWAfrj21+5K2MjZnW32nIJNVBQ6MSlpvqhVJBV +K3PujRiBdncjzz/xXQK0D2p5Kos0uJKrl3LoJxH3ikZyMO6tj6DPrHq5eXGhNoD DrpFs4yV0FDbabXeVptCdiNjd6EnNteiuNG2P5pbGAFfD322Zho= -----END CERTIFICATE-----Generated at Sat Mar 28 11:41:48 2026 by rpki-client