$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144278.roa File: AS144278.roa (raw, json) Hash identifier: pJCE0uwiTFhLugyu1CsWDb9MAKNlrv1EXLS6yvHevOU= Subject key identifier: 06:06:58:CC:6A:6D:2D:8A:F7:9D:42:43:99:48:CD:98:4B:60:91:B8 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 513A402073156D5BB3B7792BF6BCBCF8AE0779FD Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144278.roa Signing time: Wed 04 Mar 2026 06:14:56 +0000 ROA not before: Wed 04 Mar 2026 06:09:56 +0000 ROA not after: Wed 03 Mar 2027 06:14:56 +0000 asID: 144278 IP address blocks: 240a:a65c::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:3a:40:20:73:15:6d:5b:b3:b7:79:2b:f6:bc:bc:f8:ae:07:79:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:09:56 2026 GMT Not After : Mar 3 06:14:56 2027 GMT Subject: CN=060658CC6A6D2D8AF79D42439948CD984B6091B8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:8b:2a:63:46:c2:9e:ad:fc:c2:0d:0e:49:e6: 65:bc:8c:14:98:37:0c:df:09:04:32:78:1c:16:6f: 93:2b:1f:c1:59:8e:23:68:c2:64:fb:da:e2:89:78: 79:d4:01:fd:20:f7:af:0a:af:fe:f1:23:13:ac:cf: f8:e4:77:ca:23:ca:8f:ce:69:95:fe:bc:52:4c:ff: bf:30:8c:b2:a3:79:43:72:7e:57:6e:ba:67:5b:e1: 93:91:c7:94:d7:70:52:80:4c:4d:bc:41:89:f9:d9: 7a:77:ca:48:77:b3:96:b2:d5:33:f8:70:fb:c6:29: 37:8a:db:40:2f:8a:e5:81:ee:e4:ac:21:38:8c:fa: 32:f4:59:81:12:cd:87:b0:52:34:21:76:7f:7f:9a: f5:ff:9a:98:df:55:bb:75:51:7b:dd:46:83:ba:56: 7f:33:4f:4b:7b:ea:10:05:02:1c:fe:60:c5:84:62: d6:d0:60:6a:f3:57:52:fa:f3:c1:51:9f:13:cd:a2: b4:3d:62:67:3a:c7:f6:55:61:e7:f0:08:00:c0:cb: 16:03:19:a0:3f:1e:bf:54:cf:eb:64:92:39:8c:8f: a2:98:ce:ee:34:d9:21:f9:49:03:42:c9:29:9b:ee: ea:93:fd:88:93:22:91:9a:ef:a7:1e:9b:9e:83:33: 37:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:06:58:CC:6A:6D:2D:8A:F7:9D:42:43:99:48:CD:98:4B:60:91:B8 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144278.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a65c::/32 Signature Algorithm: sha256WithRSAEncryption 59:62:79:c1:10:1d:17:df:5e:5a:c0:48:fa:14:94:d4:8d:a8: dc:9b:5e:27:ed:ec:54:e0:7d:bc:81:38:c1:ac:1b:2d:3f:2e: e7:22:64:19:e6:4c:d0:24:e8:b3:96:b8:57:5d:5c:a9:4b:0b: 4c:8b:6f:76:de:e7:89:9a:17:55:ad:e0:dc:69:54:08:77:b1: 14:77:30:37:94:f2:6f:3d:24:91:19:9d:64:9d:3f:4c:29:f7: 61:88:80:62:33:e4:d6:8e:03:a6:28:57:0d:45:9a:19:01:86: 63:fb:1a:56:54:98:5c:44:c0:81:3a:bf:e6:5d:ca:04:1a:71: 32:d7:40:db:ff:95:f6:5f:5b:2e:9c:a2:49:8d:c4:67:3e:8f: 75:4a:ef:9d:1d:a5:09:ba:7a:ea:4e:d5:1f:19:96:6b:3f:77: 72:10:47:e6:67:4a:d0:58:f2:aa:e9:44:b5:ee:e1:89:78:b8: e4:7a:13:cc:b1:55:d1:fa:47:c0:7a:d4:91:25:dc:7b:dd:4a: 2b:36:f9:bc:5b:e6:47:43:ec:ba:bc:0d:90:40:e1:67:57:b0: 97:cf:21:6f:65:f3:0a:87:4b:a7:d4:53:9d:60:cb:f1:e2:cc: d3:23:a0:8c:56:00:b0:37:ff:e8:52:b8:bf:83:7d:dd:e6:ea: fc:6c:53:9d -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUUTpAIHMVbVuzt3kr9ry8+K4Hef0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDk1NloX DTI3MDMwMzA2MTQ1NlowMzExMC8GA1UEAxMoMDYwNjU4Q0M2QTZEMkQ4QUY3OUQ0 MjQzOTk0OENEOTg0QjYwOTFCODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKKLKmNGwp6t/MINDknmZbyMFJg3DN8JBDJ4HBZvkysfwVmOI2jCZPva4ol4 edQB/SD3rwqv/vEjE6zP+OR3yiPKj85plf68Ukz/vzCMsqN5Q3J+V266Z1vhk5HH lNdwUoBMTbxBifnZenfKSHezlrLVM/hw+8YpN4rbQC+K5YHu5KwhOIz6MvRZgRLN h7BSNCF2f3+a9f+amN9Vu3VRe91Gg7pWfzNPS3vqEAUCHP5gxYRi1tBgavNXUvrz wVGfE82itD1iZzrH9lVh5/AIAMDLFgMZoD8ev1TP62SSOYyPopjO7jTZIflJA0LJ KZvu6pP9iJMikZrvpx6bnoMzNzcCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQGBljM am0tivedQkOZSM2YS2CRuDAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDI3OC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK plwwDQYJKoZIhvcNAQELBQADggEBAFliecEQHRffXlrASPoUlNSNqNybXift7FTg fbyBOMGsGy0/LuciZBnmTNAk6LOWuFddXKlLC0yLb3be54maF1Wt4NxpVAh3sRR3 MDeU8m89JJEZnWSdP0wp92GIgGIz5NaOA6YoVw1FmhkBhmP7GlZUmFxEwIE6v+Zd ygQacTLXQNv/lfZfWy6cokmNxGc+j3VK750dpQm6eupO1R8Zlms/d3IQR+ZnStBY 8qrpRLXu4Yl4uOR6E8yxVdH6R8B61JEl3HvdSis2+bxb5kdD7Lq8DZBA4WdXsJfP IW9l8wqHS6fUU51gy/HizNMjoIxWALA3/+hSuL+Dfd3m6vxsU50= -----END CERTIFICATE-----Generated at Sat Mar 28 11:44:41 2026 by rpki-client