$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144306.roa File: AS144306.roa (raw, json) Hash identifier: ioOX5oaNNnH3l5xx8kXQ20OJAkVZZ3AsOANgiWWmFZc= Subject key identifier: 86:DB:0B:C7:DA:B8:45:E2:1A:BF:EF:AA:38:32:7A:62:98:51:BF:24 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 06C2E90271340984C1BFB02AE93ADE8E53AA05DE Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144306.roa Signing time: Wed 04 Mar 2026 06:14:40 +0000 ROA not before: Wed 04 Mar 2026 06:09:40 +0000 ROA not after: Wed 03 Mar 2027 06:14:40 +0000 asID: 144306 IP address blocks: 240a:a678::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:c2:e9:02:71:34:09:84:c1:bf:b0:2a:e9:3a:de:8e:53:aa:05:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:09:40 2026 GMT Not After : Mar 3 06:14:40 2027 GMT Subject: CN=86DB0BC7DAB845E21ABFEFAA38327A629851BF24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:26:5b:38:6c:88:5a:cc:3c:66:d5:54:b6:00: 96:6a:7e:98:4e:e1:70:58:d2:1e:8f:6f:70:63:56: c5:f0:d4:d7:77:b2:47:9c:df:52:95:44:bb:83:6d: a7:74:eb:39:7b:69:10:cc:14:a2:90:e2:d9:a4:af: e7:2b:6d:d5:88:03:22:65:f1:a3:e3:a6:0c:c1:34: d1:fd:ac:76:1b:bf:cd:18:10:ab:20:bf:75:76:a8: 3e:da:db:65:52:f3:86:d8:f2:74:2c:0d:c7:1a:37: a8:8f:c9:7d:72:2d:15:57:8d:d3:01:5f:fc:9c:9b: 7c:06:a5:de:07:9e:dc:d0:06:41:40:da:f7:eb:a3: 3f:b9:f3:06:c3:94:8c:01:81:3d:32:cf:39:83:3f: 53:69:1d:4d:ac:81:c1:0c:02:b3:36:a4:12:bb:68: fa:ee:ea:2c:4b:9b:32:fe:c0:5a:85:7e:b1:c1:ff: bb:d1:73:4b:f4:d6:00:83:ac:02:9b:c2:b5:a4:c6: da:85:7b:aa:ce:6a:60:32:a0:00:a4:d8:ea:28:3e: c5:e6:34:e7:5b:56:8d:47:fc:52:ef:f7:f7:0e:a1: 5d:d0:db:af:3e:44:61:08:ed:11:d1:fd:6b:4c:5e: c1:8d:5c:13:b6:a3:a3:42:3f:28:c8:b8:70:71:fb: 64:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:DB:0B:C7:DA:B8:45:E2:1A:BF:EF:AA:38:32:7A:62:98:51:BF:24 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144306.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a678::/32 Signature Algorithm: sha256WithRSAEncryption d3:77:f2:c1:bf:40:33:17:44:58:9c:e7:53:6e:18:c4:81:f6: a3:80:75:a1:47:ac:c5:44:93:7d:7a:a9:b1:8c:f5:38:bd:d0: a2:3f:18:06:0e:6a:50:b2:29:8d:6d:ee:21:bb:24:68:76:6a: fb:3b:bc:97:48:83:91:cf:80:3c:00:51:d6:c4:b8:00:1e:e2: d5:74:91:f9:13:01:34:93:73:ec:eb:fd:77:4f:6d:c8:32:56: 08:d8:13:62:ff:4b:6a:b9:99:f1:11:b4:bc:18:2a:c1:7d:57: f9:b7:0d:9f:84:9e:2c:c5:7c:7f:b4:00:66:b7:ed:b8:67:c5: 0a:b7:20:e7:9a:28:c9:ef:86:28:88:8a:ef:83:96:73:72:00: 5e:cd:96:94:11:2d:d2:91:66:71:fc:cb:61:3c:0c:49:27:78: 21:29:2e:c7:37:89:8e:1b:f5:6a:91:3e:6c:8a:4c:df:fb:ee: 3e:a5:bc:7a:bd:a3:9f:1a:9d:4a:d5:c4:8f:8c:d9:e9:7d:b1: ed:19:c5:65:4c:d7:0b:90:57:0c:3a:ad:b0:df:e2:3e:d4:f3: 70:6a:eb:59:6c:22:16:c5:96:c8:e6:46:4f:61:c4:4d:c7:8b: 52:de:3f:bd:98:c8:3e:e1:57:58:4d:a0:76:09:5a:34:48:f4: 9d:99:60:ce -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUBsLpAnE0CYTBv7Aq6TrejlOqBd4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDk0MFoX DTI3MDMwMzA2MTQ0MFowMzExMC8GA1UEAxMoODZEQjBCQzdEQUI4NDVFMjFBQkZF RkFBMzgzMjdBNjI5ODUxQkYyNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOcmWzhsiFrMPGbVVLYAlmp+mE7hcFjSHo9vcGNWxfDU13eyR5zfUpVEu4Nt p3TrOXtpEMwUopDi2aSv5ytt1YgDImXxo+OmDME00f2sdhu/zRgQqyC/dXaoPtrb ZVLzhtjydCwNxxo3qI/JfXItFVeN0wFf/JybfAal3gee3NAGQUDa9+ujP7nzBsOU jAGBPTLPOYM/U2kdTayBwQwCszakErto+u7qLEubMv7AWoV+scH/u9FzS/TWAIOs ApvCtaTG2oV7qs5qYDKgAKTY6ig+xeY051tWjUf8Uu/39w6hXdDbrz5EYQjtEdH9 a0xewY1cE7ajo0I/KMi4cHH7ZH0CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSG2wvH 2rhF4hq/76o4MnpimFG/JDAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDMwNi5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK pngwDQYJKoZIhvcNAQELBQADggEBANN38sG/QDMXRFic51NuGMSB9qOAdaFHrMVE k316qbGM9Ti90KI/GAYOalCyKY1t7iG7JGh2avs7vJdIg5HPgDwAUdbEuAAe4tV0 kfkTATSTc+zr/XdPbcgyVgjYE2L/S2q5mfERtLwYKsF9V/m3DZ+EnizFfH+0AGa3 7bhnxQq3IOeaKMnvhiiIiu+DlnNyAF7NlpQRLdKRZnH8y2E8DEkneCEpLsc3iY4b 9WqRPmyKTN/77j6lvHq9o58anUrVxI+M2el9se0ZxWVM1wuQVww6rbDf4j7U83Bq 61lsIhbFlsjmRk9hxE3Hi1LeP72YyD7hV1hNoHYJWjRI9J2ZYM4= -----END CERTIFICATE-----Generated at Sat Mar 28 11:41:58 2026 by rpki-client