$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144379.roa File: AS144379.roa (raw, json) Hash identifier: tRdqfwbPa6W/2BQ/MNO2ECiekYHHgbrmXG0dbQjEwdY= Subject key identifier: D9:B0:27:73:D6:BB:4E:E9:4E:8A:A2:B3:7D:6B:15:A8:B8:4B:8F:FF Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 1A89E99F5C947A33F8A4B537747292C07C0B26B8 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144379.roa Signing time: Wed 04 Mar 2026 06:13:20 +0000 ROA not before: Wed 04 Mar 2026 06:08:20 +0000 ROA not after: Wed 03 Mar 2027 06:13:20 +0000 asID: 144379 IP address blocks: 240a:a6c1::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:89:e9:9f:5c:94:7a:33:f8:a4:b5:37:74:72:92:c0:7c:0b:26:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:08:20 2026 GMT Not After : Mar 3 06:13:20 2027 GMT Subject: CN=D9B02773D6BB4EE94E8AA2B37D6B15A8B84B8FFF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:9a:56:09:cf:1b:67:5c:a4:07:a7:10:53:73: 8e:6f:3b:72:de:3d:b7:54:08:d5:bf:06:97:56:82: 37:39:d4:7c:52:7b:b0:a0:b8:75:24:aa:37:64:0e: d2:5f:6d:2f:15:fe:dc:54:ed:25:a0:ab:f2:08:01: 7f:fe:1b:ba:8e:c0:b8:c3:74:32:35:87:a1:76:f3: 24:88:2d:38:af:34:cb:bf:38:b9:49:0a:d5:31:c0: 3e:9e:a7:16:9c:c3:bb:0f:36:59:0c:99:41:42:d8: c5:2b:a8:52:52:2f:ab:e2:bc:63:97:44:ae:f4:ae: cb:8a:c4:3d:84:da:d8:e7:9e:73:f6:47:19:c7:4c: c1:43:cb:61:b2:bf:c1:bf:51:e3:b3:5f:5f:6e:35: 13:3f:61:64:89:49:62:f2:ae:69:29:78:92:7b:1a: ce:12:3e:5c:21:59:45:72:83:3b:5b:69:04:14:af: 2e:88:b0:3e:e6:8b:0e:bc:d6:c9:68:24:03:da:88: 33:bd:27:3e:6a:d4:61:38:c5:87:23:7d:2a:df:d4: dd:43:de:3e:ec:4e:e8:32:d3:53:04:1a:f2:05:9e: 5f:fd:b6:7c:70:a3:19:f8:f8:64:16:c2:f8:69:f5: 45:90:4e:ae:2c:30:59:a2:db:69:67:4c:e8:44:ff: c3:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:B0:27:73:D6:BB:4E:E9:4E:8A:A2:B3:7D:6B:15:A8:B8:4B:8F:FF X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144379.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a6c1::/32 Signature Algorithm: sha256WithRSAEncryption 16:a6:0d:8f:68:7f:a3:98:32:4f:e9:f2:63:68:4a:a6:85:d9: 8c:e3:70:dc:81:96:cc:30:f7:05:cb:4b:7e:4e:5c:7f:4d:4f: 03:8e:73:4f:4d:66:53:3a:18:02:d6:f3:3a:9b:38:0e:08:0e: 14:33:c5:4c:7f:cc:36:db:60:bb:72:df:6b:26:45:0f:0b:1e: 3a:e3:59:7e:6c:b8:b6:e9:9c:93:85:1c:c4:89:4a:8b:38:3e: 39:86:a4:d9:cf:11:31:62:00:7e:2a:78:c9:48:67:99:2e:1b: 02:66:ff:4b:7a:a8:80:3f:71:89:ca:08:47:6b:bb:d9:1e:68: a3:29:91:9c:58:fb:67:f4:3f:81:56:fd:d0:4a:93:ba:0a:2a: fe:c4:6d:51:b8:b0:ac:59:d6:41:fc:80:37:54:f5:c9:c5:5b: 1a:bb:94:b3:0e:92:a9:82:72:bf:e8:e2:ae:5d:4e:dc:1a:09: 4b:79:13:bf:0d:29:64:96:55:6c:ae:3e:ae:3c:d6:aa:b2:f1: 06:68:50:91:51:3d:f6:56:ca:6d:e7:cd:75:52:55:99:99:7d: 74:53:ba:0f:02:fd:34:09:19:24:1b:17:04:44:76:78:46:04: 4f:81:0c:ff:84:e9:bc:91:ae:1e:96:ca:e3:f8:99:f9:4d:d3: 8e:e1:b8:e7 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUGonpn1yUejP4pLU3dHKSwHwLJrgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDgyMFoX DTI3MDMwMzA2MTMyMFowMzExMC8GA1UEAxMoRDlCMDI3NzNENkJCNEVFOTRFOEFB MkIzN0Q2QjE1QThCODRCOEZGRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKmaVgnPG2dcpAenEFNzjm87ct49t1QI1b8Gl1aCNznUfFJ7sKC4dSSqN2QO 0l9tLxX+3FTtJaCr8ggBf/4buo7AuMN0MjWHoXbzJIgtOK80y784uUkK1THAPp6n FpzDuw82WQyZQULYxSuoUlIvq+K8Y5dErvSuy4rEPYTa2Oeec/ZHGcdMwUPLYbK/ wb9R47NfX241Ez9hZIlJYvKuaSl4knsazhI+XCFZRXKDO1tpBBSvLoiwPuaLDrzW yWgkA9qIM70nPmrUYTjFhyN9Kt/U3UPePuxO6DLTUwQa8gWeX/22fHCjGfj4ZBbC +Gn1RZBOriwwWaLbaWdM6ET/w+kCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBTZsCdz 1rtO6U6KorN9axWouEuP/zAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDM3OS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK psEwDQYJKoZIhvcNAQELBQADggEBABamDY9of6OYMk/p8mNoSqaF2YzjcNyBlsww 9wXLS35OXH9NTwOOc09NZlM6GALW8zqbOA4IDhQzxUx/zDbbYLty32smRQ8LHjrj WX5suLbpnJOFHMSJSos4PjmGpNnPETFiAH4qeMlIZ5kuGwJm/0t6qIA/cYnKCEdr u9keaKMpkZxY+2f0P4FW/dBKk7oKKv7EbVG4sKxZ1kH8gDdU9cnFWxq7lLMOkqmC cr/o4q5dTtwaCUt5E78NKWSWVWyuPq481qqy8QZoUJFRPfZWym3nzXVSVZmZfXRT ug8C/TQJGSQbFwREdnhGBE+BDP+E6byRrh6WyuP4mflN047huOc= -----END CERTIFICATE-----Generated at Sat Mar 28 11:50:02 2026 by rpki-client