$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144386.roa File: AS144386.roa (raw, json) Hash identifier: NbDGgzU1/62qyGTIbR5GgARzqj0iDfJ9KnypMRytxks= Subject key identifier: 82:2E:E0:AA:DD:E6:86:64:F4:48:F9:2B:09:3C:59:6F:5B:84:C2:CE Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 2508B3DB609084CCB6D0A21E1EA06C4C2C929F87 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144386.roa Signing time: Wed 04 Mar 2026 06:14:45 +0000 ROA not before: Wed 04 Mar 2026 06:09:45 +0000 ROA not after: Wed 03 Mar 2027 06:14:45 +0000 asID: 144386 IP address blocks: 240a:a6c8::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:08:b3:db:60:90:84:cc:b6:d0:a2:1e:1e:a0:6c:4c:2c:92:9f:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:09:45 2026 GMT Not After : Mar 3 06:14:45 2027 GMT Subject: CN=822EE0AADDE68664F448F92B093C596F5B84C2CE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:60:89:e1:4f:94:7e:93:24:04:a3:c0:12:f8: e0:a8:b1:9b:e3:e6:67:e8:f1:42:c2:28:8e:56:45: cb:89:17:f4:68:55:4c:69:18:c1:26:5b:ee:73:7b: 5f:40:7d:f2:26:a2:c3:99:4c:53:b0:ed:ba:b7:bd: 4c:2b:a2:a0:3f:fe:05:a2:c7:7c:67:78:ea:02:f3: 77:93:c8:d5:74:50:7c:85:a6:6e:e6:f4:7d:a5:b2: d0:28:40:c1:92:95:c0:9c:fc:34:44:f2:ef:21:6c: 8d:b9:19:72:5e:d2:a9:44:2b:11:0b:24:d0:93:69: f4:27:ce:a4:d1:a0:c8:ca:30:7a:31:be:9d:14:96: 02:da:8d:a1:17:81:f9:82:f8:f9:c3:e8:7c:2b:d1: 89:26:67:c1:61:65:94:71:9c:ee:fa:53:e0:f1:7d: 84:91:de:20:8c:96:52:29:7b:58:6f:4e:d4:88:93: b2:f6:72:31:dd:62:cd:af:52:64:c8:d2:c9:b3:30: 2b:41:3c:78:64:5c:5b:ac:3a:76:11:45:c8:76:97: 92:7f:e0:db:37:cb:50:14:c5:0d:f2:9c:e8:90:d2: 64:4f:bc:91:75:55:c5:5f:83:47:f6:8e:cd:18:a4: 29:a0:7c:6b:c0:10:0c:d8:f0:b6:3c:b1:d1:04:f1: af:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:2E:E0:AA:DD:E6:86:64:F4:48:F9:2B:09:3C:59:6F:5B:84:C2:CE X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144386.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a6c8::/32 Signature Algorithm: sha256WithRSAEncryption 41:37:5d:e3:0d:a4:0d:38:52:21:76:7f:e8:d9:a1:4e:17:13: 08:e6:0c:8c:3f:4b:79:fa:6a:fc:c9:e8:26:a6:bc:1c:67:91: 5b:aa:5d:ad:3f:83:eb:93:64:51:10:33:3f:0f:9e:48:a4:f8: c8:92:b9:44:8e:a1:62:25:c3:e2:81:91:ba:3f:17:4a:4a:cb: 09:cd:84:9f:89:2b:91:3d:00:ee:e1:e1:a6:e6:6b:8f:b8:ad: 0c:ba:48:b2:d6:ec:8e:29:d7:52:a0:a6:c3:96:13:92:cf:5a: f7:45:cb:85:8d:35:3e:51:ea:ce:76:a1:0c:c9:20:2e:b4:12: 6f:51:fe:3e:45:29:26:96:08:1a:32:d4:74:b9:bb:77:55:c8: e5:07:3f:65:c2:f2:6f:93:c3:20:17:2d:c9:74:b0:84:5d:87: f3:04:75:4e:8a:3a:fa:65:f1:ce:c6:a8:7e:37:7e:98:6d:ff: 76:a9:d5:31:59:1f:e9:7e:67:54:6d:99:8e:3d:6e:a9:f8:73: 18:14:20:27:2b:0d:7e:80:65:41:23:c3:d5:ce:87:f8:77:f6: 5f:c8:c6:3b:52:c4:0a:d6:72:67:be:3e:d3:cb:c2:12:fd:f7: 0d:ae:2d:41:05:be:74:f7:72:36:c6:7a:c7:d0:30:42:04:70: 94:b3:99:f2 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUJQiz22CQhMy20KIeHqBsTCySn4cwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDk0NVoX DTI3MDMwMzA2MTQ0NVowMzExMC8GA1UEAxMoODIyRUUwQUFEREU2ODY2NEY0NDhG OTJCMDkzQzU5NkY1Qjg0QzJDRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANBgieFPlH6TJASjwBL44Kixm+PmZ+jxQsIojlZFy4kX9GhVTGkYwSZb7nN7 X0B98iaiw5lMU7Dture9TCuioD/+BaLHfGd46gLzd5PI1XRQfIWmbub0faWy0ChA wZKVwJz8NETy7yFsjbkZcl7SqUQrEQsk0JNp9CfOpNGgyMowejG+nRSWAtqNoReB +YL4+cPofCvRiSZnwWFllHGc7vpT4PF9hJHeIIyWUil7WG9O1IiTsvZyMd1iza9S ZMjSybMwK0E8eGRcW6w6dhFFyHaXkn/g2zfLUBTFDfKc6JDSZE+8kXVVxV+DR/aO zRikKaB8a8AQDNjwtjyx0QTxr5MCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSCLuCq 3eaGZPRI+SsJPFlvW4TCzjAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDM4Ni5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK psgwDQYJKoZIhvcNAQELBQADggEBAEE3XeMNpA04UiF2f+jZoU4XEwjmDIw/S3n6 avzJ6CamvBxnkVuqXa0/g+uTZFEQMz8Pnkik+MiSuUSOoWIlw+KBkbo/F0pKywnN hJ+JK5E9AO7h4abma4+4rQy6SLLW7I4p11KgpsOWE5LPWvdFy4WNNT5R6s52oQzJ IC60Em9R/j5FKSaWCBoy1HS5u3dVyOUHP2XC8m+TwyAXLcl0sIRdh/MEdU6KOvpl 8c7GqH43fpht/3ap1TFZH+l+Z1RtmY49bqn4cxgUICcrDX6AZUEjw9XOh/h39l/I xjtSxArWcme+PtPLwhL99w2uLUEFvnT3cjbGesfQMEIEcJSzmfI= -----END CERTIFICATE-----Generated at Sat Mar 28 11:44:24 2026 by rpki-client