$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144400.roa File: AS144400.roa (raw, json) Hash identifier: 3FKhKG0z2oDD8SKloryQ2SPjNStn2iKg2GaZmeW4gZM= Subject key identifier: 63:B8:30:63:9E:71:54:FF:DA:F1:5B:FA:2D:B8:1C:4A:FA:07:98:91 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 1B4176171C02C09FF6FFE1B9510C4304CF92CB28 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144400.roa Signing time: Wed 04 Mar 2026 06:12:38 +0000 ROA not before: Wed 04 Mar 2026 06:07:38 +0000 ROA not after: Wed 03 Mar 2027 06:12:38 +0000 asID: 144400 IP address blocks: 240a:a6d6::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:41:76:17:1c:02:c0:9f:f6:ff:e1:b9:51:0c:43:04:cf:92:cb:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:07:38 2026 GMT Not After : Mar 3 06:12:38 2027 GMT Subject: CN=63B830639E7154FFDAF15BFA2DB81C4AFA079891 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:f4:41:f0:6f:33:5b:d9:e2:03:f0:2d:55:07: ed:a8:73:35:58:13:8d:80:8e:c3:3c:16:06:22:0e: eb:3f:ec:ab:f6:87:32:fa:b8:f3:19:a7:1b:1e:c0: d2:ed:f5:02:f3:98:f8:24:b8:a9:10:70:09:30:b6: 6b:88:fd:54:d1:20:4d:ba:0f:3b:aa:d2:2a:6f:ec: 3d:1f:a1:d1:a8:28:3e:de:ab:bc:ec:d5:f1:46:ae: a9:6d:f2:be:37:87:2a:d9:2a:39:95:83:ba:1f:81: e0:40:84:60:7f:0f:9a:7b:37:79:ef:74:c6:2e:47: 4b:d7:a3:42:aa:c8:da:12:6d:db:2c:79:f4:84:55: 32:bd:db:61:68:f5:d9:5a:09:38:9e:90:16:e5:78: 63:5a:fb:9e:a7:42:4b:06:28:c6:1a:c8:d5:2e:4e: 72:6e:a4:19:f2:c1:61:d6:d2:ab:4b:ba:2b:fa:8a: bc:26:85:56:6b:ce:fc:e9:1e:12:c6:53:b7:f0:70: a0:c7:02:4a:c6:d5:6e:2f:bd:e9:39:37:60:95:76: 60:26:09:3e:c6:1a:37:58:07:c6:73:41:db:f4:58: b7:98:47:a5:a8:35:6b:54:77:57:26:df:b6:e3:86: d1:9d:b7:0c:e6:67:7e:04:56:06:73:9d:0e:96:30: 95:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:B8:30:63:9E:71:54:FF:DA:F1:5B:FA:2D:B8:1C:4A:FA:07:98:91 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144400.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a6d6::/32 Signature Algorithm: sha256WithRSAEncryption 17:69:4b:2e:2f:9b:d0:af:8b:65:b7:48:60:39:9e:58:6b:9c: 32:84:9f:04:a6:ce:a8:d3:c8:1e:7a:09:d5:1f:b2:f3:24:ad: 11:e2:33:7a:e7:60:c5:00:be:1f:52:70:ac:6f:e4:b2:f2:85: ee:ad:5a:50:53:93:60:21:f9:e5:7e:39:c9:74:29:7f:b5:88: e5:38:60:66:2a:4e:7a:bf:7a:bf:be:1f:5f:16:21:1c:ba:2a: 65:13:61:fa:5b:f6:f8:b7:7d:cd:0c:3e:eb:26:c5:07:76:8f: 6a:f7:c1:12:c5:8c:2e:69:a3:0e:31:e1:08:d2:c8:3e:5c:b0: ed:70:9f:81:fb:76:d3:00:e5:c1:f2:7e:10:e1:32:d6:16:f0: 01:59:bb:c3:30:e3:cd:ec:06:7a:94:97:57:1d:28:a2:03:ad: e4:22:6e:b8:ff:3a:d6:83:8c:5d:3a:e7:c1:a3:25:7e:69:af: ac:92:36:50:f2:6b:29:3e:9f:bb:89:01:80:b7:4a:29:e9:e7: c8:15:40:19:98:29:cf:a5:5b:47:90:11:1f:0a:69:64:5c:06: dd:39:cc:e2:f5:78:6e:19:1d:75:58:3c:fd:01:c8:20:f4:56: 5f:01:fd:e7:96:42:69:6b:75:f5:4e:56:dc:97:2b:fe:f5:4a: 6b:a4:26:f8 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUG0F2FxwCwJ/2/+G5UQxDBM+SyygwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDczOFoX DTI3MDMwMzA2MTIzOFowMzExMC8GA1UEAxMoNjNCODMwNjM5RTcxNTRGRkRBRjE1 QkZBMkRCODFDNEFGQTA3OTg5MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALD0QfBvM1vZ4gPwLVUH7ahzNVgTjYCOwzwWBiIO6z/sq/aHMvq48xmnGx7A 0u31AvOY+CS4qRBwCTC2a4j9VNEgTboPO6rSKm/sPR+h0agoPt6rvOzV8UauqW3y vjeHKtkqOZWDuh+B4ECEYH8Pmns3ee90xi5HS9ejQqrI2hJt2yx59IRVMr3bYWj1 2VoJOJ6QFuV4Y1r7nqdCSwYoxhrI1S5Ocm6kGfLBYdbSq0u6K/qKvCaFVmvO/Oke EsZTt/BwoMcCSsbVbi+96Tk3YJV2YCYJPsYaN1gHxnNB2/RYt5hHpag1a1R3Vybf tuOG0Z23DOZnfgRWBnOdDpYwlXcCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRjuDBj nnFU/9rxW/otuBxK+geYkTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDQwMC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK ptYwDQYJKoZIhvcNAQELBQADggEBABdpSy4vm9Cvi2W3SGA5nlhrnDKEnwSmzqjT yB56CdUfsvMkrRHiM3rnYMUAvh9ScKxv5LLyhe6tWlBTk2Ah+eV+Ocl0KX+1iOU4 YGYqTnq/er++H18WIRy6KmUTYfpb9vi3fc0MPusmxQd2j2r3wRLFjC5pow4x4QjS yD5csO1wn4H7dtMA5cHyfhDhMtYW8AFZu8Mw483sBnqUl1cdKKIDreQibrj/OtaD jF0658GjJX5pr6ySNlDyayk+n7uJAYC3Sinp58gVQBmYKc+lW0eQER8KaWRcBt05 zOL1eG4ZHXVYPP0ByCD0Vl8B/eeWQmlrdfVOVtyXK/71SmukJvg= -----END CERTIFICATE-----Generated at Sat Mar 28 11:45:35 2026 by rpki-client