$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144412.roa File: AS144412.roa (raw, json) Hash identifier: xZcaF2g9wonnYw7XAEwtWHwIml7VTLPKGo3WOxdnK0g= Subject key identifier: DA:94:65:51:87:3D:29:98:65:6D:B9:07:22:DA:6C:84:71:91:60:F0 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 2967CBE34D62A3EE40DAF11530907AB3AD30325C Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144412.roa Signing time: Wed 04 Mar 2026 06:13:08 +0000 ROA not before: Wed 04 Mar 2026 06:08:08 +0000 ROA not after: Wed 03 Mar 2027 06:13:08 +0000 asID: 144412 IP address blocks: 240a:a6e2::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:67:cb:e3:4d:62:a3:ee:40:da:f1:15:30:90:7a:b3:ad:30:32:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:08:08 2026 GMT Not After : Mar 3 06:13:08 2027 GMT Subject: CN=DA946551873D2998656DB90722DA6C84719160F0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:39:3b:a9:6c:77:c2:5b:e4:ba:39:a5:c0:c5: 6b:5c:8f:5d:5c:17:c1:a1:ae:00:e4:8a:51:3e:f6: ee:3c:74:d0:03:5d:cf:65:fa:90:f7:ac:d1:93:e9: 23:dc:26:9a:7d:c8:44:01:21:ec:23:65:76:01:5f: 33:8b:ea:ab:f1:83:3f:fb:93:0c:65:c0:2b:b0:6d: 84:4b:82:e7:ce:3c:c6:e6:48:a0:2d:13:bd:96:95: 37:32:a6:c7:a8:0c:06:f1:42:67:46:0a:f4:fd:f9: 6f:74:4b:c4:46:48:2e:24:15:10:94:8b:06:00:8d: e8:20:fe:4b:6e:d7:c5:70:e0:ea:1f:f0:71:6e:9b: bd:a5:13:37:27:28:4e:e7:f5:01:5b:d4:5d:b8:0c: a4:67:a3:f0:83:2e:46:37:7a:98:2d:4c:eb:40:c3: 4c:74:9f:ce:dc:6d:63:31:83:2f:82:70:73:1e:bf: 6c:65:70:d2:fd:ab:69:fe:85:13:f3:76:71:9d:f0: 41:d1:ca:95:33:54:87:91:2f:9d:c2:56:a4:a2:1c: 25:e6:ee:a3:54:e8:85:15:cf:b1:08:4a:a2:8d:22: e8:ac:43:8e:a5:b2:4c:9f:40:1f:68:9a:cc:d4:8d: 17:38:b9:34:a1:61:74:06:66:33:9a:1c:de:04:38: 95:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:94:65:51:87:3D:29:98:65:6D:B9:07:22:DA:6C:84:71:91:60:F0 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144412.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a6e2::/32 Signature Algorithm: sha256WithRSAEncryption 5b:e3:a5:22:15:f1:da:9c:54:ec:ec:fa:50:59:97:86:6e:c1: 91:37:61:46:4e:3e:c2:f4:ef:bc:9f:25:75:b3:ce:55:c6:4b: d6:0f:ae:8d:6f:de:6b:d3:b4:07:c5:df:4c:1f:df:75:c9:09: ef:56:ec:b2:9b:12:70:14:41:fc:ba:6e:05:e9:5a:55:94:d6: 61:3e:75:04:18:5f:8a:d3:4c:68:ab:be:8a:d8:a3:22:dc:0b: e6:e6:fe:75:11:54:77:c5:6b:ef:a6:9c:09:ae:81:e8:f9:a1: eb:f6:a1:9d:36:b9:07:40:15:df:fe:7d:10:c3:40:8f:3f:69: bf:87:10:72:52:65:57:6c:34:44:73:74:1b:c2:a6:99:fb:53: a4:b4:f3:41:c1:06:9e:c6:ec:59:28:72:f6:94:a6:e2:16:40: 48:67:1c:76:01:46:e3:49:10:28:cf:5a:de:80:75:9f:e4:2b: 73:03:2c:10:d4:61:f6:60:90:fb:b9:b0:4e:5c:ee:b8:a3:82: c7:4e:dc:39:ce:8b:b8:18:bc:be:e6:02:50:da:76:0f:b7:8f: 29:d8:78:8a:8c:b9:8e:cc:b8:48:5d:11:2c:10:00:19:a3:22: 31:d1:16:7b:fe:e2:e3:32:9e:86:51:55:60:6e:48:02:34:31: 99:f3:f0:e2 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUKWfL401io+5A2vEVMJB6s60wMlwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDgwOFoX DTI3MDMwMzA2MTMwOFowMzExMC8GA1UEAxMoREE5NDY1NTE4NzNEMjk5ODY1NkRC OTA3MjJEQTZDODQ3MTkxNjBGMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALk5O6lsd8Jb5Lo5pcDFa1yPXVwXwaGuAOSKUT727jx00ANdz2X6kPes0ZPp I9wmmn3IRAEh7CNldgFfM4vqq/GDP/uTDGXAK7BthEuC5848xuZIoC0TvZaVNzKm x6gMBvFCZ0YK9P35b3RLxEZILiQVEJSLBgCN6CD+S27XxXDg6h/wcW6bvaUTNyco Tuf1AVvUXbgMpGej8IMuRjd6mC1M60DDTHSfztxtYzGDL4Jwcx6/bGVw0v2raf6F E/N2cZ3wQdHKlTNUh5EvncJWpKIcJebuo1TohRXPsQhKoo0i6KxDjqWyTJ9AH2ia zNSNFzi5NKFhdAZmM5oc3gQ4lXsCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBTalGVR hz0pmGVtuQci2myEcZFg8DAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDQxMi5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK puIwDQYJKoZIhvcNAQELBQADggEBAFvjpSIV8dqcVOzs+lBZl4ZuwZE3YUZOPsL0 77yfJXWzzlXGS9YPro1v3mvTtAfF30wf33XJCe9W7LKbEnAUQfy6bgXpWlWU1mE+ dQQYX4rTTGirvorYoyLcC+bm/nURVHfFa++mnAmugej5oev2oZ02uQdAFd/+fRDD QI8/ab+HEHJSZVdsNERzdBvCppn7U6S080HBBp7G7FkocvaUpuIWQEhnHHYBRuNJ ECjPWt6AdZ/kK3MDLBDUYfZgkPu5sE5c7rijgsdO3DnOi7gYvL7mAlDadg+3jynY eIqMuY7MuEhdESwQABmjIjHRFnv+4uMynoZRVWBuSAI0MZnz8OI= -----END CERTIFICATE-----Generated at Sat Mar 28 11:43:57 2026 by rpki-client