$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144426.roa File: AS144426.roa (raw, json) Hash identifier: OnTEz5TY6BIcRzvgjT9lpom8OLYTTVU2qk2uvbCTwds= Subject key identifier: 00:33:B6:B2:F3:4F:62:6B:AA:1B:1B:BD:38:75:1C:F8:64:82:CC:1D Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 046885F5C2023664DB403032A99D27D6EA58E1FB Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144426.roa Signing time: Wed 04 Mar 2026 06:15:26 +0000 ROA not before: Wed 04 Mar 2026 06:10:26 +0000 ROA not after: Wed 03 Mar 2027 06:15:26 +0000 asID: 144426 IP address blocks: 240a:a6f0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:68:85:f5:c2:02:36:64:db:40:30:32:a9:9d:27:d6:ea:58:e1:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:10:26 2026 GMT Not After : Mar 3 06:15:26 2027 GMT Subject: CN=0033B6B2F34F626BAA1B1BBD38751CF86482CC1D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:21:bf:0f:c0:78:a6:8b:bd:bd:16:dc:d1:96: ff:14:f9:67:cc:2c:e8:a6:6d:18:9b:aa:f7:50:ae: 10:99:38:46:db:30:ef:8a:ae:1e:f6:9e:5e:16:ba: 02:d9:1b:d0:af:aa:7c:4f:d6:38:ae:c1:eb:50:ec: 96:ec:ae:21:8d:6a:9b:4d:a4:66:a0:d5:ab:b7:3e: 56:58:3f:e0:c6:eb:0b:67:7a:eb:3a:fe:e6:85:d0: 96:6f:92:21:95:65:94:61:d2:fe:d2:0f:6b:2d:7b: e5:ec:be:f2:e9:67:64:cb:3a:fe:7d:f4:07:3b:17: b2:71:34:75:c5:bb:ce:df:8d:22:da:cd:67:01:e7: 21:ed:59:a7:ee:f9:b4:35:e4:10:c1:7f:83:09:95: c9:59:31:03:44:07:ff:6a:d8:87:2c:f4:ba:97:7f: cf:46:cc:bf:ad:9d:4d:bd:c8:2a:5f:bb:a9:78:ea: 7f:ef:92:0b:28:af:58:ad:a6:06:91:0e:02:7d:a8: bf:5f:09:8e:5b:70:2e:7d:34:5e:15:68:69:6c:61: 4a:1d:5a:ee:6e:ab:b9:ef:90:8a:64:41:fd:c0:40: f9:16:3c:ac:39:76:a5:51:e5:ae:6c:df:1f:2d:d9: 81:28:19:10:fe:2e:a0:2b:0a:b4:87:48:89:ff:51: 95:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:33:B6:B2:F3:4F:62:6B:AA:1B:1B:BD:38:75:1C:F8:64:82:CC:1D X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144426.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a6f0::/32 Signature Algorithm: sha256WithRSAEncryption c8:82:0e:3a:77:47:48:29:6e:c6:33:23:76:b6:f8:ab:4c:ce: c2:09:0b:d6:2f:1e:be:fc:3b:3e:54:53:0d:b9:23:5e:84:ce: d7:d4:e2:c5:37:51:d6:3f:5c:61:bb:81:28:2d:f0:15:e5:3f: 96:f7:c5:9a:3d:29:bc:64:60:f5:93:12:c6:5e:44:5d:cb:02: 01:e8:b2:27:fc:5b:11:68:44:f3:27:d6:77:f9:b2:5c:11:76: ab:1d:ae:52:26:72:cb:01:1c:cd:f3:0c:13:84:50:1e:f6:a3: 65:7b:e0:f2:3c:1c:11:94:3d:77:f0:ee:90:20:d3:db:1a:d3: f5:2f:8f:2a:83:bf:f0:fb:fe:58:c4:22:d0:37:96:4c:72:6a: 18:14:b6:ba:76:e9:33:a2:fe:30:ff:0e:10:0b:be:47:4b:b8: 77:8c:f4:94:a3:a8:42:59:24:0f:b0:51:3e:2b:ca:06:b5:85: 33:be:a1:c5:58:87:31:11:23:ce:82:ea:c3:e6:a7:89:67:0f: 1c:a4:92:da:b3:15:39:92:ca:79:61:fa:d0:94:f1:da:b3:63: 95:06:09:ea:d6:f7:6b:c2:95:5e:f2:63:0c:70:d6:0b:f2:28: 02:96:2b:de:3e:a8:0e:83:ab:2c:56:00:60:6b:30:82:50:f7: 32:bc:40:d1 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUBGiF9cICNmTbQDAyqZ0n1upY4fswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTAyNloX DTI3MDMwMzA2MTUyNlowMzExMC8GA1UEAxMoMDAzM0I2QjJGMzRGNjI2QkFBMUIx QkJEMzg3NTFDRjg2NDgyQ0MxRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANchvw/AeKaLvb0W3NGW/xT5Z8ws6KZtGJuq91CuEJk4Rtsw74quHvaeXha6 Atkb0K+qfE/WOK7B61DsluyuIY1qm02kZqDVq7c+Vlg/4MbrC2d66zr+5oXQlm+S IZVllGHS/tIPay175ey+8ulnZMs6/n30BzsXsnE0dcW7zt+NItrNZwHnIe1Zp+75 tDXkEMF/gwmVyVkxA0QH/2rYhyz0upd/z0bMv62dTb3IKl+7qXjqf++SCyivWK2m BpEOAn2ov18JjltwLn00XhVoaWxhSh1a7m6rue+QimRB/cBA+RY8rDl2pVHlrmzf Hy3ZgSgZEP4uoCsKtIdIif9RldECAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQAM7ay 809ia6obG704dRz4ZILMHTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDQyNi5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK pvAwDQYJKoZIhvcNAQELBQADggEBAMiCDjp3R0gpbsYzI3a2+KtMzsIJC9YvHr78 Oz5UUw25I16EztfU4sU3UdY/XGG7gSgt8BXlP5b3xZo9KbxkYPWTEsZeRF3LAgHo sif8WxFoRPMn1nf5slwRdqsdrlImcssBHM3zDBOEUB72o2V74PI8HBGUPXfw7pAg 09sa0/UvjyqDv/D7/ljEItA3lkxyahgUtrp26TOi/jD/DhALvkdLuHeM9JSjqEJZ JA+wUT4ryga1hTO+ocVYhzERI86C6sPmp4lnDxykktqzFTmSynlh+tCU8dqzY5UG CerW92vClV7yYwxw1gvyKAKWK94+qA6DqyxWAGBrMIJQ9zK8QNE= -----END CERTIFICATE-----Generated at Sat Mar 28 11:43:33 2026 by rpki-client