$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144480.roa File: AS144480.roa (raw, json) Hash identifier: 29stD7USgKGeXR2+4wNOuhZXMG+YAnm5ua8MMtDANeI= Subject key identifier: B9:32:46:A9:1B:A3:67:FF:04:2B:7C:67:14:6D:CA:4A:04:A4:95:8D Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 7DEDC59F1F69717130DFC0D99BB4A66F4D5781CA Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144480.roa Signing time: Wed 04 Mar 2026 06:14:44 +0000 ROA not before: Wed 04 Mar 2026 06:09:44 +0000 ROA not after: Wed 03 Mar 2027 06:14:44 +0000 asID: 144480 IP address blocks: 240a:a726::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:ed:c5:9f:1f:69:71:71:30:df:c0:d9:9b:b4:a6:6f:4d:57:81:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:09:44 2026 GMT Not After : Mar 3 06:14:44 2027 GMT Subject: CN=B93246A91BA367FF042B7C67146DCA4A04A4958D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:32:cf:22:74:b9:c7:2e:8a:11:9a:2f:55:3f: 51:bc:13:03:d1:cb:44:45:33:ea:e8:b4:15:c2:bf: 63:a7:c0:eb:c6:09:91:8e:d3:1d:34:8e:0b:57:d9: fc:a6:f3:32:21:86:b9:fe:30:f3:d7:a2:9a:31:cc: de:d9:1e:48:c2:72:d6:ca:48:00:46:66:52:a6:81: fa:5e:54:6a:7c:95:be:68:4c:e3:52:05:03:48:15: a9:d4:79:e6:73:76:80:ad:be:fe:14:aa:dc:36:4d: 0b:c2:58:b6:3c:47:bf:8d:0e:8a:92:bf:91:10:a2: cc:eb:a9:84:b8:34:e5:73:fa:50:af:71:85:26:96: bc:3f:61:ac:71:c7:b6:7a:3c:c7:da:b3:57:75:78: 7d:13:e1:7e:7b:d6:05:2e:d7:b1:65:62:c1:8b:db: 42:fd:fc:1a:65:c8:39:6d:90:7c:0a:d3:cd:e3:97: f0:cb:db:72:ff:2f:e0:76:d1:08:68:b6:5a:cc:83: 36:d0:2c:0e:59:61:9b:e5:87:13:b5:a6:25:c0:33: 28:c5:65:47:13:67:60:bb:a1:04:18:92:b0:ea:be: cb:35:74:49:f8:6c:00:d3:ce:f9:8f:16:d3:12:30: 52:17:79:17:3f:07:28:b0:fd:a5:25:d2:f0:f5:c2: 57:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:32:46:A9:1B:A3:67:FF:04:2B:7C:67:14:6D:CA:4A:04:A4:95:8D X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144480.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a726::/32 Signature Algorithm: sha256WithRSAEncryption a8:44:2b:0d:e9:d6:7d:bd:e2:f7:79:bd:2f:b8:b2:b0:2f:ce: c9:c9:f6:44:f4:ea:f1:f5:4c:cf:2e:67:84:fa:31:02:b7:2c: f0:40:eb:18:dc:9e:69:8b:cd:e8:23:ce:51:8c:d6:5b:fb:6b: 00:ca:e8:34:7a:d3:e0:f1:6e:7d:9a:2f:3b:be:66:0e:90:8a: e9:91:66:0a:bf:c0:a5:a5:c3:d3:02:9c:99:ff:fc:59:29:d4: db:88:7f:53:34:ce:cd:47:5f:91:c9:1c:21:c6:29:3a:50:cd: d0:53:6c:b2:5b:48:c4:0e:98:b5:6a:fc:b5:d2:f5:09:2f:83: 55:70:b4:c8:fb:8a:37:fc:ba:c3:8f:de:3b:94:dd:f7:b4:31: 19:df:c0:7f:80:91:1c:36:d8:65:72:9f:c2:55:df:e9:a3:15: fa:1d:d1:a0:50:b6:9e:3f:dd:e7:ce:20:84:16:bb:a8:1c:09: 1f:4f:bc:32:9a:6f:36:34:47:8a:6d:12:f4:f3:a4:e7:9b:24: b1:1e:79:29:f7:86:ea:af:04:2d:3d:46:05:4d:e5:89:c5:13: da:14:41:fc:6f:0f:25:3a:d8:3e:97:d3:04:25:db:b3:9a:1b: 27:b1:5d:8f:4f:3c:de:93:09:8e:22:23:10:e5:df:4e:8f:c9: dc:a1:4c:17 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUfe3Fnx9pcXEw38DZm7Smb01XgcowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDk0NFoX DTI3MDMwMzA2MTQ0NFowMzExMC8GA1UEAxMoQjkzMjQ2QTkxQkEzNjdGRjA0MkI3 QzY3MTQ2RENBNEEwNEE0OTU4RDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJQyzyJ0uccuihGaL1U/UbwTA9HLREUz6ui0FcK/Y6fA68YJkY7THTSOC1fZ /KbzMiGGuf4w89eimjHM3tkeSMJy1spIAEZmUqaB+l5UanyVvmhM41IFA0gVqdR5 5nN2gK2+/hSq3DZNC8JYtjxHv40OipK/kRCizOuphLg05XP6UK9xhSaWvD9hrHHH tno8x9qzV3V4fRPhfnvWBS7XsWViwYvbQv38GmXIOW2QfArTzeOX8Mvbcv8v4HbR CGi2WsyDNtAsDllhm+WHE7WmJcAzKMVlRxNnYLuhBBiSsOq+yzV0SfhsANPO+Y8W 0xIwUhd5Fz8HKLD9pSXS8PXCV4cCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBS5Mkap G6Nn/wQrfGcUbcpKBKSVjTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDQ4MC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK pyYwDQYJKoZIhvcNAQELBQADggEBAKhEKw3p1n294vd5vS+4srAvzsnJ9kT06vH1 TM8uZ4T6MQK3LPBA6xjcnmmLzegjzlGM1lv7awDK6DR60+Dxbn2aLzu+Zg6QiumR Zgq/wKWlw9MCnJn//Fkp1NuIf1M0zs1HX5HJHCHGKTpQzdBTbLJbSMQOmLVq/LXS 9Qkvg1VwtMj7ijf8usOP3juU3fe0MRnfwH+AkRw22GVyn8JV3+mjFfod0aBQtp4/ 3efOIIQWu6gcCR9PvDKabzY0R4ptEvTzpOebJLEeeSn3huqvBC09RgVN5YnFE9oU QfxvDyU62D6X0wQl27OaGyexXY9PPN6TCY4iIxDl306PydyhTBc= -----END CERTIFICATE-----Generated at Sat Mar 28 11:41:05 2026 by rpki-client