$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144484.roa File: AS144484.roa (raw, json) Hash identifier: r50yliGC4DeUkpTW/pBez8f8bWmfQx3bRqk+ow1Mbww= Subject key identifier: 44:E6:EC:AB:B9:89:DD:0B:2A:03:35:79:5C:1C:97:4C:2C:DC:E9:6F Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 7FF05D11C9CA58A3A6FACCC82C96B832FB618F7A Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144484.roa Signing time: Wed 04 Mar 2026 06:14:34 +0000 ROA not before: Wed 04 Mar 2026 06:09:34 +0000 ROA not after: Wed 03 Mar 2027 06:14:34 +0000 asID: 144484 IP address blocks: 240a:a72a::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:f0:5d:11:c9:ca:58:a3:a6:fa:cc:c8:2c:96:b8:32:fb:61:8f:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:09:34 2026 GMT Not After : Mar 3 06:14:34 2027 GMT Subject: CN=44E6ECABB989DD0B2A0335795C1C974C2CDCE96F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:70:16:f2:c9:89:7e:ee:57:9a:25:4c:04:69: 1c:b7:e5:03:54:9a:4b:9b:6a:96:5c:aa:3d:50:18: ed:35:f8:18:3c:62:e2:33:71:e0:9b:c0:43:a4:59: 5f:ac:b9:d2:ed:7b:c2:e7:7a:b5:ba:8e:f9:75:38: 68:35:a3:70:09:34:36:bc:09:7a:95:e1:7b:23:62: cf:1d:f1:eb:98:a0:a7:88:43:95:6d:11:27:4f:00: 45:c2:f5:f3:52:26:4b:6c:12:2d:8b:a2:ed:11:e0: 38:49:8e:00:32:cd:e6:54:4c:96:8e:9f:e9:98:58: 95:42:9d:a5:e4:d1:e4:2c:39:de:e9:85:cf:05:d0: ef:2e:3a:bf:3f:99:89:84:19:16:b2:9f:7c:7c:20: a9:23:48:ec:9e:92:58:69:69:e0:8c:2b:fe:be:30: 6e:10:4d:49:bd:ab:b4:07:d7:6b:7c:f6:f2:4e:85: 59:77:f3:0c:34:d2:b3:b3:d9:88:48:b0:6a:d9:77: d3:47:3b:9c:b8:41:26:6b:4f:79:e4:2b:d8:6f:10: a3:d2:88:c0:ad:3b:a5:4e:34:50:a5:b9:15:d1:12: 0d:71:17:19:be:3b:46:35:81:60:b7:f2:fd:a2:6e: b4:8f:52:13:d7:13:6b:0a:08:0f:3d:58:c5:4d:8a: c2:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:E6:EC:AB:B9:89:DD:0B:2A:03:35:79:5C:1C:97:4C:2C:DC:E9:6F X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144484.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a72a::/32 Signature Algorithm: sha256WithRSAEncryption 0e:22:dd:fa:f7:47:6d:ab:e6:43:34:59:5c:b1:72:a0:68:88: 1a:9b:6b:94:79:c2:77:08:5e:41:ee:73:a8:23:f0:5b:e1:d0: cd:cc:c8:34:3b:e7:2a:c0:90:0c:43:1d:a1:8a:86:9c:8e:1f: c4:de:2e:7b:ef:5d:ce:46:0d:58:18:d6:b7:32:79:2a:90:25: 9c:fd:ae:87:10:70:4a:33:09:e5:3d:c4:0c:6d:ff:d6:3e:53: 1f:41:5a:f7:15:75:ac:c3:30:73:26:55:f6:d7:0f:ed:11:19: 81:91:e1:a5:9e:99:3b:af:a9:d4:92:f7:a6:e2:e9:6e:54:52: 5f:39:cc:2f:0c:b5:56:50:71:b4:0b:5b:de:ad:53:42:89:12: 90:00:30:c5:f5:de:d2:33:bc:11:a8:e2:2f:d6:4e:87:93:46: 91:33:9d:6b:13:4a:49:31:79:7e:53:48:aa:9c:8b:eb:77:ea: 23:a6:5e:7b:af:23:3b:17:22:24:89:a7:25:93:83:95:09:b0: 6a:dc:95:64:d9:31:c8:dc:fb:7f:2a:60:fb:7c:26:23:a4:cb: db:ad:6f:dc:df:98:93:7e:8b:9a:2a:ae:39:7b:68:34:74:ee: 4f:cc:1a:fd:fa:5a:de:38:93:dc:07:22:35:2f:65:00:71:cb: da:7e:bf:5e -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUf/BdEcnKWKOm+szILJa4Mvthj3owDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDkzNFoX DTI3MDMwMzA2MTQzNFowMzExMC8GA1UEAxMoNDRFNkVDQUJCOTg5REQwQjJBMDMz NTc5NUMxQzk3NEMyQ0RDRTk2RjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKxwFvLJiX7uV5olTARpHLflA1SaS5tqllyqPVAY7TX4GDxi4jNx4JvAQ6RZ X6y50u17wud6tbqO+XU4aDWjcAk0NrwJepXheyNizx3x65igp4hDlW0RJ08ARcL1 81ImS2wSLYui7RHgOEmOADLN5lRMlo6f6ZhYlUKdpeTR5Cw53umFzwXQ7y46vz+Z iYQZFrKffHwgqSNI7J6SWGlp4Iwr/r4wbhBNSb2rtAfXa3z28k6FWXfzDDTSs7PZ iEiwatl300c7nLhBJmtPeeQr2G8Qo9KIwK07pU40UKW5FdESDXEXGb47RjWBYLfy /aJutI9SE9cTawoIDz1YxU2KwoECAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRE5uyr uYndCyoDNXlcHJdMLNzpbzAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDQ4NC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK pyowDQYJKoZIhvcNAQELBQADggEBAA4i3fr3R22r5kM0WVyxcqBoiBqba5R5wncI XkHuc6gj8Fvh0M3MyDQ75yrAkAxDHaGKhpyOH8TeLnvvXc5GDVgY1rcyeSqQJZz9 rocQcEozCeU9xAxt/9Y+Ux9BWvcVdazDMHMmVfbXD+0RGYGR4aWemTuvqdSS96bi 6W5UUl85zC8MtVZQcbQLW96tU0KJEpAAMMX13tIzvBGo4i/WToeTRpEznWsTSkkx eX5TSKqci+t36iOmXnuvIzsXIiSJpyWTg5UJsGrclWTZMcjc+38qYPt8JiOky9ut b9zfmJN+i5oqrjl7aDR07k/MGv36Wt44k9wHIjUvZQBxy9p+v14= -----END CERTIFICATE-----Generated at Sat Mar 28 11:41:35 2026 by rpki-client