$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144550.roa File: AS144550.roa (raw, json) Hash identifier: LJohmgydHVeLGZIs8NlRIdjdasTjrlgNzr1MQWIvBk4= Subject key identifier: 9C:F2:22:32:09:8E:E7:3E:14:A4:EA:B8:1E:C2:CB:3C:D6:0B:B9:23 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 7D9D09E65BC7027857CF07846B775E12E7396421 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144550.roa Signing time: Wed 04 Mar 2026 06:21:18 +0000 ROA not before: Wed 04 Mar 2026 06:16:18 +0000 ROA not after: Wed 03 Mar 2027 06:21:18 +0000 asID: 144550 IP address blocks: 240a:a76c::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:9d:09:e6:5b:c7:02:78:57:cf:07:84:6b:77:5e:12:e7:39:64:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:16:18 2026 GMT Not After : Mar 3 06:21:18 2027 GMT Subject: CN=9CF22232098EE73E14A4EAB81EC2CB3CD60BB923 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:05:af:61:f5:a0:00:ae:8d:7a:dd:ed:d0:49: 8f:7e:3d:1d:01:35:e7:26:6d:f3:2b:b2:3a:d8:ff: 62:98:89:bf:16:57:17:c8:ef:f6:cf:c7:f3:fe:f5: 41:c1:e9:41:b7:19:03:5a:60:b3:25:e3:9f:46:e1: 0f:08:dd:f4:09:6b:5f:06:01:28:90:62:5a:39:50: 26:b6:e1:f7:cd:01:1c:21:85:57:66:a2:f3:a7:17: ba:f3:8c:3b:47:5b:10:36:30:a4:b9:f4:e7:f1:b3: 47:0f:e4:bb:28:a0:46:91:88:9d:93:06:fc:16:b0: cc:e9:13:a6:ba:4e:0b:60:d0:05:b1:97:ab:01:05: 11:04:08:4c:53:3f:06:9c:31:c5:ca:a0:ef:6c:6f: e2:0b:a3:f0:9f:98:a9:f4:90:dc:29:e3:2c:a5:7e: 7e:c2:eb:87:84:5c:a2:e8:fa:c3:54:e0:51:0c:60: 71:bf:4e:bf:f8:f3:18:27:b6:60:fd:14:55:4f:c6: a0:e3:b4:71:6b:de:7b:dc:94:26:47:75:f8:54:a6: 12:8b:c7:0e:bd:ad:7d:a9:ca:a3:55:8b:be:23:13: 74:ab:7f:ca:22:0b:e7:b5:ac:3c:ae:2c:30:ee:95: 84:de:08:1b:bb:65:17:2a:80:90:4d:41:74:83:c5: 1a:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:F2:22:32:09:8E:E7:3E:14:A4:EA:B8:1E:C2:CB:3C:D6:0B:B9:23 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144550.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a76c::/32 Signature Algorithm: sha256WithRSAEncryption 2e:bc:fe:2b:37:14:5c:2c:fb:72:22:4e:c9:bc:60:d1:6d:8c: cc:0f:a5:d2:93:91:7c:e7:43:2a:29:eb:8b:cd:5f:4e:a3:cc: d0:44:1e:b0:dc:55:55:61:a4:d0:ae:7d:31:f7:6c:27:d4:4d: 06:3f:70:1d:ee:22:27:bc:66:b8:07:7f:ba:8c:31:5b:02:a6: 33:0c:d6:a8:9b:51:c1:d6:42:21:a7:f5:53:2c:a7:d3:67:bf: e2:69:12:21:d3:39:c2:2c:cf:1f:9b:15:16:94:49:cd:dc:7a: c8:ca:21:8a:35:d3:36:d2:3f:fa:80:14:bb:b8:7a:f4:f6:f7: dc:1e:8b:39:f1:17:df:a9:60:8d:0b:10:c6:f6:fc:7f:4b:6c: b3:21:e6:ed:13:30:cf:85:23:60:e6:5c:9a:00:85:38:0e:81: a9:16:e9:0d:51:3d:1b:2a:b1:d9:f1:f6:fa:eb:9c:d1:ad:b8: 89:8a:1f:96:13:f4:15:30:63:c9:ac:a0:0b:63:59:1f:07:5c: 9f:0d:81:2e:e0:9f:3d:61:a1:3e:24:d4:28:5c:a8:84:50:45: 63:af:71:30:ce:53:aa:08:fb:ed:e8:d1:c6:39:51:41:67:5f: a3:56:b7:52:b3:4a:08:7a:b8:47:27:21:c1:09:58:b3:ae:d3: 44:24:8d:16 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUfZ0J5lvHAnhXzweEa3deEuc5ZCEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTYxOFoX DTI3MDMwMzA2MjExOFowMzExMC8GA1UEAxMoOUNGMjIyMzIwOThFRTczRTE0QTRF QUI4MUVDMkNCM0NENjBCQjkyMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK4Fr2H1oACujXrd7dBJj349HQE15yZt8yuyOtj/YpiJvxZXF8jv9s/H8/71 QcHpQbcZA1pgsyXjn0bhDwjd9AlrXwYBKJBiWjlQJrbh980BHCGFV2ai86cXuvOM O0dbEDYwpLn05/GzRw/kuyigRpGInZMG/BawzOkTprpOC2DQBbGXqwEFEQQITFM/ Bpwxxcqg72xv4guj8J+YqfSQ3CnjLKV+fsLrh4Rcouj6w1TgUQxgcb9Ov/jzGCe2 YP0UVU/GoOO0cWvee9yUJkd1+FSmEovHDr2tfanKo1WLviMTdKt/yiIL57WsPK4s MO6VhN4IG7tlFyqAkE1BdIPFGnMCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSc8iIy CY7nPhSk6rgewss81gu5IzAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDU1MC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK p2wwDQYJKoZIhvcNAQELBQADggEBAC68/is3FFws+3IiTsm8YNFtjMwPpdKTkXzn Qyop64vNX06jzNBEHrDcVVVhpNCufTH3bCfUTQY/cB3uIie8ZrgHf7qMMVsCpjMM 1qibUcHWQiGn9VMsp9Nnv+JpEiHTOcIszx+bFRaUSc3cesjKIYo10zbSP/qAFLu4 evT299weiznxF9+pYI0LEMb2/H9LbLMh5u0TMM+FI2DmXJoAhTgOgakW6Q1RPRsq sdnx9vrrnNGtuImKH5YT9BUwY8msoAtjWR8HXJ8NgS7gnz1hoT4k1ChcqIRQRWOv cTDOU6oI++3o0cY5UUFnX6NWt1KzSgh6uEcnIcEJWLOu00QkjRY= -----END CERTIFICATE-----Generated at Sat Mar 28 11:42:44 2026 by rpki-client