$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144555.roa File: AS144555.roa (raw, json) Hash identifier: KJw63o6EMdS1jHA6mDISX198JKmaCcNOmOEfjl6zxQ0= Subject key identifier: 47:88:84:85:88:D9:15:04:77:7F:F8:9F:C4:CC:D1:71:7A:F8:AF:85 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 707EF7DDD657F943A8A15F761B8E16D992B817A7 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144555.roa Signing time: Wed 04 Mar 2026 06:20:04 +0000 ROA not before: Wed 04 Mar 2026 06:15:04 +0000 ROA not after: Wed 03 Mar 2027 06:20:04 +0000 asID: 144555 IP address blocks: 240a:a771::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:7e:f7:dd:d6:57:f9:43:a8:a1:5f:76:1b:8e:16:d9:92:b8:17:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:15:04 2026 GMT Not After : Mar 3 06:20:04 2027 GMT Subject: CN=4788848588D91504777FF89FC4CCD1717AF8AF85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:f7:2a:03:c3:bf:d0:61:0d:97:e0:37:21:77: af:51:12:9b:9e:da:2c:f9:5e:99:0f:59:97:75:0c: be:70:23:6d:3a:0c:8c:72:81:aa:a1:1a:a0:16:a1: c8:99:ed:1f:5a:d3:0b:83:31:8c:1e:4a:27:85:c8: cf:f7:79:e8:44:ec:be:bf:1f:9a:da:87:58:32:43: c0:ce:c9:b8:d3:d3:7f:a3:18:40:7c:93:c1:f6:c9: 66:7e:95:d8:62:41:5a:0e:1f:89:52:25:6b:a9:3c: 24:fe:61:51:17:74:9e:da:57:c2:5b:cb:eb:d2:69: f5:df:37:15:62:73:4f:0e:6d:38:02:fc:1d:fb:03: 1b:05:e5:bb:87:cb:98:b4:40:62:5d:89:85:84:21: 2f:11:79:e6:3d:89:18:15:4a:07:da:5a:d9:5c:1d: a5:99:08:40:2c:bd:52:42:f7:80:b1:bd:ce:57:e5: a7:21:ff:aa:c4:04:5b:c8:34:dd:74:ab:90:8f:df: 38:97:ab:e0:7a:06:c3:14:8a:e7:2b:ad:54:a0:1c: db:fb:08:9a:20:68:44:17:08:21:6b:40:17:52:e0: b2:2f:b8:10:39:77:a6:1c:86:ad:e0:62:bd:ae:48: d0:29:0e:ec:eb:99:0d:68:88:34:57:2e:cf:a0:0d: f6:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:88:84:85:88:D9:15:04:77:7F:F8:9F:C4:CC:D1:71:7A:F8:AF:85 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144555.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a771::/32 Signature Algorithm: sha256WithRSAEncryption 0e:f4:d4:f4:2e:9a:42:4b:50:b7:ac:3b:94:57:15:4e:eb:53: 03:e8:92:55:c0:68:d2:d2:ed:dd:17:cd:17:20:bd:9a:32:5d: f6:59:9f:e0:a9:3e:59:10:12:3b:7c:c6:5e:87:a3:4e:50:ba: 30:30:2c:91:4e:4b:c8:18:13:35:b9:43:68:9f:04:10:00:bf: d7:3b:a5:3e:5b:64:5b:53:4c:74:d0:aa:a0:96:6a:3d:19:bc: 79:ee:fa:c3:53:75:74:e1:2c:dc:e5:e0:10:35:89:3e:68:cc: 48:9f:83:37:0e:ae:25:4f:30:97:a3:ee:3e:b4:0a:36:5a:9d: 37:0d:c5:bd:94:d7:bd:0f:6f:32:3f:42:9c:21:d5:78:45:85: f3:6d:74:6f:41:18:26:d2:5d:b2:cd:47:76:47:1b:9f:e9:10: d7:e7:74:b4:eb:25:72:37:7a:6b:3b:ec:0e:a1:b7:24:3b:65: ad:1e:69:3a:10:2c:2d:0c:03:36:9d:70:6b:e2:fb:56:fb:8c: 7c:8b:b0:c1:12:6c:b2:3e:30:fd:9a:4e:7f:94:b5:17:aa:5a: df:1f:d9:c6:39:6c:5a:60:47:be:f6:f5:4a:2d:db:0b:8e:15: 4e:94:af:af:ba:b9:f0:94:0e:4a:67:ef:02:d4:cd:0d:6f:66: fc:0e:34:7c -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUcH733dZX+UOooV92G44W2ZK4F6cwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTUwNFoX DTI3MDMwMzA2MjAwNFowMzExMC8GA1UEAxMoNDc4ODg0ODU4OEQ5MTUwNDc3N0ZG ODlGQzRDQ0QxNzE3QUY4QUY4NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL33KgPDv9BhDZfgNyF3r1ESm57aLPlemQ9Zl3UMvnAjbToMjHKBqqEaoBah yJntH1rTC4MxjB5KJ4XIz/d56ETsvr8fmtqHWDJDwM7JuNPTf6MYQHyTwfbJZn6V 2GJBWg4fiVIla6k8JP5hURd0ntpXwlvL69Jp9d83FWJzTw5tOAL8HfsDGwXlu4fL mLRAYl2JhYQhLxF55j2JGBVKB9pa2VwdpZkIQCy9UkL3gLG9zlflpyH/qsQEW8g0 3XSrkI/fOJer4HoGwxSK5yutVKAc2/sImiBoRBcIIWtAF1Lgsi+4EDl3phyGreBi va5I0CkO7OuZDWiINFcuz6AN9uECAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRHiISF iNkVBHd/+J/EzNFxevivhTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDU1NS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK p3EwDQYJKoZIhvcNAQELBQADggEBAA701PQumkJLULesO5RXFU7rUwPoklXAaNLS 7d0XzRcgvZoyXfZZn+CpPlkQEjt8xl6Ho05QujAwLJFOS8gYEzW5Q2ifBBAAv9c7 pT5bZFtTTHTQqqCWaj0ZvHnu+sNTdXThLNzl4BA1iT5ozEifgzcOriVPMJej7j60 CjZanTcNxb2U170PbzI/Qpwh1XhFhfNtdG9BGCbSXbLNR3ZHG5/pENfndLTrJXI3 ems77A6htyQ7Za0eaToQLC0MAzadcGvi+1b7jHyLsMESbLI+MP2aTn+UtReqWt8f 2cY5bFpgR7729Uot2wuOFU6Ur6+6ufCUDkpn7wLUzQ1vZvwONHw= -----END CERTIFICATE-----Generated at Sat Mar 28 11:45:08 2026 by rpki-client