$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144579.roa File: AS144579.roa (raw, json) Hash identifier: sDvZMefTO2TiwfYAwyoVdd6X/E5LTuUVp1J8jS5NQ0I= Subject key identifier: 92:D3:36:2C:79:4C:9D:8B:6B:37:B8:79:15:46:B7:67:AC:56:1B:DD Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 2FA0F325553DB5C8811FD709C161D646325B1BA0 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144579.roa Signing time: Wed 04 Mar 2026 06:22:01 +0000 ROA not before: Wed 04 Mar 2026 06:17:01 +0000 ROA not after: Wed 03 Mar 2027 06:22:01 +0000 asID: 144579 IP address blocks: 240a:a789::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:a0:f3:25:55:3d:b5:c8:81:1f:d7:09:c1:61:d6:46:32:5b:1b:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:17:01 2026 GMT Not After : Mar 3 06:22:01 2027 GMT Subject: CN=92D3362C794C9D8B6B37B8791546B767AC561BDD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:b2:57:7b:4e:59:6e:4b:47:30:e9:ae:c7:ab: 00:ea:4d:3c:85:fa:43:9a:90:6e:b9:96:3b:01:77: 43:ae:bb:ea:d9:28:70:8c:85:0e:a0:d6:57:c8:a1: 6c:0a:9e:24:a7:e9:a1:14:6f:34:d7:57:be:94:55: 28:95:0f:3d:1a:bf:e5:de:85:a9:8b:86:fb:06:0b: c7:ab:6d:a6:b9:7c:ab:c0:4d:5c:eb:52:5c:fd:92: da:54:64:11:22:12:20:e8:e8:88:81:f3:aa:d9:7f: a5:f7:9a:c0:b6:3c:29:ad:01:3d:2f:fa:9b:ca:e1: e9:95:3d:2c:76:ed:9f:5a:c8:e0:e2:fd:e2:73:71: a7:71:18:29:0b:66:9e:e7:52:7c:32:0d:9d:64:5e: 09:6b:41:b9:4b:64:83:71:55:6f:e1:6f:a8:26:bc: 25:82:87:e7:b0:40:9a:6f:fe:9f:16:20:ca:5c:94: be:ac:ae:2c:35:04:18:da:a0:65:08:6a:67:f6:0d: 04:28:8a:17:f3:30:00:a9:15:13:fb:de:d9:cc:d2: 39:ab:49:61:5a:04:d7:a5:4b:bf:dd:b7:04:1c:7f: 9a:49:b4:c3:97:32:d0:32:86:96:4d:3f:9e:dc:30: 97:3c:0f:bb:32:31:26:5c:42:b0:17:a9:4c:68:57: f5:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:D3:36:2C:79:4C:9D:8B:6B:37:B8:79:15:46:B7:67:AC:56:1B:DD X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144579.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a789::/32 Signature Algorithm: sha256WithRSAEncryption 69:d1:24:0a:ae:7d:93:6c:5d:4b:01:0f:d8:ea:63:1e:f7:d8: 65:b1:97:66:34:d9:db:77:22:22:0b:3e:f3:60:26:c2:3c:fd: f2:98:d2:d1:5b:1f:c5:17:8a:f9:96:58:42:45:01:5b:29:32: b8:63:63:a3:94:ba:3a:92:d0:c9:f4:94:a9:ba:d3:7e:c6:de: a2:62:c4:35:71:96:0d:9f:f9:c6:11:74:7b:91:1b:45:6b:04: d3:8c:01:29:b7:52:6d:fd:49:ed:4f:0a:ce:13:58:f5:6d:1f: d4:da:dd:35:2f:a7:6f:1b:13:95:60:88:91:b1:d2:d2:01:1d: 81:7d:aa:0e:af:11:3b:97:2e:e1:2e:ce:34:0b:df:c5:10:bc: 5f:df:45:62:79:80:d0:81:0c:05:77:63:19:ed:43:e2:0c:64: c8:c8:d0:e7:d1:18:c4:97:9f:5a:7b:28:a7:c1:bf:a7:d1:d2: 49:4d:f1:77:44:cf:a3:48:d2:3e:61:29:08:2f:5e:76:b7:0f: 62:4c:a4:bd:13:99:00:b6:0a:0b:5c:6b:b7:f1:04:c3:37:80: fb:95:f8:36:2d:72:a1:87:ae:ed:f4:68:f2:0c:f4:a9:b0:92: ec:7d:e0:bc:6a:da:73:a0:d8:9a:d5:18:c5:8f:c1:6a:0f:61: 91:db:f1:94 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUL6DzJVU9tciBH9cJwWHWRjJbG6AwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTcwMVoX DTI3MDMwMzA2MjIwMVowMzExMC8GA1UEAxMoOTJEMzM2MkM3OTRDOUQ4QjZCMzdC ODc5MTU0NkI3NjdBQzU2MUJERDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALCyV3tOWW5LRzDprserAOpNPIX6Q5qQbrmWOwF3Q6676tkocIyFDqDWV8ih bAqeJKfpoRRvNNdXvpRVKJUPPRq/5d6FqYuG+wYLx6ttprl8q8BNXOtSXP2S2lRk ESISIOjoiIHzqtl/pfeawLY8Ka0BPS/6m8rh6ZU9LHbtn1rI4OL94nNxp3EYKQtm nudSfDINnWReCWtBuUtkg3FVb+FvqCa8JYKH57BAmm/+nxYgylyUvqyuLDUEGNqg ZQhqZ/YNBCiKF/MwAKkVE/ve2czSOatJYVoE16VLv923BBx/mkm0w5cy0DKGlk0/ ntwwlzwPuzIxJlxCsBepTGhX9cECAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSS0zYs eUydi2s3uHkVRrdnrFYb3TAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDU3OS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK p4kwDQYJKoZIhvcNAQELBQADggEBAGnRJAqufZNsXUsBD9jqYx732GWxl2Y02dt3 IiILPvNgJsI8/fKY0tFbH8UXivmWWEJFAVspMrhjY6OUujqS0Mn0lKm6037G3qJi xDVxlg2f+cYRdHuRG0VrBNOMASm3Um39Se1PCs4TWPVtH9Ta3TUvp28bE5VgiJGx 0tIBHYF9qg6vETuXLuEuzjQL38UQvF/fRWJ5gNCBDAV3YxntQ+IMZMjI0OfRGMSX n1p7KKfBv6fR0klN8XdEz6NI0j5hKQgvXna3D2JMpL0TmQC2Cgtca7fxBMM3gPuV +DYtcqGHru30aPIM9Kmwkux94Lxq2nOg2JrVGMWPwWoPYZHb8ZQ= -----END CERTIFICATE-----Generated at Sat Mar 28 11:41:15 2026 by rpki-client