$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144596.roa File: AS144596.roa (raw, json) Hash identifier: ysvwp3rD+6Uloykdp0ba5nrLGVjnzjgNBxxUXNnK5EQ= Subject key identifier: 1C:68:A9:45:50:01:E3:DA:A7:FD:04:89:3D:F9:A2:B0:16:01:21:55 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 0226F45DCC90346CEF61A9BE3CBB488853D7EA21 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144596.roa Signing time: Wed 04 Mar 2026 06:22:14 +0000 ROA not before: Wed 04 Mar 2026 06:17:14 +0000 ROA not after: Wed 03 Mar 2027 06:22:14 +0000 asID: 144596 IP address blocks: 240a:a79a::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:26:f4:5d:cc:90:34:6c:ef:61:a9:be:3c:bb:48:88:53:d7:ea:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:17:14 2026 GMT Not After : Mar 3 06:22:14 2027 GMT Subject: CN=1C68A9455001E3DAA7FD04893DF9A2B016012155 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:73:07:70:a4:18:a7:37:cd:2f:65:7d:a1:be: 90:0c:bb:f8:5a:a4:be:4f:5a:55:a5:2c:cc:97:4a: 5e:85:d6:6b:10:09:b9:d4:df:df:13:2a:0e:36:de: 0e:6d:46:99:11:03:f1:2f:e1:51:75:54:7e:92:e8: 07:bc:e1:2b:be:43:0f:80:24:c6:68:24:13:92:21: ee:8a:93:71:14:07:fc:8c:58:22:8b:53:2c:c3:7f: 52:41:6b:f6:29:ad:9a:6d:49:28:81:97:84:93:21: 8a:ad:a2:73:6c:ee:a4:bc:28:a4:e6:c5:43:0a:95: 13:cc:e7:10:e1:81:28:55:a8:27:1f:6a:5b:e1:04: a3:79:92:83:1d:6c:83:9a:e0:c9:b3:10:fe:aa:e2: 0c:ae:44:e4:23:47:bc:c4:13:8e:3a:a8:b1:1a:cb: 85:3f:55:b7:95:3f:fe:2f:2c:eb:e8:fd:c4:53:70: af:99:a1:9e:14:50:23:5c:fb:91:67:4a:75:fe:d3: 3b:71:b1:98:ca:3e:29:5c:ca:a4:78:e9:00:95:6f: 00:98:00:aa:e4:8f:a1:00:2c:97:9b:4d:70:17:aa: 46:0d:45:05:af:99:90:a2:7f:93:0a:b8:46:b5:05: 4f:69:81:48:20:7a:3b:b5:0e:3e:ee:d3:7e:84:10: 6b:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:68:A9:45:50:01:E3:DA:A7:FD:04:89:3D:F9:A2:B0:16:01:21:55 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144596.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a79a::/32 Signature Algorithm: sha256WithRSAEncryption 1e:a3:74:17:75:8f:a4:d6:3d:93:de:69:03:d9:f3:25:59:53: 2e:cf:94:be:3e:65:37:8a:c0:cc:05:f8:79:07:65:1e:bd:6c: 53:b4:0a:52:70:73:e0:45:bb:cd:01:44:21:74:f6:19:a6:59: ac:4c:6a:7d:b0:20:20:5d:39:99:64:7f:36:03:a3:56:0c:5d: 95:3f:2f:59:d7:e6:d0:01:86:a3:09:c6:0b:80:f8:9d:3a:e9: ce:a5:04:d7:7a:72:c4:47:ae:38:bc:bf:0a:bb:c4:63:bd:dd: 74:b8:2b:6b:7d:1a:ba:f0:b4:0d:28:5d:38:c9:b7:b6:6f:1b: 17:69:e7:8b:62:7b:24:a2:52:ea:44:58:c1:13:10:5c:2d:3a: 1d:95:13:21:60:93:2f:1c:1a:73:ab:fd:16:fa:2a:a0:10:8b: ed:4b:e2:74:18:4d:85:5c:ee:b3:da:13:f1:71:49:f4:cc:0f: 05:d2:38:f5:cc:8c:dc:0b:79:d7:e5:d2:a3:c5:22:04:68:60: 07:55:d9:3d:1a:53:43:9c:6d:ea:02:45:a0:59:d7:ec:fe:4d: 8a:43:18:be:5d:db:96:e3:88:4f:59:68:66:ea:af:e5:6e:92: fc:20:45:29:48:7a:02:64:98:61:6f:99:8e:f3:aa:15:33:84: ec:0a:77:3c -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUAib0XcyQNGzvYam+PLtIiFPX6iEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTcxNFoX DTI3MDMwMzA2MjIxNFowMzExMC8GA1UEAxMoMUM2OEE5NDU1MDAxRTNEQUE3RkQw NDg5M0RGOUEyQjAxNjAxMjE1NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL1zB3CkGKc3zS9lfaG+kAy7+Fqkvk9aVaUszJdKXoXWaxAJudTf3xMqDjbe Dm1GmRED8S/hUXVUfpLoB7zhK75DD4AkxmgkE5Ih7oqTcRQH/IxYIotTLMN/UkFr 9imtmm1JKIGXhJMhiq2ic2zupLwopObFQwqVE8znEOGBKFWoJx9qW+EEo3mSgx1s g5rgybMQ/qriDK5E5CNHvMQTjjqosRrLhT9Vt5U//i8s6+j9xFNwr5mhnhRQI1z7 kWdKdf7TO3GxmMo+KVzKpHjpAJVvAJgAquSPoQAsl5tNcBeqRg1FBa+ZkKJ/kwq4 RrUFT2mBSCB6O7UOPu7TfoQQa6ECAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQcaKlF UAHj2qf9BIk9+aKwFgEhVTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDU5Ni5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK p5owDQYJKoZIhvcNAQELBQADggEBAB6jdBd1j6TWPZPeaQPZ8yVZUy7PlL4+ZTeK wMwF+HkHZR69bFO0ClJwc+BFu80BRCF09hmmWaxMan2wICBdOZlkfzYDo1YMXZU/ L1nX5tABhqMJxguA+J066c6lBNd6csRHrji8vwq7xGO93XS4K2t9GrrwtA0oXTjJ t7ZvGxdp54tieySiUupEWMETEFwtOh2VEyFgky8cGnOr/Rb6KqAQi+1L4nQYTYVc 7rPaE/FxSfTMDwXSOPXMjNwLedfl0qPFIgRoYAdV2T0aU0OcbeoCRaBZ1+z+TYpD GL5d25bjiE9ZaGbqr+VukvwgRSlIegJkmGFvmY7zqhUzhOwKdzw= -----END CERTIFICATE-----Generated at Sat Mar 28 11:42:45 2026 by rpki-client