$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144598.roa File: AS144598.roa (raw, json) Hash identifier: ixdwHyat7uRPhd+5gFcreDVZ4C16sNBAUrAjXy3UJKQ= Subject key identifier: 38:A0:57:95:98:A0:2C:FE:A8:70:F9:EB:9C:42:66:FD:6D:D0:5B:BF Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 66C08D63D279CB0101F16703AB60531591870199 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144598.roa Signing time: Wed 04 Mar 2026 06:21:06 +0000 ROA not before: Wed 04 Mar 2026 06:16:06 +0000 ROA not after: Wed 03 Mar 2027 06:21:06 +0000 asID: 144598 IP address blocks: 240a:a79c::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:c0:8d:63:d2:79:cb:01:01:f1:67:03:ab:60:53:15:91:87:01:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:16:06 2026 GMT Not After : Mar 3 06:21:06 2027 GMT Subject: CN=38A0579598A02CFEA870F9EB9C4266FD6DD05BBF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:31:01:c1:cf:3a:49:20:a1:b6:81:3c:c7:e4: 2e:09:dc:98:43:d4:91:4f:41:5c:04:1b:6a:ae:dc: ca:5c:e4:a9:78:0d:b3:9a:eb:36:8c:e6:92:d3:06: 49:b1:1f:c8:db:c3:8e:7e:d6:c8:63:ca:30:89:28: 9d:7b:f3:8f:af:20:ca:9c:d5:e2:be:37:78:19:0c: 19:99:de:d6:e7:19:3e:9d:dc:07:83:9f:eb:24:59: f7:9f:35:d7:e7:d9:92:bc:32:25:96:81:98:d6:20: c4:95:dc:fb:ee:79:70:1b:40:04:d4:ae:8e:00:78: b3:d1:11:c5:aa:0c:ff:62:c1:6f:66:09:26:ce:17: ee:29:28:64:0b:ac:e9:1d:ae:f3:65:75:5c:b8:dd: 98:67:c5:85:6f:83:52:98:83:34:bd:b7:6c:a6:1a: ef:5b:88:23:1b:39:65:fb:82:30:e6:a9:2e:df:cb: da:8e:26:79:96:c2:6e:ae:cc:48:b5:2f:89:5a:67: 03:58:b1:e6:e4:7e:11:2b:a4:23:ea:d6:eb:80:5e: 07:3a:51:94:f1:23:66:44:66:40:c5:d7:6e:44:7e: 0b:d9:09:2a:3d:ce:9e:03:59:2b:cc:1a:4a:8b:08: 3b:53:d5:e5:59:b6:f6:f7:91:2f:1b:ff:a8:56:aa: 0b:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:A0:57:95:98:A0:2C:FE:A8:70:F9:EB:9C:42:66:FD:6D:D0:5B:BF X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144598.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a79c::/32 Signature Algorithm: sha256WithRSAEncryption 7e:1f:86:aa:ca:53:dd:f2:70:ce:ba:1f:ab:d0:af:fb:1e:9e: 82:44:02:51:3b:6b:d8:68:6d:e0:18:79:52:ee:6c:92:aa:5a: 01:89:0c:bc:e0:7d:11:9d:d2:1f:80:c9:a4:cb:63:07:07:46: 96:19:c0:60:ff:c3:cf:ec:1f:65:0f:0e:21:b0:67:a9:ee:b5: 07:cb:68:50:df:c7:b9:80:48:6a:7d:4d:1a:65:ef:49:16:5a: d5:b0:42:eb:34:63:cf:6c:96:06:7e:df:ce:e7:4f:53:26:29: 38:d0:6b:b5:07:5b:51:05:76:d1:0a:68:f3:da:e9:b2:bf:61: 2d:4c:56:ea:3c:8d:d7:67:d1:80:89:23:18:eb:21:9d:db:23: aa:17:ac:60:3d:06:1b:92:40:92:b4:04:7b:0e:13:7f:ec:fc: 76:b5:1b:4e:1e:de:ad:3a:30:20:17:01:00:5c:64:a4:06:c9: 84:43:ee:0a:70:b7:e5:a5:40:e1:33:57:8d:63:0e:13:d1:f6: b4:14:86:2d:92:0b:3c:2a:e2:d3:39:09:d6:00:b8:db:a6:8e: d6:bf:be:56:3c:70:8f:7e:42:be:5f:3c:cc:3c:dc:4d:a6:7f: b7:c6:57:b5:a3:61:38:3e:ad:09:2f:4d:9a:74:a6:e7:88:ac: 41:d5:d5:1a -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUZsCNY9J5ywEB8WcDq2BTFZGHAZkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTYwNloX DTI3MDMwMzA2MjEwNlowMzExMC8GA1UEAxMoMzhBMDU3OTU5OEEwMkNGRUE4NzBG OUVCOUM0MjY2RkQ2REQwNUJCRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMIxAcHPOkkgobaBPMfkLgncmEPUkU9BXAQbaq7cylzkqXgNs5rrNozmktMG SbEfyNvDjn7WyGPKMIkonXvzj68gypzV4r43eBkMGZne1ucZPp3cB4Of6yRZ9581 1+fZkrwyJZaBmNYgxJXc++55cBtABNSujgB4s9ERxaoM/2LBb2YJJs4X7ikoZAus 6R2u82V1XLjdmGfFhW+DUpiDNL23bKYa71uIIxs5ZfuCMOapLt/L2o4meZbCbq7M SLUviVpnA1ix5uR+ESukI+rW64BeBzpRlPEjZkRmQMXXbkR+C9kJKj3OngNZK8wa SosIO1PV5Vm29veRLxv/qFaqC40CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQ4oFeV mKAs/qhw+eucQmb9bdBbvzAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDU5OC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK p5wwDQYJKoZIhvcNAQELBQADggEBAH4fhqrKU93ycM66H6vQr/senoJEAlE7a9ho beAYeVLubJKqWgGJDLzgfRGd0h+AyaTLYwcHRpYZwGD/w8/sH2UPDiGwZ6nutQfL aFDfx7mASGp9TRpl70kWWtWwQus0Y89slgZ+387nT1MmKTjQa7UHW1EFdtEKaPPa 6bK/YS1MVuo8jddn0YCJIxjrIZ3bI6oXrGA9BhuSQJK0BHsOE3/s/Ha1G04e3q06 MCAXAQBcZKQGyYRD7gpwt+WlQOEzV41jDhPR9rQUhi2SCzwq4tM5CdYAuNumjta/ vlY8cI9+Qr5fPMw83E2mf7fGV7WjYTg+rQkvTZp0pueIrEHV1Ro= -----END CERTIFICATE-----Generated at Sat Mar 28 11:41:32 2026 by rpki-client