$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144616.roa File: AS144616.roa (raw, json) Hash identifier: oVW8JGw/fgxbUTTUPb5z4Ou0JbdpgJdjr/rxT0/3Pxw= Subject key identifier: FF:A8:D2:3F:9A:17:12:11:67:0B:50:42:9D:2A:89:28:84:AA:E8:A1 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 37651D091C394B23062313977511F311E3D6A9CD Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144616.roa Signing time: Wed 04 Mar 2026 06:21:46 +0000 ROA not before: Wed 04 Mar 2026 06:16:46 +0000 ROA not after: Wed 03 Mar 2027 06:21:46 +0000 asID: 144616 IP address blocks: 240a:a7ae::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:65:1d:09:1c:39:4b:23:06:23:13:97:75:11:f3:11:e3:d6:a9:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:16:46 2026 GMT Not After : Mar 3 06:21:46 2027 GMT Subject: CN=FFA8D23F9A171211670B50429D2A892884AAE8A1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:3d:d7:71:8e:c6:a4:fe:77:ab:5c:7e:83:b3: 91:2e:bc:40:ae:82:59:e7:92:2b:db:b3:a9:9d:b9: 76:91:04:be:7c:13:9c:d4:e4:19:63:f5:6b:6c:d4: 55:d0:6b:21:36:9b:63:00:9f:ef:73:1c:de:08:5d: 70:cc:32:4c:61:ab:e6:93:c9:45:b8:76:b1:a5:86: 18:79:30:19:32:b2:90:d6:e4:f8:35:46:bf:d2:34: 45:e1:e0:9c:7e:40:f0:25:6e:0a:79:42:f7:7f:69: eb:11:d8:34:60:36:5a:dd:34:b9:6f:b5:86:d8:17: dc:3c:bb:67:bc:f3:e8:f6:b6:9f:d2:3f:8b:e5:2e: 21:23:e8:76:23:39:01:c3:a2:c5:c0:71:67:5c:38: a3:db:8c:74:2e:18:ea:3c:00:ca:ea:96:a1:5c:41: c8:a6:4c:78:1c:8c:c5:0b:70:e1:4f:a4:51:68:8b: 6e:72:03:08:d7:0d:f7:ff:6d:24:12:86:b6:38:e3: 99:82:29:02:bb:42:99:6e:e0:a4:f1:a8:8c:d2:26: 37:57:ae:f8:95:d9:a9:60:9b:82:09:b4:d3:d2:ca: 4b:b6:da:b1:b6:b5:d1:94:47:fd:b1:46:9f:d4:f0: 38:1f:b0:ec:75:0e:ad:ba:30:32:e7:09:9b:80:85: e2:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:A8:D2:3F:9A:17:12:11:67:0B:50:42:9D:2A:89:28:84:AA:E8:A1 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144616.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a7ae::/32 Signature Algorithm: sha256WithRSAEncryption b0:ae:a6:07:54:c9:0b:97:23:50:79:6c:89:39:b8:3e:bf:d1: 6a:ed:03:a1:25:d4:d4:55:83:73:ba:88:4c:07:ee:ea:e7:0c: dd:1f:70:6c:1d:aa:b5:06:af:ca:23:0b:51:92:3f:00:3e:b6: 96:fb:20:23:a1:8e:22:13:59:ce:4c:94:ec:4b:92:66:70:a7: c8:89:a1:39:c0:39:32:82:8e:eb:de:69:44:33:53:c4:5a:fc: aa:96:78:01:64:73:e3:65:0f:33:c9:fb:af:21:1f:4e:46:99: d0:fd:cf:f1:33:59:7d:59:9e:15:0a:98:34:68:c3:f2:26:fc: c0:67:42:4d:f7:e3:20:79:d0:f3:b7:4a:f5:0e:82:c5:51:e0: ec:51:0e:53:53:49:d5:61:1b:b9:2f:9e:4b:58:33:ae:dd:a6: a6:ce:8d:3a:ca:37:8a:fc:c1:14:90:f5:fa:2e:43:05:8d:db: 25:15:44:94:69:6c:c6:ec:dd:a1:b1:43:d7:24:c6:6c:5a:4e: cd:2c:73:ff:96:b4:d8:bf:db:25:d4:70:c1:8b:f6:48:46:fb: 35:3b:26:94:38:14:2e:43:ce:ae:44:70:ef:8d:04:9f:09:5e: 53:e8:3e:68:bb:f4:b8:4a:69:58:54:8f:fa:de:37:58:b9:9c: 83:bc:17:70 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUN2UdCRw5SyMGIxOXdRHzEePWqc0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTY0NloX DTI3MDMwMzA2MjE0NlowMzExMC8GA1UEAxMoRkZBOEQyM0Y5QTE3MTIxMTY3MEI1 MDQyOUQyQTg5Mjg4NEFBRThBMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJ4913GOxqT+d6tcfoOzkS68QK6CWeeSK9uzqZ25dpEEvnwTnNTkGWP1a2zU VdBrITabYwCf73Mc3ghdcMwyTGGr5pPJRbh2saWGGHkwGTKykNbk+DVGv9I0ReHg nH5A8CVuCnlC939p6xHYNGA2Wt00uW+1htgX3Dy7Z7zz6Pa2n9I/i+UuISPodiM5 AcOixcBxZ1w4o9uMdC4Y6jwAyuqWoVxByKZMeByMxQtw4U+kUWiLbnIDCNcN9/9t JBKGtjjjmYIpArtCmW7gpPGojNImN1eu+JXZqWCbggm009LKS7basba10ZRH/bFG n9TwOB+w7HUOrbowMucJm4CF4okCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBT/qNI/ mhcSEWcLUEKdKokohKrooTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDYxNi5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK p64wDQYJKoZIhvcNAQELBQADggEBALCupgdUyQuXI1B5bIk5uD6/0WrtA6El1NRV g3O6iEwH7urnDN0fcGwdqrUGr8ojC1GSPwA+tpb7ICOhjiITWc5MlOxLkmZwp8iJ oTnAOTKCjuveaUQzU8Ra/KqWeAFkc+NlDzPJ+68hH05GmdD9z/EzWX1ZnhUKmDRo w/Im/MBnQk334yB50PO3SvUOgsVR4OxRDlNTSdVhG7kvnktYM67dpqbOjTrKN4r8 wRSQ9fouQwWN2yUVRJRpbMbs3aGxQ9ckxmxaTs0sc/+WtNi/2yXUcMGL9khG+zU7 JpQ4FC5Dzq5EcO+NBJ8JXlPoPmi79LhKaVhUj/reN1i5nIO8F3A= -----END CERTIFICATE-----Generated at Sat Mar 28 11:44:23 2026 by rpki-client