$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144634.roa File: AS144634.roa (raw, json) Hash identifier: hqQQ/XjlMDIt/QfABB3NNuT3JcVxo8EUoOgiYHfTRjk= Subject key identifier: 80:7C:60:D9:FE:80:37:44:DA:C1:B3:39:50:22:A8:D8:92:79:B0:AC Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 0509AEB64584FB814F2FBC8603D56C486D2290A0 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144634.roa Signing time: Wed 04 Mar 2026 06:19:34 +0000 ROA not before: Wed 04 Mar 2026 06:14:34 +0000 ROA not after: Wed 03 Mar 2027 06:19:34 +0000 asID: 144634 IP address blocks: 240a:a7c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:09:ae:b6:45:84:fb:81:4f:2f:bc:86:03:d5:6c:48:6d:22:90:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:14:34 2026 GMT Not After : Mar 3 06:19:34 2027 GMT Subject: CN=807C60D9FE803744DAC1B3395022A8D89279B0AC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:d3:bd:7d:0c:5b:55:d4:47:1d:b3:a0:05:cc: ef:05:ec:ed:68:73:b1:5e:fa:5a:28:c9:4b:e6:ad: 92:2b:36:08:1e:19:ad:73:e0:28:d5:e2:b0:ec:70: e9:7b:2a:3e:30:67:54:53:65:e8:a3:d8:61:9b:91: 3c:92:23:b1:c8:f3:55:15:36:e9:19:ac:94:8c:c0: 4d:61:ad:e2:58:fe:c0:99:89:2a:ec:9d:7a:2f:a8: 86:46:96:d4:3a:58:94:2a:05:40:32:02:64:9c:16: 8d:cc:bb:55:10:92:57:51:18:1c:7a:1f:b7:dd:f3: 16:1c:da:27:97:77:ef:37:09:28:3e:87:41:35:ba: 09:d4:36:c3:10:24:84:e6:40:d2:e2:bd:6a:19:ba: a1:6f:53:19:64:18:9e:aa:f6:42:4a:63:96:63:ba: 59:63:6a:5c:d0:95:86:78:4f:eb:4b:01:c7:7c:d5: eb:3d:d1:3b:e5:40:eb:be:0d:b4:85:96:ea:8a:b1: 4e:ea:c3:13:70:9a:16:d5:a2:68:44:de:d2:d7:f6: dc:63:e1:c9:98:65:be:e6:91:d2:5b:f2:d4:4a:04: 47:85:53:22:f0:2d:d4:6b:b5:6a:7c:f6:a8:9f:24: 5a:63:42:30:42:6f:4f:00:aa:8e:fb:18:44:eb:5e: d8:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:7C:60:D9:FE:80:37:44:DA:C1:B3:39:50:22:A8:D8:92:79:B0:AC X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144634.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a7c0::/32 Signature Algorithm: sha256WithRSAEncryption 34:bb:05:78:c7:75:0b:c4:85:63:e4:f7:e0:41:e6:aa:1b:51: 85:05:93:1c:e9:51:08:75:f7:cc:dc:fb:d0:de:be:86:9b:8e: 37:97:2a:d4:d7:44:c6:86:b8:a3:10:5e:4f:f0:06:23:01:71: ef:3b:cc:9e:44:09:d8:f9:44:3b:0c:a7:ae:5c:db:d0:0e:ef: 47:62:20:02:d6:6d:e2:d2:bd:90:9b:8b:67:03:7b:c0:39:c7: 96:16:bd:52:87:9b:ba:59:cd:15:dd:ff:e2:71:e6:91:62:2c: 13:f0:e5:8c:18:ed:f8:99:18:4f:03:7a:47:ff:89:18:a2:39: 54:17:b4:73:fc:f9:db:83:ff:22:28:2a:66:4a:cf:fd:42:77: 52:e5:30:3f:f0:f9:f4:65:74:76:62:05:9e:5a:d2:c3:4a:78: ad:6c:7d:98:91:ec:ab:d6:4a:5c:db:0b:b2:43:c4:d9:6e:13: c0:bf:02:80:ca:f2:7a:cb:ee:e5:f8:22:b8:05:e8:10:e7:b5: dd:d1:d8:09:d7:cf:f2:59:bf:3b:3b:df:0c:c6:c3:1c:d7:c1: b2:31:95:45:35:01:4f:1a:c0:77:f9:ae:24:d3:3d:e2:a9:45: 6d:fb:15:9c:86:f7:a0:ba:c5:85:3f:33:11:7b:9b:e1:8c:59: 3d:3d:7d:1e -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUBQmutkWE+4FPL7yGA9VsSG0ikKAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTQzNFoX DTI3MDMwMzA2MTkzNFowMzExMC8GA1UEAxMoODA3QzYwRDlGRTgwMzc0NERBQzFC MzM5NTAyMkE4RDg5Mjc5QjBBQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAPvTvX0MW1XURx2zoAXM7wXs7WhzsV76WijJS+atkis2CB4ZrXPgKNXisOxw 6XsqPjBnVFNl6KPYYZuRPJIjscjzVRU26RmslIzATWGt4lj+wJmJKuydei+ohkaW 1DpYlCoFQDICZJwWjcy7VRCSV1EYHHoft93zFhzaJ5d37zcJKD6HQTW6CdQ2wxAk hOZA0uK9ahm6oW9TGWQYnqr2QkpjlmO6WWNqXNCVhnhP60sBx3zV6z3RO+VA674N tIWW6oqxTurDE3CaFtWiaETe0tf23GPhyZhlvuaR0lvy1EoER4VTIvAt1Gu1anz2 qJ8kWmNCMEJvTwCqjvsYROte2F0CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSAfGDZ /oA3RNrBszlQIqjYknmwrDAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDYzNC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK p8AwDQYJKoZIhvcNAQELBQADggEBADS7BXjHdQvEhWPk9+BB5qobUYUFkxzpUQh1 98zc+9DevoabjjeXKtTXRMaGuKMQXk/wBiMBce87zJ5ECdj5RDsMp65c29AO70di IALWbeLSvZCbi2cDe8A5x5YWvVKHm7pZzRXd/+Jx5pFiLBPw5YwY7fiZGE8Dekf/ iRiiOVQXtHP8+duD/yIoKmZKz/1Cd1LlMD/w+fRldHZiBZ5a0sNKeK1sfZiR7KvW SlzbC7JDxNluE8C/AoDK8nrL7uX4IrgF6BDntd3R2AnXz/JZvzs73wzGwxzXwbIx lUU1AU8awHf5riTTPeKpRW37FZyG96C6xYU/MxF7m+GMWT09fR4= -----END CERTIFICATE-----Generated at Sat Mar 28 11:43:03 2026 by rpki-client