$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144646.roa File: AS144646.roa (raw, json) Hash identifier: cTb9l6Kr2e1GIl+ZJg7DOFpC4ig2anbCgbov0dZTta4= Subject key identifier: 9C:88:44:06:6D:6C:16:79:D0:0D:AD:94:7A:A4:9D:76:A9:D2:A5:55 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 46F2C4A509D37DB6C9CCFA4EC55EB24FFCE80032 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144646.roa Signing time: Wed 04 Mar 2026 06:22:22 +0000 ROA not before: Wed 04 Mar 2026 06:17:22 +0000 ROA not after: Wed 03 Mar 2027 06:22:22 +0000 asID: 144646 IP address blocks: 240a:a7cc::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:f2:c4:a5:09:d3:7d:b6:c9:cc:fa:4e:c5:5e:b2:4f:fc:e8:00:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:17:22 2026 GMT Not After : Mar 3 06:22:22 2027 GMT Subject: CN=9C8844066D6C1679D00DAD947AA49D76A9D2A555 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:1b:d1:60:b8:25:8e:ca:cf:5c:95:5f:f2:f2: 73:ed:6d:d4:dd:5a:1d:5a:16:53:47:ce:41:34:2d: 3d:b3:7d:84:1c:c4:89:60:63:05:a4:b4:ff:28:a2: 85:6e:79:a9:d0:fb:4a:da:c8:57:c3:88:58:b4:a8: d4:0f:43:cd:5b:20:6b:34:07:e2:e2:c0:6b:be:2a: 06:37:30:12:8d:07:4d:84:2c:66:0d:5e:28:9d:02: 30:eb:91:81:dc:e8:2d:ea:93:84:d4:de:5a:4a:48: 05:aa:3d:c1:2d:d9:06:1f:34:d5:a9:79:d8:70:f5: e4:41:62:0c:4d:18:9e:bb:47:22:a2:46:9f:fc:fd: e0:3a:da:52:2a:81:73:85:aa:fb:49:62:8f:f9:c4: da:33:d9:3e:cb:84:34:db:61:ec:80:a3:c8:22:ae: f9:db:be:fc:ed:66:f7:b6:c4:28:e8:0a:ce:e5:b8: 96:fa:98:41:6c:96:9d:60:d3:1a:ae:aa:f3:f3:da: 81:5c:39:a2:da:51:35:05:1d:cc:45:a2:93:8a:17: af:34:f8:ef:c3:3a:38:b9:f9:36:45:a0:19:d0:5f: d3:bb:cf:de:c6:bb:66:c3:ec:b8:80:3c:f6:fd:f8: a8:0c:4d:cb:2e:78:85:63:95:fb:e4:79:19:9b:0d: 0e:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:88:44:06:6D:6C:16:79:D0:0D:AD:94:7A:A4:9D:76:A9:D2:A5:55 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144646.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a7cc::/32 Signature Algorithm: sha256WithRSAEncryption 77:2e:2c:fa:f2:99:8d:bb:38:bc:b2:e6:f4:62:7c:ae:99:22: bc:11:fb:75:60:fc:e0:4d:b3:bc:b6:09:c5:74:25:dc:d0:ee: 38:25:42:08:b7:1d:78:ee:7e:9f:7e:84:2c:1f:cd:3b:d8:c7: 35:0a:a9:c2:9a:e6:36:b6:3b:05:89:06:78:5a:be:73:c0:a2: 91:16:84:ff:f0:18:c8:52:00:bb:c5:75:da:29:24:27:a0:a9: 41:ce:c8:65:1f:d0:07:ed:20:92:3a:c4:54:e1:aa:a7:13:b7: 1e:28:45:fc:e6:45:ca:ad:66:c6:7a:d6:3f:d3:d0:fd:59:23: d7:aa:f1:79:a9:5f:88:6c:60:36:fe:9b:32:21:13:b2:33:45: ed:1d:b1:c4:26:15:e3:84:9e:37:8a:51:9d:d4:12:57:7d:0f: cd:32:49:1a:35:ac:60:66:89:62:38:19:84:67:d7:b8:8e:15: 5b:3c:8d:36:9c:18:0a:9d:89:f0:5e:60:75:47:6f:7f:e8:df: b2:16:21:37:d1:12:ec:1c:d5:fd:31:bb:d9:f5:6c:fc:bb:45: 91:1e:34:4d:05:e5:38:cc:83:c1:cf:4d:bc:7f:4e:f2:29:bc: c0:79:38:61:06:4f:55:c3:e2:8f:0b:7d:02:5b:b9:99:2c:a2: 09:40:e4:38 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIURvLEpQnTfbbJzPpOxV6yT/zoADIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTcyMloX DTI3MDMwMzA2MjIyMlowMzExMC8GA1UEAxMoOUM4ODQ0MDY2RDZDMTY3OUQwMERB RDk0N0FBNDlENzZBOUQyQTU1NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANAb0WC4JY7Kz1yVX/Lyc+1t1N1aHVoWU0fOQTQtPbN9hBzEiWBjBaS0/yii hW55qdD7StrIV8OIWLSo1A9DzVsgazQH4uLAa74qBjcwEo0HTYQsZg1eKJ0CMOuR gdzoLeqThNTeWkpIBao9wS3ZBh801al52HD15EFiDE0YnrtHIqJGn/z94DraUiqB c4Wq+0lij/nE2jPZPsuENNth7ICjyCKu+du+/O1m97bEKOgKzuW4lvqYQWyWnWDT Gq6q8/PagVw5otpRNQUdzEWik4oXrzT478M6OLn5NkWgGdBf07vP3sa7ZsPsuIA8 9v34qAxNyy54hWOV++R5GZsNDqsCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSciEQG bWwWedANrZR6pJ12qdKlVTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDY0Ni5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK p8wwDQYJKoZIhvcNAQELBQADggEBAHcuLPrymY27OLyy5vRifK6ZIrwR+3Vg/OBN s7y2CcV0JdzQ7jglQgi3HXjufp9+hCwfzTvYxzUKqcKa5ja2OwWJBnhavnPAopEW hP/wGMhSALvFddopJCegqUHOyGUf0AftIJI6xFThqqcTtx4oRfzmRcqtZsZ61j/T 0P1ZI9eq8XmpX4hsYDb+mzIhE7IzRe0dscQmFeOEnjeKUZ3UEld9D80ySRo1rGBm iWI4GYRn17iOFVs8jTacGAqdifBeYHVHb3/o37IWITfREuwc1f0xu9n1bPy7RZEe NE0F5TjMg8HPTbx/TvIpvMB5OGEGT1XD4o8LfQJbuZksoglA5Dg= -----END CERTIFICATE-----Generated at Sat Mar 28 11:41:49 2026 by rpki-client