$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144662.roa File: AS144662.roa (raw, json) Hash identifier: qyuzTQ6Re9bLbC9ooUNe+Ck2zRFGJbyhU/WReqGWKyU= Subject key identifier: 22:F1:E9:82:3B:96:8D:BC:15:81:29:27:65:1E:68:36:46:74:F4:49 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 39EEB1A77F8D9A7769D32617CD7419C946528F49 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144662.roa Signing time: Wed 04 Mar 2026 06:21:01 +0000 ROA not before: Wed 04 Mar 2026 06:16:01 +0000 ROA not after: Wed 03 Mar 2027 06:21:01 +0000 asID: 144662 IP address blocks: 240a:a7dc::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:ee:b1:a7:7f:8d:9a:77:69:d3:26:17:cd:74:19:c9:46:52:8f:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:16:01 2026 GMT Not After : Mar 3 06:21:01 2027 GMT Subject: CN=22F1E9823B968DBC15812927651E68364674F449 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:91:ee:f8:b4:2d:3e:66:35:39:37:91:6f:ae: 8d:70:ca:8c:9a:66:1b:fd:fc:89:74:67:ee:33:18: a3:1e:dc:3c:5a:26:90:da:d0:2e:26:bc:b4:39:0f: 0d:9a:70:1f:0c:72:ae:5d:af:df:87:0c:eb:d1:53: fe:e4:3f:8a:31:3f:0a:b6:db:0c:da:0b:87:eb:2d: 4c:a6:f5:6a:23:aa:31:cc:2e:45:15:d0:f1:f1:c0: 9a:a8:18:d4:5e:65:5b:3b:77:91:13:c1:89:87:30: 0e:3e:23:23:4c:1a:be:1c:11:8b:f9:46:7f:65:7a: 4d:3b:33:67:ce:2b:b7:ef:c7:be:0b:d4:20:6c:d2: 88:ab:cf:3a:74:66:2b:32:3c:9f:f5:5c:22:bb:79: 93:d1:aa:99:e5:96:18:75:ad:4f:bc:58:37:18:a9: f4:30:83:c3:b8:31:47:ba:a8:6b:ea:51:c9:99:7d: 08:b8:e2:a3:c0:4b:7c:02:c4:2e:87:dd:9b:f2:8f: c3:cf:5e:0a:fd:47:c4:29:12:ff:d0:83:ad:aa:55: 0c:74:73:5f:6c:72:92:cb:74:60:3c:ca:de:87:bf: bb:d7:0f:76:de:9a:f6:d9:f9:f7:7e:5b:bc:b3:b4: 48:14:09:44:20:fc:b1:8b:2a:08:5d:20:b3:92:09: dd:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:F1:E9:82:3B:96:8D:BC:15:81:29:27:65:1E:68:36:46:74:F4:49 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144662.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a7dc::/32 Signature Algorithm: sha256WithRSAEncryption 56:d4:07:ae:46:41:7b:47:6e:00:8f:f3:f1:fd:91:2c:d1:20: 70:64:82:11:38:57:06:82:09:c4:c2:bb:48:82:f5:71:cd:50: a4:9e:be:ac:21:a0:7c:13:f6:f5:8b:f2:10:1c:95:6a:12:c6: 60:13:41:d0:05:6f:29:3c:54:6e:d6:51:ba:4f:c0:97:57:72: fb:aa:f8:a1:e4:f3:f4:c4:de:8f:ec:c8:57:d3:db:e0:fa:d1: c4:8d:35:4f:d1:d1:c0:f2:90:e1:dc:09:e4:6c:76:ee:05:be: 07:26:3a:f5:17:79:54:87:2f:d8:c5:83:c3:3e:09:95:4b:49: c0:d7:54:df:f4:9b:55:13:1c:28:4a:f1:97:80:d4:8f:8e:22: 4a:5b:e6:01:e8:93:54:35:f5:12:99:35:88:ff:44:0c:e4:2a: 26:3b:94:d7:a4:fb:25:4b:6c:13:a5:64:7a:61:89:9f:c9:10: 78:43:1f:20:59:f8:1b:79:dc:82:49:a0:ce:f2:28:de:5b:fb: 85:cb:75:b6:42:ec:19:e3:75:ff:c6:ad:c5:2c:85:ea:36:d3: 63:a0:8c:ce:b9:cc:b8:06:1e:ab:de:72:5a:09:0a:1f:03:b2: 5d:40:a0:17:b4:db:e4:9a:6f:0b:b1:e7:15:95:f1:15:21:eb: ef:34:ed:52 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUOe6xp3+Nmndp0yYXzXQZyUZSj0kwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTYwMVoX DTI3MDMwMzA2MjEwMVowMzExMC8GA1UEAxMoMjJGMUU5ODIzQjk2OERCQzE1ODEy OTI3NjUxRTY4MzY0Njc0RjQ0OTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMSR7vi0LT5mNTk3kW+ujXDKjJpmG/38iXRn7jMYox7cPFomkNrQLia8tDkP DZpwHwxyrl2v34cM69FT/uQ/ijE/CrbbDNoLh+stTKb1aiOqMcwuRRXQ8fHAmqgY 1F5lWzt3kRPBiYcwDj4jI0wavhwRi/lGf2V6TTszZ84rt+/HvgvUIGzSiKvPOnRm KzI8n/VcIrt5k9GqmeWWGHWtT7xYNxip9DCDw7gxR7qoa+pRyZl9CLjio8BLfALE Lofdm/KPw89eCv1HxCkS/9CDrapVDHRzX2xykst0YDzK3oe/u9cPdt6a9tn5935b vLO0SBQJRCD8sYsqCF0gs5IJ3aUCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQi8emC O5aNvBWBKSdlHmg2RnT0STAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDY2Mi5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK p9wwDQYJKoZIhvcNAQELBQADggEBAFbUB65GQXtHbgCP8/H9kSzRIHBkghE4VwaC CcTCu0iC9XHNUKSevqwhoHwT9vWL8hAclWoSxmATQdAFbyk8VG7WUbpPwJdXcvuq +KHk8/TE3o/syFfT2+D60cSNNU/R0cDykOHcCeRsdu4FvgcmOvUXeVSHL9jFg8M+ CZVLScDXVN/0m1UTHChK8ZeA1I+OIkpb5gHok1Q19RKZNYj/RAzkKiY7lNek+yVL bBOlZHphiZ/JEHhDHyBZ+Bt53IJJoM7yKN5b+4XLdbZC7Bnjdf/GrcUsheo202Og jM65zLgGHqvecloJCh8Dsl1AoBe02+Sabwux5xWV8RUh6+807VI= -----END CERTIFICATE-----Generated at Sat Mar 28 11:49:43 2026 by rpki-client