$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144676.roa File: AS144676.roa (raw, json) Hash identifier: ku2nI/wCsHpwlvNqRt4lS6+f+i9nW+f/pXxhH8HEVaA= Subject key identifier: C3:7E:41:9F:18:8D:E7:CD:01:C2:ED:5C:5A:A1:42:C1:4E:FA:0B:4F Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 730F8EB4DB377F05FCAF5DC0D068CD9CC93ED8DB Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144676.roa Signing time: Wed 04 Mar 2026 06:19:34 +0000 ROA not before: Wed 04 Mar 2026 06:14:34 +0000 ROA not after: Wed 03 Mar 2027 06:19:34 +0000 asID: 144676 IP address blocks: 240a:a7ea::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:0f:8e:b4:db:37:7f:05:fc:af:5d:c0:d0:68:cd:9c:c9:3e:d8:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:14:34 2026 GMT Not After : Mar 3 06:19:34 2027 GMT Subject: CN=C37E419F188DE7CD01C2ED5C5AA142C14EFA0B4F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:79:96:59:40:4a:0e:36:b0:28:d9:e8:9e:fb: 18:8c:5e:cc:8a:7e:99:72:03:6a:8f:05:c0:33:25: d7:6f:f4:90:41:01:56:84:ff:e2:68:b5:31:2e:fd: 9e:dd:6c:e7:c6:3d:db:d4:ed:4b:4d:7e:dc:65:6c: 5d:77:3d:bd:c7:d8:ec:27:91:34:72:6e:a5:d5:65: 3e:43:a3:55:11:e2:60:3d:5e:32:b6:b8:80:06:79: 4b:1f:84:92:99:05:0b:f7:0c:9c:c4:c3:67:db:43: 65:59:9d:0d:34:c4:51:9d:df:3b:88:53:e9:7f:2b: d4:76:bc:84:c5:6c:be:b0:f9:3c:bd:ad:70:d8:86: 7a:8e:9f:fd:3e:c7:bf:d2:e5:3e:2d:6a:85:24:02: 0e:25:9b:5f:e8:c9:f0:5d:cd:d9:ee:59:38:e4:d3: 62:9c:65:20:b8:e8:17:b1:06:f1:37:36:ac:5c:65: 9d:eb:cd:a5:a7:27:cf:eb:8e:71:6c:63:54:62:b4: 9c:32:d8:42:f1:fd:6c:20:93:3b:71:9b:cc:ff:75: ca:28:3c:3b:ce:c7:f0:15:80:1f:97:c0:ee:1a:40: de:cf:19:79:be:1c:d6:63:1d:29:d7:0f:9c:33:a4: 6e:7b:ca:c3:04:fd:6e:a2:46:e3:84:5d:9f:d8:63: 9d:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:7E:41:9F:18:8D:E7:CD:01:C2:ED:5C:5A:A1:42:C1:4E:FA:0B:4F X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144676.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a7ea::/32 Signature Algorithm: sha256WithRSAEncryption 7e:b7:05:fc:58:13:be:0f:55:b5:a7:9d:18:2b:e7:69:48:39: 0d:35:06:2d:4d:1f:85:2b:e0:aa:a6:60:f0:dd:7c:ab:33:11: df:35:06:ee:a7:0a:9e:32:57:ca:b0:c4:33:ad:17:d4:b6:2e: 14:30:ef:b2:ed:3c:47:bc:3a:a4:ed:6a:e4:2a:6f:ec:a3:20: 1b:c5:30:b8:b8:6f:a6:9d:85:c0:6b:6b:61:3f:22:8f:f6:e4: 0f:44:af:26:d7:47:02:c6:f1:02:e0:2e:c1:6d:b7:a9:78:29: 55:53:cf:16:43:d6:85:5b:62:7d:cf:ea:66:f6:dc:11:0a:cc: fa:e4:a6:12:07:3d:dc:74:d2:54:0b:f0:92:5d:8b:be:ea:cf: b2:ad:e2:f5:f8:34:ef:5b:6a:fd:ff:d5:41:81:b5:6e:c4:dc: 2f:d9:4c:78:7a:73:c6:34:3f:e4:c6:af:ee:78:73:7e:c9:b3: 46:17:0b:cc:71:0d:4a:e1:27:5f:1b:18:4b:5a:7b:93:b1:3d: e3:cf:45:00:77:bd:1f:dd:d8:bf:73:51:fa:bd:64:6b:a8:b1: 28:85:1e:6f:0a:a5:a1:62:f0:75:03:c7:d2:28:4c:fc:d0:cb: 12:28:a1:50:71:98:b8:b9:59:b6:15:f9:35:07:53:10:1b:ec: 5c:70:c6:42 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUcw+OtNs3fwX8r13A0GjNnMk+2NswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTQzNFoX DTI3MDMwMzA2MTkzNFowMzExMC8GA1UEAxMoQzM3RTQxOUYxODhERTdDRDAxQzJF RDVDNUFBMTQyQzE0RUZBMEI0RjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAI55lllASg42sCjZ6J77GIxezIp+mXIDao8FwDMl12/0kEEBVoT/4mi1MS79 nt1s58Y929TtS01+3GVsXXc9vcfY7CeRNHJupdVlPkOjVRHiYD1eMra4gAZ5Sx+E kpkFC/cMnMTDZ9tDZVmdDTTEUZ3fO4hT6X8r1Ha8hMVsvrD5PL2tcNiGeo6f/T7H v9LlPi1qhSQCDiWbX+jJ8F3N2e5ZOOTTYpxlILjoF7EG8Tc2rFxlnevNpacnz+uO cWxjVGK0nDLYQvH9bCCTO3GbzP91yig8O87H8BWAH5fA7hpA3s8Zeb4c1mMdKdcP nDOkbnvKwwT9bqJG44Rdn9hjnR0CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBTDfkGf GI3nzQHC7VxaoULBTvoLTzAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDY3Ni5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK p+owDQYJKoZIhvcNAQELBQADggEBAH63BfxYE74PVbWnnRgr52lIOQ01Bi1NH4Ur 4KqmYPDdfKszEd81Bu6nCp4yV8qwxDOtF9S2LhQw77LtPEe8OqTtauQqb+yjIBvF MLi4b6adhcBra2E/Io/25A9ErybXRwLG8QLgLsFtt6l4KVVTzxZD1oVbYn3P6mb2 3BEKzPrkphIHPdx00lQL8JJdi77qz7Kt4vX4NO9bav3/1UGBtW7E3C/ZTHh6c8Y0 P+TGr+54c37Js0YXC8xxDUrhJ18bGEtae5OxPePPRQB3vR/d2L9zUfq9ZGuosSiF Hm8KpaFi8HUDx9IoTPzQyxIooVBxmLi5WbYV+TUHUxAb7FxwxkI= -----END CERTIFICATE-----Generated at Sat Mar 28 13:10:23 2026 by rpki-client