$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144679.roa File: AS144679.roa (raw, json) Hash identifier: t0HpTNMD2nieTtJTEl7LSK9OZdpUKSLfC8dyFHFArcE= Subject key identifier: 8E:D6:BA:93:D4:14:C3:D2:80:14:6D:B1:54:30:49:F6:73:97:C9:34 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 6E9099D17994BE82FD323A082584D45991E2A36A Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144679.roa Signing time: Wed 04 Mar 2026 06:22:26 +0000 ROA not before: Wed 04 Mar 2026 06:17:26 +0000 ROA not after: Wed 03 Mar 2027 06:22:26 +0000 asID: 144679 IP address blocks: 240a:a7ed::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:90:99:d1:79:94:be:82:fd:32:3a:08:25:84:d4:59:91:e2:a3:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:17:26 2026 GMT Not After : Mar 3 06:22:26 2027 GMT Subject: CN=8ED6BA93D414C3D280146DB1543049F67397C934 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:f3:48:4f:66:f7:56:02:ba:d6:6d:62:04:da: 5a:5b:7b:df:56:96:f6:a8:d4:e0:16:7b:a8:46:5d: 13:e0:c7:16:04:73:89:8c:af:79:13:5c:de:fa:c3: 1a:fa:00:33:95:29:27:5d:9b:9b:ed:e5:95:cc:10: af:c2:ed:4a:07:d3:f3:a8:5e:5d:78:df:0b:18:ec: b4:2b:b2:d1:9c:6a:ef:c8:ab:e7:41:c7:88:0b:c6: 7d:01:4c:db:6d:05:03:a0:d4:70:57:80:d7:c3:75: 21:d4:a2:e9:39:2f:56:4c:9c:f2:a3:68:89:60:6a: e3:c6:7a:1e:63:72:f7:de:ca:05:fd:67:7d:c3:ee: 7a:e3:33:17:a1:cb:0f:90:92:59:d6:f4:bb:d4:f6: 04:7a:b5:7a:e3:25:38:1b:77:5e:ee:fb:00:11:b6: 19:65:2e:46:aa:73:ae:79:b4:6e:83:eb:22:a3:59: dc:7a:ed:59:ba:aa:86:bd:85:df:5e:bc:5b:10:12: bb:1d:b6:df:cb:c5:63:23:49:4f:32:e2:bb:5c:ac: 99:61:92:75:e3:c3:39:d8:59:5f:eb:7b:ab:38:f7: c9:37:1c:dc:1a:3c:26:37:e8:bf:07:8d:5a:b4:e5: 6c:68:52:a4:ef:95:ff:17:b5:62:c0:a2:51:be:c9: e9:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:D6:BA:93:D4:14:C3:D2:80:14:6D:B1:54:30:49:F6:73:97:C9:34 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144679.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a7ed::/32 Signature Algorithm: sha256WithRSAEncryption 6b:1b:83:8f:9b:3c:66:2a:7d:48:fb:90:ac:68:2b:e5:69:3a: 6e:09:80:3c:f5:47:12:ad:c6:e3:9d:fa:d6:a9:8a:70:ed:01: ed:82:90:40:0e:d0:b8:40:db:ae:1a:35:84:46:32:36:61:2e: 79:3d:9f:4d:71:55:20:6a:b8:04:de:b7:90:e6:46:17:7a:f5: c4:05:78:b2:6a:5b:b8:f1:e8:f2:65:6b:80:5e:4d:cc:1e:e6: 06:d0:fd:18:bc:74:d8:f8:92:41:48:32:9e:b5:b0:b4:e1:2e: cf:74:b5:99:73:07:20:8f:7f:f5:34:a2:40:f0:10:74:56:96: c2:66:b8:97:55:59:8b:80:39:b5:6d:22:2e:f7:9d:45:73:4c: e3:f2:a6:34:c0:23:77:90:02:7d:9a:4a:1b:fb:81:bf:56:22: 2e:cf:55:77:fe:94:8d:e8:78:1c:09:c5:5f:4e:f4:7d:cb:41: e6:83:cf:5b:1e:de:e1:41:61:30:80:b4:7c:5c:ef:bf:42:51: cc:f5:fb:9c:ac:23:f4:25:cf:19:97:39:e8:03:59:ed:82:95: 47:44:70:76:23:a7:a7:78:ab:1b:32:3c:98:1f:92:3a:da:4e: 05:41:78:d9:2b:21:95:b3:a0:06:52:09:37:0b:3d:c3:6f:57: 9a:26:89:ae -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUbpCZ0XmUvoL9MjoIJYTUWZHio2owDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTcyNloX DTI3MDMwMzA2MjIyNlowMzExMC8GA1UEAxMoOEVENkJBOTNENDE0QzNEMjgwMTQ2 REIxNTQzMDQ5RjY3Mzk3QzkzNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJjzSE9m91YCutZtYgTaWlt731aW9qjU4BZ7qEZdE+DHFgRziYyveRNc3vrD GvoAM5UpJ12bm+3llcwQr8LtSgfT86heXXjfCxjstCuy0Zxq78ir50HHiAvGfQFM 220FA6DUcFeA18N1IdSi6TkvVkyc8qNoiWBq48Z6HmNy997KBf1nfcPueuMzF6HL D5CSWdb0u9T2BHq1euMlOBt3Xu77ABG2GWUuRqpzrnm0boPrIqNZ3HrtWbqqhr2F 3168WxASux2238vFYyNJTzLiu1ysmWGSdePDOdhZX+t7qzj3yTcc3Bo8JjfovweN WrTlbGhSpO+V/xe1YsCiUb7J6c0CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSO1rqT 1BTD0oAUbbFUMEn2c5fJNDAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDY3OS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK p+0wDQYJKoZIhvcNAQELBQADggEBAGsbg4+bPGYqfUj7kKxoK+VpOm4JgDz1RxKt xuOd+tapinDtAe2CkEAO0LhA264aNYRGMjZhLnk9n01xVSBquATet5DmRhd69cQF eLJqW7jx6PJla4BeTcwe5gbQ/Ri8dNj4kkFIMp61sLThLs90tZlzByCPf/U0okDw EHRWlsJmuJdVWYuAObVtIi73nUVzTOPypjTAI3eQAn2aShv7gb9WIi7PVXf+lI3o eBwJxV9O9H3LQeaDz1se3uFBYTCAtHxc779CUcz1+5ysI/QlzxmXOegDWe2ClUdE cHYjp6d4qxsyPJgfkjraTgVBeNkrIZWzoAZSCTcLPcNvV5omia4= -----END CERTIFICATE-----Generated at Sat Mar 28 11:42:38 2026 by rpki-client