$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144695.roa File: AS144695.roa (raw, json) Hash identifier: u/6Mc1DfGybaJgT1SN3R3Zrp6P3+jBsuUPGr6HpD3zo= Subject key identifier: 98:F6:55:36:0D:96:E7:25:30:7B:6C:6F:81:B8:7F:05:BF:86:A9:9B Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 1338CA3A5F9B3701385E457327F0DE195973BB18 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144695.roa Signing time: Wed 04 Mar 2026 06:20:09 +0000 ROA not before: Wed 04 Mar 2026 06:15:09 +0000 ROA not after: Wed 03 Mar 2027 06:20:09 +0000 asID: 144695 IP address blocks: 240a:a7fd::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:38:ca:3a:5f:9b:37:01:38:5e:45:73:27:f0:de:19:59:73:bb:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:15:09 2026 GMT Not After : Mar 3 06:20:09 2027 GMT Subject: CN=98F655360D96E725307B6C6F81B87F05BF86A99B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:ef:60:06:a0:bc:a5:7c:26:e9:55:3e:05:0e: 7b:ed:a6:b9:03:c2:91:79:f8:59:56:96:26:64:6f: cf:39:1c:1d:79:5b:1e:86:46:ed:8c:13:9e:53:1a: 7e:d4:fe:36:5f:50:f7:1c:3c:0b:8f:2c:31:4b:22: be:9c:29:f6:d6:66:ea:37:5d:3c:e1:3a:bd:7f:34: 2a:1f:83:46:e5:be:db:7e:ad:1e:d0:ef:54:aa:40: 09:d2:62:06:8c:9b:17:e1:ef:95:3f:8d:ac:d6:63: a7:cc:cb:bb:0e:90:e9:91:32:1e:d8:85:8d:42:be: 22:77:84:05:a8:31:ab:e5:d1:d2:06:6f:6d:49:80: 50:f0:ad:68:b7:93:d0:20:82:74:75:34:c3:9d:8c: cd:ed:05:7c:bc:fc:6d:d9:77:63:9c:f1:8c:ec:60: 91:f7:ad:be:58:8f:77:17:3a:25:63:9b:f8:ef:be: f2:f5:c4:4d:df:e4:e0:20:dd:6e:a2:43:96:94:ad: f1:0f:b2:16:9f:99:73:f7:6a:db:b3:d4:0f:b0:95: 72:6a:e1:dd:cb:a4:1d:e4:fe:2c:8d:7c:2c:dd:35: de:97:70:53:ed:3b:01:2e:bd:18:e3:4e:6c:6a:d1: 56:0e:c2:11:30:89:07:51:d6:72:8c:7d:59:10:1f: 77:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:F6:55:36:0D:96:E7:25:30:7B:6C:6F:81:B8:7F:05:BF:86:A9:9B X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144695.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a7fd::/32 Signature Algorithm: sha256WithRSAEncryption cf:33:3d:25:cc:fd:a9:ed:2a:e4:f4:96:db:94:73:c6:5f:34: d8:c2:5f:92:9e:72:86:d1:39:67:59:d7:32:34:0a:cf:cc:91: 69:85:9b:7b:2d:18:4a:bb:c6:d6:8e:65:4d:6f:65:96:be:dd: 8d:ab:6e:6c:af:56:5e:f4:2f:08:a6:99:32:0b:17:c6:b3:5c: 05:fb:b0:71:6c:87:6c:f1:0f:82:00:b0:9b:20:79:22:54:c3: 0b:6f:35:85:1d:81:fb:fb:f7:9e:a0:a9:9e:61:16:ea:10:e4: 41:28:b4:e7:9c:64:ac:8f:d7:83:9d:25:8e:19:30:5f:42:76: 2f:b7:aa:d8:58:43:04:1b:06:e1:b6:46:75:23:81:38:74:5c: db:22:d9:c8:62:41:35:13:83:27:57:2e:01:17:f6:ae:6e:22: e7:da:85:41:4d:ce:70:6d:c3:e9:cc:cb:15:3e:7a:5d:8d:dd: e7:a9:92:23:f5:f9:24:47:cc:bd:fe:bc:8a:23:6e:2b:ff:e1: e8:38:e7:72:ef:55:a4:9f:44:46:a4:52:d5:7d:2e:a0:c2:02: ab:2d:bd:cb:a3:2a:f7:b1:14:f2:01:e5:fd:08:36:de:94:97: 98:7f:ec:ce:24:ec:b9:db:e0:a1:ca:7d:f7:80:71:b9:4c:61: 33:5e:dc:3e -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUEzjKOl+bNwE4XkVzJ/DeGVlzuxgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTUwOVoX DTI3MDMwMzA2MjAwOVowMzExMC8GA1UEAxMoOThGNjU1MzYwRDk2RTcyNTMwN0I2 QzZGODFCODdGMDVCRjg2QTk5QjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALXvYAagvKV8JulVPgUOe+2muQPCkXn4WVaWJmRvzzkcHXlbHoZG7YwTnlMa ftT+Nl9Q9xw8C48sMUsivpwp9tZm6jddPOE6vX80Kh+DRuW+236tHtDvVKpACdJi BoybF+HvlT+NrNZjp8zLuw6Q6ZEyHtiFjUK+IneEBagxq+XR0gZvbUmAUPCtaLeT 0CCCdHU0w52Mze0FfLz8bdl3Y5zxjOxgkfetvliPdxc6JWOb+O++8vXETd/k4CDd bqJDlpSt8Q+yFp+Zc/dq27PUD7CVcmrh3cukHeT+LI18LN013pdwU+07AS69GONO bGrRVg7CETCJB1HWcox9WRAfdzcCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSY9lU2 DZbnJTB7bG+BuH8Fv4apmzAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDY5NS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK p/0wDQYJKoZIhvcNAQELBQADggEBAM8zPSXM/antKuT0ltuUc8ZfNNjCX5KecobR OWdZ1zI0Cs/MkWmFm3stGEq7xtaOZU1vZZa+3Y2rbmyvVl70LwimmTILF8azXAX7 sHFsh2zxD4IAsJsgeSJUwwtvNYUdgfv7956gqZ5hFuoQ5EEotOecZKyP14OdJY4Z MF9Cdi+3qthYQwQbBuG2RnUjgTh0XNsi2chiQTUTgydXLgEX9q5uIufahUFNznBt w+nMyxU+el2N3eepkiP1+SRHzL3+vIojbiv/4eg453LvVaSfREakUtV9LqDCAqst vcujKvexFPIB5f0INt6Ul5h/7M4k7Lnb4KHKffeAcblMYTNe3D4= -----END CERTIFICATE-----Generated at Sat Mar 28 11:44:33 2026 by rpki-client