$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144719.roa File: AS144719.roa (raw, json) Hash identifier: +gYyKkfv/v+ppvZMD6kC8i1RvwCjehbCLipmjXq/boY= Subject key identifier: 7E:2A:39:14:4A:47:85:CA:2C:26:8F:4D:19:53:0E:A7:FC:27:8E:05 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 48D6D23FCE0FEF6388D9298D4D2A672DF4DD1B9D Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144719.roa Signing time: Wed 04 Mar 2026 06:21:42 +0000 ROA not before: Wed 04 Mar 2026 06:16:42 +0000 ROA not after: Wed 03 Mar 2027 06:21:42 +0000 asID: 144719 IP address blocks: 240a:a815::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:d6:d2:3f:ce:0f:ef:63:88:d9:29:8d:4d:2a:67:2d:f4:dd:1b:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:16:42 2026 GMT Not After : Mar 3 06:21:42 2027 GMT Subject: CN=7E2A39144A4785CA2C268F4D19530EA7FC278E05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:c0:17:6b:50:4a:38:0b:69:f8:8b:07:35:ba: 27:9e:6d:2a:de:b0:1d:66:f7:77:60:24:a1:07:4e: 17:6d:95:cb:f7:bc:59:f0:dc:df:9d:27:54:81:e1: 78:ed:16:a0:16:bd:02:f3:d7:35:75:b1:64:46:fc: 1b:05:ef:63:99:6a:f8:04:1c:c3:7c:a9:9c:f4:bd: 54:ab:e4:64:b7:71:96:82:e0:a9:50:53:55:f5:ce: e0:03:ae:07:6c:61:08:55:33:b8:00:a8:db:0b:1b: e4:ec:e9:4d:d8:6b:e4:a3:a7:9b:85:26:4c:bf:45: 12:cc:16:62:f1:a3:48:1f:b3:11:6c:6c:ec:a9:a4: f9:81:31:1c:d2:fe:43:d8:11:86:9d:4e:76:65:17: 44:fa:1b:51:b1:dc:40:b2:82:f8:38:c1:21:51:7f: 2a:6a:33:28:3a:36:e6:12:5c:74:03:2a:4f:41:a1: 46:2b:34:52:81:b1:54:31:48:4e:2d:12:1e:02:ee: 6d:84:6a:91:ab:02:01:8d:b0:7e:10:7c:66:f0:70: 63:60:9b:e8:d5:fe:23:2a:e4:b5:79:2e:25:64:70: 7b:5c:d6:31:23:c1:8c:e1:bc:59:1d:14:1d:f3:85: 21:c0:fe:2a:35:ec:79:4a:d7:96:8a:c3:06:ae:b5: b9:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:2A:39:14:4A:47:85:CA:2C:26:8F:4D:19:53:0E:A7:FC:27:8E:05 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144719.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a815::/32 Signature Algorithm: sha256WithRSAEncryption 4e:97:0d:e5:0d:7e:86:e1:d2:08:24:46:5c:3e:91:10:36:f9: 07:1a:db:14:37:95:c9:3e:78:29:85:56:4b:49:e6:ec:04:bf: c2:12:a6:90:21:cb:b9:bc:fd:d5:d9:12:46:39:d2:7d:72:6b: 05:9a:3d:95:42:0a:f3:8c:3a:56:91:32:cd:d9:d7:cd:b7:f9: fb:02:18:79:51:5a:84:c0:47:7d:98:ce:8e:1e:d2:63:06:c1: 01:fd:0b:7c:4e:4b:be:05:19:0c:27:e8:4b:6b:a2:17:9f:67: 73:6a:1e:d6:f1:f7:bf:d8:9f:2e:ac:dc:87:6e:60:8d:86:1f: c1:e0:a4:00:fa:79:2c:34:44:67:32:e6:c4:f9:f9:c1:03:c2: 2e:78:1b:6c:97:ae:9c:02:c2:49:58:f4:e4:b0:90:15:ee:92: 95:60:9d:92:3d:69:5d:3b:69:90:14:b0:63:22:2a:06:8c:56: f8:ee:17:ef:82:16:b5:69:91:26:24:53:db:26:c7:24:3d:d3: 86:5c:3a:77:96:bd:d2:c4:55:d1:ab:df:c0:9e:19:b6:b7:c2: 05:cd:ba:23:b1:ed:f3:d1:e6:6a:5f:fe:c3:57:3a:28:ef:ae: b1:fb:de:5d:1c:e9:ca:a2:e0:7a:c6:33:bd:1f:2b:9b:ea:8f: 5a:62:07:9c -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUSNbSP84P72OI2SmNTSpnLfTdG50wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTY0MloX DTI3MDMwMzA2MjE0MlowMzExMC8GA1UEAxMoN0UyQTM5MTQ0QTQ3ODVDQTJDMjY4 RjREMTk1MzBFQTdGQzI3OEUwNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOXAF2tQSjgLafiLBzW6J55tKt6wHWb3d2AkoQdOF22Vy/e8WfDc350nVIHh eO0WoBa9AvPXNXWxZEb8GwXvY5lq+AQcw3ypnPS9VKvkZLdxloLgqVBTVfXO4AOu B2xhCFUzuACo2wsb5OzpTdhr5KOnm4UmTL9FEswWYvGjSB+zEWxs7Kmk+YExHNL+ Q9gRhp1OdmUXRPobUbHcQLKC+DjBIVF/KmozKDo25hJcdAMqT0GhRis0UoGxVDFI Ti0SHgLubYRqkasCAY2wfhB8ZvBwY2Cb6NX+IyrktXkuJWRwe1zWMSPBjOG8WR0U HfOFIcD+KjXseUrXlorDBq61uZMCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBR+KjkU SkeFyiwmj00ZUw6n/CeOBTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDcxOS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qBUwDQYJKoZIhvcNAQELBQADggEBAE6XDeUNfobh0ggkRlw+kRA2+Qca2xQ3lck+ eCmFVktJ5uwEv8ISppAhy7m8/dXZEkY50n1yawWaPZVCCvOMOlaRMs3Z1823+fsC GHlRWoTAR32Yzo4e0mMGwQH9C3xOS74FGQwn6EtrohefZ3NqHtbx97/Yny6s3Idu YI2GH8HgpAD6eSw0RGcy5sT5+cEDwi54G2yXrpwCwklY9OSwkBXukpVgnZI9aV07 aZAUsGMiKgaMVvjuF++CFrVpkSYkU9smxyQ904ZcOneWvdLEVdGr38CeGba3wgXN uiOx7fPR5mpf/sNXOijvrrH73l0c6cqi4HrGM70fK5vqj1piB5w= -----END CERTIFICATE-----Generated at Sat Mar 28 11:49:59 2026 by rpki-client