$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144738.roa File: AS144738.roa (raw, json) Hash identifier: wmy+QQM+pH++aAq/cPPJLDeLLbXZIiQODNrybyRGICw= Subject key identifier: 26:E1:8F:BC:16:69:F6:DC:45:29:D1:97:B4:D0:C6:4A:92:70:F6:E8 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 4F9BC249079B64691D233A775ABF2515D93414EF Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144738.roa Signing time: Wed 04 Mar 2026 06:21:15 +0000 ROA not before: Wed 04 Mar 2026 06:16:15 +0000 ROA not after: Wed 03 Mar 2027 06:21:15 +0000 asID: 144738 IP address blocks: 240a:a828::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:9b:c2:49:07:9b:64:69:1d:23:3a:77:5a:bf:25:15:d9:34:14:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:16:15 2026 GMT Not After : Mar 3 06:21:15 2027 GMT Subject: CN=26E18FBC1669F6DC4529D197B4D0C64A9270F6E8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:50:cc:d2:19:b4:c3:6c:3a:45:1b:0e:c7:ab: 99:26:a9:77:f2:0c:e5:c5:aa:fb:5e:a4:d7:48:c0: ef:d6:92:cd:c2:fe:ca:d9:7e:6b:08:4f:db:cc:d8: f6:37:7a:cb:a1:7e:73:a2:b0:93:aa:54:f6:c6:77: 6a:54:b6:66:25:41:e6:7c:15:d1:f0:21:ae:50:c4: c5:fe:5e:35:8f:4e:63:f0:11:73:e7:73:cc:5c:d0: f3:9b:7b:5b:d5:a5:e3:6b:1c:da:8d:62:b1:ae:8a: 8b:18:7b:d8:e6:4b:63:41:68:6b:34:97:b5:40:6d: 96:ab:a3:18:7e:b3:10:c7:b3:8f:44:d7:a9:23:9a: 56:d5:be:68:c8:e1:1d:b2:b0:25:a9:60:9c:38:5d: da:ba:d6:bd:4b:06:7a:e0:00:6d:5f:0e:a3:df:0a: ba:5d:b0:29:84:10:91:bf:7b:1c:c3:98:6c:e3:df: 42:5f:54:8f:dc:75:bd:90:b6:d8:98:e1:82:81:bb: 5a:26:2b:c2:f0:ce:9b:54:d1:91:e6:7e:db:1d:2e: 29:4e:38:33:25:19:1d:68:25:62:65:9d:e5:4f:5e: 6b:24:d7:91:d1:87:c5:bf:9b:41:d3:59:f3:75:be: 3b:a4:6a:f6:70:e4:4e:0c:9b:71:a4:d8:59:1c:94: fd:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:E1:8F:BC:16:69:F6:DC:45:29:D1:97:B4:D0:C6:4A:92:70:F6:E8 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144738.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a828::/32 Signature Algorithm: sha256WithRSAEncryption be:b9:71:56:fd:89:74:2b:93:cf:bd:85:f6:91:1c:26:0d:63: 8e:af:29:af:1d:a4:60:c3:70:a4:05:7e:a6:65:9c:94:d6:5c: 35:0d:cd:97:9d:0f:5e:4a:21:bf:86:63:ff:08:96:06:1b:74: 1c:ae:05:e5:dc:e0:ed:01:a2:58:4b:ad:56:ed:50:ce:42:28: 38:42:eb:e9:18:d7:da:4f:85:59:46:80:48:2f:b4:61:cc:a6: 8a:3b:48:fb:58:f5:3b:f7:bd:0a:14:90:48:8f:75:ae:0c:5f: 93:c8:10:49:00:a2:62:15:eb:e9:85:ce:55:a9:00:62:ff:7e: a6:24:03:e0:79:c5:79:9d:cf:6e:19:88:45:95:1f:57:43:53: ba:ea:23:36:d9:fd:42:85:59:e7:e5:7b:43:c6:b8:23:26:1f: fb:27:6d:2a:53:c2:73:31:f7:68:be:42:35:26:d4:3f:df:89: 23:b2:df:51:81:f7:82:f7:c0:f7:9b:9c:01:94:6b:1e:44:ae: b7:7a:b7:12:af:c4:93:4a:ba:89:5e:39:6c:af:fe:a7:9b:7b: cb:ae:a5:38:41:02:4b:a3:0d:45:54:8a:1d:43:e2:59:60:17: f4:40:72:d9:ec:9a:cf:21:9b:f1:49:46:d6:0c:d6:e7:40:4e: 55:f9:eb:6f -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUT5vCSQebZGkdIzp3Wr8lFdk0FO8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTYxNVoX DTI3MDMwMzA2MjExNVowMzExMC8GA1UEAxMoMjZFMThGQkMxNjY5RjZEQzQ1MjlE MTk3QjREMEM2NEE5MjcwRjZFODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKZQzNIZtMNsOkUbDsermSapd/IM5cWq+16k10jA79aSzcL+ytl+awhP28zY 9jd6y6F+c6Kwk6pU9sZ3alS2ZiVB5nwV0fAhrlDExf5eNY9OY/ARc+dzzFzQ85t7 W9Wl42sc2o1isa6Kixh72OZLY0FoazSXtUBtlqujGH6zEMezj0TXqSOaVtW+aMjh HbKwJalgnDhd2rrWvUsGeuAAbV8Oo98Kul2wKYQQkb97HMOYbOPfQl9Uj9x1vZC2 2JjhgoG7WiYrwvDOm1TRkeZ+2x0uKU44MyUZHWglYmWd5U9eayTXkdGHxb+bQdNZ 83W+O6Rq9nDkTgybcaTYWRyU/X8CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQm4Y+8 Fmn23EUp0Ze00MZKknD26DAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDczOC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qCgwDQYJKoZIhvcNAQELBQADggEBAL65cVb9iXQrk8+9hfaRHCYNY46vKa8dpGDD cKQFfqZlnJTWXDUNzZedD15KIb+GY/8IlgYbdByuBeXc4O0BolhLrVbtUM5CKDhC 6+kY19pPhVlGgEgvtGHMpoo7SPtY9Tv3vQoUkEiPda4MX5PIEEkAomIV6+mFzlWp AGL/fqYkA+B5xXmdz24ZiEWVH1dDU7rqIzbZ/UKFWefle0PGuCMmH/snbSpTwnMx 92i+QjUm1D/fiSOy31GB94L3wPebnAGUax5Errd6txKvxJNKuoleOWyv/qebe8uu pThBAkujDUVUih1D4llgF/RActnsms8hm/FJRtYM1udATlX5628= -----END CERTIFICATE-----Generated at Sat Mar 28 11:45:50 2026 by rpki-client