$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144746.roa File: AS144746.roa (raw, json) Hash identifier: KW/rDCPzbxHFLM2H3wmg/U+voV5FFJILfrcqfEBBNIA= Subject key identifier: 9C:C5:C3:BA:8E:DF:58:C6:C1:F2:50:60:30:A3:3A:6F:7F:9A:AA:10 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 55852F96DD86A9CE060445CD7BF3533BD0F8B97F Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144746.roa Signing time: Wed 04 Mar 2026 06:20:48 +0000 ROA not before: Wed 04 Mar 2026 06:15:48 +0000 ROA not after: Wed 03 Mar 2027 06:20:48 +0000 asID: 144746 IP address blocks: 240a:a830::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:85:2f:96:dd:86:a9:ce:06:04:45:cd:7b:f3:53:3b:d0:f8:b9:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:15:48 2026 GMT Not After : Mar 3 06:20:48 2027 GMT Subject: CN=9CC5C3BA8EDF58C6C1F2506030A33A6F7F9AAA10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:dc:72:df:75:6c:bc:e0:32:b5:52:7e:eb:5a: 48:a8:16:62:68:7d:c3:9d:9e:eb:dd:64:99:23:33: 46:2a:a9:6b:ef:b5:4c:41:8e:ad:da:c4:64:09:0d: e0:bf:ff:e9:62:4f:cd:94:db:8d:da:f6:ae:14:9e: 9f:20:49:81:5a:f8:d6:a1:45:50:0c:6b:b1:4f:63: 46:ee:f6:9e:d0:92:2f:e6:8c:37:48:66:bf:34:8b: 2a:1b:90:28:4b:35:a6:b9:d5:dd:5b:5d:30:b8:2d: 63:47:59:ea:5b:a8:6b:71:f6:82:5b:21:37:7e:22: 58:a2:cf:ee:96:c9:de:bf:30:69:38:c1:de:50:ee: ee:5b:91:a8:30:f2:dc:dc:da:18:46:a5:a4:b2:fa: 79:6e:00:ef:4d:be:ce:92:f9:31:0c:70:12:e2:8b: a4:d4:86:d7:fb:0f:ab:d3:de:cb:ce:03:90:cf:7e: aa:95:db:e9:dd:9b:d6:34:92:54:d5:60:d3:f0:3e: 56:c7:8e:0c:a6:7d:eb:6b:d7:13:a3:1a:eb:c2:7e: e5:87:a7:ba:3a:c3:cc:02:45:34:30:e3:bf:70:ac: 63:8d:68:95:e4:36:f9:eb:60:f7:f6:3a:32:bc:e6: fb:45:e3:f1:25:d4:7e:ee:28:18:83:7e:da:e5:c5: 13:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:C5:C3:BA:8E:DF:58:C6:C1:F2:50:60:30:A3:3A:6F:7F:9A:AA:10 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144746.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a830::/32 Signature Algorithm: sha256WithRSAEncryption a0:46:f0:37:ab:55:5a:3b:0e:0d:97:f7:0a:3a:6d:06:e0:7f: 25:91:c7:73:e2:0b:45:f4:51:9f:db:ef:53:46:75:86:23:30: 7a:01:f3:48:ec:6b:65:99:81:b5:6c:46:00:dd:e7:df:30:0d: 24:ec:c3:68:47:3d:d0:bf:e7:75:03:cc:b7:64:47:09:fa:38: 90:88:04:ff:e8:c1:0d:d2:38:68:9d:21:cb:92:10:26:e8:00: 8d:3d:cc:da:2a:87:f1:e5:35:19:34:13:71:49:3e:b3:5e:25: cf:6e:83:b5:3b:b5:d0:cd:57:5d:9f:1a:5f:cf:d8:7e:d8:d8: d0:70:5f:d9:cb:0f:de:75:7e:cd:10:11:a0:04:25:6b:13:2b: 83:40:1c:08:7b:a4:38:f7:93:3e:3d:7e:7e:32:f4:9e:3b:a1: 65:fd:f5:4d:9c:d7:6c:b6:31:7a:fe:f2:c6:67:cf:b5:89:64: fa:bc:08:38:17:78:75:83:af:0c:04:74:f8:18:94:bd:d4:8a: a3:9c:88:74:dd:97:24:55:f1:77:c6:ec:56:df:e7:7d:f3:f6: 7f:7e:0d:31:2c:20:95:33:30:14:ca:b2:1d:d8:2c:dc:ee:c8: 1e:7e:33:0c:b6:af:6d:f4:fa:65:f0:f7:a2:cb:d3:55:21:2d: da:ef:1a:f3 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUVYUvlt2Gqc4GBEXNe/NTO9D4uX8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTU0OFoX DTI3MDMwMzA2MjA0OFowMzExMC8GA1UEAxMoOUNDNUMzQkE4RURGNThDNkMxRjI1 MDYwMzBBMzNBNkY3RjlBQUExMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJHcct91bLzgMrVSfutaSKgWYmh9w52e691kmSMzRiqpa++1TEGOrdrEZAkN 4L//6WJPzZTbjdr2rhSenyBJgVr41qFFUAxrsU9jRu72ntCSL+aMN0hmvzSLKhuQ KEs1prnV3VtdMLgtY0dZ6luoa3H2glshN34iWKLP7pbJ3r8waTjB3lDu7luRqDDy 3NzaGEalpLL6eW4A702+zpL5MQxwEuKLpNSG1/sPq9Pey84DkM9+qpXb6d2b1jSS VNVg0/A+VseODKZ962vXE6Ma68J+5YenujrDzAJFNDDjv3CsY41oleQ2+etg9/Y6 Mrzm+0Xj8SXUfu4oGIN+2uXFE2cCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBScxcO6 jt9YxsHyUGAwozpvf5qqEDAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDc0Ni5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qDAwDQYJKoZIhvcNAQELBQADggEBAKBG8DerVVo7Dg2X9wo6bQbgfyWRx3PiC0X0 UZ/b71NGdYYjMHoB80jsa2WZgbVsRgDd598wDSTsw2hHPdC/53UDzLdkRwn6OJCI BP/owQ3SOGidIcuSECboAI09zNoqh/HlNRk0E3FJPrNeJc9ug7U7tdDNV12fGl/P 2H7Y2NBwX9nLD951fs0QEaAEJWsTK4NAHAh7pDj3kz49fn4y9J47oWX99U2c12y2 MXr+8sZnz7WJZPq8CDgXeHWDrwwEdPgYlL3UiqOciHTdlyRV8XfG7Fbf533z9n9+ DTEsIJUzMBTKsh3YLNzuyB5+Mwy2r230+mXw96LL01UhLdrvGvM= -----END CERTIFICATE-----Generated at Sat Mar 28 11:41:54 2026 by rpki-client