$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144766.roa File: AS144766.roa (raw, json) Hash identifier: tTXMuKvE/nTXO5KI6fI7giFe20G4oSFFWhIREJmX2zM= Subject key identifier: EE:D9:96:5A:E3:75:81:D5:12:78:88:DD:15:7E:0A:8A:21:23:D2:54 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 33CED3FC7BEBD6F00E4DF5B7358D384BD69F4F48 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144766.roa Signing time: Wed 04 Mar 2026 06:20:15 +0000 ROA not before: Wed 04 Mar 2026 06:15:15 +0000 ROA not after: Wed 03 Mar 2027 06:20:15 +0000 asID: 144766 IP address blocks: 240a:a844::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:ce:d3:fc:7b:eb:d6:f0:0e:4d:f5:b7:35:8d:38:4b:d6:9f:4f:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:15:15 2026 GMT Not After : Mar 3 06:20:15 2027 GMT Subject: CN=EED9965AE37581D5127888DD157E0A8A2123D254 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:b8:12:b1:90:b6:b3:73:c5:67:16:91:db:06: 33:ea:3e:c0:77:1f:fe:d9:81:68:81:c6:0c:9a:c1: 1a:80:07:1d:b6:92:2e:d6:01:77:a8:87:4a:3a:b2: 1f:94:06:bc:30:89:8f:cc:18:9f:64:83:4a:58:c0: 0d:ca:c1:63:7d:d9:de:54:0c:12:77:25:7f:77:cf: 14:a0:f3:2b:29:de:7b:cd:20:70:02:10:9f:51:9e: 7b:c9:05:7e:d3:03:85:fe:c1:3f:c9:a4:59:66:17: 53:d2:2e:a5:36:b5:4e:3b:61:65:53:24:6b:1d:6f: 4f:95:b3:88:1d:e9:84:a6:fe:81:7f:e7:8b:4d:4c: b6:b8:d9:71:76:7d:01:25:5e:f3:b3:4b:fc:32:19: ec:83:ff:45:e8:60:c8:ae:e4:1f:3c:4b:e5:b6:4e: e9:05:b1:9d:f7:8e:a8:7b:b8:75:35:a3:d0:a5:7a: f5:c6:21:2e:5b:e7:4b:2c:0b:f2:af:08:19:c5:81: c4:df:68:e4:30:30:85:fe:10:0b:8d:42:75:60:66: dc:3e:d9:2d:02:af:09:ea:79:05:33:e2:0e:5a:6c: c7:44:ce:d8:9d:64:90:b8:fa:fa:3a:97:fc:18:09: 74:9e:96:a5:97:b8:b4:0a:1d:c6:3a:e4:16:b4:86: da:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:D9:96:5A:E3:75:81:D5:12:78:88:DD:15:7E:0A:8A:21:23:D2:54 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144766.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a844::/32 Signature Algorithm: sha256WithRSAEncryption 78:20:55:ec:b8:1c:92:16:a5:5a:05:a5:79:87:1e:67:ad:1b: 42:c4:26:99:c3:f2:ff:ec:80:4f:d0:21:95:95:af:84:b7:d2: a9:ec:79:e1:d7:cf:0b:71:c4:8b:e0:9c:6b:61:16:64:4b:90: 8e:7d:c3:b6:a0:d5:5e:a0:bf:76:eb:bb:ad:60:f4:04:71:0c: 76:a9:46:72:f8:32:46:49:18:3f:c2:68:55:18:5d:97:4d:5a: bb:a2:48:47:a5:d7:20:6f:68:66:61:83:4a:2e:8f:7e:64:6b: 2f:1e:54:58:21:5f:77:b2:e2:92:59:c7:84:b1:b4:7f:06:fb: d8:b6:f4:09:f5:6c:b1:06:ee:1b:b9:1c:53:dd:34:7d:8b:c3: 61:db:13:c6:13:b3:60:a6:e0:06:f9:f4:be:19:a8:51:5d:77: a8:76:07:df:71:a6:e7:80:da:0b:15:37:ca:c1:80:b3:fb:28: 7e:de:42:7f:c6:a7:df:c5:18:19:2b:87:ea:e1:6f:4b:97:58: 7c:ba:98:55:b4:44:50:35:25:5c:38:7d:5a:e9:6c:c1:d9:94: 5c:6d:b2:8d:6c:01:c7:59:86:ca:56:fd:d1:fa:a4:6d:3e:4b: 19:41:b1:62:df:3c:67:a0:ef:6e:55:5b:fe:56:87:15:61:c3: 5e:c2:f4:e8 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUM87T/Hvr1vAOTfW3NY04S9afT0gwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTUxNVoX DTI3MDMwMzA2MjAxNVowMzExMC8GA1UEAxMoRUVEOTk2NUFFMzc1ODFENTEyNzg4 OEREMTU3RTBBOEEyMTIzRDI1NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALu4ErGQtrNzxWcWkdsGM+o+wHcf/tmBaIHGDJrBGoAHHbaSLtYBd6iHSjqy H5QGvDCJj8wYn2SDSljADcrBY33Z3lQMEnclf3fPFKDzKynee80gcAIQn1Gee8kF ftMDhf7BP8mkWWYXU9IupTa1TjthZVMkax1vT5WziB3phKb+gX/ni01MtrjZcXZ9 ASVe87NL/DIZ7IP/RehgyK7kHzxL5bZO6QWxnfeOqHu4dTWj0KV69cYhLlvnSywL 8q8IGcWBxN9o5DAwhf4QC41CdWBm3D7ZLQKvCep5BTPiDlpsx0TO2J1kkLj6+jqX /BgJdJ6WpZe4tAodxjrkFrSG2q0CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBTu2ZZa 43WB1RJ4iN0VfgqKISPSVDAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDc2Ni5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qEQwDQYJKoZIhvcNAQELBQADggEBAHggVey4HJIWpVoFpXmHHmetG0LEJpnD8v/s gE/QIZWVr4S30qnseeHXzwtxxIvgnGthFmRLkI59w7ag1V6gv3bru61g9ARxDHap RnL4MkZJGD/CaFUYXZdNWruiSEel1yBvaGZhg0ouj35kay8eVFghX3ey4pJZx4Sx tH8G+9i29An1bLEG7hu5HFPdNH2Lw2HbE8YTs2Cm4Ab59L4ZqFFdd6h2B99xpueA 2gsVN8rBgLP7KH7eQn/Gp9/FGBkrh+rhb0uXWHy6mFW0RFA1JVw4fVrpbMHZlFxt so1sAcdZhspW/dH6pG0+SxlBsWLfPGeg725VW/5WhxVhw17C9Og= -----END CERTIFICATE-----Generated at Sat Mar 28 11:43:31 2026 by rpki-client