$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144774.roa File: AS144774.roa (raw, json) Hash identifier: mBJwzm+DI7zIIA4V09N00TaFYBc+uJE5TbnUtAxIdWk= Subject key identifier: E4:01:02:DA:93:35:4F:DA:3B:A2:E6:EC:12:10:86:12:84:C2:38:D4 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 6B4C3025D68E55AD0F6CE2681A67CA031505EE0D Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144774.roa Signing time: Wed 04 Mar 2026 06:21:17 +0000 ROA not before: Wed 04 Mar 2026 06:16:17 +0000 ROA not after: Wed 03 Mar 2027 06:21:17 +0000 asID: 144774 IP address blocks: 240a:a84c::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:4c:30:25:d6:8e:55:ad:0f:6c:e2:68:1a:67:ca:03:15:05:ee:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:16:17 2026 GMT Not After : Mar 3 06:21:17 2027 GMT Subject: CN=E40102DA93354FDA3BA2E6EC1210861284C238D4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:4e:c5:c9:30:d6:c7:05:91:fe:60:7e:f7:ca: 94:9b:09:dd:a3:ef:a5:05:60:d4:6a:36:d6:f6:ae: 15:1f:e5:8e:00:9e:84:a9:13:a7:83:6d:2c:6c:aa: 3b:87:c1:98:9f:fe:c5:b9:d5:71:1b:83:73:eb:17: ce:aa:85:c0:07:ed:77:76:90:18:c1:66:98:9d:b0: f7:aa:c9:eb:3d:55:03:77:eb:4f:be:89:84:d9:7b: 0d:b3:51:ce:65:04:c7:99:14:41:b8:a4:6d:5c:df: 1d:ad:0e:76:98:fe:b3:68:24:c2:56:be:89:c9:f7: 38:3a:20:7b:34:8d:fc:6e:7a:38:04:15:c1:ae:ee: 3e:79:3f:c1:6a:a5:d8:ec:38:f3:c0:83:7b:d9:cf: 3b:b3:52:b7:78:da:27:40:02:37:47:11:2c:ff:3f: 4f:f8:02:9e:53:f5:f3:89:35:e7:d9:c1:e0:1d:6b: 38:9f:31:4a:7c:a2:a0:6c:22:bd:e8:13:85:5d:86: 51:58:62:c5:3b:f5:f2:35:30:7c:be:31:5d:50:53: 57:92:9e:b7:11:6c:dd:93:b7:27:63:fe:5a:e3:eb: 07:a7:f0:48:cb:d0:3b:99:75:2d:27:1d:50:4e:d0: ed:e0:ea:d9:e2:46:d9:0d:eb:83:96:7c:ba:5d:22: e8:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:01:02:DA:93:35:4F:DA:3B:A2:E6:EC:12:10:86:12:84:C2:38:D4 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144774.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a84c::/32 Signature Algorithm: sha256WithRSAEncryption 49:66:3e:71:4f:cb:62:c4:44:2a:47:bf:7c:b7:f4:03:2a:d2: 13:21:ac:f0:32:23:82:92:fa:54:d2:1c:8f:43:35:95:1a:75: fc:be:a0:d6:d3:0f:41:bd:48:41:ee:f1:75:f1:8b:c5:d2:c6: 3e:f3:3f:68:f8:92:f8:1c:39:1b:2d:cf:e5:d9:2c:17:2e:1a: bc:06:76:02:6b:a7:ed:c2:cc:fe:e1:4e:b6:3f:1c:e7:55:e6: 41:73:6b:96:49:d2:d8:50:e4:ee:40:f2:f8:22:6c:a3:a1:de: 31:ed:77:c4:57:58:b1:95:e6:72:0a:24:08:73:c9:43:b3:0f: 9c:38:20:a8:6b:32:f1:6d:dd:66:46:b8:f0:b2:64:31:98:16: e5:28:fe:ca:fb:a1:06:81:95:a3:85:f8:85:2b:fc:e8:8d:e2: 23:f8:d3:98:3a:59:16:96:d4:57:15:7a:60:60:70:8f:15:f2: db:0e:da:90:59:6b:e9:57:9c:8a:db:98:7f:5c:e4:d4:54:07: a0:90:00:8d:82:f9:09:d8:34:29:30:d6:89:51:2b:57:da:5b: 6e:e0:9e:99:aa:d6:2e:0c:cc:3a:70:0d:9c:fb:7c:68:9f:87: 21:53:e5:09:f9:3c:16:04:a0:28:48:02:68:64:eb:a2:17:95: 58:dd:f1:e9 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUa0wwJdaOVa0PbOJoGmfKAxUF7g0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTYxN1oX DTI3MDMwMzA2MjExN1owMzExMC8GA1UEAxMoRTQwMTAyREE5MzM1NEZEQTNCQTJF NkVDMTIxMDg2MTI4NEMyMzhENDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJ1Oxckw1scFkf5gfvfKlJsJ3aPvpQVg1Go21vauFR/ljgCehKkTp4NtLGyq O4fBmJ/+xbnVcRuDc+sXzqqFwAftd3aQGMFmmJ2w96rJ6z1VA3frT76JhNl7DbNR zmUEx5kUQbikbVzfHa0Odpj+s2gkwla+icn3ODogezSN/G56OAQVwa7uPnk/wWql 2Ow488CDe9nPO7NSt3jaJ0ACN0cRLP8/T/gCnlP184k159nB4B1rOJ8xSnyioGwi vegThV2GUVhixTv18jUwfL4xXVBTV5KetxFs3ZO3J2P+WuPrB6fwSMvQO5l1LScd UE7Q7eDq2eJG2Q3rg5Z8ul0i6J8CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBTkAQLa kzVP2jui5uwSEIYShMI41DAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDc3NC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qEwwDQYJKoZIhvcNAQELBQADggEBAElmPnFPy2LERCpHv3y39AMq0hMhrPAyI4KS +lTSHI9DNZUadfy+oNbTD0G9SEHu8XXxi8XSxj7zP2j4kvgcORstz+XZLBcuGrwG dgJrp+3CzP7hTrY/HOdV5kFza5ZJ0thQ5O5A8vgibKOh3jHtd8RXWLGV5nIKJAhz yUOzD5w4IKhrMvFt3WZGuPCyZDGYFuUo/sr7oQaBlaOF+IUr/OiN4iP405g6WRaW 1FcVemBgcI8V8tsO2pBZa+lXnIrbmH9c5NRUB6CQAI2C+QnYNCkw1olRK1faW27g npmq1i4MzDpwDZz7fGifhyFT5Qn5PBYEoChIAmhk66IXlVjd8ek= -----END CERTIFICATE-----Generated at Sat Mar 28 11:42:46 2026 by rpki-client