$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144775.roa File: AS144775.roa (raw, json) Hash identifier: 2Drwa7XzavQyqd2EGIyopB2Lp7UwB/oOnk1Nas0nle0= Subject key identifier: 1A:5C:64:2D:82:18:9E:31:07:26:AC:E7:CE:D2:FF:79:40:D5:9C:1F Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 208E6A08F1CFD3D771F818FD7650A408270363DD Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144775.roa Signing time: Wed 04 Mar 2026 06:20:47 +0000 ROA not before: Wed 04 Mar 2026 06:15:47 +0000 ROA not after: Wed 03 Mar 2027 06:20:47 +0000 asID: 144775 IP address blocks: 240a:a84d::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:8e:6a:08:f1:cf:d3:d7:71:f8:18:fd:76:50:a4:08:27:03:63:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:15:47 2026 GMT Not After : Mar 3 06:20:47 2027 GMT Subject: CN=1A5C642D82189E310726ACE7CED2FF7940D59C1F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:5d:bb:8a:7d:68:65:3a:e3:9c:e7:ff:cf:32: 36:b7:26:2f:2d:46:fc:1b:ea:b5:5f:e7:b5:de:79: bd:36:f9:ba:81:a1:ad:f1:29:46:a5:6b:38:50:18: 08:73:93:18:dd:01:55:00:fc:a6:9f:4c:e1:31:4b: 10:5f:20:e4:da:95:23:35:09:1f:a0:bd:50:a1:fe: e4:14:0b:61:94:4b:b0:15:a4:94:ea:af:db:b7:80: a7:c4:14:68:90:21:d5:ea:43:23:01:5f:e0:77:f5: fe:f7:3d:13:94:67:37:53:e0:02:07:ff:62:82:f6: 24:4b:ad:6a:03:47:40:d8:bc:d9:d5:03:a8:c3:4d: 5f:9e:9e:d0:c0:e6:90:c3:95:0b:0c:b3:17:82:8e: 91:11:55:70:92:17:83:57:3b:79:8e:49:91:cf:46: 4b:11:06:61:62:7f:cc:f0:15:8a:37:a3:ea:3e:19: e1:77:70:89:78:c5:a9:1f:57:ab:b5:71:e9:46:58: 7d:e6:99:5f:ac:15:04:ca:a5:98:c9:47:73:05:17: 33:3b:12:f7:58:49:70:ee:de:e0:9b:db:98:06:00: a2:02:ae:6e:fe:c3:22:3a:bd:da:8d:a2:bb:ec:a8: 10:3b:b6:6e:e1:ea:3c:7f:40:a2:6d:9d:a0:1a:1d: 35:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:5C:64:2D:82:18:9E:31:07:26:AC:E7:CE:D2:FF:79:40:D5:9C:1F X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144775.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a84d::/32 Signature Algorithm: sha256WithRSAEncryption 74:d0:8c:fd:1a:42:42:f2:62:e3:af:bd:81:b3:bf:fa:73:da: 53:af:68:35:5c:28:07:84:74:2e:6a:c2:4a:bb:d1:92:d5:05: 0a:f5:25:1e:83:c2:48:66:5f:85:09:e1:bb:fd:bb:2b:8b:1e: b4:7e:fc:70:1b:80:14:0f:17:87:a0:26:70:83:05:d7:d8:ba: 47:0d:cb:63:cb:06:26:88:c8:22:27:84:7f:61:d5:25:3d:2f: 72:67:16:b1:95:9f:76:29:bd:f6:cd:8a:26:90:ce:8a:25:df: 41:5d:9d:c5:63:81:fb:9d:1f:0b:4a:b4:45:30:a6:d6:ee:e7: 54:0a:f6:5c:60:51:bd:eb:8e:8a:ff:3d:fb:a2:3c:45:4e:52: 85:b0:a4:80:0d:29:f3:01:18:e7:cb:52:c2:b4:6c:7c:6b:f9: 17:aa:46:af:43:02:8c:82:9e:ae:40:e8:49:bc:9a:3f:5d:44: 5f:eb:ae:93:a0:16:dd:8a:52:a6:15:e6:e7:d7:66:a5:7c:90: 0e:85:3b:a5:57:20:91:4d:be:16:35:5b:ad:3c:59:26:f9:ac: ce:8e:1c:40:22:7d:23:48:6a:86:e5:2e:29:56:1d:52:2a:f0: 88:42:7d:34:8c:bf:03:2c:64:b9:c2:5c:8f:6a:7b:d2:21:de: 59:b9:58:fa -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUII5qCPHP09dx+Bj9dlCkCCcDY90wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTU0N1oX DTI3MDMwMzA2MjA0N1owMzExMC8GA1UEAxMoMUE1QzY0MkQ4MjE4OUUzMTA3MjZB Q0U3Q0VEMkZGNzk0MEQ1OUMxRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAPFdu4p9aGU645zn/88yNrcmLy1G/BvqtV/ntd55vTb5uoGhrfEpRqVrOFAY CHOTGN0BVQD8pp9M4TFLEF8g5NqVIzUJH6C9UKH+5BQLYZRLsBWklOqv27eAp8QU aJAh1epDIwFf4Hf1/vc9E5RnN1PgAgf/YoL2JEutagNHQNi82dUDqMNNX56e0MDm kMOVCwyzF4KOkRFVcJIXg1c7eY5Jkc9GSxEGYWJ/zPAVijej6j4Z4XdwiXjFqR9X q7Vx6UZYfeaZX6wVBMqlmMlHcwUXMzsS91hJcO7e4JvbmAYAogKubv7DIjq92o2i u+yoEDu2buHqPH9Aom2doBodNRUCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQaXGQt ghieMQcmrOfO0v95QNWcHzAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDc3NS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qE0wDQYJKoZIhvcNAQELBQADggEBAHTQjP0aQkLyYuOvvYGzv/pz2lOvaDVcKAeE dC5qwkq70ZLVBQr1JR6DwkhmX4UJ4bv9uyuLHrR+/HAbgBQPF4egJnCDBdfYukcN y2PLBiaIyCInhH9h1SU9L3JnFrGVn3YpvfbNiiaQzool30FdncVjgfudHwtKtEUw ptbu51QK9lxgUb3rjor/PfuiPEVOUoWwpIANKfMBGOfLUsK0bHxr+ReqRq9DAoyC nq5A6Em8mj9dRF/rrpOgFt2KUqYV5ufXZqV8kA6FO6VXIJFNvhY1W608WSb5rM6O HEAifSNIaoblLilWHVIq8IhCfTSMvwMsZLnCXI9qe9Ih3lm5WPo= -----END CERTIFICATE-----Generated at Sat Mar 28 11:41:56 2026 by rpki-client