$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144778.roa File: AS144778.roa (raw, json) Hash identifier: xQdbovK8AatoVTA9fNP4VyZuidNNWZwx6Mm/SFEHle4= Subject key identifier: 02:66:5C:6D:3E:2C:38:69:7D:B3:35:DD:F2:2A:57:89:72:53:32:C5 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 3A3622A2030BC0C4B831B2DD9797C5ED857D102A Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144778.roa Signing time: Wed 04 Mar 2026 06:21:44 +0000 ROA not before: Wed 04 Mar 2026 06:16:44 +0000 ROA not after: Wed 03 Mar 2027 06:21:44 +0000 asID: 144778 IP address blocks: 240a:a850::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:36:22:a2:03:0b:c0:c4:b8:31:b2:dd:97:97:c5:ed:85:7d:10:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:16:44 2026 GMT Not After : Mar 3 06:21:44 2027 GMT Subject: CN=02665C6D3E2C38697DB335DDF22A5789725332C5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:e8:5e:bc:06:d9:78:14:8c:6f:7b:ad:33:4d: 7e:1a:52:38:27:73:a2:6f:ed:dc:ec:1a:d4:de:c6: 4a:15:a6:77:2a:25:07:05:02:ed:38:41:37:b1:a0: 0f:1f:51:75:3f:71:87:f2:bf:a5:51:6f:de:ab:ef: 4b:30:ef:ef:d8:24:fa:03:2d:1e:bb:2c:b7:d0:f0: a6:68:3d:06:71:83:d6:d4:5a:80:cf:6b:41:5e:28: 37:e6:ed:55:0a:0f:ff:31:eb:90:6e:e2:f5:39:aa: 03:7b:1b:ce:f6:b1:04:31:5e:93:ea:40:cf:ef:64: d0:84:14:57:6f:f3:da:e2:0c:94:05:85:89:68:04: dd:b4:0b:a8:05:ab:4f:e5:7a:a3:f0:13:60:1c:03: 47:6e:70:fb:a3:2b:cd:6e:11:2b:31:3a:58:1c:b7: 01:53:d6:a9:5d:ac:55:07:fd:30:dd:15:1c:a6:d1: 8e:88:18:f9:1e:4c:c2:18:b5:51:a0:2f:83:47:21: af:ae:b8:ed:2e:d4:19:1c:a9:73:d6:d3:8f:57:86: 5a:f1:f7:37:44:82:f9:52:44:84:84:36:7b:1d:0d: 91:76:60:b7:07:8c:f4:c4:f4:bb:78:bf:bc:77:f3: d4:eb:69:aa:93:6a:75:d2:04:3c:5e:87:b0:e3:1a: cb:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:66:5C:6D:3E:2C:38:69:7D:B3:35:DD:F2:2A:57:89:72:53:32:C5 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144778.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a850::/32 Signature Algorithm: sha256WithRSAEncryption 90:8f:ed:89:e0:dc:98:12:06:7a:fe:9b:c6:17:4f:97:4b:3e: ad:2d:d9:5d:63:55:97:72:32:08:e5:be:e7:bf:81:78:b7:df: e4:e8:e9:5d:73:2f:e5:b5:e9:9e:c1:fb:d1:df:a3:4a:ce:f6: 71:dd:b3:2e:86:d2:31:e8:5d:4d:ea:ef:28:3b:ff:36:fc:f0: 1b:00:80:95:88:93:63:e5:51:50:e0:75:da:1f:98:b8:f3:0e: d8:14:51:d9:de:23:05:1b:d1:be:2c:aa:a6:b2:63:80:90:ad: e8:dd:a8:18:1f:a8:8e:39:6b:8e:99:18:f7:33:32:db:b6:c6: 05:2a:64:5c:b0:5f:87:89:cc:98:b5:12:51:b8:20:f0:f1:4a: 1c:03:5f:55:1c:b2:d3:c1:1b:f8:15:46:54:9d:cf:e5:5e:99: 89:99:00:29:0f:41:7a:d3:7f:8f:8b:fa:11:f0:bd:26:34:d3: a7:ed:8e:62:76:84:5a:3d:72:dd:38:c4:ad:bd:5e:25:18:37: 4a:54:d1:1f:e7:25:16:12:14:05:f6:0b:4f:4e:6a:8b:2e:45: f8:93:0f:65:b1:9a:93:c4:78:8d:33:ae:4b:a5:25:dc:bc:c2: 2d:4d:28:66:79:06:41:e5:c7:d2:d7:98:e3:4d:e3:35:50:c0: 87:a1:60:38 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUOjYiogMLwMS4MbLdl5fF7YV9ECowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTY0NFoX DTI3MDMwMzA2MjE0NFowMzExMC8GA1UEAxMoMDI2NjVDNkQzRTJDMzg2OTdEQjMz NURERjIyQTU3ODk3MjUzMzJDNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL3oXrwG2XgUjG97rTNNfhpSOCdzom/t3Owa1N7GShWmdyolBwUC7ThBN7Gg Dx9RdT9xh/K/pVFv3qvvSzDv79gk+gMtHrsst9Dwpmg9BnGD1tRagM9rQV4oN+bt VQoP/zHrkG7i9TmqA3sbzvaxBDFek+pAz+9k0IQUV2/z2uIMlAWFiWgE3bQLqAWr T+V6o/ATYBwDR25w+6MrzW4RKzE6WBy3AVPWqV2sVQf9MN0VHKbRjogY+R5Mwhi1 UaAvg0chr6647S7UGRypc9bTj1eGWvH3N0SC+VJEhIQ2ex0NkXZgtweM9MT0u3i/ vHfz1OtpqpNqddIEPF6HsOMayy0CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQCZlxt Piw4aX2zNd3yKleJclMyxTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDc3OC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qFAwDQYJKoZIhvcNAQELBQADggEBAJCP7Yng3JgSBnr+m8YXT5dLPq0t2V1jVZdy Mgjlvue/gXi33+To6V1zL+W16Z7B+9Hfo0rO9nHdsy6G0jHoXU3q7yg7/zb88BsA gJWIk2PlUVDgddofmLjzDtgUUdneIwUb0b4sqqayY4CQrejdqBgfqI45a46ZGPcz Mtu2xgUqZFywX4eJzJi1ElG4IPDxShwDX1UcstPBG/gVRlSdz+VemYmZACkPQXrT f4+L+hHwvSY006ftjmJ2hFo9ct04xK29XiUYN0pU0R/nJRYSFAX2C09OaosuRfiT D2WxmpPEeI0zrkulJdy8wi1NKGZ5BkHlx9LXmONN4zVQwIehYDg= -----END CERTIFICATE-----Generated at Sat Mar 28 11:46:00 2026 by rpki-client