$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144779.roa File: AS144779.roa (raw, json) Hash identifier: vu912Qftyohu6iAvTnVct7sf/TExxNhMIfayt1Rxwwk= Subject key identifier: 04:BE:1B:45:CE:B2:02:55:E9:CC:8E:8E:DC:EC:4F:5E:DF:C0:69:41 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 14BDA1B44134F5A6758D1D899063109E6860AE2A Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144779.roa Signing time: Wed 04 Mar 2026 06:21:24 +0000 ROA not before: Wed 04 Mar 2026 06:16:24 +0000 ROA not after: Wed 03 Mar 2027 06:21:24 +0000 asID: 144779 IP address blocks: 240a:a851::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:bd:a1:b4:41:34:f5:a6:75:8d:1d:89:90:63:10:9e:68:60:ae:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:16:24 2026 GMT Not After : Mar 3 06:21:24 2027 GMT Subject: CN=04BE1B45CEB20255E9CC8E8EDCEC4F5EDFC06941 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:54:f6:38:54:bf:2d:07:4b:b9:2b:ad:8f:27: b8:5e:f8:34:ce:34:7b:25:b5:3c:61:f5:d1:77:1a: 4e:05:ac:ce:d5:4e:d1:56:5a:e7:b0:33:32:a0:13: 07:19:06:d5:41:04:b8:53:ea:dd:47:71:c1:c8:86: a2:3d:6a:9c:0d:37:82:f3:4a:f9:d1:e8:7c:de:47: 0b:ab:e2:ac:6f:4e:f4:69:01:4a:ce:20:2d:e6:d8: 32:60:6a:eb:3d:70:45:3a:24:b9:7c:da:7b:56:93: 14:fe:3b:ca:14:ec:aa:7a:c0:12:1c:1e:57:dd:72: 07:b7:d6:61:3a:8a:4f:28:9a:b8:7a:9a:ba:3d:15: 8a:48:80:8c:7f:ca:f3:13:03:68:72:33:d0:8a:b5: 7a:e1:85:a4:d1:44:2e:5f:cd:81:9a:b7:9b:83:75: 1d:27:39:b0:40:a1:48:8c:e2:f5:a9:3a:e7:40:8c: 3d:51:11:3b:ab:61:13:ab:f7:e0:79:98:9a:d6:da: cc:3a:94:bc:e7:dd:74:a6:7e:3d:a3:88:9a:b4:c2: 1d:36:c3:02:d1:12:8d:6b:09:a4:43:60:fc:7b:8d: a4:c7:4b:9f:11:da:a9:9d:f2:58:0a:67:91:14:a9: eb:c2:9b:4f:a7:23:fb:37:06:63:56:cd:61:52:6f: ed:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:BE:1B:45:CE:B2:02:55:E9:CC:8E:8E:DC:EC:4F:5E:DF:C0:69:41 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144779.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a851::/32 Signature Algorithm: sha256WithRSAEncryption 46:87:3a:65:b7:ae:21:77:d9:dd:71:ab:66:5e:29:83:5e:c1: 8b:c0:d5:55:17:1c:d6:31:78:ca:59:d7:83:e9:87:ac:f0:19: c1:6d:83:32:e8:1f:20:0c:f1:32:d1:0a:44:cd:47:c8:b8:b1: 8e:e2:4e:83:d3:ab:50:99:64:2f:7d:c8:49:4b:7c:27:42:2a: 29:7d:9d:5b:82:dc:b1:ce:af:87:00:f3:f9:b3:3c:c6:be:e4: ec:4e:2c:88:de:3f:48:36:06:bc:44:d2:8e:bf:12:1b:05:d1: e0:fe:14:b8:64:7c:bf:4b:fd:85:6e:f5:6f:6e:a7:90:91:21: 87:19:ae:bd:af:e2:9e:1a:76:99:d7:c9:54:da:a4:4e:a2:94: 82:5f:45:72:b6:a0:42:b2:1f:71:99:1b:34:e1:94:ba:5b:93: e2:c5:16:f1:44:10:cb:08:36:df:d6:dc:c9:24:20:96:0b:88: 9d:22:37:95:b9:cc:88:b8:08:ac:68:2b:7f:c3:e0:fb:a4:49: 83:87:60:0f:81:0a:af:98:db:3d:47:0f:56:1b:a6:5e:d0:1e: 82:2a:1f:db:c0:3b:5f:3f:1b:a3:c1:23:b2:7a:03:fd:32:1e: 7d:09:05:dd:c0:bf:a0:a6:d9:c0:fa:eb:fd:3e:ea:3e:d4:8f: ee:ad:5a:44 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUFL2htEE09aZ1jR2JkGMQnmhgriowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTYyNFoX DTI3MDMwMzA2MjEyNFowMzExMC8GA1UEAxMoMDRCRTFCNDVDRUIyMDI1NUU5Q0M4 RThFRENFQzRGNUVERkMwNjk0MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMFU9jhUvy0HS7krrY8nuF74NM40eyW1PGH10XcaTgWsztVO0VZa57AzMqAT BxkG1UEEuFPq3UdxwciGoj1qnA03gvNK+dHofN5HC6virG9O9GkBSs4gLebYMmBq 6z1wRTokuXzae1aTFP47yhTsqnrAEhweV91yB7fWYTqKTyiauHqauj0VikiAjH/K 8xMDaHIz0Iq1euGFpNFELl/NgZq3m4N1HSc5sEChSIzi9ak650CMPVERO6thE6v3 4HmYmtbazDqUvOfddKZ+PaOImrTCHTbDAtESjWsJpENg/HuNpMdLnxHaqZ3yWApn kRSp68KbT6cj+zcGY1bNYVJv7SECAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQEvhtF zrICVenMjo7c7E9e38BpQTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDc3OS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qFEwDQYJKoZIhvcNAQELBQADggEBAEaHOmW3riF32d1xq2ZeKYNewYvA1VUXHNYx eMpZ14Pph6zwGcFtgzLoHyAM8TLRCkTNR8i4sY7iToPTq1CZZC99yElLfCdCKil9 nVuC3LHOr4cA8/mzPMa+5OxOLIjeP0g2BrxE0o6/EhsF0eD+FLhkfL9L/YVu9W9u p5CRIYcZrr2v4p4adpnXyVTapE6ilIJfRXK2oEKyH3GZGzThlLpbk+LFFvFEEMsI Nt/W3MkkIJYLiJ0iN5W5zIi4CKxoK3/D4PukSYOHYA+BCq+Y2z1HD1Ybpl7QHoIq H9vAO18/G6PBI7J6A/0yHn0JBd3Av6Cm2cD66/0+6j7Uj+6tWkQ= -----END CERTIFICATE-----Generated at Sat Mar 28 11:43:12 2026 by rpki-client