$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144780.roa File: AS144780.roa (raw, json) Hash identifier: tnc3kUXMjfVP3NjrGOWEd2KusbliYONVK/HWgNbWYks= Subject key identifier: CD:55:D1:AF:29:38:EB:FB:4C:01:A3:F4:E1:7B:33:8A:90:86:E4:27 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 4CAA676AE6A516BFF6D77550111E76793F0389C8 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144780.roa Signing time: Wed 04 Mar 2026 06:21:50 +0000 ROA not before: Wed 04 Mar 2026 06:16:50 +0000 ROA not after: Wed 03 Mar 2027 06:21:50 +0000 asID: 144780 IP address blocks: 240a:a852::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:aa:67:6a:e6:a5:16:bf:f6:d7:75:50:11:1e:76:79:3f:03:89:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:16:50 2026 GMT Not After : Mar 3 06:21:50 2027 GMT Subject: CN=CD55D1AF2938EBFB4C01A3F4E17B338A9086E427 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:8b:5d:55:12:e8:38:b6:b8:d2:21:c5:61:4d: 2f:e1:19:3b:b4:0c:2a:2b:17:be:ca:63:f0:04:69: b2:30:b8:9f:f7:0b:ad:89:4d:c8:c7:03:c8:a0:b0: 76:68:06:3c:bd:31:1c:da:95:70:0a:ba:99:72:23: 85:4b:53:94:af:96:a5:36:62:a7:63:6d:8c:0f:7c: e9:54:20:15:fa:80:b2:22:e2:13:2a:a1:b6:0c:dc: a4:73:a7:cf:8d:69:f1:e1:8a:16:e0:98:f2:87:68: ca:ad:81:3d:22:16:79:61:de:3f:78:ec:96:77:b6: 70:a1:db:57:87:78:b3:61:15:bc:d4:8b:37:6e:98: 7b:0f:2e:dd:fd:57:8d:0a:7b:dc:38:5d:9a:e9:27: c8:7c:77:06:59:41:87:3a:8c:88:a7:eb:48:aa:00: 9e:5b:db:99:a7:8f:1c:30:28:c7:55:c0:ce:17:db: 12:fc:69:33:12:17:c4:5a:45:51:21:5e:87:12:b5: 16:1b:09:49:ec:68:8f:d3:05:72:c2:1d:a2:52:6c: ea:69:b2:4d:37:de:5c:f8:cc:4e:5f:07:9a:f9:1f: 41:e4:58:14:a6:3d:13:76:0e:b3:ec:e6:d2:dc:9f: 45:b8:bd:cc:5f:f1:41:bc:71:40:ac:30:a7:bb:87: 78:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:55:D1:AF:29:38:EB:FB:4C:01:A3:F4:E1:7B:33:8A:90:86:E4:27 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144780.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a852::/32 Signature Algorithm: sha256WithRSAEncryption d0:79:90:a4:7a:29:aa:07:27:ee:a3:da:ce:7a:99:73:6a:a9: 7c:6f:7a:5b:6f:47:95:06:8c:49:9a:ae:12:25:a4:2b:fc:d0: 1b:9f:dc:9b:84:b3:e3:97:10:39:c4:00:3c:4b:8b:e4:61:ff: 07:31:5d:08:96:1b:a6:ea:ce:7f:38:96:de:a4:8b:b5:3f:42: 72:32:aa:8e:72:e8:07:b2:a2:fd:14:c3:a1:e0:da:25:06:92: 9b:7f:c3:e0:ab:ef:1c:f9:92:58:b4:d7:7b:c1:e1:b4:83:85: 1b:6e:8f:01:36:5f:19:92:2f:66:96:5a:bb:1d:cf:8b:14:de: 43:a7:5a:ec:db:ff:e0:c3:7c:a1:95:a1:c6:39:5f:97:97:ea: f0:32:fe:ca:94:08:4c:f4:b2:15:e2:27:bf:6a:4f:f2:fa:c8: f4:dd:5c:5f:42:93:47:4e:a4:ab:7e:47:2e:fe:eb:4a:67:a4: 02:6b:78:c3:19:c0:14:12:f8:c5:fa:f7:04:13:6b:1d:a1:70: de:ab:9b:b0:85:85:b5:32:7d:ba:f4:26:23:66:60:aa:df:4b: 99:5c:6c:77:f8:d0:7d:80:52:52:88:ca:74:8d:24:f2:91:04: 17:19:b8:73:73:da:11:9b:a0:ec:ba:5c:5c:09:19:c3:e3:9c: af:a5:88:fc -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUTKpnaualFr/213VQER52eT8DicgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTY1MFoX DTI3MDMwMzA2MjE1MFowMzExMC8GA1UEAxMoQ0Q1NUQxQUYyOTM4RUJGQjRDMDFB M0Y0RTE3QjMzOEE5MDg2RTQyNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKGLXVUS6Di2uNIhxWFNL+EZO7QMKisXvspj8ARpsjC4n/cLrYlNyMcDyKCw dmgGPL0xHNqVcAq6mXIjhUtTlK+WpTZip2NtjA986VQgFfqAsiLiEyqhtgzcpHOn z41p8eGKFuCY8odoyq2BPSIWeWHeP3jslne2cKHbV4d4s2EVvNSLN26Yew8u3f1X jQp73DhdmuknyHx3BllBhzqMiKfrSKoAnlvbmaePHDAox1XAzhfbEvxpMxIXxFpF USFehxK1FhsJSexoj9MFcsIdolJs6mmyTTfeXPjMTl8HmvkfQeRYFKY9E3YOs+zm 0tyfRbi9zF/xQbxxQKwwp7uHeH8CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBTNVdGv KTjr+0wBo/ThezOKkIbkJzAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDc4MC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qFIwDQYJKoZIhvcNAQELBQADggEBANB5kKR6KaoHJ+6j2s56mXNqqXxveltvR5UG jEmarhIlpCv80Buf3JuEs+OXEDnEADxLi+Rh/wcxXQiWG6bqzn84lt6ki7U/QnIy qo5y6Aeyov0Uw6Hg2iUGkpt/w+Cr7xz5kli013vB4bSDhRtujwE2XxmSL2aWWrsd z4sU3kOnWuzb/+DDfKGVocY5X5eX6vAy/sqUCEz0shXiJ79qT/L6yPTdXF9Ck0dO pKt+Ry7+60pnpAJreMMZwBQS+MX69wQTax2hcN6rm7CFhbUyfbr0JiNmYKrfS5lc bHf40H2AUlKIynSNJPKRBBcZuHNz2hGboOy6XFwJGcPjnK+liPw= -----END CERTIFICATE-----Generated at Sat Mar 28 11:41:40 2026 by rpki-client