$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144783.roa File: AS144783.roa (raw, json) Hash identifier: tzuerdOVlpBogtgYUs6nN9XosqOdjHyoz/A0RxNEecc= Subject key identifier: 97:8B:FE:A3:17:4F:4F:C9:05:20:A1:33:8B:5A:2E:01:1D:3E:1C:A4 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 34999D92C1603D58AF68EA608506A979C9F1520C Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144783.roa Signing time: Wed 04 Mar 2026 06:22:09 +0000 ROA not before: Wed 04 Mar 2026 06:17:09 +0000 ROA not after: Wed 03 Mar 2027 06:22:09 +0000 asID: 144783 IP address blocks: 240a:a855::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:99:9d:92:c1:60:3d:58:af:68:ea:60:85:06:a9:79:c9:f1:52:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:17:09 2026 GMT Not After : Mar 3 06:22:09 2027 GMT Subject: CN=978BFEA3174F4FC90520A1338B5A2E011D3E1CA4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:80:c0:1a:57:94:43:b6:b2:1c:7c:0c:dd:be: a8:4b:4d:db:1e:d3:87:da:b1:06:4b:ce:fb:e4:55: 70:88:44:fa:52:46:6d:56:ff:4d:cd:51:1c:f4:00: 16:db:02:94:ad:d5:20:39:ea:56:e9:c5:c7:24:da: 32:8b:9d:0b:b9:89:cb:88:32:d7:46:d4:98:42:1b: c9:4f:65:f6:76:55:db:2a:b0:a5:31:6d:f4:f7:d5: dd:76:3c:de:69:b6:69:c7:1d:30:45:f6:63:15:d7: b2:3d:c7:b3:18:5d:e3:33:8c:e6:1a:ac:6a:d2:9f: 91:ee:b6:18:90:4d:e1:4c:6f:66:a1:39:bb:75:9f: 1a:3b:44:fd:07:74:c6:03:76:69:cf:c1:fa:00:75: 5d:37:b3:46:ce:8e:05:5d:00:cf:be:96:9f:43:ea: c0:54:a5:01:57:5e:c9:6a:5b:68:a1:a2:fa:50:f2: 1e:51:e0:66:5c:e0:99:55:8d:d0:7d:da:47:4f:f6: 5c:39:0b:4c:6a:e7:b7:ab:b7:a2:de:76:b8:ec:4b: 89:df:3e:50:49:31:2c:b3:e0:c9:62:5b:d0:08:d9: fc:26:3f:4e:2b:20:11:a2:1f:2e:5d:bd:e7:b8:b3: 69:d8:02:17:ae:af:b7:51:b3:c4:9a:48:92:d5:9f: 5a:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:8B:FE:A3:17:4F:4F:C9:05:20:A1:33:8B:5A:2E:01:1D:3E:1C:A4 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144783.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a855::/32 Signature Algorithm: sha256WithRSAEncryption 78:e8:d4:4b:7c:ca:06:04:d9:cc:ae:9e:37:49:b0:75:1c:ae: a2:31:d6:a3:eb:e9:51:ab:14:73:8b:6c:42:4b:a5:24:4a:8e: e2:e6:33:99:f8:8e:13:24:65:bb:d8:f8:46:e2:21:54:43:99: 4f:ca:b7:c4:a0:6c:dd:13:d8:ab:d2:d6:6d:99:92:47:5d:7a: 05:73:76:39:98:5b:a9:8c:9d:63:8a:8b:6a:45:ac:8c:10:ed: af:0e:62:76:73:19:53:02:58:b0:6a:0f:9c:3e:00:ae:2d:2e: 07:22:5a:36:b5:8e:27:9d:d1:ea:9f:8d:27:21:aa:1a:29:ec: d7:61:86:94:e7:b8:ad:3f:11:4f:fa:15:81:22:69:f1:da:c0: dd:72:82:79:69:22:02:aa:f1:10:8b:6b:b9:f6:29:e4:db:73: f5:24:fd:b7:9c:28:ec:c1:77:94:6a:bc:02:f9:b9:91:e7:c2: 8a:1c:fd:e9:a4:fe:4c:56:f4:0e:d1:0e:54:9c:15:0b:2a:74: 35:ed:72:10:8b:3e:0b:87:62:06:ed:de:3e:f6:8f:b2:f8:8f: a7:aa:7c:50:c0:98:f9:0c:71:e0:69:e3:4f:22:de:ed:39:d4: 5b:04:bd:55:41:24:a5:7c:d1:9b:4c:bf:f5:bd:3f:7b:60:2c: 8c:fe:ec:b6 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUNJmdksFgPVivaOpghQapecnxUgwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTcwOVoX DTI3MDMwMzA2MjIwOVowMzExMC8GA1UEAxMoOTc4QkZFQTMxNzRGNEZDOTA1MjBB MTMzOEI1QTJFMDExRDNFMUNBNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMCAwBpXlEO2shx8DN2+qEtN2x7Th9qxBkvO++RVcIhE+lJGbVb/Tc1RHPQA FtsClK3VIDnqVunFxyTaMoudC7mJy4gy10bUmEIbyU9l9nZV2yqwpTFt9PfV3XY8 3mm2accdMEX2YxXXsj3Hsxhd4zOM5hqsatKfke62GJBN4UxvZqE5u3WfGjtE/Qd0 xgN2ac/B+gB1XTezRs6OBV0Az76Wn0PqwFSlAVdeyWpbaKGi+lDyHlHgZlzgmVWN 0H3aR0/2XDkLTGrnt6u3ot52uOxLid8+UEkxLLPgyWJb0AjZ/CY/TisgEaIfLl29 57izadgCF66vt1GzxJpIktWfWmECAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSXi/6j F09PyQUgoTOLWi4BHT4cpDAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDc4My5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qFUwDQYJKoZIhvcNAQELBQADggEBAHjo1Et8ygYE2cyunjdJsHUcrqIx1qPr6VGr FHOLbEJLpSRKjuLmM5n4jhMkZbvY+EbiIVRDmU/Kt8SgbN0T2KvS1m2ZkkddegVz djmYW6mMnWOKi2pFrIwQ7a8OYnZzGVMCWLBqD5w+AK4tLgciWja1jied0eqfjSch qhop7NdhhpTnuK0/EU/6FYEiafHawN1ygnlpIgKq8RCLa7n2KeTbc/Uk/becKOzB d5RqvAL5uZHnwooc/emk/kxW9A7RDlScFQsqdDXtchCLPguHYgbt3j72j7L4j6eq fFDAmPkMceBp408i3u051FsEvVVBJKV80ZtMv/W9P3tgLIz+7LY= -----END CERTIFICATE-----Generated at Sat Mar 28 15:54:34 2026 by rpki-client