$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144785.roa File: AS144785.roa (raw, json) Hash identifier: A2j1H2s0EpjcFoLJV4ZXAjt7jjlm2lCIuHB04cQcMMs= Subject key identifier: 5A:F6:C0:F7:D8:26:0F:90:FD:C2:D1:B5:AD:66:CF:6B:ED:F3:9D:65 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 2ACBC916E339F8B48135DF08B1A3F141DB284E2C Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144785.roa Signing time: Wed 04 Mar 2026 06:19:26 +0000 ROA not before: Wed 04 Mar 2026 06:14:26 +0000 ROA not after: Wed 03 Mar 2027 06:19:26 +0000 asID: 144785 IP address blocks: 240a:a857::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:cb:c9:16:e3:39:f8:b4:81:35:df:08:b1:a3:f1:41:db:28:4e:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:14:26 2026 GMT Not After : Mar 3 06:19:26 2027 GMT Subject: CN=5AF6C0F7D8260F90FDC2D1B5AD66CF6BEDF39D65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:3a:ef:1a:53:e9:7b:56:d3:37:f3:28:62:2f: e9:9a:d5:e3:45:4c:f7:09:44:13:79:25:89:96:4b: ab:a3:ce:ab:b5:8e:ba:7d:fc:62:b0:d4:b1:7b:01: 2d:6e:a3:1d:84:6c:60:2d:29:ac:00:0c:08:27:74: 8e:e4:6f:f3:e1:17:51:b4:81:b1:8b:9b:ea:cf:72: 23:76:09:04:21:a7:07:12:05:19:55:93:9c:b5:65: d9:1f:96:53:5a:7f:76:9d:4a:ae:05:a5:11:3e:d5: 22:e1:75:de:5e:04:b9:92:7c:86:59:3c:a8:12:22: ac:11:ae:86:34:ba:4f:23:c6:46:8c:87:8d:3c:09: 59:07:9c:d0:0a:8d:74:2c:7b:88:0b:09:5a:4a:f6: dd:f8:d5:03:2d:b9:d0:a8:a1:b5:4f:0e:38:ce:83: e5:8d:28:ce:fe:63:81:ad:ba:c9:77:d5:72:74:f2: e2:28:4f:fe:ac:c2:21:87:19:20:5a:fc:5a:2d:90: 64:15:83:8b:5d:11:ab:86:f3:07:46:76:09:64:e8: 6e:c8:a6:49:ae:c7:28:74:40:78:64:55:86:1b:e3: bd:09:fb:92:17:76:fa:28:a3:35:df:56:0b:52:83: 78:df:9e:6d:91:5d:73:cd:65:44:08:51:82:ce:36: af:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:F6:C0:F7:D8:26:0F:90:FD:C2:D1:B5:AD:66:CF:6B:ED:F3:9D:65 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144785.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a857::/32 Signature Algorithm: sha256WithRSAEncryption 02:6d:ff:c4:c8:96:53:6f:5c:67:e9:e5:4c:4e:a4:74:f9:01: 44:36:67:ce:19:e3:42:91:bb:d3:1b:7d:6e:da:42:25:9b:c9: 69:c3:1b:4f:7b:ad:47:32:50:bd:22:d9:46:2c:1f:f9:d5:30: 8a:fe:71:ca:c7:c6:aa:18:b5:dd:fa:9f:a6:56:03:52:1c:c3: 40:15:7a:50:91:3f:0d:1f:28:a2:77:af:0e:e2:21:f4:b9:5f: b1:9b:1b:42:f8:03:22:af:a4:d1:da:f7:74:08:8a:92:14:e0: a4:26:bb:46:f6:df:7a:91:9d:e3:8e:48:c1:13:20:ac:16:57: 4e:53:17:5c:84:6d:b9:8b:73:dd:fd:e9:8f:7d:92:91:76:42: c9:80:64:41:20:4c:1f:ac:4e:bc:e8:29:ff:06:c6:ed:e5:ae: 71:ca:02:5f:3a:af:2c:b2:97:4f:e8:32:95:24:03:f9:5c:26: d1:6b:55:e2:eb:8f:31:0f:d4:25:58:17:10:86:4d:db:a5:b4: 45:5a:d3:5a:0e:5d:99:4b:2d:fd:87:f5:92:c1:fc:c9:fb:9d: 15:69:41:80:c0:53:ae:9d:fb:79:8f:30:92:fa:cb:ac:13:e1: f4:89:8b:65:80:40:1d:23:56:3d:8b:67:79:9f:84:8c:52:00: 36:a7:d3:a6 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUKsvJFuM5+LSBNd8IsaPxQdsoTiwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTQyNloX DTI3MDMwMzA2MTkyNlowMzExMC8GA1UEAxMoNUFGNkMwRjdEODI2MEY5MEZEQzJE MUI1QUQ2NkNGNkJFREYzOUQ2NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKQ67xpT6XtW0zfzKGIv6ZrV40VM9wlEE3kliZZLq6POq7WOun38YrDUsXsB LW6jHYRsYC0prAAMCCd0juRv8+EXUbSBsYub6s9yI3YJBCGnBxIFGVWTnLVl2R+W U1p/dp1KrgWlET7VIuF13l4EuZJ8hlk8qBIirBGuhjS6TyPGRoyHjTwJWQec0AqN dCx7iAsJWkr23fjVAy250KihtU8OOM6D5Y0ozv5jga26yXfVcnTy4ihP/qzCIYcZ IFr8Wi2QZBWDi10Rq4bzB0Z2CWTobsimSa7HKHRAeGRVhhvjvQn7khd2+iijNd9W C1KDeN+ebZFdc81lRAhRgs42r/kCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRa9sD3 2CYPkP3C0bWtZs9r7fOdZTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDc4NS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qFcwDQYJKoZIhvcNAQELBQADggEBAAJt/8TIllNvXGfp5UxOpHT5AUQ2Z84Z40KR u9MbfW7aQiWbyWnDG097rUcyUL0i2UYsH/nVMIr+ccrHxqoYtd36n6ZWA1Icw0AV elCRPw0fKKJ3rw7iIfS5X7GbG0L4AyKvpNHa93QIipIU4KQmu0b233qRneOOSMET IKwWV05TF1yEbbmLc9396Y99kpF2QsmAZEEgTB+sTrzoKf8Gxu3lrnHKAl86ryyy l0/oMpUkA/lcJtFrVeLrjzEP1CVYFxCGTdultEVa01oOXZlLLf2H9ZLB/Mn7nRVp QYDAU66d+3mPMJL6y6wT4fSJi2WAQB0jVj2LZ3mfhIxSADan06Y= -----END CERTIFICATE-----Generated at Sat Mar 28 14:30:46 2026 by rpki-client