$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144790.roa File: AS144790.roa (raw, json) Hash identifier: bhyninSKd8B2uQ2DN+B2X0imWx7pama1QeFlHw7vnKM= Subject key identifier: EE:D3:89:96:59:3F:00:9C:75:1F:50:3D:6D:01:27:4C:19:A4:2D:A5 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 72D3A7261C9491F595016A182016662E134E05C6 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144790.roa Signing time: Wed 04 Mar 2026 06:20:22 +0000 ROA not before: Wed 04 Mar 2026 06:15:22 +0000 ROA not after: Wed 03 Mar 2027 06:20:22 +0000 asID: 144790 IP address blocks: 240a:a85c::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:d3:a7:26:1c:94:91:f5:95:01:6a:18:20:16:66:2e:13:4e:05:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:15:22 2026 GMT Not After : Mar 3 06:20:22 2027 GMT Subject: CN=EED38996593F009C751F503D6D01274C19A42DA5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:50:68:a8:25:8b:c8:50:5a:f1:05:bf:3c:18: b9:c8:96:87:e8:11:49:7c:37:d5:2d:89:4d:6b:69: 5c:15:e2:43:39:00:68:d7:91:8a:4f:9b:ad:ca:59: 4c:02:7a:87:43:32:52:cc:a3:39:8a:86:01:ff:14: f4:a1:47:22:d0:a3:a9:10:95:d4:1e:de:ff:65:32: 06:69:6f:4f:70:09:e8:e1:34:73:89:d8:03:e4:39: 96:00:7d:52:b5:97:6d:95:be:82:b3:79:e3:62:60: 9e:23:7a:d6:09:23:38:1f:af:64:68:bb:20:63:cb: 23:9e:cf:91:ed:df:e7:bc:85:a5:5c:b5:96:05:45: 63:b7:d3:e0:3e:c6:66:0a:1f:ba:99:3c:61:0a:aa: 52:f0:3c:a0:81:0f:3c:26:83:9a:b6:f2:88:d9:73: cc:e4:30:98:70:d1:26:07:52:e1:90:7c:47:45:c9: 62:5f:9c:36:4e:e8:84:77:d3:75:02:b4:b8:23:3b: ca:fc:76:8c:d6:fa:f1:c8:84:a2:be:2a:e4:24:f8: db:d5:a0:2d:8c:e9:4e:f8:03:a6:da:8e:1e:16:03: 69:de:bd:34:03:ed:36:5b:a6:45:9a:ea:e5:b9:6b: 91:26:c0:33:7f:71:95:34:28:ec:01:d2:ed:ad:7a: 38:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:D3:89:96:59:3F:00:9C:75:1F:50:3D:6D:01:27:4C:19:A4:2D:A5 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144790.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a85c::/32 Signature Algorithm: sha256WithRSAEncryption b4:2d:2d:5e:a0:8a:d1:a6:59:fb:ce:84:48:4d:9d:7c:4c:85: bd:87:86:95:f9:f8:93:06:b5:f8:3a:05:c6:ea:0a:01:c4:13: d1:2b:a6:6f:f4:20:78:38:78:56:01:e9:d5:1b:46:f9:65:81: ee:ec:66:f4:20:10:51:35:e8:d8:1f:ea:29:0d:0e:33:a9:81: 1a:82:d7:aa:28:ab:df:a4:dc:ef:c0:8c:a0:a8:46:00:42:d7: 96:68:99:d8:c1:af:ca:23:0d:46:eb:87:81:9a:ff:7a:c6:c0: 67:fa:1f:b5:d0:68:7a:fe:3e:cf:c9:2d:8a:fc:17:31:07:f3: 14:93:d8:6f:28:17:fd:2c:fb:a7:7f:39:c1:80:8d:52:99:92: 9f:32:76:06:f3:e0:c7:fd:88:2f:42:6e:c2:15:02:d0:19:0a: ed:62:37:3b:e4:ce:bc:7d:f7:7c:ca:94:2c:d9:fb:60:b3:e6: 84:e1:a7:25:d2:c7:8f:d7:94:ec:51:be:76:2a:55:70:da:1d: 56:c5:fb:3f:03:b1:2e:5b:80:fb:5f:82:40:84:70:7e:07:e1: 20:44:62:ac:c6:fd:25:f7:21:40:b7:92:53:0b:ef:9f:31:4e: e8:61:af:d5:79:b5:b7:16:53:79:29:cf:65:54:23:20:cf:dd: bb:3f:21:ad -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUctOnJhyUkfWVAWoYIBZmLhNOBcYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTUyMloX DTI3MDMwMzA2MjAyMlowMzExMC8GA1UEAxMoRUVEMzg5OTY1OTNGMDA5Qzc1MUY1 MDNENkQwMTI3NEMxOUE0MkRBNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJxQaKgli8hQWvEFvzwYuciWh+gRSXw31S2JTWtpXBXiQzkAaNeRik+brcpZ TAJ6h0MyUsyjOYqGAf8U9KFHItCjqRCV1B7e/2UyBmlvT3AJ6OE0c4nYA+Q5lgB9 UrWXbZW+grN542JgniN61gkjOB+vZGi7IGPLI57Pke3f57yFpVy1lgVFY7fT4D7G Zgofupk8YQqqUvA8oIEPPCaDmrbyiNlzzOQwmHDRJgdS4ZB8R0XJYl+cNk7ohHfT dQK0uCM7yvx2jNb68ciEor4q5CT429WgLYzpTvgDptqOHhYDad69NAPtNlumRZrq 5blrkSbAM39xlTQo7AHS7a16OIECAwEAAaOCAcUwggHBMB0GA1UdDgQWBBTu04mW WT8AnHUfUD1tASdMGaQtpTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDc5MC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qFwwDQYJKoZIhvcNAQELBQADggEBALQtLV6gitGmWfvOhEhNnXxMhb2HhpX5+JMG tfg6BcbqCgHEE9Erpm/0IHg4eFYB6dUbRvllge7sZvQgEFE16Ngf6ikNDjOpgRqC 16ooq9+k3O/AjKCoRgBC15ZomdjBr8ojDUbrh4Ga/3rGwGf6H7XQaHr+Ps/JLYr8 FzEH8xST2G8oF/0s+6d/OcGAjVKZkp8ydgbz4Mf9iC9CbsIVAtAZCu1iNzvkzrx9 93zKlCzZ+2Cz5oThpyXSx4/XlOxRvnYqVXDaHVbF+z8DsS5bgPtfgkCEcH4H4SBE YqzG/SX3IUC3klML758xTuhhr9V5tbcWU3kpz2VUIyDP3bs/Ia0= -----END CERTIFICATE-----Generated at Sat Mar 28 13:14:17 2026 by rpki-client