$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144793.roa File: AS144793.roa (raw, json) Hash identifier: CiX9lhWh1Do2m/6FejuKLkTxtsvSv+MP2JS3wVbJ4Rk= Subject key identifier: 38:E9:D2:4A:66:12:68:D2:F7:6D:CA:94:35:2D:2A:02:FC:5B:13:67 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 55147CCC9F2865687EC50E43F9ED007126C78802 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144793.roa Signing time: Wed 04 Mar 2026 06:22:13 +0000 ROA not before: Wed 04 Mar 2026 06:17:13 +0000 ROA not after: Wed 03 Mar 2027 06:22:13 +0000 asID: 144793 IP address blocks: 240a:a85f::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:14:7c:cc:9f:28:65:68:7e:c5:0e:43:f9:ed:00:71:26:c7:88:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:17:13 2026 GMT Not After : Mar 3 06:22:13 2027 GMT Subject: CN=38E9D24A661268D2F76DCA94352D2A02FC5B1367 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:00:d2:79:28:09:73:69:7a:aa:7b:55:1a:33: 2b:b1:41:ba:33:93:62:5b:09:86:f2:f3:54:43:91: e4:24:40:5c:29:77:38:f2:ce:7a:73:03:79:f0:13: 85:fc:f9:bd:96:a8:c3:d1:ee:f2:20:20:9c:91:7d: eb:7a:3c:b9:cf:1d:af:cf:a5:55:40:83:bb:fb:2a: eb:68:54:0c:e0:89:cc:37:9c:cc:39:24:58:c1:4f: 3d:6b:d6:56:fc:ea:59:fd:14:2f:9c:1f:4c:b3:47: ff:dc:d3:41:be:da:99:a4:00:4f:24:a8:a8:76:2a: 14:1b:46:7e:25:92:d9:0a:bb:21:d9:ef:46:06:fe: aa:03:4b:58:b7:e5:3c:31:27:7c:ee:cd:52:4b:26: 7e:be:d1:de:0f:33:3f:d9:f8:66:bd:fe:71:11:60: df:fa:60:1e:d0:2b:ee:4e:b1:85:9e:f5:ff:0b:d4: e3:77:6e:f7:e1:c3:79:ad:ee:ec:2f:3e:6b:9b:76: 8b:b7:9b:7e:f7:d0:39:16:ca:8f:27:62:84:14:af: c0:1a:98:43:d4:e0:9a:56:ce:18:33:b6:7b:05:6d: 79:77:29:5a:d6:38:be:9d:10:a9:32:15:5d:e8:0c: c2:8d:54:b3:24:ca:24:0d:81:d0:5e:79:12:d0:53: b2:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:E9:D2:4A:66:12:68:D2:F7:6D:CA:94:35:2D:2A:02:FC:5B:13:67 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144793.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a85f::/32 Signature Algorithm: sha256WithRSAEncryption cc:d2:4d:70:04:fd:e2:e9:85:ac:5e:f7:9d:b0:f3:4b:ef:3a: 68:f9:be:1b:35:d0:de:17:2e:b4:07:81:c1:9e:8c:d6:86:6a: a0:c3:3d:56:6b:ca:2f:d7:25:6a:6b:49:fa:a1:b1:b6:98:45: c9:a5:82:53:67:4e:2e:e8:d4:a7:44:6f:3a:84:56:db:86:b9: a7:35:e3:87:a6:d0:5d:5d:2a:28:2f:50:4c:3b:18:73:82:72: 8c:81:c7:44:e1:4c:20:5b:b0:6f:80:1c:bc:7c:57:2b:cf:6c: 3f:52:d7:31:8f:fc:1a:62:44:92:c8:d6:a5:28:af:3c:ab:d8: 4d:a4:03:b5:01:64:71:0a:7f:68:d0:7a:72:d3:a2:03:13:2a: bf:cd:ef:22:e7:9a:0e:ba:19:74:85:fd:31:7e:73:ff:23:44: 42:0a:62:e0:01:cf:bf:3d:87:20:d2:0c:41:ef:ba:d9:44:fd: 75:08:7f:fc:83:84:8c:05:39:94:90:c6:60:ac:a0:84:ae:37: 61:4e:e1:0e:46:a3:4b:c7:11:53:d7:b5:91:ac:80:d6:0e:53: 72:1c:3d:d4:7b:cd:61:f1:ab:a0:b8:7e:12:79:34:81:77:e3: c8:0d:cc:31:af:78:90:dd:d3:e0:c3:0d:4e:15:0c:c2:c4:fa: bd:d8:37:af -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUVRR8zJ8oZWh+xQ5D+e0AcSbHiAIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTcxM1oX DTI3MDMwMzA2MjIxM1owMzExMC8GA1UEAxMoMzhFOUQyNEE2NjEyNjhEMkY3NkRD QTk0MzUyRDJBMDJGQzVCMTM2NzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKIA0nkoCXNpeqp7VRozK7FBujOTYlsJhvLzVEOR5CRAXCl3OPLOenMDefAT hfz5vZaow9Hu8iAgnJF963o8uc8dr8+lVUCDu/sq62hUDOCJzDeczDkkWMFPPWvW VvzqWf0UL5wfTLNH/9zTQb7amaQATySoqHYqFBtGfiWS2Qq7IdnvRgb+qgNLWLfl PDEnfO7NUksmfr7R3g8zP9n4Zr3+cRFg3/pgHtAr7k6xhZ71/wvU43du9+HDea3u 7C8+a5t2i7ebfvfQORbKjydihBSvwBqYQ9TgmlbOGDO2ewVteXcpWtY4vp0QqTIV XegMwo1UsyTKJA2B0F55EtBTsj0CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQ46dJK ZhJo0vdtypQ1LSoC/FsTZzAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDc5My5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qF8wDQYJKoZIhvcNAQELBQADggEBAMzSTXAE/eLphaxe952w80vvOmj5vhs10N4X LrQHgcGejNaGaqDDPVZryi/XJWprSfqhsbaYRcmlglNnTi7o1KdEbzqEVtuGuac1 44em0F1dKigvUEw7GHOCcoyBx0ThTCBbsG+AHLx8VyvPbD9S1zGP/BpiRJLI1qUo rzyr2E2kA7UBZHEKf2jQenLTogMTKr/N7yLnmg66GXSF/TF+c/8jREIKYuABz789 hyDSDEHvutlE/XUIf/yDhIwFOZSQxmCsoISuN2FO4Q5Go0vHEVPXtZGsgNYOU3Ic PdR7zWHxq6C4fhJ5NIF348gNzDGveJDd0+DDDU4VDMLE+r3YN68= -----END CERTIFICATE-----Generated at Sat Mar 28 11:44:23 2026 by rpki-client