$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144794.roa File: AS144794.roa (raw, json) Hash identifier: pUB2zT0nbRDwxDtU9QlqS33az2K030xYaw+6/ezYaNE= Subject key identifier: D6:55:4F:A3:09:3A:C6:07:70:1F:45:DC:03:ED:79:D0:FF:02:47:30 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 12216C3ACD08D0AD840F9D0ACF2074457BCDB4C6 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144794.roa Signing time: Wed 04 Mar 2026 06:22:36 +0000 ROA not before: Wed 04 Mar 2026 06:17:36 +0000 ROA not after: Wed 03 Mar 2027 06:22:36 +0000 asID: 144794 IP address blocks: 240a:a860::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:21:6c:3a:cd:08:d0:ad:84:0f:9d:0a:cf:20:74:45:7b:cd:b4:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:17:36 2026 GMT Not After : Mar 3 06:22:36 2027 GMT Subject: CN=D6554FA3093AC607701F45DC03ED79D0FF024730 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:30:aa:56:3b:cc:58:ab:5e:d6:e9:99:5c:cf: 6e:3d:24:42:bd:28:e4:76:1b:da:68:db:a8:6a:4c: 99:8b:f4:ef:54:f2:3c:a8:db:d3:b1:bc:5e:be:84: 5c:43:31:1e:2f:67:6c:fe:13:2e:9c:c9:78:a9:74: a7:8d:57:13:9a:24:70:e7:c0:6c:0f:83:4e:0f:a8: e9:c0:14:c8:e1:78:17:e4:03:62:12:f3:cf:a1:c0: 55:42:fd:29:e5:b6:6e:01:0d:4f:13:e9:3c:68:96: ea:3b:0b:6c:68:98:43:3d:a5:49:e9:4c:2b:da:b5: cb:91:28:60:d6:99:1c:68:6e:7c:24:fc:fe:95:19: 39:ea:b3:17:48:91:f9:80:ac:43:96:db:98:7a:3d: 50:3c:f6:46:5c:c0:2d:d8:c9:45:8c:fc:d0:91:34: 02:0f:99:37:28:6d:f0:70:11:f8:8c:d8:6b:ba:bd: 95:a6:f3:e7:8f:68:cc:6a:d1:5f:97:f7:cd:ee:38: a8:e9:16:71:58:66:23:b2:d5:6a:76:2d:6b:7d:40: 90:39:48:93:12:b9:bc:2d:71:4f:eb:be:40:c2:d1: b8:cb:a7:9a:29:f1:19:3b:73:37:d7:73:57:73:d3: 0d:10:2e:79:8b:7f:e5:28:73:f2:4d:be:fd:db:83: e2:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:55:4F:A3:09:3A:C6:07:70:1F:45:DC:03:ED:79:D0:FF:02:47:30 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144794.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a860::/32 Signature Algorithm: sha256WithRSAEncryption 00:5e:96:7e:1b:4c:93:8e:ae:7d:7e:7c:44:c6:97:cc:60:b5: 25:00:3a:5d:16:3e:82:e1:67:0b:0f:76:06:a6:c1:ce:9d:97: d0:6b:e6:8e:a4:a5:41:af:b9:1f:75:43:b2:f6:25:51:e1:19: 41:23:fc:f3:2a:c8:58:a2:ea:b3:47:55:60:0b:10:b2:9a:56: 79:11:7f:93:11:00:a2:3f:48:4e:85:a0:13:08:40:db:49:f9: 83:0f:d3:5f:c4:99:51:93:bc:82:9e:af:2e:45:60:e0:ac:29: 91:c8:34:9b:51:64:ec:77:2f:f3:2f:6e:b9:53:e2:cf:09:0c: c0:5d:f8:e1:49:25:44:5a:93:7f:d5:3f:e6:d1:d1:cb:75:65: e5:4d:dd:c1:01:67:b4:31:8f:2d:ed:60:d3:65:d9:08:72:2e: 34:96:97:35:be:59:4e:b6:22:8e:2d:91:c4:14:61:4c:f8:17: 7d:13:6d:29:41:db:17:9d:1f:ca:8a:77:8c:e3:59:e0:a4:5c: 23:ae:f3:64:83:bc:2a:ba:2d:e8:ee:79:1a:1c:8e:9f:a8:78: c0:d4:e9:c9:bd:47:9e:11:2d:b7:b0:29:20:8c:c5:5b:74:3c: ca:c8:2b:43:0a:67:e4:3d:3a:e4:f4:e9:84:70:ba:e8:a7:b9: 67:b0:cb:e2 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUEiFsOs0I0K2ED50KzyB0RXvNtMYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTczNloX DTI3MDMwMzA2MjIzNlowMzExMC8GA1UEAxMoRDY1NTRGQTMwOTNBQzYwNzcwMUY0 NURDMDNFRDc5RDBGRjAyNDczMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMIwqlY7zFirXtbpmVzPbj0kQr0o5HYb2mjbqGpMmYv071TyPKjb07G8Xr6E XEMxHi9nbP4TLpzJeKl0p41XE5okcOfAbA+DTg+o6cAUyOF4F+QDYhLzz6HAVUL9 KeW2bgENTxPpPGiW6jsLbGiYQz2lSelMK9q1y5EoYNaZHGhufCT8/pUZOeqzF0iR +YCsQ5bbmHo9UDz2RlzALdjJRYz80JE0Ag+ZNyht8HAR+IzYa7q9labz549ozGrR X5f3ze44qOkWcVhmI7LVanYta31AkDlIkxK5vC1xT+u+QMLRuMunminxGTtzN9dz V3PTDRAueYt/5Shz8k2+/duD4qUCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBTWVU+j CTrGB3AfRdwD7XnQ/wJHMDAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDc5NC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qGAwDQYJKoZIhvcNAQELBQADggEBAABeln4bTJOOrn1+fETGl8xgtSUAOl0WPoLh ZwsPdgamwc6dl9Br5o6kpUGvuR91Q7L2JVHhGUEj/PMqyFii6rNHVWALELKaVnkR f5MRAKI/SE6FoBMIQNtJ+YMP01/EmVGTvIKery5FYOCsKZHINJtRZOx3L/MvbrlT 4s8JDMBd+OFJJURak3/VP+bR0ct1ZeVN3cEBZ7Qxjy3tYNNl2QhyLjSWlzW+WU62 Io4tkcQUYUz4F30TbSlB2xedH8qKd4zjWeCkXCOu82SDvCq6LejueRocjp+oeMDU 6cm9R54RLbewKSCMxVt0PMrIK0MKZ+Q9OuT06YRwuuinuWewy+I= -----END CERTIFICATE-----Generated at Sat Mar 28 11:44:10 2026 by rpki-client