$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144799.roa File: AS144799.roa (raw, json) Hash identifier: ethcZyYEIG/ICTq+H4iTi/H1qve+xU7Ba4rOZhcYlic= Subject key identifier: 94:AE:95:3F:53:D5:76:DE:84:29:D7:F9:61:16:1B:5F:69:9F:94:48 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 3F9431A2ED0D50CF9F14DA8DF0B9C2349EF5C0AA Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144799.roa Signing time: Wed 04 Mar 2026 06:22:25 +0000 ROA not before: Wed 04 Mar 2026 06:17:25 +0000 ROA not after: Wed 03 Mar 2027 06:22:25 +0000 asID: 144799 IP address blocks: 240a:a865::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:94:31:a2:ed:0d:50:cf:9f:14:da:8d:f0:b9:c2:34:9e:f5:c0:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:17:25 2026 GMT Not After : Mar 3 06:22:25 2027 GMT Subject: CN=94AE953F53D576DE8429D7F961161B5F699F9448 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:72:37:86:0f:f1:ca:83:2c:70:e7:c0:1f:38: bd:5c:0c:cf:81:6b:10:03:51:6e:18:5c:a5:da:cf: 49:59:4c:01:ab:8c:44:91:65:c1:6d:ec:f0:2e:81: 52:9a:11:59:ba:cf:74:87:7b:f4:d6:22:33:91:71: 48:b5:65:77:bd:d3:60:71:d3:86:d9:7c:c1:7d:21: 1c:39:97:30:e7:1b:3d:8a:94:0d:da:fc:79:0d:11: 46:57:71:62:70:50:3a:be:3b:3a:ac:8b:5e:74:0d: 2c:9c:0e:5d:99:a0:db:d7:48:a7:05:a8:42:0e:30: 71:2f:b5:bb:8a:3d:22:1c:44:aa:bf:5b:14:70:e2: 33:7a:ff:4a:9d:af:3f:5e:9f:18:f6:39:5e:f0:a3: bb:6c:2e:e3:9d:1e:67:08:2b:c3:ae:9a:53:34:0d: 6a:e4:cf:62:80:7a:6b:31:8f:37:d4:ff:ff:82:16: ab:fe:c8:a0:26:75:7d:7d:e6:86:14:c0:31:ef:c0: b2:36:41:69:10:ba:36:4c:8c:20:6b:e9:e8:7a:3c: 77:75:98:e8:8c:f7:b7:a0:fe:56:31:86:f4:ac:a0: a2:8c:82:86:4e:4b:ae:ff:c8:20:f3:55:3c:02:fb: e1:be:29:7f:e7:7c:2e:d3:e1:89:44:20:35:f6:17: b4:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:AE:95:3F:53:D5:76:DE:84:29:D7:F9:61:16:1B:5F:69:9F:94:48 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144799.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a865::/32 Signature Algorithm: sha256WithRSAEncryption bc:30:13:f2:1e:be:38:7c:62:7b:dc:3e:b0:8e:0f:6a:84:34: 3b:dd:85:93:d0:ad:b7:2f:e6:09:bb:8d:a8:02:86:d1:08:e0: 08:a9:4b:63:8a:2d:65:52:0a:17:8b:58:ca:88:d6:fe:09:20: bc:97:46:78:df:88:fd:8b:0e:85:b4:35:00:94:df:bb:18:10: 85:83:a2:95:f8:fa:da:48:69:a5:63:43:87:19:6a:b4:c7:07: 50:db:5d:15:ea:79:84:bd:c0:2a:9f:15:76:4a:a4:7a:fc:ce: 12:5b:e4:04:25:7a:db:43:3c:54:60:9e:1a:b7:3a:4e:95:aa: 9b:4c:c7:95:69:f4:03:2d:48:46:0b:3d:6c:13:a8:e6:80:ed: c4:34:cf:b0:8e:69:75:f7:c6:e1:3e:ce:73:12:42:f1:cd:f3: 37:d9:01:f9:47:8d:a3:d6:3f:2a:7b:d2:68:18:8b:fe:95:f8: de:c4:ff:17:ea:ba:36:74:c1:16:2e:2c:10:c3:72:26:d7:1f: 8e:73:46:11:c2:68:52:53:bb:c3:e8:40:42:bd:2c:92:23:51: ae:b6:46:97:d2:c6:24:84:9c:72:a4:85:76:70:fb:7c:3f:41: 1f:c3:a0:17:b9:fc:f2:14:82:3a:6c:ab:ad:07:b0:76:ef:8b: a6:9a:3e:96 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUP5Qxou0NUM+fFNqN8LnCNJ71wKowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTcyNVoX DTI3MDMwMzA2MjIyNVowMzExMC8GA1UEAxMoOTRBRTk1M0Y1M0Q1NzZERTg0MjlE N0Y5NjExNjFCNUY2OTlGOTQ0ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALRyN4YP8cqDLHDnwB84vVwMz4FrEANRbhhcpdrPSVlMAauMRJFlwW3s8C6B UpoRWbrPdId79NYiM5FxSLVld73TYHHThtl8wX0hHDmXMOcbPYqUDdr8eQ0RRldx YnBQOr47OqyLXnQNLJwOXZmg29dIpwWoQg4wcS+1u4o9IhxEqr9bFHDiM3r/Sp2v P16fGPY5XvCju2wu450eZwgrw66aUzQNauTPYoB6azGPN9T//4IWq/7IoCZ1fX3m hhTAMe/AsjZBaRC6NkyMIGvp6Ho8d3WY6Iz3t6D+VjGG9KygooyChk5Lrv/IIPNV PAL74b4pf+d8LtPhiUQgNfYXtKECAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSUrpU/ U9V23oQp1/lhFhtfaZ+USDAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDc5OS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qGUwDQYJKoZIhvcNAQELBQADggEBALwwE/Ievjh8YnvcPrCOD2qENDvdhZPQrbcv 5gm7jagChtEI4AipS2OKLWVSCheLWMqI1v4JILyXRnjfiP2LDoW0NQCU37sYEIWD opX4+tpIaaVjQ4cZarTHB1DbXRXqeYS9wCqfFXZKpHr8zhJb5AQlettDPFRgnhq3 Ok6VqptMx5Vp9AMtSEYLPWwTqOaA7cQ0z7COaXX3xuE+znMSQvHN8zfZAflHjaPW Pyp70mgYi/6V+N7E/xfqujZ0wRYuLBDDcibXH45zRhHCaFJTu8PoQEK9LJIjUa62 RpfSxiSEnHKkhXZw+3w/QR/DoBe5/PIUgjpsq60HsHbvi6aaPpY= -----END CERTIFICATE-----Generated at Sat Mar 28 11:45:34 2026 by rpki-client