$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144800.roa File: AS144800.roa (raw, json) Hash identifier: r4UFuanuXB0jgBtdU88o1yAmDjFD7ajk6RX4h2ZV/AA= Subject key identifier: 95:17:1E:84:ED:21:5F:BF:54:4D:7C:E2:FC:2C:B1:54:56:53:57:7C Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 0771783E6E39328DD7FD81D8767F8F1C526F4939 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144800.roa Signing time: Wed 04 Mar 2026 06:19:44 +0000 ROA not before: Wed 04 Mar 2026 06:14:44 +0000 ROA not after: Wed 03 Mar 2027 06:19:44 +0000 asID: 144800 IP address blocks: 240a:a866::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:71:78:3e:6e:39:32:8d:d7:fd:81:d8:76:7f:8f:1c:52:6f:49:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:14:44 2026 GMT Not After : Mar 3 06:19:44 2027 GMT Subject: CN=95171E84ED215FBF544D7CE2FC2CB1545653577C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:0b:bb:f2:e6:25:38:f1:97:1a:d9:61:27:98: b8:25:bc:e0:4f:3c:ab:b0:b8:f4:fe:80:e3:1b:e7: 4c:8e:1b:8b:a3:bb:b6:05:e6:20:dc:11:11:9c:2d: 5b:76:8e:a7:23:18:ca:53:5d:6b:ea:8d:6c:e4:2f: 83:0a:b5:b1:1b:a3:c7:4c:ec:6f:18:0e:19:70:f2: 73:1b:fc:c5:58:c0:36:2b:c6:93:7e:22:9c:ac:ac: 28:3c:04:41:cc:01:aa:48:3d:2a:ff:fc:07:b3:68: e4:f4:3f:79:2f:b5:8b:04:27:87:7a:be:af:3c:4d: c2:5e:6d:5a:67:02:5e:d1:d5:2b:6d:17:65:01:85: 59:77:2f:05:62:b2:a3:af:6f:fd:19:34:e7:73:88: 58:58:75:9a:23:ea:42:53:8a:47:06:29:ad:91:2a: 93:a8:41:6d:0a:c7:83:49:e9:e6:f8:30:68:e3:f8: 15:54:24:b6:f6:27:a0:93:71:bf:44:e7:5c:82:1f: 32:67:8f:74:c0:60:0b:f2:60:ba:f9:d8:df:ef:02: 3b:66:5b:8e:4d:5c:3d:be:5a:be:a9:2f:65:48:2e: 02:e5:b8:8a:e9:3b:c0:e4:63:60:38:6c:1b:4b:c9: 55:e6:7d:2e:3a:9a:e5:ed:c2:04:cf:5d:2f:48:2a: 37:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:17:1E:84:ED:21:5F:BF:54:4D:7C:E2:FC:2C:B1:54:56:53:57:7C X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144800.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a866::/32 Signature Algorithm: sha256WithRSAEncryption 55:ff:88:d6:d3:4d:ea:03:99:76:3e:09:8a:40:68:8b:bb:de: 28:b9:af:d0:1c:0f:37:70:4d:7a:26:22:4e:a2:a6:09:46:87: 81:19:74:2a:5d:2a:8d:36:a7:6d:2b:c1:4c:b3:ed:89:fa:85: 66:6b:a4:e2:92:ce:f2:ca:8d:aa:9a:e9:0b:f1:fa:a2:5d:2a: 76:e1:f3:0e:09:ce:f4:9a:00:38:7e:89:fb:82:30:cb:55:2c: a3:eb:ad:5d:ae:ef:96:46:1d:cc:8a:16:43:3d:21:65:ae:8d: 9c:fc:9f:db:cc:d9:ba:0e:af:ac:d8:fa:3f:1a:77:aa:5e:c9: a3:f9:e8:48:89:e7:47:2b:83:06:bb:0a:cc:67:e5:77:cb:b6: 2c:f5:64:96:29:95:40:54:45:9e:12:82:23:08:de:74:96:88: 69:50:ff:c0:b7:b6:21:61:e5:51:6e:24:88:00:0c:42:f7:55: 6a:5b:31:d2:8c:78:2e:e0:86:87:a5:93:79:d6:e2:1f:cc:e5: 3b:36:74:bd:67:05:08:40:0a:9e:fe:ad:90:6e:e4:92:4e:10: 8b:c3:56:39:4f:02:46:b3:99:a3:23:18:45:57:5f:3e:f2:46: a9:e0:8e:40:1e:c1:b3:e4:bb:66:7e:86:e7:46:db:59:69:19: 32:20:6b:78 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUB3F4Pm45Mo3X/YHYdn+PHFJvSTkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTQ0NFoX DTI3MDMwMzA2MTk0NFowMzExMC8GA1UEAxMoOTUxNzFFODRFRDIxNUZCRjU0NEQ3 Q0UyRkMyQ0IxNTQ1NjUzNTc3QzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKoLu/LmJTjxlxrZYSeYuCW84E88q7C49P6A4xvnTI4bi6O7tgXmINwREZwt W3aOpyMYylNda+qNbOQvgwq1sRujx0zsbxgOGXDycxv8xVjANivGk34inKysKDwE QcwBqkg9Kv/8B7No5PQ/eS+1iwQnh3q+rzxNwl5tWmcCXtHVK20XZQGFWXcvBWKy o69v/Rk053OIWFh1miPqQlOKRwYprZEqk6hBbQrHg0np5vgwaOP4FVQktvYnoJNx v0TnXIIfMmePdMBgC/JguvnY3+8CO2Zbjk1cPb5avqkvZUguAuW4iuk7wORjYDhs G0vJVeZ9Ljqa5e3CBM9dL0gqNzECAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSVFx6E 7SFfv1RNfOL8LLFUVlNXfDAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDgwMC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qGYwDQYJKoZIhvcNAQELBQADggEBAFX/iNbTTeoDmXY+CYpAaIu73ii5r9AcDzdw TXomIk6ipglGh4EZdCpdKo02p20rwUyz7Yn6hWZrpOKSzvLKjaqa6Qvx+qJdKnbh 8w4JzvSaADh+ifuCMMtVLKPrrV2u75ZGHcyKFkM9IWWujZz8n9vM2boOr6zY+j8a d6peyaP56EiJ50crgwa7Csxn5XfLtiz1ZJYplUBURZ4SgiMI3nSWiGlQ/8C3tiFh 5VFuJIgADEL3VWpbMdKMeC7ghoelk3nW4h/M5Ts2dL1nBQhACp7+rZBu5JJOEIvD VjlPAkazmaMjGEVXXz7yRqngjkAewbPku2Z+hudG21lpGTIga3g= -----END CERTIFICATE-----Generated at Sat Mar 28 11:45:34 2026 by rpki-client