$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144801.roa File: AS144801.roa (raw, json) Hash identifier: 1uHYNCgH1O3oXoE+aoe5e7cU/bOtX3EwPvUw3ue0Eqk= Subject key identifier: 09:60:C7:72:F3:E0:22:99:9B:8D:49:D5:A7:15:D5:36:B6:6E:61:AB Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 5E3C18F31246B7D5F827612AD57065C256A55DAF Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144801.roa Signing time: Wed 04 Mar 2026 06:21:09 +0000 ROA not before: Wed 04 Mar 2026 06:16:09 +0000 ROA not after: Wed 03 Mar 2027 06:21:09 +0000 asID: 144801 IP address blocks: 240a:a867::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:3c:18:f3:12:46:b7:d5:f8:27:61:2a:d5:70:65:c2:56:a5:5d:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:16:09 2026 GMT Not After : Mar 3 06:21:09 2027 GMT Subject: CN=0960C772F3E022999B8D49D5A715D536B66E61AB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:5f:13:14:b8:3f:81:94:48:fa:c8:f0:24:4c: 4f:ca:1f:fb:ae:46:a7:20:2a:5a:3f:72:51:3f:c6: 09:b7:55:4b:4d:3b:2d:69:59:dc:2b:26:12:a0:1b: c1:03:1f:37:50:a9:3d:bd:b2:63:ee:86:10:d3:37: 34:36:55:a1:3b:5f:25:11:0e:be:62:6b:19:76:21: d3:f4:19:2a:68:18:b2:22:c5:46:37:2e:ed:26:eb: 39:fd:21:ee:fa:6f:50:e8:71:cd:3f:0b:32:d4:26: b3:4e:e4:90:3d:d1:82:00:56:d1:21:99:d9:b8:0a: bf:8d:d4:ac:6e:2a:63:b8:d2:13:3f:47:2b:ba:91: 21:8c:ef:69:4b:1e:17:eb:66:d5:35:3b:03:2d:bc: 83:7e:ba:81:d4:1c:26:dc:ec:d1:f0:34:05:33:3d: 3c:10:41:c3:83:c7:df:5d:ef:55:05:c0:cf:1b:19: 83:51:41:1e:93:81:77:5d:8f:05:1b:63:fe:7f:b6: d4:16:a8:4f:e1:d7:62:e8:8c:48:27:d6:27:a7:35: b6:ca:24:1b:71:58:9d:e7:17:8b:f0:71:07:bb:b9: 60:4e:91:3b:84:f3:b9:80:a7:d9:92:ba:ef:8d:54: 96:05:1a:d5:45:f0:94:13:fe:00:a9:83:c7:8e:4d: 44:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:60:C7:72:F3:E0:22:99:9B:8D:49:D5:A7:15:D5:36:B6:6E:61:AB X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144801.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a867::/32 Signature Algorithm: sha256WithRSAEncryption a3:88:b8:28:7e:a2:bf:58:a1:cb:b6:0a:7e:49:5d:09:04:8e: e0:de:92:af:35:17:e8:ef:f9:40:ff:87:6e:d9:6e:b7:ff:16: 28:22:e9:19:03:7a:42:10:51:91:8f:08:14:28:1e:df:81:b6: 6d:2c:bb:f4:40:07:32:70:c3:2e:65:c1:7b:95:cc:fd:5c:f1: 11:e7:98:ea:9b:a2:fa:80:44:44:a2:93:4b:7e:70:00:16:b5: 27:58:5e:61:ec:b9:8a:02:8b:0a:66:bd:ef:88:f8:42:f1:6f: 6f:0a:74:f3:6e:46:be:1d:ba:19:8b:f6:48:92:cf:5a:5b:9e: e5:12:73:7c:bc:b7:1c:b9:d9:50:01:47:57:e5:c5:78:e3:e2: ac:d5:74:3a:47:2a:17:60:83:ae:82:69:15:43:80:b3:94:80: 64:15:64:ef:2c:3c:68:bb:fc:b3:64:4e:a7:fa:fc:27:c8:6d: db:73:06:30:5b:85:7b:f9:e6:bb:d3:c0:0b:62:ba:18:48:37: 71:4a:11:e1:4b:48:94:43:70:06:c5:34:1d:78:ed:2d:d0:fe: d3:ed:5a:8b:8e:36:b2:3c:11:4f:5e:f8:6d:bb:15:c0:a2:e9: 53:da:7b:19:f1:14:59:d6:ed:25:3b:f3:ab:77:34:97:fa:6f: 36:33:e9:2e -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUXjwY8xJGt9X4J2Eq1XBlwlalXa8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTYwOVoX DTI3MDMwMzA2MjEwOVowMzExMC8GA1UEAxMoMDk2MEM3NzJGM0UwMjI5OTlCOEQ0 OUQ1QTcxNUQ1MzZCNjZFNjFBQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKtfExS4P4GUSPrI8CRMT8of+65GpyAqWj9yUT/GCbdVS007LWlZ3CsmEqAb wQMfN1CpPb2yY+6GENM3NDZVoTtfJREOvmJrGXYh0/QZKmgYsiLFRjcu7SbrOf0h 7vpvUOhxzT8LMtQms07kkD3RggBW0SGZ2bgKv43UrG4qY7jSEz9HK7qRIYzvaUse F+tm1TU7Ay28g366gdQcJtzs0fA0BTM9PBBBw4PH313vVQXAzxsZg1FBHpOBd12P BRtj/n+21BaoT+HXYuiMSCfWJ6c1tsokG3FYnecXi/BxB7u5YE6RO4TzuYCn2ZK6 741UlgUa1UXwlBP+AKmDx45NRKUCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQJYMdy 8+AimZuNSdWnFdU2tm5hqzAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDgwMS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qGcwDQYJKoZIhvcNAQELBQADggEBAKOIuCh+or9Yocu2Cn5JXQkEjuDekq81F+jv +UD/h27Zbrf/Figi6RkDekIQUZGPCBQoHt+Btm0su/RABzJwwy5lwXuVzP1c8RHn mOqbovqARESik0t+cAAWtSdYXmHsuYoCiwpmve+I+ELxb28KdPNuRr4duhmL9kiS z1pbnuUSc3y8txy52VABR1flxXjj4qzVdDpHKhdgg66CaRVDgLOUgGQVZO8sPGi7 /LNkTqf6/CfIbdtzBjBbhXv55rvTwAtiuhhIN3FKEeFLSJRDcAbFNB147S3Q/tPt WouONrI8EU9e+G27FcCi6VPaexnxFFnW7SU786t3NJf6bzYz6S4= -----END CERTIFICATE-----Generated at Sat Mar 28 14:30:46 2026 by rpki-client