$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144805.roa File: AS144805.roa (raw, json) Hash identifier: jFQDDv3/sZB2+fUJaXEZxZkbOkX9nsKrdBcHMqaIE4A= Subject key identifier: 99:DD:8C:5A:69:3D:B8:67:32:88:89:75:0E:55:73:2A:29:8F:30:5B Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 1C4C32A48316204B67FFAF5CFBDB749D1C9280B4 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144805.roa Signing time: Wed 04 Mar 2026 06:19:36 +0000 ROA not before: Wed 04 Mar 2026 06:14:36 +0000 ROA not after: Wed 03 Mar 2027 06:19:36 +0000 asID: 144805 IP address blocks: 240a:a86b::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:4c:32:a4:83:16:20:4b:67:ff:af:5c:fb:db:74:9d:1c:92:80:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:14:36 2026 GMT Not After : Mar 3 06:19:36 2027 GMT Subject: CN=99DD8C5A693DB867328889750E55732A298F305B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:77:0c:16:e1:6a:2c:2f:31:d4:6b:4e:7b:80: 09:81:51:f2:9d:ec:23:94:fd:bc:dd:c6:9f:e2:dd: 69:1a:c0:f0:df:1e:09:5e:13:ad:b1:f5:4c:81:ee: ef:af:c6:19:49:98:1b:aa:30:e9:b1:91:d2:a3:2b: 6f:0d:76:58:7e:5e:a7:c1:c2:f8:c6:44:64:74:28: 40:4a:8e:d8:cc:3c:e7:0e:12:a6:54:ec:98:05:27: da:f2:42:a1:e0:f6:92:ce:69:af:be:46:c5:f5:62: 41:d8:9c:67:a5:08:fd:1c:5c:e1:51:49:01:4b:38: a9:09:53:a5:f5:4d:c1:da:0b:47:61:c3:bd:60:49: 79:ac:13:b7:aa:da:b2:f2:0e:22:88:af:b1:24:ab: c6:75:fd:21:50:62:af:0d:31:9c:47:bc:56:ab:12: 5c:51:fe:c8:70:21:ce:02:ac:4d:23:51:e7:0a:9c: b5:9b:1b:ef:00:09:f7:2f:ff:0a:0c:de:eb:09:f6: cd:b0:9d:63:5b:57:d5:4f:36:ac:8e:bd:b1:cd:e3: 2b:a9:1b:6b:19:68:6d:44:77:90:a9:1d:18:f0:20: 90:f5:02:a4:81:f4:6d:94:5a:f3:c8:be:e1:4b:24: a1:db:f7:51:56:36:5c:4c:5a:8e:2e:2c:6c:bb:4a: 92:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:DD:8C:5A:69:3D:B8:67:32:88:89:75:0E:55:73:2A:29:8F:30:5B X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144805.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a86b::/32 Signature Algorithm: sha256WithRSAEncryption 39:05:cf:c7:be:4f:3b:e5:fc:50:d0:1b:df:8f:fd:e8:27:73: 50:43:1a:ad:b5:e9:61:e1:19:7f:01:ec:eb:b5:07:79:9f:e4: f4:65:dc:4a:b9:d6:4a:39:84:bf:ee:ed:88:b7:66:0b:76:dc: 4a:8e:d0:2b:c2:f4:87:96:3d:67:de:fa:21:1b:58:10:87:bd: ef:bf:98:6e:d9:51:4c:9b:06:9d:fc:ae:67:2a:e6:6c:87:63: dc:01:3a:24:57:4e:f8:4f:21:1f:0f:66:85:d4:60:ba:83:f1: 87:a4:5e:af:98:95:62:0d:3b:85:41:2e:dd:72:c9:71:8e:3d: 97:a0:a0:42:d5:fc:21:28:20:e5:83:ce:4b:f4:b7:a3:cc:c6: 8e:01:ed:98:3e:89:0d:0f:7c:27:e0:c1:79:45:76:55:d7:be: d6:fc:72:68:2a:5c:04:4b:77:c8:0f:f0:cf:17:70:3a:26:95: 64:f8:8a:7f:5d:3c:21:5f:d9:75:e9:a7:8b:11:fe:d1:29:c1: aa:5d:d0:e2:e7:f9:fc:31:b4:fc:5f:89:6a:65:81:a5:88:87: dd:90:f9:b6:d3:7b:1c:75:3d:95:96:cd:f4:ed:60:50:9c:bd: 55:0d:08:df:66:1f:ea:a1:7e:15:fa:1f:4b:00:24:3d:7e:0e: 9e:1d:20:e9 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUHEwypIMWIEtn/69c+9t0nRySgLQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTQzNloX DTI3MDMwMzA2MTkzNlowMzExMC8GA1UEAxMoOTlERDhDNUE2OTNEQjg2NzMyODg4 OTc1MEU1NTczMkEyOThGMzA1QjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAIN3DBbhaiwvMdRrTnuACYFR8p3sI5T9vN3Gn+LdaRrA8N8eCV4TrbH1TIHu 76/GGUmYG6ow6bGR0qMrbw12WH5ep8HC+MZEZHQoQEqO2Mw85w4SplTsmAUn2vJC oeD2ks5pr75GxfViQdicZ6UI/Rxc4VFJAUs4qQlTpfVNwdoLR2HDvWBJeawTt6ra svIOIoivsSSrxnX9IVBirw0xnEe8VqsSXFH+yHAhzgKsTSNR5wqctZsb7wAJ9y// Cgze6wn2zbCdY1tX1U82rI69sc3jK6kbaxlobUR3kKkdGPAgkPUCpIH0bZRa88i+ 4Uskodv3UVY2XExaji4sbLtKknsCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSZ3Yxa aT24ZzKIiXUOVXMqKY8wWzAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDgwNS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qGswDQYJKoZIhvcNAQELBQADggEBADkFz8e+Tzvl/FDQG9+P/egnc1BDGq216WHh GX8B7Ou1B3mf5PRl3Eq51ko5hL/u7Yi3Zgt23EqO0CvC9IeWPWfe+iEbWBCHve+/ mG7ZUUybBp38rmcq5myHY9wBOiRXTvhPIR8PZoXUYLqD8YekXq+YlWINO4VBLt1y yXGOPZegoELV/CEoIOWDzkv0t6PMxo4B7Zg+iQ0PfCfgwXlFdlXXvtb8cmgqXARL d8gP8M8XcDomlWT4in9dPCFf2XXpp4sR/tEpwapd0OLn+fwxtPxfiWplgaWIh92Q +bbTexx1PZWWzfTtYFCcvVUNCN9mH+qhfhX6H0sAJD1+Dp4dIOk= -----END CERTIFICATE-----Generated at Sat Mar 28 11:45:28 2026 by rpki-client