$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144807.roa File: AS144807.roa (raw, json) Hash identifier: tCHDp+hNFsc2YpdZZ4F5vtsS/5XyrWa1NXJTE+yhK4k= Subject key identifier: DD:D7:39:EE:A8:A0:1B:E2:34:E2:46:24:6B:76:66:1D:73:C3:B4:F6 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 3A62E62E01040A72A67FD7EFAF293B756ECD22AE Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144807.roa Signing time: Wed 04 Mar 2026 06:22:16 +0000 ROA not before: Wed 04 Mar 2026 06:17:16 +0000 ROA not after: Wed 03 Mar 2027 06:22:16 +0000 asID: 144807 IP address blocks: 240a:a86d::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:62:e6:2e:01:04:0a:72:a6:7f:d7:ef:af:29:3b:75:6e:cd:22:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:17:16 2026 GMT Not After : Mar 3 06:22:16 2027 GMT Subject: CN=DDD739EEA8A01BE234E246246B76661D73C3B4F6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:7f:d6:ff:be:56:a2:1b:4b:a8:02:1b:63:12: ef:6b:b1:3c:27:de:e8:73:26:3c:96:75:a6:d0:82: 90:0b:f4:42:f6:a0:bb:c2:33:07:9d:79:fa:18:34: 7f:1f:4a:b4:91:e5:23:bb:92:a0:ff:ea:a9:55:1d: 9c:24:fa:b4:ac:e2:69:fe:37:43:1c:f7:5a:ef:a4: f7:e6:10:46:15:64:aa:79:50:b8:a9:2b:ce:04:b7: 71:ec:a2:5e:e5:f9:16:cb:df:52:16:7c:d5:f8:d4: de:07:20:30:ce:32:73:54:98:c8:f0:42:a0:d2:0a: 70:99:8f:4b:4c:67:db:f3:37:65:65:b7:76:3b:4b: 08:f4:e7:27:be:43:14:21:f8:ed:b1:db:7b:52:2a: 13:c8:f1:3d:50:d8:4b:59:4c:db:52:83:a7:41:bb: 62:12:07:d9:18:d1:1c:9a:15:7a:4f:03:9b:1f:c9: de:2c:40:4b:52:29:b2:f7:b9:86:04:b3:24:64:5c: c5:c1:91:ed:ac:9e:1a:f7:d4:05:78:39:22:46:d2: 90:f5:d8:b1:32:29:9c:2b:9d:44:55:9c:03:e0:6f: 2f:4e:84:16:88:52:68:a2:0a:75:54:bc:61:40:d2: 1d:a3:f6:32:70:6f:58:4b:8d:6e:87:a5:85:fb:28: a3:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:D7:39:EE:A8:A0:1B:E2:34:E2:46:24:6B:76:66:1D:73:C3:B4:F6 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144807.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a86d::/32 Signature Algorithm: sha256WithRSAEncryption 98:28:ba:b7:58:36:14:3b:7c:70:0d:83:f1:82:7e:89:fc:ce: b9:32:00:6f:b4:28:11:8b:4d:62:f1:04:6f:f7:d6:9e:3c:a9: 95:9f:20:3d:67:7c:1a:9b:62:c4:d8:05:c0:31:ab:25:3f:7f: a0:18:56:27:ee:db:00:68:02:5e:80:b0:8e:a4:33:0f:ae:12: 5d:fc:72:90:9f:20:e2:f9:9a:1a:6e:a1:eb:32:01:dd:ef:4d: c5:5b:ee:6b:2f:3b:3f:eb:86:7e:3f:c0:58:53:08:5a:af:a6: 52:0c:da:3e:65:8a:39:a1:8d:14:8e:bb:47:f7:4d:d2:f7:4c: cc:cc:1c:52:c5:4b:8d:14:1a:55:63:74:81:f6:a6:7b:0d:ce: 89:a5:9c:2e:07:2a:7a:5b:42:ff:9d:7a:0b:3f:b9:4c:e6:66: a0:41:2b:83:eb:bf:9c:e5:41:e5:54:ca:31:96:c2:81:4c:6d: 98:c0:af:38:d8:75:c4:ce:98:c1:c9:7c:b1:66:5e:8f:7e:2d: 9f:07:09:41:85:c1:bf:6a:57:de:e2:7a:c8:90:cd:fa:88:75: a0:49:6e:df:dd:2a:1c:8e:52:48:22:2d:ed:8c:2f:37:ab:be: 0a:7f:86:7c:a8:ae:db:8b:7e:08:24:37:ae:d6:e4:c4:50:a1: 77:14:11:23 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUOmLmLgEECnKmf9fvryk7dW7NIq4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTcxNloX DTI3MDMwMzA2MjIxNlowMzExMC8GA1UEAxMoRERENzM5RUVBOEEwMUJFMjM0RTI0 NjI0NkI3NjY2MUQ3M0MzQjRGNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJ1/1v++VqIbS6gCG2MS72uxPCfe6HMmPJZ1ptCCkAv0Qvagu8IzB515+hg0 fx9KtJHlI7uSoP/qqVUdnCT6tKziaf43Qxz3Wu+k9+YQRhVkqnlQuKkrzgS3ceyi XuX5FsvfUhZ81fjU3gcgMM4yc1SYyPBCoNIKcJmPS0xn2/M3ZWW3djtLCPTnJ75D FCH47bHbe1IqE8jxPVDYS1lM21KDp0G7YhIH2RjRHJoVek8Dmx/J3ixAS1Ipsve5 hgSzJGRcxcGR7ayeGvfUBXg5IkbSkPXYsTIpnCudRFWcA+BvL06EFohSaKIKdVS8 YUDSHaP2MnBvWEuNboelhfsoo6sCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBTd1znu qKAb4jTiRiRrdmYdc8O09jAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDgwNy5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qG0wDQYJKoZIhvcNAQELBQADggEBAJgourdYNhQ7fHANg/GCfon8zrkyAG+0KBGL TWLxBG/31p48qZWfID1nfBqbYsTYBcAxqyU/f6AYVifu2wBoAl6AsI6kMw+uEl38 cpCfIOL5mhpuoesyAd3vTcVb7msvOz/rhn4/wFhTCFqvplIM2j5lijmhjRSOu0f3 TdL3TMzMHFLFS40UGlVjdIH2pnsNzomlnC4HKnpbQv+degs/uUzmZqBBK4Prv5zl QeVUyjGWwoFMbZjArzjYdcTOmMHJfLFmXo9+LZ8HCUGFwb9qV97iesiQzfqIdaBJ bt/dKhyOUkgiLe2MLzervgp/hnyortuLfggkN67W5MRQoXcUESM= -----END CERTIFICATE-----Generated at Sat Mar 28 15:53:12 2026 by rpki-client