$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144817.roa File: AS144817.roa (raw, json) Hash identifier: emyDJDNpa9VkV5jfv/DqevphX00GGT7MKfZjFVd340A= Subject key identifier: 43:0D:BA:DA:F3:1C:50:68:35:5C:2A:27:C6:75:72:39:68:A6:45:1B Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 79740F92BD1B0C13700954B977C3EBC6AC1E520A Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144817.roa Signing time: Wed 04 Mar 2026 06:19:48 +0000 ROA not before: Wed 04 Mar 2026 06:14:48 +0000 ROA not after: Wed 03 Mar 2027 06:19:48 +0000 asID: 144817 IP address blocks: 240a:a877::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:74:0f:92:bd:1b:0c:13:70:09:54:b9:77:c3:eb:c6:ac:1e:52:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:14:48 2026 GMT Not After : Mar 3 06:19:48 2027 GMT Subject: CN=430DBADAF31C5068355C2A27C675723968A6451B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:72:28:41:d2:d2:e3:4b:8d:b1:22:a7:7b:13: c7:57:52:8a:5e:3b:e9:5f:9e:ee:1c:d5:e1:04:dd: 1e:3d:7b:51:2a:e4:38:77:39:46:c4:3c:b9:d1:1d: d5:9c:73:71:78:ed:ae:0c:5b:9f:76:e3:49:3d:eb: 2f:a8:6b:87:2b:4e:e4:a9:fd:4d:33:56:da:53:76: e1:4c:68:ce:da:d7:21:cb:e5:ae:9b:62:30:ae:2f: 1e:99:26:c5:0b:e1:80:d8:80:73:96:0b:d0:fb:b8: 59:3a:e7:c6:b2:a8:62:3a:a8:7c:6e:0b:00:b2:b1: 0b:da:55:00:7a:57:e7:cb:bf:42:fe:7b:22:85:d5: 39:ce:c6:fb:ca:61:90:31:f5:96:52:b8:31:52:0f: 72:0f:4d:1e:8a:3e:5c:42:7b:7a:88:f7:bf:30:5e: 45:33:0b:39:0c:b9:6f:10:61:f9:3a:e0:bb:e6:65: d3:6c:33:d3:35:fb:bc:2a:55:96:75:3e:60:24:1d: a4:ed:cb:18:f7:7b:75:f0:d0:90:06:a1:f5:3c:6f: fb:ad:a6:19:40:df:87:0b:17:f3:92:9d:fe:33:b2: e9:cc:74:b0:64:99:86:80:f4:6f:a4:e8:90:41:31: 65:f3:90:75:49:1d:6f:d6:d8:00:a9:4b:c2:7b:14: 6d:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:0D:BA:DA:F3:1C:50:68:35:5C:2A:27:C6:75:72:39:68:A6:45:1B X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144817.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a877::/32 Signature Algorithm: sha256WithRSAEncryption b2:76:fa:c6:aa:26:06:f8:4f:20:a9:48:b6:d2:0d:53:4f:e7: 5c:83:a7:68:2f:c9:1a:72:af:86:e3:a4:92:54:d3:79:c8:ee: 26:d0:d7:e0:fa:f4:e1:f3:58:0d:ad:6d:02:2d:b0:52:12:3d: ed:5e:68:62:e1:b2:2b:b4:8d:ac:52:f6:e1:17:6c:65:3c:28: a4:6d:74:f6:b9:74:d0:9d:07:77:f3:08:6f:16:09:90:7b:ab: 74:bf:3a:06:16:39:af:08:92:00:1d:5e:af:0f:b4:cc:0b:7d: c2:30:0f:23:28:0a:f8:1a:7b:ce:7b:e1:52:db:52:8a:74:ae: 50:3f:f3:ec:21:48:2f:e4:70:d4:e4:bc:95:cf:d6:63:26:e1: 7b:75:7e:4c:8d:7d:43:48:03:af:96:35:86:37:d5:31:e7:eb: 9a:a8:4e:38:9d:ad:6f:f3:eb:f7:69:ea:78:5d:4f:08:07:b2: f2:ac:5a:fe:83:f0:dd:3b:bb:7a:82:15:19:48:b8:62:94:6a: d1:1c:c4:a6:6e:3b:85:46:ab:36:4a:81:a1:32:f8:96:23:17: dc:2a:21:71:6c:f5:bf:cb:4d:3d:fe:24:ab:b8:77:7e:55:38: 30:3f:0f:8e:73:51:87:fe:43:bf:f4:be:ac:8d:51:ca:62:1a: 43:cf:c9:07 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUeXQPkr0bDBNwCVS5d8PrxqweUgowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTQ0OFoX DTI3MDMwMzA2MTk0OFowMzExMC8GA1UEAxMoNDMwREJBREFGMzFDNTA2ODM1NUMy QTI3QzY3NTcyMzk2OEE2NDUxQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKRyKEHS0uNLjbEip3sTx1dSil476V+e7hzV4QTdHj17USrkOHc5RsQ8udEd 1ZxzcXjtrgxbn3bjST3rL6hrhytO5Kn9TTNW2lN24UxoztrXIcvlrptiMK4vHpkm xQvhgNiAc5YL0Pu4WTrnxrKoYjqofG4LALKxC9pVAHpX58u/Qv57IoXVOc7G+8ph kDH1llK4MVIPcg9NHoo+XEJ7eoj3vzBeRTMLOQy5bxBh+Trgu+Zl02wz0zX7vCpV lnU+YCQdpO3LGPd7dfDQkAah9Txv+62mGUDfhwsX85Kd/jOy6cx0sGSZhoD0b6To kEExZfOQdUkdb9bYAKlLwnsUbZUCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRDDbra 8xxQaDVcKifGdXI5aKZFGzAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDgxNy5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qHcwDQYJKoZIhvcNAQELBQADggEBALJ2+saqJgb4TyCpSLbSDVNP51yDp2gvyRpy r4bjpJJU03nI7ibQ1+D69OHzWA2tbQItsFISPe1eaGLhsiu0jaxS9uEXbGU8KKRt dPa5dNCdB3fzCG8WCZB7q3S/OgYWOa8IkgAdXq8PtMwLfcIwDyMoCvgae8574VLb Uop0rlA/8+whSC/kcNTkvJXP1mMm4Xt1fkyNfUNIA6+WNYY31THn65qoTjidrW/z 6/dp6nhdTwgHsvKsWv6D8N07u3qCFRlIuGKUatEcxKZuO4VGqzZKgaEy+JYjF9wq IXFs9b/LTT3+JKu4d35VODA/D45zUYf+Q7/0vqyNUcpiGkPPyQc= -----END CERTIFICATE-----Generated at Sat Mar 28 11:44:04 2026 by rpki-client