$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144819.roa File: AS144819.roa (raw, json) Hash identifier: M5DMFYcFfG5bkMt+u5Ky0XQ949MJOApcWFcwvVsam/Q= Subject key identifier: B0:29:80:5A:31:EC:D5:4D:24:26:79:9B:D4:38:4D:C0:28:72:39:A0 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 137E8867D7831357527A6569B114F7E30BA0FA31 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144819.roa Signing time: Wed 04 Mar 2026 06:21:29 +0000 ROA not before: Wed 04 Mar 2026 06:16:29 +0000 ROA not after: Wed 03 Mar 2027 06:21:29 +0000 asID: 144819 IP address blocks: 240a:a879::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:7e:88:67:d7:83:13:57:52:7a:65:69:b1:14:f7:e3:0b:a0:fa:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:16:29 2026 GMT Not After : Mar 3 06:21:29 2027 GMT Subject: CN=B029805A31ECD54D2426799BD4384DC0287239A0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:f2:cf:05:ba:db:6e:75:b2:4e:e0:06:cc:f9: 1a:31:56:77:da:be:49:15:8a:4b:c5:a8:8f:e5:bc: 0f:4d:54:a6:9e:5b:e4:a9:d1:89:48:f0:3b:43:63: ff:85:9b:0b:1a:a8:7b:ac:c4:0a:12:4c:0d:89:b8: 88:c3:c3:a5:70:bc:71:4c:b6:33:48:c4:a9:e9:81: 69:56:3c:84:d3:ed:7a:8e:e5:f1:81:05:97:15:67: dd:1f:db:09:f9:89:bf:93:d0:20:5a:f9:8f:0b:93: 33:64:b2:a3:3a:04:de:1b:dd:11:54:0b:33:44:a3: 8f:49:8f:f3:d2:50:45:36:97:a2:f2:37:c5:ce:70: c9:cb:32:5d:9d:7b:1c:69:0f:ea:f5:c8:95:55:d5: 73:d3:07:11:20:8b:ff:15:5f:d6:59:fa:a7:ca:20: 6d:b9:1b:3e:ef:d0:a0:e9:d9:87:3a:cc:a9:da:a5: 97:b6:6c:09:fb:18:96:5d:a6:a3:ec:23:b1:29:ac: 1a:70:b2:61:06:0e:40:52:7f:6d:81:f2:32:16:36: ce:04:54:cc:b9:6c:de:e0:15:89:04:28:c7:e4:02: b6:91:d6:0a:35:b0:4b:88:da:bd:83:53:03:73:81: 99:85:37:92:97:d3:de:94:0a:3f:d4:1b:91:07:13: d5:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:29:80:5A:31:EC:D5:4D:24:26:79:9B:D4:38:4D:C0:28:72:39:A0 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144819.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a879::/32 Signature Algorithm: sha256WithRSAEncryption 44:d7:05:40:5c:53:45:c5:d4:2d:81:7a:41:38:e4:f3:51:cb: da:30:e5:19:75:74:5a:d7:81:4e:25:be:31:66:da:37:74:f7: cf:58:1b:01:96:e5:2c:78:9f:ec:a3:d8:0e:3e:c1:42:13:4a: a7:83:8b:c9:3d:89:27:fd:fa:36:c9:09:85:70:8b:72:52:9a: 1d:4b:51:1d:66:12:05:1f:41:7a:b1:0c:e9:e8:e1:f4:32:51: 0b:80:23:a4:5b:8f:a2:53:45:5a:9b:7f:30:08:55:8f:87:89: eb:32:59:e2:62:4d:02:6d:b6:b1:10:54:a6:d7:37:cc:c8:63: f0:e6:cc:ee:37:0d:1e:3f:62:b3:67:1a:0b:26:ef:dc:52:9a: 11:92:32:61:16:fb:c4:db:28:7d:c4:46:91:ee:52:cb:7c:b8: 08:c8:88:3b:47:91:47:f1:8f:38:4f:26:1d:10:93:28:0c:91: 01:5a:4a:f3:31:0a:4d:2b:f2:1c:9f:c7:41:42:6c:f9:b9:66: 0f:d3:ff:26:2b:ad:9f:ee:bf:fe:85:b2:3a:24:a3:77:55:9d: 2c:48:b5:29:2b:a3:96:c0:c3:2b:21:4a:78:62:ef:61:95:74: 1a:ac:86:4d:85:0b:7f:f9:f5:4d:4a:c2:0f:da:49:08:82:c5: 12:cf:8b:14 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUE36IZ9eDE1dSemVpsRT34wug+jEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTYyOVoX DTI3MDMwMzA2MjEyOVowMzExMC8GA1UEAxMoQjAyOTgwNUEzMUVDRDU0RDI0MjY3 OTlCRDQzODREQzAyODcyMzlBMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAIzyzwW62251sk7gBsz5GjFWd9q+SRWKS8Woj+W8D01Upp5b5KnRiUjwO0Nj /4WbCxqoe6zEChJMDYm4iMPDpXC8cUy2M0jEqemBaVY8hNPteo7l8YEFlxVn3R/b CfmJv5PQIFr5jwuTM2SyozoE3hvdEVQLM0Sjj0mP89JQRTaXovI3xc5wycsyXZ17 HGkP6vXIlVXVc9MHESCL/xVf1ln6p8ogbbkbPu/QoOnZhzrMqdqll7ZsCfsYll2m o+wjsSmsGnCyYQYOQFJ/bYHyMhY2zgRUzLls3uAViQQox+QCtpHWCjWwS4javYNT A3OBmYU3kpfT3pQKP9QbkQcT1R0CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSwKYBa MezVTSQmeZvUOE3AKHI5oDAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDgxOS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qHkwDQYJKoZIhvcNAQELBQADggEBAETXBUBcU0XF1C2BekE45PNRy9ow5Rl1dFrX gU4lvjFm2jd0989YGwGW5Sx4n+yj2A4+wUITSqeDi8k9iSf9+jbJCYVwi3JSmh1L UR1mEgUfQXqxDOno4fQyUQuAI6Rbj6JTRVqbfzAIVY+HiesyWeJiTQJttrEQVKbX N8zIY/DmzO43DR4/YrNnGgsm79xSmhGSMmEW+8TbKH3ERpHuUst8uAjIiDtHkUfx jzhPJh0QkygMkQFaSvMxCk0r8hyfx0FCbPm5Zg/T/yYrrZ/uv/6Fsjoko3dVnSxI tSkro5bAwyshSnhi72GVdBqshk2FC3/59U1Kwg/aSQiCxRLPixQ= -----END CERTIFICATE-----Generated at Sat Mar 28 11:44:52 2026 by rpki-client