$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144828.roa File: AS144828.roa (raw, json) Hash identifier: IUOj44v/4KTvRY1PTI3Ve/PGqvHKYdc5SLXFjHRiKxM= Subject key identifier: CA:26:A6:A7:88:90:58:D7:CC:EF:FC:AF:41:35:36:22:20:BF:E0:22 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 6A812FAA8D61CA32BB4CB2E3CCB894E417F876E4 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144828.roa Signing time: Wed 04 Mar 2026 06:21:00 +0000 ROA not before: Wed 04 Mar 2026 06:16:00 +0000 ROA not after: Wed 03 Mar 2027 06:21:00 +0000 asID: 144828 IP address blocks: 240a:a882::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:81:2f:aa:8d:61:ca:32:bb:4c:b2:e3:cc:b8:94:e4:17:f8:76:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:16:00 2026 GMT Not After : Mar 3 06:21:00 2027 GMT Subject: CN=CA26A6A7889058D7CCEFFCAF4135362220BFE022 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:c3:ce:01:e6:d3:ab:93:94:c1:6b:9f:13:ed: 2b:a7:35:92:bd:a0:2f:2a:1a:62:d4:00:bf:30:b3: de:26:9f:57:23:17:39:19:85:8e:aa:fd:22:ce:60: b6:55:9a:41:09:dd:b3:67:e5:c0:87:93:85:13:98: a0:48:24:56:76:50:79:e6:9b:32:0c:80:80:67:bb: 40:2b:7f:5b:91:88:5f:73:51:56:5d:af:2c:41:aa: ac:3f:1e:b4:7f:97:4e:46:2e:ad:46:e7:16:75:8e: bc:57:08:c6:51:f4:ff:2b:2f:76:b8:9d:32:97:c3: 71:c4:2b:8b:90:f9:53:f3:65:3e:2d:1d:b4:32:d3: 36:da:53:4d:d9:50:06:d0:92:32:47:77:ff:d9:de: 90:5f:c1:13:04:cf:b8:8b:db:26:69:4a:4a:85:d7: a4:69:c9:00:78:30:11:38:b0:09:00:9b:4d:68:f1: dc:86:2d:b9:55:da:19:08:f6:a1:f8:d8:84:e9:65: 1c:9c:fa:bc:3a:47:03:93:9a:d2:3f:24:6d:b1:2b: ee:94:2a:83:84:63:05:95:31:1f:fc:ae:36:80:60: d6:c4:64:2f:83:fe:8d:7a:a6:71:ab:eb:ce:eb:e3: 03:60:87:ad:7c:69:e8:97:ed:0f:13:98:df:0a:b7: f1:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:26:A6:A7:88:90:58:D7:CC:EF:FC:AF:41:35:36:22:20:BF:E0:22 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144828.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a882::/32 Signature Algorithm: sha256WithRSAEncryption bd:6c:bd:0e:97:56:17:4b:ba:61:b4:82:2b:b3:a7:68:5e:ab: d9:07:22:61:4b:11:45:88:c6:10:e0:ed:34:0c:3f:27:39:ea: 40:8c:c6:a1:b4:d3:db:66:ad:75:b2:98:9b:05:29:3b:2c:2b: 87:bd:e3:21:b8:cc:ea:06:3b:83:b9:e1:d1:c1:fc:e4:e9:94: 3f:8d:5c:50:95:67:4a:65:f9:42:ce:9b:af:a1:64:12:9d:74: cf:0d:30:c9:be:bf:ef:8d:e5:0c:92:62:a6:c4:d4:91:95:ed: f1:76:8b:ff:23:13:70:8f:dc:92:b5:94:38:74:83:5c:a7:97: 97:15:dd:44:2b:09:5b:e5:f5:85:2b:86:92:ce:2d:20:9b:b2: 89:1b:69:a4:9c:1f:9e:57:11:b2:e3:32:38:d3:7a:04:89:a4: 87:5b:33:8e:60:a9:b4:65:26:81:22:cc:59:60:03:17:96:d1: 72:8c:4c:9d:30:94:38:7b:7c:77:a0:24:07:0e:b4:0c:30:eb: ea:51:c5:fe:cf:90:38:3d:4c:47:8c:3e:f6:23:d8:1c:62:c2: 01:e0:9e:d5:10:f3:97:23:f9:f3:b6:d6:91:ff:da:e9:50:3f: 38:4e:4b:53:1c:7a:bd:b0:42:64:49:ff:01:ac:42:e7:ca:c2: e2:f0:d3:0c -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUaoEvqo1hyjK7TLLjzLiU5Bf4duQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTYwMFoX DTI3MDMwMzA2MjEwMFowMzExMC8GA1UEAxMoQ0EyNkE2QTc4ODkwNThEN0NDRUZG Q0FGNDEzNTM2MjIyMEJGRTAyMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMbDzgHm06uTlMFrnxPtK6c1kr2gLyoaYtQAvzCz3iafVyMXORmFjqr9Is5g tlWaQQnds2flwIeThROYoEgkVnZQeeabMgyAgGe7QCt/W5GIX3NRVl2vLEGqrD8e tH+XTkYurUbnFnWOvFcIxlH0/ysvdridMpfDccQri5D5U/NlPi0dtDLTNtpTTdlQ BtCSMkd3/9nekF/BEwTPuIvbJmlKSoXXpGnJAHgwETiwCQCbTWjx3IYtuVXaGQj2 ofjYhOllHJz6vDpHA5Oa0j8kbbEr7pQqg4RjBZUxH/yuNoBg1sRkL4P+jXqmcavr zuvjA2CHrXxp6JftDxOY3wq38WcCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBTKJqan iJBY18zv/K9BNTYiIL/gIjAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDgyOC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qIIwDQYJKoZIhvcNAQELBQADggEBAL1svQ6XVhdLumG0giuzp2heq9kHImFLEUWI xhDg7TQMPyc56kCMxqG009tmrXWymJsFKTssK4e94yG4zOoGO4O54dHB/OTplD+N XFCVZ0pl+ULOm6+hZBKddM8NMMm+v++N5QySYqbE1JGV7fF2i/8jE3CP3JK1lDh0 g1ynl5cV3UQrCVvl9YUrhpLOLSCbsokbaaScH55XEbLjMjjTegSJpIdbM45gqbRl JoEizFlgAxeW0XKMTJ0wlDh7fHegJAcOtAww6+pRxf7PkDg9TEeMPvYj2BxiwgHg ntUQ85cj+fO21pH/2ulQPzhOS1Mcer2wQmRJ/wGsQufKwuLw0ww= -----END CERTIFICATE-----Generated at Sat Mar 28 11:42:36 2026 by rpki-client