$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144830.roa File: AS144830.roa (raw, json) Hash identifier: Ro0vj6Y6gU0iwVZ8e5K9Ic8Sy4X5foUiZ6R1EuiSXss= Subject key identifier: FC:86:D2:E4:4A:01:01:4F:83:6C:54:26:7E:B7:34:6C:4F:18:95:B9 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 641F76668F1242D3B49741532DA6FD961F275EBC Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144830.roa Signing time: Wed 04 Mar 2026 06:21:10 +0000 ROA not before: Wed 04 Mar 2026 06:16:10 +0000 ROA not after: Wed 03 Mar 2027 06:21:10 +0000 asID: 144830 IP address blocks: 240a:a884::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:1f:76:66:8f:12:42:d3:b4:97:41:53:2d:a6:fd:96:1f:27:5e:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:16:10 2026 GMT Not After : Mar 3 06:21:10 2027 GMT Subject: CN=FC86D2E44A01014F836C54267EB7346C4F1895B9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:5f:38:67:a5:8c:48:0c:06:55:e5:73:60:64: c0:a6:a7:c3:d5:bd:10:3c:3d:09:61:fc:4f:77:dc: db:d0:de:5e:76:50:a2:ac:32:82:27:84:66:c7:51: b6:a6:88:ba:13:1e:84:27:09:06:a4:ef:06:bb:31: d1:df:2b:5c:76:fa:3c:5c:d1:bf:e8:3d:4f:81:30: 59:01:d7:14:88:c1:a3:48:4b:11:d3:b3:ec:80:6d: 7a:2f:56:2d:47:ad:53:54:49:87:a3:32:af:47:f3: 2f:cc:50:43:89:e8:9d:40:39:fe:a1:cb:a3:e2:3a: 85:03:46:52:63:7b:1d:ce:d9:7d:81:0b:4b:7c:60: 06:35:60:f7:12:6f:92:35:17:c3:66:24:cc:30:e8: e4:92:b6:2e:d9:cf:12:a3:15:f6:48:b9:6c:f2:50: 2a:6f:c5:2e:56:6f:7b:0a:38:fe:78:75:28:12:96: 54:92:a3:13:cc:3a:79:9d:04:b7:1b:b4:7e:4d:ce: 05:e9:d9:09:6a:12:6b:f3:0e:f6:aa:24:81:33:d7: 5d:f5:ed:db:bb:cb:81:13:10:38:72:26:00:6b:55: 08:83:cc:5b:56:d2:ad:c8:8a:d3:00:fa:a4:be:6b: 79:27:98:d1:48:a2:2d:61:ab:79:29:e9:7c:e0:29: 01:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:86:D2:E4:4A:01:01:4F:83:6C:54:26:7E:B7:34:6C:4F:18:95:B9 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144830.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a884::/32 Signature Algorithm: sha256WithRSAEncryption 9b:24:e8:9b:8f:ce:60:02:af:3b:e9:3a:6c:ca:1f:52:1c:fa: c7:1a:75:9f:1d:97:15:51:6e:22:69:65:68:cd:11:1b:64:35: bf:81:ee:42:49:0d:31:e3:8e:0f:8e:54:42:05:2e:2b:8d:e8: 00:33:b6:5a:80:54:92:b0:46:1d:a3:b6:17:14:09:4d:3f:f7: 9f:40:29:09:90:2e:05:32:49:40:96:5b:4a:9f:2b:a1:6e:bf: b4:fb:04:aa:8f:58:8d:5e:ed:ba:34:57:f1:fc:d3:fa:8a:60: 48:20:e9:1c:bf:e1:7c:02:18:15:20:61:53:47:29:1f:72:11: 75:d3:cf:5f:9e:75:08:1b:6f:24:82:f7:2c:68:af:6b:37:47: ce:c3:80:4d:d7:94:41:87:b9:e9:60:50:0e:40:1f:ef:fa:93: 71:8e:f0:75:af:d9:6e:fb:36:2f:64:88:17:2d:14:ff:b2:bc: e1:ae:0e:96:33:d8:1a:d7:f3:ad:fb:97:2f:52:5a:8a:f3:ba: b0:29:7c:52:55:15:aa:9d:20:e1:d8:14:5c:6b:52:b6:00:40: 5a:7e:49:c7:2e:f1:d9:13:ac:51:c2:79:63:95:2e:05:4e:6f: 61:48:6d:8f:7e:5e:97:c3:bf:26:69:8a:51:b9:db:d9:22:d8: 84:6b:6b:29 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUZB92Zo8SQtO0l0FTLab9lh8nXrwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTYxMFoX DTI3MDMwMzA2MjExMFowMzExMC8GA1UEAxMoRkM4NkQyRTQ0QTAxMDE0RjgzNkM1 NDI2N0VCNzM0NkM0RjE4OTVCOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMBfOGeljEgMBlXlc2BkwKanw9W9EDw9CWH8T3fc29DeXnZQoqwygieEZsdR tqaIuhMehCcJBqTvBrsx0d8rXHb6PFzRv+g9T4EwWQHXFIjBo0hLEdOz7IBtei9W LUetU1RJh6Myr0fzL8xQQ4nonUA5/qHLo+I6hQNGUmN7Hc7ZfYELS3xgBjVg9xJv kjUXw2YkzDDo5JK2LtnPEqMV9ki5bPJQKm/FLlZvewo4/nh1KBKWVJKjE8w6eZ0E txu0fk3OBenZCWoSa/MO9qokgTPXXfXt27vLgRMQOHImAGtVCIPMW1bSrciK0wD6 pL5reSeY0UiiLWGreSnpfOApAeECAwEAAaOCAcUwggHBMB0GA1UdDgQWBBT8htLk SgEBT4NsVCZ+tzRsTxiVuTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDgzMC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qIQwDQYJKoZIhvcNAQELBQADggEBAJsk6JuPzmACrzvpOmzKH1Ic+scadZ8dlxVR biJpZWjNERtkNb+B7kJJDTHjjg+OVEIFLiuN6AAztlqAVJKwRh2jthcUCU0/959A KQmQLgUySUCWW0qfK6Fuv7T7BKqPWI1e7bo0V/H80/qKYEgg6Ry/4XwCGBUgYVNH KR9yEXXTz1+edQgbbySC9yxor2s3R87DgE3XlEGHuelgUA5AH+/6k3GO8HWv2W77 Ni9kiBctFP+yvOGuDpYz2BrX8637ly9SWorzurApfFJVFaqdIOHYFFxrUrYAQFp+ Sccu8dkTrFHCeWOVLgVOb2FIbY9+XpfDvyZpilG529ki2IRrayk= -----END CERTIFICATE-----Generated at Sat Mar 28 11:43:49 2026 by rpki-client