$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144831.roa File: AS144831.roa (raw, json) Hash identifier: ispdDXwHXzY9iboOFV6mB0K3XNXIK8zVZJpk9bZiVjQ= Subject key identifier: 72:04:DE:07:85:A8:6A:D6:68:30:8F:A6:16:5E:68:EE:4C:15:C1:DA Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 0A0EAEA71BC37079D6A626FB05349457D6760336 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144831.roa Signing time: Wed 04 Mar 2026 06:21:51 +0000 ROA not before: Wed 04 Mar 2026 06:16:51 +0000 ROA not after: Wed 03 Mar 2027 06:21:51 +0000 asID: 144831 IP address blocks: 240a:a885::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:0e:ae:a7:1b:c3:70:79:d6:a6:26:fb:05:34:94:57:d6:76:03:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:16:51 2026 GMT Not After : Mar 3 06:21:51 2027 GMT Subject: CN=7204DE0785A86AD668308FA6165E68EE4C15C1DA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:ce:e1:fe:83:72:b8:e8:a6:7c:71:e6:2a:80: ae:96:55:a8:2e:07:dd:5e:8c:31:b2:01:d9:77:b0: 74:17:d4:aa:62:f1:18:e0:5a:24:a1:6e:69:f9:20: a6:b3:d7:be:4d:ce:ed:09:d1:21:75:3e:aa:ed:b4: e4:64:7a:67:c4:18:4c:25:80:05:01:29:f9:88:e7: 12:34:b7:db:72:71:9c:51:e8:9a:07:5d:c0:d6:0b: 28:bf:dc:a2:7b:b8:36:c7:d9:5a:52:db:42:35:45: 63:f4:f2:c8:52:9e:a8:9b:63:01:68:16:0e:0d:96: 10:59:16:1f:70:f6:22:d1:f8:bd:58:23:8c:c5:1b: 90:39:86:0b:82:21:24:31:ad:05:5d:1a:8b:f0:8a: 7c:55:8c:ee:be:c4:9e:15:4c:6d:14:f0:ee:3c:e8: ba:8d:72:a3:c2:ec:7b:ae:40:ea:d9:4d:51:e6:14: c6:c3:de:b6:a6:7b:7a:a7:3d:6e:40:f4:77:10:02: f2:05:20:c2:be:a5:29:36:21:d1:7e:59:a4:2b:1e: 12:8c:25:59:25:db:33:8e:09:1f:83:cf:a9:67:1b: 05:76:f5:d2:ec:e0:8b:f8:20:dd:3c:f7:dc:90:25: 36:c7:57:1a:95:f6:b8:49:6f:ee:6e:fc:c8:ff:a7: b6:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:04:DE:07:85:A8:6A:D6:68:30:8F:A6:16:5E:68:EE:4C:15:C1:DA X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144831.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a885::/32 Signature Algorithm: sha256WithRSAEncryption 79:a4:31:69:71:b6:f5:3b:ee:87:f7:f2:39:1c:fc:fa:da:29: ac:45:e4:fb:28:cb:39:db:12:bf:1f:47:60:45:f5:c1:fb:4a: ee:d1:11:da:d4:ed:bf:89:aa:e7:7c:06:54:80:06:87:37:0c: 36:6f:82:0e:f2:c7:31:07:16:9e:bb:3d:1f:7c:0f:e2:8a:33: 66:3e:0f:12:24:b0:33:b6:c0:9c:ac:32:7f:2a:54:8d:98:26: 16:54:b2:8d:bc:4d:46:b4:43:9e:35:97:1d:10:02:be:57:68: 41:1a:4f:09:a5:7c:e1:17:92:0d:d0:d3:05:42:32:c8:df:a5: c6:02:d9:97:89:75:48:3d:49:13:88:e4:42:e3:6d:d5:fd:19: e3:04:1a:3a:7c:fd:1b:8f:de:29:59:9c:89:61:ae:11:8f:01: 46:ba:b1:93:e9:ca:7c:d1:59:bd:c2:95:07:5c:78:de:48:4b: b1:44:7d:2c:bc:fe:40:f5:3e:35:56:4f:0a:06:c2:df:8f:1d: 25:38:e5:10:fe:31:72:a0:89:b3:5b:6c:b1:56:f9:7a:66:2d: 4c:3f:68:4c:95:7c:7f:02:a0:a7:1f:f4:2b:79:03:41:f7:f6: e5:1d:88:bc:96:56:b1:2a:d9:53:fe:05:f6:f1:05:72:da:6f: 98:95:fc:1a -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUCg6upxvDcHnWpib7BTSUV9Z2AzYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTY1MVoX DTI3MDMwMzA2MjE1MVowMzExMC8GA1UEAxMoNzIwNERFMDc4NUE4NkFENjY4MzA4 RkE2MTY1RTY4RUU0QzE1QzFEQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMXO4f6Dcrjopnxx5iqArpZVqC4H3V6MMbIB2XewdBfUqmLxGOBaJKFuafkg prPXvk3O7QnRIXU+qu205GR6Z8QYTCWABQEp+YjnEjS323JxnFHomgddwNYLKL/c onu4NsfZWlLbQjVFY/TyyFKeqJtjAWgWDg2WEFkWH3D2ItH4vVgjjMUbkDmGC4Ih JDGtBV0ai/CKfFWM7r7EnhVMbRTw7jzouo1yo8Lse65A6tlNUeYUxsPetqZ7eqc9 bkD0dxAC8gUgwr6lKTYh0X5ZpCseEowlWSXbM44JH4PPqWcbBXb10uzgi/gg3Tz3 3JAlNsdXGpX2uElv7m78yP+ntgUCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRyBN4H hahq1mgwj6YWXmjuTBXB2jAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDgzMS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qIUwDQYJKoZIhvcNAQELBQADggEBAHmkMWlxtvU77of38jkc/PraKaxF5Psoyznb Er8fR2BF9cH7Su7REdrU7b+Jqud8BlSABoc3DDZvgg7yxzEHFp67PR98D+KKM2Y+ DxIksDO2wJysMn8qVI2YJhZUso28TUa0Q541lx0QAr5XaEEaTwmlfOEXkg3Q0wVC MsjfpcYC2ZeJdUg9SROI5ELjbdX9GeMEGjp8/RuP3ilZnIlhrhGPAUa6sZPpynzR Wb3ClQdceN5IS7FEfSy8/kD1PjVWTwoGwt+PHSU45RD+MXKgibNbbLFW+XpmLUw/ aEyVfH8CoKcf9Ct5A0H39uUdiLyWVrEq2VP+BfbxBXLab5iV/Bo= -----END CERTIFICATE-----Generated at Sat Mar 28 11:44:09 2026 by rpki-client