$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144835.roa File: AS144835.roa (raw, json) Hash identifier: wQ6qlnpVsWQOfr/s1/4iBX/UuXDkfYJg0CbNe2D9DC4= Subject key identifier: F3:1E:8C:8B:AE:83:EC:85:9B:4B:80:B7:D9:2C:7B:25:C7:16:E9:29 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 05D5A75E16734E5E9C9623542808A4AE7DC8D11B Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144835.roa Signing time: Wed 04 Mar 2026 06:22:27 +0000 ROA not before: Wed 04 Mar 2026 06:17:27 +0000 ROA not after: Wed 03 Mar 2027 06:22:27 +0000 asID: 144835 IP address blocks: 240a:a889::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:d5:a7:5e:16:73:4e:5e:9c:96:23:54:28:08:a4:ae:7d:c8:d1:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:17:27 2026 GMT Not After : Mar 3 06:22:27 2027 GMT Subject: CN=F31E8C8BAE83EC859B4B80B7D92C7B25C716E929 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:91:aa:a3:1f:27:7b:ad:70:12:12:65:ec:24: 72:8a:1b:02:39:04:1b:52:6b:1e:c6:53:ab:3a:bd: 69:91:c5:9b:7d:e7:3b:dd:cb:07:da:90:67:81:d0: b5:d9:ae:54:6f:ce:8f:db:a3:8b:c0:66:92:01:e3: 9a:3a:d2:f7:aa:12:e2:e7:23:05:c6:34:be:f7:e2: 96:05:da:f7:c3:aa:8b:d2:1b:bf:98:4b:92:a7:67: 50:95:cd:18:f6:e4:15:10:8f:aa:22:57:ea:d5:ec: af:df:f8:ff:73:b4:26:57:19:68:1c:8c:a0:a8:eb: f7:65:82:f8:e6:ca:24:2a:2e:b5:e3:0f:3a:63:75: 8c:ed:de:a3:b7:03:31:53:e5:7f:fe:5c:56:25:94: 57:2f:08:f7:f6:e5:c3:71:03:2d:b9:e0:96:82:18: 38:ce:3c:a5:70:77:a1:1b:63:07:4f:66:f0:de:a7: 24:3e:e6:78:ae:3f:01:a7:01:74:0b:72:c8:8f:18: 2e:6e:8f:4f:85:2b:03:c6:51:9e:42:06:12:f8:74: 37:09:7a:4a:d3:99:2e:a7:63:cc:f2:3f:b5:3d:d7: 26:5b:6b:af:b3:11:b7:67:84:f5:33:95:f3:e5:c1: bc:03:00:4b:b2:46:08:f2:98:05:8d:36:58:91:e0: 55:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:1E:8C:8B:AE:83:EC:85:9B:4B:80:B7:D9:2C:7B:25:C7:16:E9:29 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144835.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a889::/32 Signature Algorithm: sha256WithRSAEncryption 4e:65:c5:2a:5e:9b:a9:ee:54:55:6a:3a:9b:06:8b:e6:a9:44: 0b:2f:1e:40:39:0c:01:10:4d:46:02:ea:bd:c2:54:78:95:dd: e8:14:b7:d2:f9:d6:f3:1b:cf:06:8b:9b:f3:ab:3c:2a:20:f3: e4:e9:90:d8:c4:4c:f1:38:7a:38:74:8c:bc:2b:1a:db:07:dd: 5f:f8:86:ac:26:b2:98:a6:fe:be:f8:f3:59:42:5b:a4:99:98: 2e:e0:59:ba:4c:3a:a6:26:74:87:31:76:74:f3:e7:71:00:72: 01:cc:25:c2:21:2d:13:92:36:de:45:9a:1e:7d:a2:39:62:3f: 7b:b5:c8:d5:75:d5:f9:31:85:4a:61:a2:74:0c:7a:82:41:94: c3:f3:7f:69:1d:47:d8:58:66:cf:f8:92:92:76:4b:57:a6:9f: 1d:8c:5f:87:34:7b:5b:b3:ba:ad:d0:59:a9:05:55:66:0c:78: b2:fb:58:1a:df:27:ef:18:f1:ac:3a:eb:06:70:f3:15:30:1f: 32:a4:4f:f0:81:bc:2d:10:79:21:97:a5:4c:06:a1:11:ef:33: d4:e8:59:01:e9:72:23:b6:2c:0c:ff:15:6f:46:3f:6c:77:d7: 7a:61:d2:01:a9:90:54:b8:47:42:b4:f9:09:af:a5:c5:65:db: 0a:28:cd:39 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUBdWnXhZzTl6cliNUKAikrn3I0RswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTcyN1oX DTI3MDMwMzA2MjIyN1owMzExMC8GA1UEAxMoRjMxRThDOEJBRTgzRUM4NTlCNEI4 MEI3RDkyQzdCMjVDNzE2RTkyOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMuRqqMfJ3utcBISZewkcoobAjkEG1JrHsZTqzq9aZHFm33nO93LB9qQZ4HQ tdmuVG/Oj9uji8BmkgHjmjrS96oS4ucjBcY0vvfilgXa98Oqi9Ibv5hLkqdnUJXN GPbkFRCPqiJX6tXsr9/4/3O0JlcZaByMoKjr92WC+ObKJCouteMPOmN1jO3eo7cD MVPlf/5cViWUVy8I9/blw3EDLbngloIYOM48pXB3oRtjB09m8N6nJD7meK4/AacB dAtyyI8YLm6PT4UrA8ZRnkIGEvh0Nwl6StOZLqdjzPI/tT3XJltrr7MRt2eE9TOV 8+XBvAMAS7JGCPKYBY02WJHgVc8CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBTzHoyL roPshZtLgLfZLHslxxbpKTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDgzNS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qIkwDQYJKoZIhvcNAQELBQADggEBAE5lxSpem6nuVFVqOpsGi+apRAsvHkA5DAEQ TUYC6r3CVHiV3egUt9L51vMbzwaLm/OrPCog8+TpkNjETPE4ejh0jLwrGtsH3V/4 hqwmspim/r7481lCW6SZmC7gWbpMOqYmdIcxdnTz53EAcgHMJcIhLROSNt5Fmh59 ojliP3u1yNV11fkxhUphonQMeoJBlMPzf2kdR9hYZs/4kpJ2S1emnx2MX4c0e1uz uq3QWakFVWYMeLL7WBrfJ+8Y8aw66wZw8xUwHzKkT/CBvC0QeSGXpUwGoRHvM9To WQHpciO2LAz/FW9GP2x313ph0gGpkFS4R0K0+QmvpcVl2woozTk= -----END CERTIFICATE-----Generated at Sat Mar 28 11:41:38 2026 by rpki-client