$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144841.roa File: AS144841.roa (raw, json) Hash identifier: Wv1FLkWaQxPZ8nborjORws+pmMbAp5flMEHoyd9mr3U= Subject key identifier: 63:27:D3:6B:88:1E:D7:53:60:6D:10:C8:91:F5:F5:32:61:14:01:7C Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 5834320FE76F39E4D6EA5FABE8DE0782FB65ED12 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144841.roa Signing time: Wed 04 Mar 2026 06:20:58 +0000 ROA not before: Wed 04 Mar 2026 06:15:58 +0000 ROA not after: Wed 03 Mar 2027 06:20:58 +0000 asID: 144841 IP address blocks: 240a:a88f::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:34:32:0f:e7:6f:39:e4:d6:ea:5f:ab:e8:de:07:82:fb:65:ed:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:15:58 2026 GMT Not After : Mar 3 06:20:58 2027 GMT Subject: CN=6327D36B881ED753606D10C891F5F5326114017C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:2a:3d:f8:b5:be:60:08:39:96:3e:76:06:24: e1:17:3e:0c:f7:4d:e5:1d:f9:69:72:97:77:3a:d0: f7:b7:ab:a4:aa:bb:4c:98:64:31:ac:24:fb:7f:1c: 4f:1b:09:c4:a7:f0:55:d5:46:d7:bb:aa:37:ef:32: e4:66:93:03:ac:aa:f3:bf:8f:a5:32:90:08:4c:15: e0:67:e4:f8:8d:10:32:6c:d5:28:6f:9a:ac:2b:6c: 38:22:e6:59:61:7c:68:cb:77:21:f7:86:bf:4f:6b: 76:1b:ff:11:89:85:88:27:0e:7c:a9:9d:67:77:b4: 9a:69:7f:4d:ef:0b:0a:69:b6:23:10:f7:63:a9:fc: de:45:f0:1b:f7:c4:e3:f8:60:4a:6f:7e:65:9b:d4: 61:81:5d:67:76:54:e7:d9:92:e8:4e:ea:62:c0:e4: 10:e2:ed:1e:8d:a1:3a:09:7f:98:03:1c:c1:65:10: 85:c8:f8:cb:6d:1b:28:e8:c2:3a:8e:fa:f9:1e:4c: 32:cd:11:1b:95:96:6d:98:1d:38:7c:76:36:70:9a: a4:50:c6:92:f0:85:e8:e4:65:a3:8b:2e:ac:fa:82: d8:a8:0a:bc:20:b7:ef:b2:c9:58:5c:55:a8:81:09: 47:36:f5:67:c7:8f:7c:b6:04:24:d5:28:82:26:2a: f3:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:27:D3:6B:88:1E:D7:53:60:6D:10:C8:91:F5:F5:32:61:14:01:7C X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144841.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a88f::/32 Signature Algorithm: sha256WithRSAEncryption 63:b4:5e:6d:89:64:1a:de:81:f7:72:2f:90:b9:90:10:94:02: 29:de:5f:3a:99:d8:2a:20:85:58:7a:c1:52:64:48:eb:dd:85: c3:80:10:fd:84:40:60:f9:67:09:52:b7:17:fb:aa:73:53:9e: 79:44:83:2c:5a:f2:aa:b9:75:ce:ae:9e:e0:4a:96:80:e6:1e: 2d:51:47:19:ec:38:43:7d:8f:8f:96:5d:55:29:93:30:4b:27: ea:57:8e:3b:3a:d2:84:c7:3f:14:bd:71:4a:cc:89:8e:25:e8: dc:a3:1a:cd:5b:e5:ab:9e:3e:47:c8:e3:68:d0:40:dc:83:cd: b2:23:a6:a6:cb:8c:ea:4f:64:85:b1:8d:de:ef:20:1f:e1:87: 9a:90:4b:18:95:c5:c5:4b:58:98:79:f0:16:ba:08:e1:90:09: 79:97:f2:14:6f:b4:eb:da:5c:53:6c:ea:95:53:1e:0b:8d:19: 75:67:ef:2b:5f:95:8b:74:ba:d1:80:29:69:4d:65:75:51:8e: 08:38:a0:22:e4:2a:f0:0b:03:47:08:4d:45:dc:ce:de:c7:36: ff:0c:31:d1:cd:d7:69:c0:c7:d5:0a:8d:fe:78:d4:18:9b:51: fe:15:17:e4:b9:c3:32:4f:bd:ad:13:83:dd:1e:76:17:6b:13: 79:80:e3:44 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUWDQyD+dvOeTW6l+r6N4Hgvtl7RIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTU1OFoX DTI3MDMwMzA2MjA1OFowMzExMC8GA1UEAxMoNjMyN0QzNkI4ODFFRDc1MzYwNkQx MEM4OTFGNUY1MzI2MTE0MDE3QzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAPEqPfi1vmAIOZY+dgYk4Rc+DPdN5R35aXKXdzrQ97erpKq7TJhkMawk+38c TxsJxKfwVdVG17uqN+8y5GaTA6yq87+PpTKQCEwV4Gfk+I0QMmzVKG+arCtsOCLm WWF8aMt3IfeGv09rdhv/EYmFiCcOfKmdZ3e0mml/Te8LCmm2IxD3Y6n83kXwG/fE 4/hgSm9+ZZvUYYFdZ3ZU59mS6E7qYsDkEOLtHo2hOgl/mAMcwWUQhcj4y20bKOjC Oo76+R5MMs0RG5WWbZgdOHx2NnCapFDGkvCF6ORlo4surPqC2KgKvCC377LJWFxV qIEJRzb1Z8ePfLYEJNUogiYq8wMCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRjJ9Nr iB7XU2BtEMiR9fUyYRQBfDAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDg0MS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qI8wDQYJKoZIhvcNAQELBQADggEBAGO0Xm2JZBregfdyL5C5kBCUAineXzqZ2Cog hVh6wVJkSOvdhcOAEP2EQGD5ZwlStxf7qnNTnnlEgyxa8qq5dc6unuBKloDmHi1R RxnsOEN9j4+WXVUpkzBLJ+pXjjs60oTHPxS9cUrMiY4l6NyjGs1b5auePkfI42jQ QNyDzbIjpqbLjOpPZIWxjd7vIB/hh5qQSxiVxcVLWJh58Ba6COGQCXmX8hRvtOva XFNs6pVTHguNGXVn7ytflYt0utGAKWlNZXVRjgg4oCLkKvALA0cITUXczt7HNv8M MdHN12nAx9UKjf541BibUf4VF+S5wzJPva0Tg90edhdrE3mA40Q= -----END CERTIFICATE-----Generated at Sat Mar 28 15:53:13 2026 by rpki-client