$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144842.roa File: AS144842.roa (raw, json) Hash identifier: AilUP9soAEeYVusOTpH7+f+qW+kwys/VVyHwbRkFomI= Subject key identifier: 7F:EA:55:EE:AB:AA:66:9F:1D:61:5D:94:39:8B:EC:E2:3E:E6:BA:D6 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 45C31C773C64FF0A4EC7CD222864415A13514374 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144842.roa Signing time: Wed 04 Mar 2026 06:21:34 +0000 ROA not before: Wed 04 Mar 2026 06:16:34 +0000 ROA not after: Wed 03 Mar 2027 06:21:34 +0000 asID: 144842 IP address blocks: 240a:a890::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:c3:1c:77:3c:64:ff:0a:4e:c7:cd:22:28:64:41:5a:13:51:43:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:16:34 2026 GMT Not After : Mar 3 06:21:34 2027 GMT Subject: CN=7FEA55EEABAA669F1D615D94398BECE23EE6BAD6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:f2:a9:cd:18:ab:d1:6f:84:12:9d:20:93:7d: 63:ad:a4:42:35:e5:d6:6d:87:91:28:e6:98:ec:bf: 95:33:51:38:ab:37:f3:cc:f9:75:49:09:fc:e9:8c: 90:2c:96:66:b7:74:e5:4b:16:1a:a9:7f:77:1e:0b: d1:e5:29:43:93:2d:ce:83:ec:bb:0d:dd:b5:5e:cf: b8:8d:81:78:f8:80:43:db:ae:99:c8:dd:67:8a:ca: 4b:9f:00:f5:a0:74:ea:0d:46:64:f2:b0:a2:9f:3c: 74:71:82:ba:5e:66:7d:ff:b9:55:37:f2:c6:ba:94: b3:a5:74:31:90:32:e2:a5:63:52:b0:3a:4f:d4:21: ce:a3:82:85:3a:04:c8:94:80:13:ad:89:df:e5:cf: ca:04:e9:e4:85:9c:60:07:8a:f3:4c:00:e9:38:5f: 55:b3:17:f0:f0:a1:23:bf:33:6f:05:dc:2a:01:b1: 41:b2:58:1a:ec:b3:ce:af:f7:45:f8:a8:a0:53:95: 18:f8:fe:12:ad:22:35:54:4c:3d:df:ac:91:37:d4: 80:8b:b9:d6:af:3b:68:69:7a:c8:36:56:02:a0:cf: c6:04:44:dd:04:9e:a5:23:e5:be:ea:a3:b3:8b:7a: 07:76:92:b7:39:95:8a:39:fe:44:96:47:57:f5:a7: 74:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:EA:55:EE:AB:AA:66:9F:1D:61:5D:94:39:8B:EC:E2:3E:E6:BA:D6 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144842.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a890::/32 Signature Algorithm: sha256WithRSAEncryption 1c:20:76:dc:50:53:d0:8a:67:43:b5:d2:ae:ef:e6:82:22:e8: 6b:00:d0:37:07:63:25:74:56:26:15:7f:c5:17:c5:72:ae:61: 3d:c1:8f:1d:b7:4e:e1:5c:3e:80:c5:88:84:6f:1b:04:f7:4c: 83:95:bc:18:32:f1:9e:6f:1d:39:4b:b6:2e:ef:23:ad:11:84: 78:bf:90:58:e6:99:d9:fd:23:71:b8:49:7e:12:fb:d2:1d:3d: 21:7d:65:cf:58:00:ab:1b:b3:13:2a:b9:bf:b0:be:77:ea:b4: 67:fb:a4:e6:37:4d:cc:ea:a6:de:cc:c0:a8:a9:29:0d:1a:f1: f8:2c:d1:6a:07:84:8b:ef:ad:c3:c3:d9:e8:88:70:ec:40:d9: 1e:da:01:f0:cd:07:fe:53:cd:f9:91:a1:c6:84:7d:2c:f9:62: 2f:d6:e3:23:ca:69:50:d2:d6:bb:08:e6:e9:f0:32:6a:e5:26: 05:e5:44:ab:26:b4:af:d3:d6:75:ef:49:da:f2:56:b9:97:ea: d7:2a:4a:f0:3c:e9:12:d3:62:1a:c0:cb:7c:f0:12:af:46:fe: f0:8d:05:f3:e1:df:d3:8d:13:8f:01:06:2d:93:0a:2f:5d:b0: ab:81:00:c0:d4:52:12:77:71:33:0b:1b:77:47:2c:46:a2:14: 8a:00:3d:db -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIURcMcdzxk/wpOx80iKGRBWhNRQ3QwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTYzNFoX DTI3MDMwMzA2MjEzNFowMzExMC8GA1UEAxMoN0ZFQTU1RUVBQkFBNjY5RjFENjE1 RDk0Mzk4QkVDRTIzRUU2QkFENjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANHyqc0Yq9FvhBKdIJN9Y62kQjXl1m2HkSjmmOy/lTNROKs388z5dUkJ/OmM kCyWZrd05UsWGql/dx4L0eUpQ5MtzoPsuw3dtV7PuI2BePiAQ9uumcjdZ4rKS58A 9aB06g1GZPKwop88dHGCul5mff+5VTfyxrqUs6V0MZAy4qVjUrA6T9QhzqOChToE yJSAE62J3+XPygTp5IWcYAeK80wA6ThfVbMX8PChI78zbwXcKgGxQbJYGuyzzq/3 RfiooFOVGPj+Eq0iNVRMPd+skTfUgIu51q87aGl6yDZWAqDPxgRE3QSepSPlvuqj s4t6B3aStzmVijn+RJZHV/WndI0CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBR/6lXu q6pmnx1hXZQ5i+ziPua61jAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDg0Mi5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qJAwDQYJKoZIhvcNAQELBQADggEBABwgdtxQU9CKZ0O10q7v5oIi6GsA0DcHYyV0 ViYVf8UXxXKuYT3Bjx23TuFcPoDFiIRvGwT3TIOVvBgy8Z5vHTlLti7vI60RhHi/ kFjmmdn9I3G4SX4S+9IdPSF9Zc9YAKsbsxMqub+wvnfqtGf7pOY3Tczqpt7MwKip KQ0a8fgs0WoHhIvvrcPD2eiIcOxA2R7aAfDNB/5TzfmRocaEfSz5Yi/W4yPKaVDS 1rsI5unwMmrlJgXlRKsmtK/T1nXvSdryVrmX6tcqSvA86RLTYhrAy3zwEq9G/vCN BfPh39ONE48BBi2TCi9dsKuBAMDUUhJ3cTMLG3dHLEaiFIoAPds= -----END CERTIFICATE-----Generated at Sat Mar 28 11:49:54 2026 by rpki-client