$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144844.roa File: AS144844.roa (raw, json) Hash identifier: WXSfzg2B7qPGyTdAoaFBjiL0Wj9Mqni0KDcwxGskslU= Subject key identifier: 67:88:FA:09:A3:73:B8:81:03:91:FF:F0:7D:37:17:65:93:25:6C:99 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 0C7CF0488A06EAAFE4A9AC634DEEA41EBECCE974 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144844.roa Signing time: Wed 04 Mar 2026 06:21:41 +0000 ROA not before: Wed 04 Mar 2026 06:16:41 +0000 ROA not after: Wed 03 Mar 2027 06:21:41 +0000 asID: 144844 IP address blocks: 240a:a892::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:7c:f0:48:8a:06:ea:af:e4:a9:ac:63:4d:ee:a4:1e:be:cc:e9:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:16:41 2026 GMT Not After : Mar 3 06:21:41 2027 GMT Subject: CN=6788FA09A373B8810391FFF07D37176593256C99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:fe:f0:8c:da:fa:ff:5a:01:07:d7:1f:cc:d5: f3:df:b0:f6:43:8e:fd:ef:49:6b:03:25:0b:32:fd: 64:ed:94:f4:0b:26:10:f6:20:88:e8:a8:5f:44:83: 03:20:fd:1d:bc:05:81:08:43:cf:1f:6e:34:65:67: 73:1c:9e:39:c5:f5:45:32:5b:28:b5:6c:bd:c1:28: 55:e0:ae:1d:dd:b2:47:e0:d2:6b:3e:66:25:85:20: 81:0d:8c:bf:5b:b8:96:e9:4e:ac:80:8c:7c:98:ca: 4d:39:45:6a:f1:8c:44:3e:39:2b:d8:0f:92:77:34: e9:f0:27:5f:17:5a:81:c5:4e:b1:55:72:48:cd:61: f5:48:15:98:f0:12:d2:f4:7d:f8:1d:c0:d8:5e:e0: 49:10:a3:e9:24:9c:c2:32:46:22:5d:99:09:b1:9f: 34:7c:b9:db:ac:b0:73:8f:8c:ba:a7:5d:66:41:4f: 9b:ee:fe:2f:b0:04:eb:96:3b:60:94:07:69:25:68: 42:18:bd:4c:e9:85:e4:0b:40:6c:60:cb:ae:e4:cf: 41:a0:6c:f4:6f:45:e3:10:a6:00:ef:43:af:1b:9a: a4:e8:0c:b6:12:24:d5:db:39:aa:b9:09:d4:a1:5d: 63:b3:b6:11:74:2b:af:31:4e:83:b0:09:82:1f:a2: 5a:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:88:FA:09:A3:73:B8:81:03:91:FF:F0:7D:37:17:65:93:25:6C:99 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144844.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a892::/32 Signature Algorithm: sha256WithRSAEncryption b4:23:fb:72:90:4e:61:61:3b:0d:e7:ad:ab:cf:17:cb:9b:90: 8e:08:33:0c:a1:fc:c7:f6:b9:e9:50:95:18:ef:76:83:25:18: 48:91:a8:36:11:24:da:8a:cd:3e:9b:82:8d:11:b6:cb:f8:c6: ac:83:40:55:03:9a:07:2e:03:b9:58:0f:37:ba:24:6a:62:9c: 27:9c:30:49:ed:6c:d5:40:54:d3:93:e6:dd:2c:da:c2:50:f7: 37:91:2e:e2:ea:44:a1:8f:03:1a:40:9d:c8:f9:79:92:de:5d: bc:d5:f6:31:7e:f9:a0:3e:92:18:98:57:d0:00:38:32:47:b4: 7f:75:c3:5a:73:11:48:70:b6:c4:21:68:37:e8:2f:3b:20:2a: ee:84:85:df:51:83:9d:3e:09:41:91:b9:fc:32:5f:1a:85:96: 23:5a:b2:0d:ab:9b:4d:80:04:0c:5f:8e:22:49:45:a7:f1:23: 00:06:ae:9a:93:41:9d:b1:d0:d2:b5:45:66:e9:bb:5a:56:cf: ef:e9:56:14:5a:52:58:22:e9:d4:d0:85:f5:3d:58:bb:c5:c2: 6f:b6:48:30:0c:32:ae:55:58:e2:ca:f6:b3:a5:52:e0:b3:8e: 65:e7:54:cd:07:af:b8:89:18:50:f6:30:f2:0b:62:fb:94:f7: 92:ca:57:c8 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUDHzwSIoG6q/kqaxjTe6kHr7M6XQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTY0MVoX DTI3MDMwMzA2MjE0MVowMzExMC8GA1UEAxMoNjc4OEZBMDlBMzczQjg4MTAzOTFG RkYwN0QzNzE3NjU5MzI1NkM5OTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAIz+8Iza+v9aAQfXH8zV89+w9kOO/e9JawMlCzL9ZO2U9AsmEPYgiOioX0SD AyD9HbwFgQhDzx9uNGVncxyeOcX1RTJbKLVsvcEoVeCuHd2yR+DSaz5mJYUggQ2M v1u4lulOrICMfJjKTTlFavGMRD45K9gPknc06fAnXxdagcVOsVVySM1h9UgVmPAS 0vR9+B3A2F7gSRCj6SScwjJGIl2ZCbGfNHy526ywc4+MuqddZkFPm+7+L7AE65Y7 YJQHaSVoQhi9TOmF5AtAbGDLruTPQaBs9G9F4xCmAO9DrxuapOgMthIk1ds5qrkJ 1KFdY7O2EXQrrzFOg7AJgh+iWqUCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRniPoJ o3O4gQOR//B9NxdlkyVsmTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDg0NC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qJIwDQYJKoZIhvcNAQELBQADggEBALQj+3KQTmFhOw3nravPF8ubkI4IMwyh/Mf2 uelQlRjvdoMlGEiRqDYRJNqKzT6bgo0Rtsv4xqyDQFUDmgcuA7lYDze6JGpinCec MEntbNVAVNOT5t0s2sJQ9zeRLuLqRKGPAxpAncj5eZLeXbzV9jF++aA+khiYV9AA ODJHtH91w1pzEUhwtsQhaDfoLzsgKu6Ehd9Rg50+CUGRufwyXxqFliNasg2rm02A BAxfjiJJRafxIwAGrpqTQZ2x0NK1RWbpu1pWz+/pVhRaUlgi6dTQhfU9WLvFwm+2 SDAMMq5VWOLK9rOlUuCzjmXnVM0Hr7iJGFD2MPILYvuU95LKV8g= -----END CERTIFICATE-----Generated at Sat Mar 28 11:42:00 2026 by rpki-client