$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144850.roa File: AS144850.roa (raw, json) Hash identifier: M7jUWXZzkJABYxvN27mP5WzR0J8ExdAapvbY0iHTy68= Subject key identifier: 6A:FB:F7:D3:7F:BB:01:D4:B3:B1:4C:39:87:35:4A:29:18:17:09:EE Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 7171EE894DF1469FA45A0AEFCDC57AF00B7C1A86 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144850.roa Signing time: Wed 04 Mar 2026 06:20:44 +0000 ROA not before: Wed 04 Mar 2026 06:15:44 +0000 ROA not after: Wed 03 Mar 2027 06:20:44 +0000 asID: 144850 IP address blocks: 240a:a898::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:71:ee:89:4d:f1:46:9f:a4:5a:0a:ef:cd:c5:7a:f0:0b:7c:1a:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:15:44 2026 GMT Not After : Mar 3 06:20:44 2027 GMT Subject: CN=6AFBF7D37FBB01D4B3B14C3987354A29181709EE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:d0:43:23:ae:a6:bc:4a:eb:28:5b:ac:f0:b8: 38:0f:f9:9c:20:45:52:8f:9c:f6:55:93:c2:94:f9: 81:6a:91:29:5b:0c:5d:02:05:a9:3f:65:7c:68:44: 94:04:a2:c9:61:fe:02:6a:b4:d8:b1:f6:3d:03:cb: f5:c1:fd:8c:72:9e:39:64:52:c9:e7:07:71:52:58: 90:c6:f4:14:2f:09:1b:c8:89:a9:08:36:6c:36:3e: a3:6a:03:70:2e:c2:c8:db:bd:8e:4a:99:0a:29:1a: 52:d9:3d:64:97:ad:a8:1c:bc:5c:48:66:37:49:83: 2b:ed:da:63:c5:b9:22:5b:9c:a1:f9:a0:15:f2:03: 6f:f7:8e:3d:0b:86:98:9c:c8:be:c5:42:3a:0f:3a: b6:de:b3:1f:38:53:7f:bf:08:bd:31:6a:fb:bb:31: 62:61:aa:1c:50:ae:6e:05:d9:f9:fc:23:a8:11:99: 14:7d:ec:db:fd:90:21:5e:ce:31:c4:6c:86:4f:c2: 2f:9e:e4:71:79:04:e4:61:18:76:c2:7b:ef:8e:ed: 2e:80:92:b3:d0:fd:cd:d1:7e:5d:44:a0:98:8a:0f: f1:09:0c:f0:62:dc:62:e4:cb:83:83:48:27:ad:0e: e4:7e:ca:0f:9e:2a:b9:d7:d3:7f:10:64:9f:86:c5: 1e:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:FB:F7:D3:7F:BB:01:D4:B3:B1:4C:39:87:35:4A:29:18:17:09:EE X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144850.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a898::/32 Signature Algorithm: sha256WithRSAEncryption 22:71:b2:2e:61:91:2a:51:ff:7b:3a:f8:56:ad:5f:5f:ce:fb: 46:6c:58:20:0b:a3:8b:1c:1d:5a:2c:db:71:be:dd:8a:6b:e9: a8:17:d5:1a:f9:87:05:30:e9:f7:4d:dc:60:14:26:41:34:34: 0d:d3:76:8c:18:cc:1b:91:80:69:f3:eb:36:a1:28:f4:2e:fd: 65:2a:5d:75:5f:7d:76:0e:a1:74:4d:43:aa:65:b8:4b:61:8a: df:98:53:f7:00:c2:4a:59:1e:93:56:38:c4:1e:8a:cc:7a:98: 45:99:62:6a:50:a6:83:a5:b6:ce:72:98:9c:4e:a4:0e:b8:c3: 02:fb:c6:c5:14:42:1f:ce:6a:07:92:d3:72:66:63:90:a1:96: 74:e8:cc:6f:2c:c1:41:01:1e:1c:19:c1:e3:3b:4d:82:f1:71: 6e:d1:61:4b:42:5b:a4:36:a5:64:4b:25:48:2e:06:3c:d2:b4: a4:26:0f:3c:e5:13:90:1a:d9:83:2a:5e:4e:6a:46:87:a0:85: a3:a1:23:59:e1:d4:6f:7f:c3:8c:df:31:f7:2c:cb:75:7e:b0: a6:56:74:3f:4e:08:e4:43:66:75:bf:34:a3:c4:2d:12:eb:1d: 11:28:14:db:65:89:9e:35:50:68:37:92:9f:a7:5c:ed:93:ba: cb:73:b2:a0 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUcXHuiU3xRp+kWgrvzcV68At8GoYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTU0NFoX DTI3MDMwMzA2MjA0NFowMzExMC8GA1UEAxMoNkFGQkY3RDM3RkJCMDFENEIzQjE0 QzM5ODczNTRBMjkxODE3MDlFRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMrQQyOuprxK6yhbrPC4OA/5nCBFUo+c9lWTwpT5gWqRKVsMXQIFqT9lfGhE lASiyWH+Amq02LH2PQPL9cH9jHKeOWRSyecHcVJYkMb0FC8JG8iJqQg2bDY+o2oD cC7CyNu9jkqZCikaUtk9ZJetqBy8XEhmN0mDK+3aY8W5IlucofmgFfIDb/eOPQuG mJzIvsVCOg86tt6zHzhTf78IvTFq+7sxYmGqHFCubgXZ+fwjqBGZFH3s2/2QIV7O McRshk/CL57kcXkE5GEYdsJ7747tLoCSs9D9zdF+XUSgmIoP8QkM8GLcYuTLg4NI J60O5H7KD54qudfTfxBkn4bFHmECAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRq+/fT f7sB1LOxTDmHNUopGBcJ7jAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDg1MC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qJgwDQYJKoZIhvcNAQELBQADggEBACJxsi5hkSpR/3s6+FatX1/O+0ZsWCALo4sc HVos23G+3Ypr6agX1Rr5hwUw6fdN3GAUJkE0NA3TdowYzBuRgGnz6zahKPQu/WUq XXVffXYOoXRNQ6pluEthit+YU/cAwkpZHpNWOMQeisx6mEWZYmpQpoOlts5ymJxO pA64wwL7xsUUQh/OageS03JmY5ChlnTozG8swUEBHhwZweM7TYLxcW7RYUtCW6Q2 pWRLJUguBjzStKQmDzzlE5Aa2YMqXk5qRoeghaOhI1nh1G9/w4zfMfcsy3V+sKZW dD9OCORDZnW/NKPELRLrHREoFNtliZ41UGg3kp+nXO2TustzsqA= -----END CERTIFICATE-----Generated at Sat Mar 28 11:41:49 2026 by rpki-client