$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144855.roa File: AS144855.roa (raw, json) Hash identifier: bgkiFX+MxRRJ6HwkRxxVZ+D7FJ6jwNhjaPhur7n6waU= Subject key identifier: 3F:63:A3:CF:8B:75:98:DB:DC:14:D2:07:07:BA:C6:C3:58:4D:95:CD Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 1B65138AA651478377563270329EA97D9A3F3A42 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144855.roa Signing time: Wed 04 Mar 2026 06:19:26 +0000 ROA not before: Wed 04 Mar 2026 06:14:26 +0000 ROA not after: Wed 03 Mar 2027 06:19:26 +0000 asID: 144855 IP address blocks: 240a:a89d::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:65:13:8a:a6:51:47:83:77:56:32:70:32:9e:a9:7d:9a:3f:3a:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:14:26 2026 GMT Not After : Mar 3 06:19:26 2027 GMT Subject: CN=3F63A3CF8B7598DBDC14D20707BAC6C3584D95CD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:b5:48:70:4b:c6:74:df:74:75:58:80:97:c7: 45:bd:2c:7b:07:4f:36:0d:c0:ab:40:98:23:d2:f8: 0c:75:aa:14:0e:fe:d4:92:4d:fa:b3:26:d3:e1:9e: de:8d:7c:04:9e:dd:c2:70:36:43:f0:d9:78:3f:12: 7a:76:38:03:7a:4e:11:58:cb:1b:5e:db:65:1d:b2: 06:6d:05:6e:53:ab:32:7b:9a:8b:a5:dd:e2:13:6d: 76:ac:95:89:ac:4d:a6:45:c7:22:22:e9:03:08:d4: 48:84:2e:c5:04:64:04:d2:4d:fd:7b:5d:0b:ed:ec: 90:12:3c:b8:17:a6:b3:bd:c5:7a:ab:33:e9:82:f1: 31:26:2c:0c:b5:79:e7:31:3e:5a:ff:99:be:6d:bd: c2:5c:c1:fe:1a:88:03:be:37:ca:95:4b:36:c0:73: c0:20:1c:8a:5a:82:99:95:a0:51:63:08:0e:b2:e8: a4:68:5d:1b:ff:30:ae:28:06:20:a0:41:07:5a:bb: fe:f6:c8:53:4b:90:7b:68:9e:35:d5:49:59:62:f2: f3:b5:e7:1a:71:20:21:e1:cf:d1:cc:71:72:68:12: d9:dc:dc:4a:67:15:9d:96:9b:05:ab:f8:5d:c2:45: 61:2c:10:bb:85:62:66:41:f5:6d:6d:3f:b4:6d:8d: eb:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:63:A3:CF:8B:75:98:DB:DC:14:D2:07:07:BA:C6:C3:58:4D:95:CD X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144855.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a89d::/32 Signature Algorithm: sha256WithRSAEncryption d8:30:d8:a3:7c:2e:e3:f7:50:e2:40:26:05:af:3b:11:73:d8: 01:5e:32:e4:5a:3b:93:4f:a5:e9:9e:be:c7:36:ca:31:3d:b8: 0e:c4:37:26:e7:8b:8c:86:13:d5:30:2e:99:6a:9f:a4:bb:4a: 5c:56:33:14:ff:4c:d6:31:45:24:dc:c0:23:f6:15:1d:5a:c6: 1d:1d:1c:0a:d5:e3:02:77:d6:67:64:2d:ff:3e:90:80:a9:22: ee:bd:f7:4f:a1:bc:72:74:4f:26:c6:e8:dd:59:26:09:a6:11: a1:93:ee:3a:71:d3:80:b6:14:d4:d5:d2:ef:fc:ea:4f:60:43: 0a:a7:32:a0:25:28:5b:62:7a:a7:95:6b:4a:05:83:a5:18:4a: 3c:1f:15:63:84:66:2a:72:4b:19:5c:b8:ea:4b:ac:4e:cf:1c: 47:12:37:04:99:e1:6c:59:47:f1:f8:f7:09:b9:18:f7:ed:9a: 67:87:8d:2e:fa:51:63:55:40:dc:ca:df:49:50:32:46:01:42: 58:33:3e:0a:f7:dd:6f:19:04:4e:05:b6:e0:d1:44:68:6c:95: b8:8e:d3:4a:e4:7a:ba:aa:d9:91:fd:d6:c2:82:7a:af:fa:e0: 38:37:08:9f:08:26:bd:e8:45:c5:df:e4:90:9e:ce:f4:d6:77: 0c:8c:a7:84 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUG2UTiqZRR4N3VjJwMp6pfZo/OkIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTQyNloX DTI3MDMwMzA2MTkyNlowMzExMC8GA1UEAxMoM0Y2M0EzQ0Y4Qjc1OThEQkRDMTRE MjA3MDdCQUM2QzM1ODREOTVDRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK+1SHBLxnTfdHVYgJfHRb0sewdPNg3Aq0CYI9L4DHWqFA7+1JJN+rMm0+Ge 3o18BJ7dwnA2Q/DZeD8SenY4A3pOEVjLG17bZR2yBm0FblOrMnuai6Xd4hNtdqyV iaxNpkXHIiLpAwjUSIQuxQRkBNJN/XtdC+3skBI8uBems73Feqsz6YLxMSYsDLV5 5zE+Wv+Zvm29wlzB/hqIA743ypVLNsBzwCAcilqCmZWgUWMIDrLopGhdG/8wrigG IKBBB1q7/vbIU0uQe2ieNdVJWWLy87XnGnEgIeHP0cxxcmgS2dzcSmcVnZabBav4 XcJFYSwQu4ViZkH1bW0/tG2N628CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQ/Y6PP i3WY29wU0gcHusbDWE2VzTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDg1NS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qJ0wDQYJKoZIhvcNAQELBQADggEBANgw2KN8LuP3UOJAJgWvOxFz2AFeMuRaO5NP pemevsc2yjE9uA7ENybni4yGE9UwLplqn6S7SlxWMxT/TNYxRSTcwCP2FR1axh0d HArV4wJ31mdkLf8+kICpIu6990+hvHJ0TybG6N1ZJgmmEaGT7jpx04C2FNTV0u/8 6k9gQwqnMqAlKFtieqeVa0oFg6UYSjwfFWOEZipySxlcuOpLrE7PHEcSNwSZ4WxZ R/H49wm5GPftmmeHjS76UWNVQNzK30lQMkYBQlgzPgr33W8ZBE4FtuDRRGhslbiO 00rkerqq2ZH91sKCeq/64Dg3CJ8IJr3oRcXf5JCezvTWdwyMp4Q= -----END CERTIFICATE-----Generated at Sat Mar 28 11:43:12 2026 by rpki-client