$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144866.roa File: AS144866.roa (raw, json) Hash identifier: cSmoYX12lbDA10jN2GlYkpkog9/AMWA4veD+tT0RO0M= Subject key identifier: 28:04:5B:5C:61:DE:6A:BF:F4:C8:F8:CF:CF:A2:A9:40:2E:83:3A:D0 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 6C81E3416DB9DBCC9FCA0E7378E6F306E0906DED Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144866.roa Signing time: Wed 04 Mar 2026 06:20:31 +0000 ROA not before: Wed 04 Mar 2026 06:15:31 +0000 ROA not after: Wed 03 Mar 2027 06:20:31 +0000 asID: 144866 IP address blocks: 240a:a8a8::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:81:e3:41:6d:b9:db:cc:9f:ca:0e:73:78:e6:f3:06:e0:90:6d:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:15:31 2026 GMT Not After : Mar 3 06:20:31 2027 GMT Subject: CN=28045B5C61DE6ABFF4C8F8CFCFA2A9402E833AD0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:2f:ad:1b:f9:4a:13:e1:6c:bd:be:7a:95:59: da:35:d6:18:10:ba:d8:fc:31:c2:51:23:b7:b1:b5: 31:d8:2c:e7:4e:08:0b:c1:2e:a2:f8:17:b6:42:cf: de:38:8f:2b:33:8a:db:57:56:6b:44:da:96:ff:ac: 12:72:71:9f:07:6b:6f:bd:66:77:90:16:88:34:0f: fc:9e:52:cd:a6:5e:83:94:aa:c5:4a:48:68:7d:af: 8c:e1:fe:17:55:28:33:33:51:f2:ca:5b:75:a3:3f: cc:e9:21:d0:ea:f3:5c:2b:97:cf:ea:07:09:0b:be: 8b:09:de:7f:2d:7c:99:d6:da:64:b7:dd:d1:6b:d2: b8:3a:f8:8a:0c:65:83:2b:9d:f0:a5:ca:36:61:10: ad:98:b7:cd:4d:46:85:ec:f4:22:45:01:24:c5:ec: e8:ef:b4:97:a3:bb:f2:20:3e:a7:4a:8f:e2:33:a9: 0f:c3:1e:90:3b:ad:44:28:d6:e6:b0:09:52:14:32: da:90:e6:51:51:f2:86:75:5e:c9:5a:b9:19:e7:ff: 87:d5:e8:55:3f:1d:0c:7e:0b:dd:dc:ba:64:ac:fa: 37:19:93:5f:6f:a4:e6:67:77:cc:6d:73:9a:65:89: 6f:9e:d7:89:46:73:6e:e4:1c:03:f6:dd:aa:0e:0c: 0d:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:04:5B:5C:61:DE:6A:BF:F4:C8:F8:CF:CF:A2:A9:40:2E:83:3A:D0 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144866.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a8a8::/32 Signature Algorithm: sha256WithRSAEncryption c6:70:26:6d:1c:60:1a:dc:73:73:6a:97:89:cc:1e:3f:6c:e2: ce:9a:98:a1:39:68:a1:ef:cd:12:96:f2:0b:85:99:eb:3c:8d: 7a:8a:77:87:c2:db:4a:76:64:3c:22:a3:a2:5e:18:38:e5:1c: bc:08:8d:9c:fa:9e:64:c1:df:13:73:2b:da:1a:cc:09:74:c1: 5e:45:14:da:d8:92:75:f4:e7:de:ba:ca:12:9d:5e:76:d8:8c: c1:30:95:9a:a4:a1:bd:cf:1f:35:aa:c5:0d:5a:67:41:dc:7a: af:4b:e0:a1:4a:c3:bf:dc:d0:8f:32:8e:1c:0e:e0:62:1d:65: a5:69:fb:6e:bf:86:0b:8b:5c:1a:d0:a9:01:e7:ff:05:74:70: 96:12:bc:fc:c2:1d:78:5a:1e:a6:a0:d9:47:9c:19:ec:23:74: c0:07:75:d6:40:e3:c0:71:1e:89:55:c0:e7:33:4f:de:27:50: 38:38:99:c1:a8:37:50:cd:04:69:27:b5:92:57:ff:bd:c3:f9: 5f:0a:78:48:6e:e3:4a:32:7a:b3:b0:40:3f:ff:2d:a4:f5:24: 2d:ee:c1:e4:4b:d4:0a:e5:57:e0:07:61:44:90:8c:d6:38:e2: 7e:eb:10:bb:6e:27:df:22:5a:a1:56:a9:56:c1:9e:40:f5:92: dd:fb:e8:45 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUbIHjQW2528yfyg5zeObzBuCQbe0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTUzMVoX DTI3MDMwMzA2MjAzMVowMzExMC8GA1UEAxMoMjgwNDVCNUM2MURFNkFCRkY0QzhG OENGQ0ZBMkE5NDAyRTgzM0FEMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKgvrRv5ShPhbL2+epVZ2jXWGBC62PwxwlEjt7G1Mdgs504IC8EuovgXtkLP 3jiPKzOK21dWa0Talv+sEnJxnwdrb71md5AWiDQP/J5SzaZeg5SqxUpIaH2vjOH+ F1UoMzNR8spbdaM/zOkh0OrzXCuXz+oHCQu+iwnefy18mdbaZLfd0WvSuDr4igxl gyud8KXKNmEQrZi3zU1Ghez0IkUBJMXs6O+0l6O78iA+p0qP4jOpD8MekDutRCjW 5rAJUhQy2pDmUVHyhnVeyVq5Gef/h9XoVT8dDH4L3dy6ZKz6NxmTX2+k5md3zG1z mmWJb57XiUZzbuQcA/bdqg4MDZkCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQoBFtc Yd5qv/TI+M/PoqlALoM60DAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDg2Ni5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qKgwDQYJKoZIhvcNAQELBQADggEBAMZwJm0cYBrcc3Nql4nMHj9s4s6amKE5aKHv zRKW8guFmes8jXqKd4fC20p2ZDwio6JeGDjlHLwIjZz6nmTB3xNzK9oazAl0wV5F FNrYknX05966yhKdXnbYjMEwlZqkob3PHzWqxQ1aZ0Hceq9L4KFKw7/c0I8yjhwO 4GIdZaVp+26/hguLXBrQqQHn/wV0cJYSvPzCHXhaHqag2UecGewjdMAHddZA48Bx HolVwOczT94nUDg4mcGoN1DNBGkntZJX/73D+V8KeEhu40oyerOwQD//LaT1JC3u weRL1ArlV+AHYUSQjNY44n7rELtuJ98iWqFWqVbBnkD1kt376EU= -----END CERTIFICATE-----Generated at Sat Mar 28 11:43:45 2026 by rpki-client