$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144869.roa File: AS144869.roa (raw, json) Hash identifier: pt6KtPt8KGTIe1nyetkHQe9wH9ae/upW0OsKizd73Jw= Subject key identifier: 5A:F5:51:F3:3E:C3:CC:CC:DE:28:4D:5F:B7:29:D3:C4:9B:4C:CC:D7 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 336DB9A23E7B4C8BFB663C73F7C6FF5072B69CC7 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144869.roa Signing time: Wed 04 Mar 2026 06:20:28 +0000 ROA not before: Wed 04 Mar 2026 06:15:28 +0000 ROA not after: Wed 03 Mar 2027 06:20:28 +0000 asID: 144869 IP address blocks: 240a:a8ab::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:6d:b9:a2:3e:7b:4c:8b:fb:66:3c:73:f7:c6:ff:50:72:b6:9c:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:15:28 2026 GMT Not After : Mar 3 06:20:28 2027 GMT Subject: CN=5AF551F33EC3CCCCDE284D5FB729D3C49B4CCCD7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:12:49:ec:c6:3b:41:23:5c:30:7f:53:fd:a6: 93:47:22:e7:5e:ac:b2:a9:dd:75:29:e2:60:e3:ca: d3:75:04:74:14:f1:c8:91:1a:35:85:fe:4a:08:32: 4f:aa:fb:27:77:02:62:11:62:28:26:8a:44:1f:f2: 4d:47:2b:f8:78:b6:a9:06:01:64:7b:07:ec:1e:97: 37:d1:22:a0:45:4e:4f:72:6b:55:e0:56:73:b5:37: 40:fc:74:65:49:69:af:1d:cd:52:ed:f7:ae:2f:58: 5a:95:89:bb:e3:4b:f4:fb:98:a4:31:6c:fb:54:ce: 88:f9:43:b1:9f:c9:81:3a:ff:1c:b8:7f:a7:20:38: 80:0c:7d:64:2c:1a:56:23:f1:cc:f7:39:03:e3:38: 61:ef:52:36:02:8f:cc:77:e7:29:3c:8b:6d:b5:50: 77:95:d1:37:75:1e:73:7c:1e:df:16:a5:28:6f:50: 0f:d1:68:32:9a:50:df:dd:4a:59:90:22:e0:c1:0a: 2c:82:03:37:a4:4c:fe:b2:e1:35:24:0c:84:ac:d3: 07:67:14:7f:0e:d0:00:0b:5d:33:9b:c4:ed:a1:3e: 7e:5c:de:35:65:c5:45:db:f9:a9:94:99:30:b6:9b: f2:e8:be:1a:81:6d:4c:4a:fb:b8:2c:82:86:81:86: 11:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:F5:51:F3:3E:C3:CC:CC:DE:28:4D:5F:B7:29:D3:C4:9B:4C:CC:D7 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144869.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a8ab::/32 Signature Algorithm: sha256WithRSAEncryption 2a:ce:b6:d2:48:ee:c0:4d:69:d4:61:68:d2:0e:b9:c3:08:5e: 05:a5:98:c3:94:be:55:48:f7:16:dd:41:20:21:7f:e0:26:97: cd:f3:92:86:db:fd:a2:0f:20:3a:95:a7:be:56:69:82:8a:76: 33:0a:2b:2a:96:f8:a8:3b:15:6b:22:40:a2:25:c9:ff:34:88: de:2d:be:68:85:fe:9c:9f:9f:7d:05:77:d3:13:97:00:c2:a3: af:e1:f8:14:69:7e:69:06:17:0d:35:f8:75:d2:3f:de:8b:19: 84:3d:5c:a9:8d:ef:c8:d3:97:ed:3f:ee:9e:b6:a0:7d:6d:56: cf:72:13:e7:85:3a:f5:a9:e9:3e:39:65:ed:86:f9:a6:0c:6e: 64:34:7f:4b:fb:4b:6c:ff:97:34:a0:3d:21:97:7b:3e:eb:b4: e7:59:8d:86:e7:a2:ef:0a:ad:ec:20:be:b9:03:15:20:aa:59: 74:f3:55:c9:01:43:91:58:3d:87:11:40:a0:48:0e:bd:7b:c6: e5:85:ed:ba:1b:c2:c2:15:e8:ac:ae:a5:27:20:65:03:1e:56: 17:9f:5c:bc:a7:69:7e:cf:8f:1e:73:cf:29:57:56:6c:a9:8a: bd:0e:f3:57:6f:15:cc:52:32:f1:e0:d0:6c:0b:ef:a9:e5:42: 57:13:9a:69 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUM225oj57TIv7Zjxz98b/UHK2nMcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTUyOFoX DTI3MDMwMzA2MjAyOFowMzExMC8GA1UEAxMoNUFGNTUxRjMzRUMzQ0NDQ0RFMjg0 RDVGQjcyOUQzQzQ5QjRDQ0NENzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMQSSezGO0EjXDB/U/2mk0ci516ssqnddSniYOPK03UEdBTxyJEaNYX+Sggy T6r7J3cCYhFiKCaKRB/yTUcr+Hi2qQYBZHsH7B6XN9EioEVOT3JrVeBWc7U3QPx0 ZUlprx3NUu33ri9YWpWJu+NL9PuYpDFs+1TOiPlDsZ/JgTr/HLh/pyA4gAx9ZCwa ViPxzPc5A+M4Ye9SNgKPzHfnKTyLbbVQd5XRN3Uec3we3xalKG9QD9FoMppQ391K WZAi4MEKLIIDN6RM/rLhNSQMhKzTB2cUfw7QAAtdM5vE7aE+flzeNWXFRdv5qZSZ MLab8ui+GoFtTEr7uCyChoGGEWECAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRa9VHz PsPMzN4oTV+3KdPEm0zM1zAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDg2OS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qKswDQYJKoZIhvcNAQELBQADggEBACrOttJI7sBNadRhaNIOucMIXgWlmMOUvlVI 9xbdQSAhf+Aml83zkobb/aIPIDqVp75WaYKKdjMKKyqW+Kg7FWsiQKIlyf80iN4t vmiF/pyfn30Fd9MTlwDCo6/h+BRpfmkGFw01+HXSP96LGYQ9XKmN78jTl+0/7p62 oH1tVs9yE+eFOvWp6T45Ze2G+aYMbmQ0f0v7S2z/lzSgPSGXez7rtOdZjYbnou8K rewgvrkDFSCqWXTzVckBQ5FYPYcRQKBIDr17xuWF7bobwsIV6KyupScgZQMeVhef XLynaX7Pjx5zzylXVmypir0O81dvFcxSMvHg0GwL76nlQlcTmmk= -----END CERTIFICATE-----Generated at Sat Mar 28 11:41:45 2026 by rpki-client