$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144873.roa File: AS144873.roa (raw, json) Hash identifier: KHoL2VI/WF7yL8m47xaaqrvKh66S/rKmMBCwOas2Vzg= Subject key identifier: D2:F1:C6:18:88:ED:F3:CE:8D:62:BA:44:58:04:BE:3F:C3:56:01:41 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 450BFAA76E50EEED10991BD5A6F86F84EA7F1F1A Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144873.roa Signing time: Wed 04 Mar 2026 06:22:14 +0000 ROA not before: Wed 04 Mar 2026 06:17:14 +0000 ROA not after: Wed 03 Mar 2027 06:22:14 +0000 asID: 144873 IP address blocks: 240a:a8af::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:0b:fa:a7:6e:50:ee:ed:10:99:1b:d5:a6:f8:6f:84:ea:7f:1f:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:17:14 2026 GMT Not After : Mar 3 06:22:14 2027 GMT Subject: CN=D2F1C61888EDF3CE8D62BA445804BE3FC3560141 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:04:fa:8e:70:16:37:18:73:35:7d:98:a8:38: bf:76:ca:4a:3c:12:09:f2:3f:c7:6b:8c:aa:50:50: 3b:2f:fa:cd:27:01:d2:d2:1a:54:53:15:0f:03:75: 11:b1:b4:17:da:14:e9:39:20:64:7f:45:ef:2b:64: ea:b3:ae:7f:2e:1d:23:0b:f6:68:14:65:c8:f1:fc: 0f:e3:b6:75:d2:44:bc:f7:e4:97:e3:03:64:b5:2e: dc:ed:dc:84:db:31:05:d8:c1:91:47:45:e5:98:2f: e2:cb:ea:bc:6c:af:3d:0f:ad:f7:ff:2c:ca:0d:b8: 3c:8d:b6:c1:d1:7c:9e:a4:4f:db:85:e4:0c:e5:72: ac:ac:cc:a1:af:3a:b8:2c:65:69:c0:4b:46:e3:4b: 53:5b:76:b9:45:23:e2:d6:9b:8f:07:13:e4:4d:73: 0a:21:19:39:11:f3:e0:9a:4f:86:de:66:d3:ab:d1: 1e:da:60:ca:ba:0a:d3:fd:54:37:06:da:fd:7f:13: ed:d5:6f:20:a5:9e:d3:61:89:96:76:af:26:c8:e1: 93:3e:6e:96:81:1f:bb:c8:1b:58:5d:b5:e6:b7:21: 00:75:f6:9d:7c:4e:ec:40:7b:58:39:de:b6:29:88: a0:1b:2a:97:a7:92:dd:fb:53:32:d4:0e:7c:44:ca: a0:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:F1:C6:18:88:ED:F3:CE:8D:62:BA:44:58:04:BE:3F:C3:56:01:41 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144873.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a8af::/32 Signature Algorithm: sha256WithRSAEncryption b4:7f:f2:a4:88:b0:68:7d:76:e4:fd:ce:68:55:b3:8a:61:9d: 58:c9:20:34:61:3c:c0:58:00:35:37:8d:58:19:a9:e8:da:49: 4f:d6:ef:42:45:0e:36:85:10:90:a3:83:20:6a:a7:13:c3:6d: 08:34:6e:50:92:45:d4:66:a1:a4:f4:cf:b0:c4:83:a9:e6:4b: 4f:bb:2a:8a:7d:ac:94:83:54:05:3a:d9:b8:28:50:ab:6c:48: 46:61:20:71:70:48:8f:54:9f:70:f4:65:61:21:15:2d:99:03: b0:4c:bf:f1:71:89:7b:ff:da:30:f2:36:70:3d:f0:6d:eb:f3: ce:d6:4e:8f:34:ce:32:94:64:bb:d8:c9:4d:c1:03:b1:82:5c: 12:f9:7f:b8:c5:8e:33:5a:37:c0:2a:33:9b:71:f8:fb:95:86: 3e:08:aa:8b:cb:2d:91:ef:0b:dc:0a:40:5f:87:a6:6e:a4:21: 0c:5a:05:33:f7:6d:40:08:96:b0:0d:49:00:4e:34:17:bc:00: df:1f:0a:30:8e:22:89:18:5f:c2:56:68:09:9b:15:9f:90:f8: fe:c2:f4:76:1d:ef:3f:8c:f2:3f:22:56:8b:43:20:20:22:a2: b0:e3:de:30:5a:2c:7c:64:bf:db:93:e6:2c:31:c6:e3:cb:71: a7:b6:ec:1c -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIURQv6p25Q7u0QmRvVpvhvhOp/HxowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTcxNFoX DTI3MDMwMzA2MjIxNFowMzExMC8GA1UEAxMoRDJGMUM2MTg4OEVERjNDRThENjJC QTQ0NTgwNEJFM0ZDMzU2MDE0MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKUE+o5wFjcYczV9mKg4v3bKSjwSCfI/x2uMqlBQOy/6zScB0tIaVFMVDwN1 EbG0F9oU6TkgZH9F7ytk6rOufy4dIwv2aBRlyPH8D+O2ddJEvPfkl+MDZLUu3O3c hNsxBdjBkUdF5Zgv4svqvGyvPQ+t9/8syg24PI22wdF8nqRP24XkDOVyrKzMoa86 uCxlacBLRuNLU1t2uUUj4tabjwcT5E1zCiEZORHz4JpPht5m06vRHtpgyroK0/1U Nwba/X8T7dVvIKWe02GJlnavJsjhkz5uloEfu8gbWF215rchAHX2nXxO7EB7WDne timIoBsql6eS3ftTMtQOfETKoGMCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBTS8cYY iO3zzo1iukRYBL4/w1YBQTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDg3My5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qK8wDQYJKoZIhvcNAQELBQADggEBALR/8qSIsGh9duT9zmhVs4phnVjJIDRhPMBY ADU3jVgZqejaSU/W70JFDjaFEJCjgyBqpxPDbQg0blCSRdRmoaT0z7DEg6nmS0+7 Kop9rJSDVAU62bgoUKtsSEZhIHFwSI9Un3D0ZWEhFS2ZA7BMv/FxiXv/2jDyNnA9 8G3r887WTo80zjKUZLvYyU3BA7GCXBL5f7jFjjNaN8AqM5tx+PuVhj4IqovLLZHv C9wKQF+Hpm6kIQxaBTP3bUAIlrANSQBONBe8AN8fCjCOIokYX8JWaAmbFZ+Q+P7C 9HYd7z+M8j8iVotDICAiorDj3jBaLHxkv9uT5iwxxuPLcae27Bw= -----END CERTIFICATE-----Generated at Sat Mar 28 11:45:41 2026 by rpki-client