$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144875.roa File: AS144875.roa (raw, json) Hash identifier: 9zoWtem3miw4vdQgSHPWARiX3h6bYAYkK9OMahah5DQ= Subject key identifier: BA:2E:46:E4:9B:F6:1F:57:FE:78:D6:33:D5:CC:3E:18:CD:16:05:14 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 4743BFF5C99299EB3E3DC263CA1831ED5A6679F9 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144875.roa Signing time: Wed 04 Mar 2026 06:19:50 +0000 ROA not before: Wed 04 Mar 2026 06:14:50 +0000 ROA not after: Wed 03 Mar 2027 06:19:50 +0000 asID: 144875 IP address blocks: 240a:a8b1::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:43:bf:f5:c9:92:99:eb:3e:3d:c2:63:ca:18:31:ed:5a:66:79:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:14:50 2026 GMT Not After : Mar 3 06:19:50 2027 GMT Subject: CN=BA2E46E49BF61F57FE78D633D5CC3E18CD160514 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:b1:ca:60:13:dd:20:cd:b2:fa:2b:e4:07:95: af:0d:65:61:cb:4f:48:66:05:50:6a:3e:5e:5b:aa: 79:e7:6c:38:a4:0b:1a:31:22:79:ea:7f:d2:bb:04: ff:0c:a9:d1:95:e6:25:1c:a2:69:af:69:61:fa:d1: 31:00:09:8e:e5:33:9a:fc:20:82:90:d4:d8:db:95: c1:06:fd:2f:0e:91:20:f8:4e:90:ef:3a:c5:dc:42: a3:6a:09:fd:c3:c9:2b:13:82:cd:35:07:dc:f2:89: 81:d8:73:6d:54:5b:01:4b:da:9c:11:0a:65:af:2a: 8e:46:65:f7:43:56:d7:bc:95:3d:38:64:38:a2:eb: fd:9e:37:9a:a2:58:52:60:10:65:44:9e:d3:9c:34: eb:ca:b1:fd:cb:12:99:27:72:69:fc:04:79:6c:ba: 91:f9:05:14:cc:36:93:dd:f3:3d:96:b6:81:60:2a: a2:92:ac:b6:b7:92:44:26:22:e3:67:03:82:00:4a: 62:d0:e4:9f:ed:27:1a:5d:d6:11:0d:4c:78:d0:bf: e4:7c:5e:b4:2c:65:01:eb:c2:53:9f:e9:47:1b:39: db:7f:d4:08:3f:25:ef:1e:9a:32:c0:65:b0:b4:44: bf:29:70:79:14:a7:10:17:88:ef:1e:ec:37:bd:5b: 39:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:2E:46:E4:9B:F6:1F:57:FE:78:D6:33:D5:CC:3E:18:CD:16:05:14 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144875.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a8b1::/32 Signature Algorithm: sha256WithRSAEncryption 99:9a:42:78:ff:db:90:70:ed:d5:56:be:73:07:08:be:3c:93: 10:ae:15:3a:bb:f3:fd:e0:24:09:46:1d:d3:33:c7:33:a7:16: 83:c0:8a:09:98:98:fe:ab:e7:dd:37:b4:b7:73:6b:1a:1e:18: de:73:a8:99:b7:0e:86:d3:62:2e:72:09:d0:d1:9f:27:fc:8c: 9c:60:65:e7:b9:a9:46:39:81:0d:af:2b:2d:e9:e1:6a:8f:18: e3:f6:36:ec:66:94:25:f2:fa:ca:03:de:1a:87:36:09:bc:f1: 3b:f8:61:44:e3:e4:c4:ff:a6:f5:a0:8e:fc:bf:d1:55:3f:48: 96:31:ce:3f:8c:5b:3e:2d:b1:10:1c:30:95:dd:9b:1c:99:19: 0a:af:39:5f:ad:bc:36:c1:df:05:a8:61:b7:21:4e:4f:bd:27: 5a:43:89:82:46:4a:e3:d4:63:1a:57:7e:52:7f:df:aa:ce:d1: 97:ed:38:20:f0:0a:dc:cb:8f:a9:c2:ef:48:28:08:25:17:bf: c6:5d:6d:1a:66:12:6e:f0:58:a6:9c:e4:1c:b9:77:1a:63:99: 71:47:b4:6e:d9:9e:43:9a:f0:26:93:e4:94:ce:e1:2a:fd:58: f4:03:1c:6b:e8:e2:ed:02:b0:b8:7c:a9:db:bf:d7:33:82:88: 34:79:1c:5d -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUR0O/9cmSmes+PcJjyhgx7VpmefkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTQ1MFoX DTI3MDMwMzA2MTk1MFowMzExMC8GA1UEAxMoQkEyRTQ2RTQ5QkY2MUY1N0ZFNzhE NjMzRDVDQzNFMThDRDE2MDUxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALixymAT3SDNsvor5AeVrw1lYctPSGYFUGo+XluqeedsOKQLGjEieep/0rsE /wyp0ZXmJRyiaa9pYfrRMQAJjuUzmvwggpDU2NuVwQb9Lw6RIPhOkO86xdxCo2oJ /cPJKxOCzTUH3PKJgdhzbVRbAUvanBEKZa8qjkZl90NW17yVPThkOKLr/Z43mqJY UmAQZUSe05w068qx/csSmSdyafwEeWy6kfkFFMw2k93zPZa2gWAqopKstreSRCYi 42cDggBKYtDkn+0nGl3WEQ1MeNC/5HxetCxlAevCU5/pRxs523/UCD8l7x6aMsBl sLREvylweRSnEBeI7x7sN71bOZcCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBS6Lkbk m/YfV/541jPVzD4YzRYFFDAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDg3NS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qLEwDQYJKoZIhvcNAQELBQADggEBAJmaQnj/25Bw7dVWvnMHCL48kxCuFTq78/3g JAlGHdMzxzOnFoPAigmYmP6r5903tLdzaxoeGN5zqJm3DobTYi5yCdDRnyf8jJxg Zee5qUY5gQ2vKy3p4WqPGOP2NuxmlCXy+soD3hqHNgm88Tv4YUTj5MT/pvWgjvy/ 0VU/SJYxzj+MWz4tsRAcMJXdmxyZGQqvOV+tvDbB3wWoYbchTk+9J1pDiYJGSuPU YxpXflJ/36rO0ZftOCDwCtzLj6nC70goCCUXv8ZdbRpmEm7wWKac5By5dxpjmXFH tG7ZnkOa8CaT5JTO4Sr9WPQDHGvo4u0CsLh8qdu/1zOCiDR5HF0= -----END CERTIFICATE-----Generated at Sat Mar 28 13:18:09 2026 by rpki-client