$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144877.roa File: AS144877.roa (raw, json) Hash identifier: BVSs4GwsNSCCJWns6nWUFVDT0VhD4pS6+aKpaEHgBmE= Subject key identifier: F6:91:E7:E8:F3:1F:B5:A9:23:DA:59:3A:CA:01:5C:FE:C2:94:2E:AC Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 0A76A9831DD23530776D05E8ECED240BD19DAD95 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144877.roa Signing time: Wed 04 Mar 2026 06:21:18 +0000 ROA not before: Wed 04 Mar 2026 06:16:18 +0000 ROA not after: Wed 03 Mar 2027 06:21:18 +0000 asID: 144877 IP address blocks: 240a:a8b3::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:76:a9:83:1d:d2:35:30:77:6d:05:e8:ec:ed:24:0b:d1:9d:ad:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:16:18 2026 GMT Not After : Mar 3 06:21:18 2027 GMT Subject: CN=F691E7E8F31FB5A923DA593ACA015CFEC2942EAC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:72:77:b6:f0:6c:b9:22:eb:f2:a6:e2:ef:14: c6:c3:69:e2:97:2a:28:ba:92:90:fa:e4:b2:3d:52: 1a:12:17:34:be:f2:7a:55:4f:75:aa:a2:da:0d:64: 06:f7:a6:7f:41:3e:6b:d7:14:a9:02:ec:07:23:e7: 0c:0d:a2:12:31:43:31:4d:ef:6d:0e:5a:39:79:9b: 47:e2:26:48:30:29:41:94:7e:91:9f:b0:ec:18:96: 6e:63:e2:dd:64:29:7e:66:98:5c:30:63:ed:46:28: 68:3c:f5:e2:d4:d4:1b:1b:18:a8:0f:35:52:a2:3b: 91:99:af:43:1c:4b:b3:ed:38:2d:d8:e4:89:37:08: a4:a9:c7:e8:a8:0b:20:4b:f6:e0:d6:bb:38:8a:57: e5:9a:1e:4f:1b:d1:b1:15:7d:c1:d7:94:cc:f3:52: 1c:c6:3b:f3:9e:83:4e:1e:9b:c3:52:0a:d6:11:f1: 74:12:bc:ec:e9:2b:e1:f7:8d:d2:6b:a8:cd:ed:a0: 56:6c:f5:b2:26:b7:2e:b8:8d:00:a2:06:3c:21:21: c1:30:72:6f:da:77:74:26:13:da:f2:d4:84:50:45: ec:6b:d9:77:d8:77:78:40:e1:45:f0:ce:b5:25:0d: bd:4c:60:a5:f3:97:f1:62:74:33:53:65:cb:db:42: 27:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:91:E7:E8:F3:1F:B5:A9:23:DA:59:3A:CA:01:5C:FE:C2:94:2E:AC X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144877.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a8b3::/32 Signature Algorithm: sha256WithRSAEncryption 41:42:21:7a:44:34:c2:6d:89:f6:7f:04:70:36:2d:8e:ee:ff: fc:24:8a:b5:9a:d4:56:48:27:f6:92:24:4d:f4:8e:84:d0:94: 1d:16:e3:c6:e4:b4:63:d1:f9:ee:da:25:5b:26:10:dc:0d:ae: 99:d3:f8:f9:96:0e:39:3a:bd:ab:3a:ed:db:4e:4f:7a:dd:16: af:70:e3:ef:c7:75:18:80:18:dd:21:da:f9:17:38:b1:73:05: 74:bd:09:e6:e3:a8:a7:bb:0e:bb:12:9b:b7:88:a1:6d:45:e2: 79:41:dc:96:5a:71:9d:5f:5a:e2:63:54:99:7a:57:18:23:6e: 00:3e:1d:ce:e4:cc:27:5a:e8:18:ec:43:54:66:b7:62:a2:b3: 70:df:5e:38:8c:d5:cd:68:5f:8e:0c:f6:5d:34:30:7c:bf:10: ab:dc:8f:a3:b6:68:50:03:9c:96:4d:ef:4a:63:1c:c0:4f:d3: ab:2b:a4:9b:99:7c:39:cf:10:ef:a6:04:d3:33:16:55:c8:c5: c5:f1:fa:63:f0:dd:af:49:d9:be:a7:7a:d1:95:e2:fc:37:67: 26:0d:98:54:12:6b:00:95:5a:48:fb:0e:f2:15:cb:36:62:88: 90:50:16:53:d4:1a:e0:fd:02:27:f2:b6:82:1c:79:81:4b:67: 4b:aa:94:8f -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUCnapgx3SNTB3bQXo7O0kC9GdrZUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTYxOFoX DTI3MDMwMzA2MjExOFowMzExMC8GA1UEAxMoRjY5MUU3RThGMzFGQjVBOTIzREE1 OTNBQ0EwMTVDRkVDMjk0MkVBQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALZyd7bwbLki6/Km4u8UxsNp4pcqKLqSkPrksj1SGhIXNL7yelVPdaqi2g1k Bvemf0E+a9cUqQLsByPnDA2iEjFDMU3vbQ5aOXmbR+ImSDApQZR+kZ+w7BiWbmPi 3WQpfmaYXDBj7UYoaDz14tTUGxsYqA81UqI7kZmvQxxLs+04LdjkiTcIpKnH6KgL IEv24Na7OIpX5ZoeTxvRsRV9wdeUzPNSHMY7856DTh6bw1IK1hHxdBK87Okr4feN 0muoze2gVmz1sia3LriNAKIGPCEhwTByb9p3dCYT2vLUhFBF7GvZd9h3eEDhRfDO tSUNvUxgpfOX8WJ0M1Nly9tCJx8CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBT2kefo 8x+1qSPaWTrKAVz+wpQurDAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDg3Ny5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qLMwDQYJKoZIhvcNAQELBQADggEBAEFCIXpENMJtifZ/BHA2LY7u//wkirWa1FZI J/aSJE30joTQlB0W48bktGPR+e7aJVsmENwNrpnT+PmWDjk6vas67dtOT3rdFq9w 4+/HdRiAGN0h2vkXOLFzBXS9CebjqKe7DrsSm7eIoW1F4nlB3JZacZ1fWuJjVJl6 VxgjbgA+Hc7kzCda6BjsQ1Rmt2Kis3DfXjiM1c1oX44M9l00MHy/EKvcj6O2aFAD nJZN70pjHMBP06srpJuZfDnPEO+mBNMzFlXIxcXx+mPw3a9J2b6netGV4vw3ZyYN mFQSawCVWkj7DvIVyzZiiJBQFlPUGuD9AifytoIceYFLZ0uqlI8= -----END CERTIFICATE-----Generated at Sat Mar 28 15:54:00 2026 by rpki-client