$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144879.roa File: AS144879.roa (raw, json) Hash identifier: moyJE89BhJFEEkk8bHars3l23kV7PYjyiUXZKzKJcXw= Subject key identifier: 61:17:00:BB:FB:50:9C:B6:99:C7:EE:76:E0:03:FD:F9:A4:D8:A7:34 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 74B638EFEE1E449116D3AECADC82388785A42111 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144879.roa Signing time: Wed 04 Mar 2026 06:19:46 +0000 ROA not before: Wed 04 Mar 2026 06:14:46 +0000 ROA not after: Wed 03 Mar 2027 06:19:46 +0000 asID: 144879 IP address blocks: 240a:a8b5::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:b6:38:ef:ee:1e:44:91:16:d3:ae:ca:dc:82:38:87:85:a4:21:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:14:46 2026 GMT Not After : Mar 3 06:19:46 2027 GMT Subject: CN=611700BBFB509CB699C7EE76E003FDF9A4D8A734 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:e6:0b:61:27:02:47:bf:5d:ba:2c:de:0a:6c: fd:17:f5:1d:d8:82:27:ac:a8:c7:e4:09:65:7f:7f: d2:b8:0e:9e:ed:c1:d6:0a:75:91:2e:ff:87:b9:e1: 50:fb:ce:b9:a7:40:f6:62:bc:33:2a:33:4f:13:a0: 9f:51:fa:f1:dc:bb:db:4b:f5:f9:b0:19:17:19:c2: 01:52:3b:73:b9:0d:41:dc:35:1f:65:4f:82:50:c2: 39:91:d6:23:5b:fb:dc:6f:b4:cd:50:72:aa:c3:4e: 5e:c1:4c:2c:b6:59:3c:48:c3:93:a7:f5:38:47:d8: 9f:34:96:25:c7:b6:ad:3b:ef:4e:64:2e:79:03:98: 35:7c:ae:f0:1e:7c:3c:fb:f9:00:c7:7d:1f:07:58: d4:9a:09:3d:e9:11:fb:b6:3b:59:f5:bf:2c:be:52: 90:e6:cf:a0:e6:b4:c2:72:47:5e:89:39:a1:b2:10: d1:89:e3:18:84:ae:26:1d:a7:d0:24:28:73:a4:67: 34:ae:64:47:cd:8d:37:49:7c:39:c7:4d:e3:85:01: 37:fc:31:bb:9d:08:27:e1:95:2b:44:9a:26:ff:20: a2:7b:f6:5c:b8:95:27:95:dc:c3:d0:96:b7:98:18: 74:9a:f4:2f:7c:03:25:6d:53:ec:2e:40:12:48:0f: e1:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:17:00:BB:FB:50:9C:B6:99:C7:EE:76:E0:03:FD:F9:A4:D8:A7:34 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144879.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a8b5::/32 Signature Algorithm: sha256WithRSAEncryption 36:68:b1:b1:70:4c:2a:0d:6c:5d:75:6a:0c:14:46:a7:b3:40: 2a:ce:12:c5:c3:4c:1b:c4:f8:fd:7c:e9:a3:1d:5d:ef:7a:cd: 22:a7:24:43:65:18:a2:cb:39:fb:6c:5f:af:bb:e3:03:0a:43: 92:d7:7c:09:dc:6e:df:98:56:4a:d7:86:2b:1c:07:3f:68:ad: d9:c3:26:3d:bc:4b:68:a4:0e:9f:07:be:d3:0b:a3:a4:7c:34: ea:d2:94:9d:db:44:92:92:3a:57:29:ac:f7:2b:f7:2c:ee:83: ee:dc:d0:07:7d:b0:24:74:32:ee:e8:01:9c:6a:99:2a:f2:a4: 83:28:20:72:ae:c4:a3:61:26:9e:ad:24:80:fb:7c:7a:00:ab: 27:10:31:81:63:8c:93:dd:f6:a0:be:2b:92:cc:f7:de:18:a5: 98:4d:9d:f7:17:a4:64:18:32:a3:45:be:17:92:99:17:4d:ac: cd:76:5f:28:a0:36:2f:c3:fc:5c:8d:f4:1f:3f:64:93:0f:c6: 3e:97:ea:fe:4b:fc:7b:23:7c:aa:0e:d5:5e:8e:46:0f:44:fd: 06:e1:1e:a8:bd:2e:a3:35:be:5a:04:85:7b:7c:e6:18:e5:82: 34:ae:ff:97:00:ca:d2:53:6d:4e:d1:db:4b:55:dc:95:51:af: 0f:b2:80:06 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUdLY47+4eRJEW067K3II4h4WkIREwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTQ0NloX DTI3MDMwMzA2MTk0NlowMzExMC8GA1UEAxMoNjExNzAwQkJGQjUwOUNCNjk5QzdF RTc2RTAwM0ZERjlBNEQ4QTczNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKPmC2EnAke/Xbos3gps/Rf1HdiCJ6yox+QJZX9/0rgOnu3B1gp1kS7/h7nh UPvOuadA9mK8MyozTxOgn1H68dy720v1+bAZFxnCAVI7c7kNQdw1H2VPglDCOZHW I1v73G+0zVByqsNOXsFMLLZZPEjDk6f1OEfYnzSWJce2rTvvTmQueQOYNXyu8B58 PPv5AMd9HwdY1JoJPekR+7Y7WfW/LL5SkObPoOa0wnJHXok5obIQ0YnjGISuJh2n 0CQoc6RnNK5kR82NN0l8OcdN44UBN/wxu50IJ+GVK0SaJv8gonv2XLiVJ5Xcw9CW t5gYdJr0L3wDJW1T7C5AEkgP4ecCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRhFwC7 +1CctpnH7nbgA/35pNinNDAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDg3OS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qLUwDQYJKoZIhvcNAQELBQADggEBADZosbFwTCoNbF11agwURqezQCrOEsXDTBvE +P186aMdXe96zSKnJENlGKLLOftsX6+74wMKQ5LXfAncbt+YVkrXhiscBz9ordnD Jj28S2ikDp8HvtMLo6R8NOrSlJ3bRJKSOlcprPcr9yzug+7c0Ad9sCR0Mu7oAZxq mSrypIMoIHKuxKNhJp6tJID7fHoAqycQMYFjjJPd9qC+K5LM994YpZhNnfcXpGQY MqNFvheSmRdNrM12XyigNi/D/FyN9B8/ZJMPxj6X6v5L/HsjfKoO1V6ORg9E/Qbh Hqi9LqM1vloEhXt85hjlgjSu/5cAytJTbU7R20tV3JVRrw+ygAY= -----END CERTIFICATE-----Generated at Sat Mar 28 14:30:41 2026 by rpki-client