$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144880.roa File: AS144880.roa (raw, json) Hash identifier: crXeIXraiyA6aEZSmHB+Rg5901dnvtEbnUcWu0E0wFI= Subject key identifier: D6:DE:CA:12:56:FA:B4:CA:B4:27:A4:96:50:43:F3:4A:84:37:A2:9F Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 31329B386E0A0DCCB310BD4700A29A429760B3B8 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144880.roa Signing time: Wed 04 Mar 2026 06:21:19 +0000 ROA not before: Wed 04 Mar 2026 06:16:19 +0000 ROA not after: Wed 03 Mar 2027 06:21:19 +0000 asID: 144880 IP address blocks: 240a:a8b6::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:32:9b:38:6e:0a:0d:cc:b3:10:bd:47:00:a2:9a:42:97:60:b3:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:16:19 2026 GMT Not After : Mar 3 06:21:19 2027 GMT Subject: CN=D6DECA1256FAB4CAB427A4965043F34A8437A29F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:07:25:76:b0:00:9a:2a:4d:bb:17:97:a5:29: 5f:9f:23:7b:9e:56:b2:40:04:69:37:b4:f5:2b:97: 7f:11:1f:3e:7e:35:f6:f4:87:e6:6a:49:29:70:c9: 26:ab:c9:cd:21:6f:a5:86:80:a0:73:ea:ea:ec:0e: 93:d3:8f:aa:e3:6b:10:e1:85:a0:c3:eb:b7:32:23: d9:d0:0f:2c:62:73:87:50:fe:8f:de:64:a6:64:80: e7:c0:53:62:ff:c4:18:11:52:68:f3:e4:6d:17:fa: 4d:98:a0:a4:be:f3:fd:ff:f0:92:b2:40:6d:0f:29: f6:85:36:1b:4d:82:66:dc:99:a5:06:1f:09:86:9b: 04:b5:e7:4d:06:42:5a:fb:b6:99:cc:54:23:41:ca: fe:f4:ec:fc:82:89:c9:d8:ab:f6:05:25:99:ca:4a: 0c:dd:2b:39:fa:6e:cf:52:97:2a:9a:ff:9e:6e:ea: e2:b7:c1:ab:d3:1a:df:3e:0c:e9:c1:83:5c:c4:ed: 00:1c:45:ab:6c:b8:21:47:5d:1e:e1:89:38:86:39: ab:89:64:b4:53:f2:c2:dc:f3:2c:55:50:29:43:1b: f9:ac:70:a2:f3:32:75:a4:01:69:c4:86:bb:e1:c9: f8:99:ec:3e:7e:cc:cf:ee:e3:8c:0f:2e:89:d2:d0: 2d:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:DE:CA:12:56:FA:B4:CA:B4:27:A4:96:50:43:F3:4A:84:37:A2:9F X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144880.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a8b6::/32 Signature Algorithm: sha256WithRSAEncryption 45:56:e6:28:49:14:4e:cf:f5:07:7f:37:53:0f:18:d4:a5:f6: f3:6e:64:79:00:d3:2f:4c:71:1a:04:64:d1:15:36:c1:68:62: d9:08:e0:c4:35:af:a8:aa:73:e7:a9:b1:6e:5a:4e:48:ed:42: f4:98:88:b0:bc:d5:c1:75:20:c7:f1:11:d8:9c:4e:20:5c:55: 07:c8:72:e0:57:ec:e5:86:0d:5a:34:3f:8e:97:7c:c0:af:01: cf:df:34:c7:86:98:6b:57:e4:c6:19:d0:74:ba:00:a6:e1:ef: c4:14:99:5e:d3:fd:50:86:01:c2:2c:2c:cf:78:51:b7:ad:e5: c6:cb:90:a8:fa:46:59:7e:23:fb:e0:cb:44:14:e8:7c:8c:60: 57:21:16:2e:e1:27:0f:b8:ad:47:42:b1:d7:8c:56:05:f0:14: 03:72:d7:53:26:fb:37:9f:d2:e3:4a:e7:5b:1c:01:89:6d:9b: 61:cf:85:b5:5b:d8:5f:44:ce:2f:a7:31:b7:6b:f9:39:ca:cb: b2:30:79:8e:3a:54:9f:de:9a:90:47:74:44:db:bd:d3:35:5c: 09:87:5f:c0:fb:3d:1b:4b:af:a0:d6:74:2e:12:51:8a:9d:b2: 1d:ca:db:e3:e5:00:ae:34:8d:aa:53:9d:9a:a1:62:67:65:b2: d1:d6:d9:ad -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUMTKbOG4KDcyzEL1HAKKaQpdgs7gwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTYxOVoX DTI3MDMwMzA2MjExOVowMzExMC8GA1UEAxMoRDZERUNBMTI1NkZBQjRDQUI0MjdB NDk2NTA0M0YzNEE4NDM3QTI5RjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKoHJXawAJoqTbsXl6UpX58je55WskAEaTe09SuXfxEfPn419vSH5mpJKXDJ JqvJzSFvpYaAoHPq6uwOk9OPquNrEOGFoMPrtzIj2dAPLGJzh1D+j95kpmSA58BT Yv/EGBFSaPPkbRf6TZigpL7z/f/wkrJAbQ8p9oU2G02CZtyZpQYfCYabBLXnTQZC Wvu2mcxUI0HK/vTs/IKJydir9gUlmcpKDN0rOfpuz1KXKpr/nm7q4rfBq9Ma3z4M 6cGDXMTtABxFq2y4IUddHuGJOIY5q4lktFPywtzzLFVQKUMb+axwovMydaQBacSG u+HJ+JnsPn7Mz+7jjA8uidLQLUMCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBTW3soS Vvq0yrQnpJZQQ/NKhDeinzAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDg4MC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qLYwDQYJKoZIhvcNAQELBQADggEBAEVW5ihJFE7P9Qd/N1MPGNSl9vNuZHkA0y9M cRoEZNEVNsFoYtkI4MQ1r6iqc+epsW5aTkjtQvSYiLC81cF1IMfxEdicTiBcVQfI cuBX7OWGDVo0P46XfMCvAc/fNMeGmGtX5MYZ0HS6AKbh78QUmV7T/VCGAcIsLM94 Ubet5cbLkKj6Rll+I/vgy0QU6HyMYFchFi7hJw+4rUdCsdeMVgXwFANy11Mm+zef 0uNK51scAYltm2HPhbVb2F9Ezi+nMbdr+TnKy7IweY46VJ/empBHdETbvdM1XAmH X8D7PRtLr6DWdC4SUYqdsh3K2+PlAK40japTnZqhYmdlstHW2a0= -----END CERTIFICATE-----Generated at Sat Mar 28 11:41:37 2026 by rpki-client