$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144881.roa File: AS144881.roa (raw, json) Hash identifier: 8L1vsojPleBi/4u7K3j5Gl+T5ATlR5Wy650emwMmte0= Subject key identifier: 1F:38:CB:78:1A:FA:83:7E:7B:23:D3:95:4A:46:30:19:6A:A7:05:07 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 09E7B0549C84400C24C2D985B333C87C4C4B88CE Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144881.roa Signing time: Wed 04 Mar 2026 06:22:15 +0000 ROA not before: Wed 04 Mar 2026 06:17:15 +0000 ROA not after: Wed 03 Mar 2027 06:22:15 +0000 asID: 144881 IP address blocks: 240a:a8b7::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:e7:b0:54:9c:84:40:0c:24:c2:d9:85:b3:33:c8:7c:4c:4b:88:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:17:15 2026 GMT Not After : Mar 3 06:22:15 2027 GMT Subject: CN=1F38CB781AFA837E7B23D3954A4630196AA70507 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:68:47:16:2b:21:89:4b:8a:b3:ca:8d:99:32: 69:2e:8f:f0:f6:b5:c1:09:a7:83:f8:5f:da:30:cc: 7f:d6:d7:90:aa:9d:8c:4a:66:15:b9:0a:2a:fa:a4: d1:7a:9e:ea:1f:f9:9b:bf:64:6a:97:c7:fe:31:aa: a8:7a:48:55:89:33:3f:cf:a4:c9:7d:93:1d:60:81: be:b7:d3:e2:52:c4:2a:9b:f9:7c:4b:98:ef:a5:5d: dc:f8:95:87:80:51:b6:c8:8c:06:0b:76:2c:4e:98: 8e:e3:7d:b5:15:e0:db:63:44:f5:e3:3e:63:1f:92: 94:5c:69:41:de:4a:b8:b3:7e:a0:36:ab:fc:df:80: ac:54:c0:52:1f:b5:81:c6:45:1f:66:6c:1a:44:8a: f3:12:bb:5c:3f:f0:6d:f8:a0:c9:01:c1:e5:f3:1f: 69:be:82:cb:21:e9:b5:2a:13:f5:cd:ca:58:23:d0: a9:57:13:b5:4e:fe:8f:d8:77:d0:42:5a:1f:9d:e3: a7:49:4f:3b:c5:41:98:57:08:e5:fb:5c:71:3a:2c: 09:0e:00:5b:3c:77:29:cb:2b:3a:fe:c3:dd:93:0f: 29:fb:e9:01:66:b8:c9:77:f6:db:92:8c:69:bd:45: 0a:64:50:fb:1d:b7:9c:b1:72:39:79:a9:be:19:5e: 0f:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:38:CB:78:1A:FA:83:7E:7B:23:D3:95:4A:46:30:19:6A:A7:05:07 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144881.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a8b7::/32 Signature Algorithm: sha256WithRSAEncryption d1:18:13:40:2e:e7:b3:ec:07:65:97:a1:c0:ca:7a:b5:23:24: b1:10:44:b1:93:6f:35:4b:c4:3e:1e:ac:a2:35:9c:b8:2f:a6: 2b:4c:4d:a6:d4:9f:48:13:d4:5d:75:6e:51:82:db:ff:4e:59: 57:8f:85:86:74:23:2a:bf:d7:64:ff:24:76:90:b7:67:12:4f: 3f:00:4a:41:96:bb:99:7e:f7:dc:34:7e:b6:6e:cc:73:af:16: ed:b9:3d:f8:ca:a3:6f:e0:9c:13:76:32:51:32:8e:57:7c:49: f5:86:33:78:2b:14:fd:5a:67:0d:59:ff:3a:d7:2c:92:48:a1: ae:ef:50:2b:24:85:2a:ae:51:aa:ee:1b:ef:df:42:f0:c9:2a: 5e:9d:1c:2b:91:90:0a:be:dd:ae:ac:1d:54:db:75:4a:2c:d1: 9a:cf:4a:c3:bc:a5:48:5b:2a:4a:24:ff:3f:d4:f8:e5:55:90: d4:22:72:8d:cb:79:2c:9d:f8:c0:e5:d3:71:1b:28:64:ea:3f: 2c:5b:33:46:ae:68:36:2e:08:71:bf:96:cb:d7:a7:bd:9c:d4: 0f:31:63:b5:e0:0a:dc:ad:eb:12:18:e9:5b:a2:ce:e1:4a:25: 87:c4:ec:51:05:21:27:e4:cc:25:2f:c9:92:ea:c6:54:1e:2d: 4e:f1:59:07 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUCeewVJyEQAwkwtmFszPIfExLiM4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTcxNVoX DTI3MDMwMzA2MjIxNVowMzExMC8GA1UEAxMoMUYzOENCNzgxQUZBODM3RTdCMjNE Mzk1NEE0NjMwMTk2QUE3MDUwNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMdoRxYrIYlLirPKjZkyaS6P8Pa1wQmng/hf2jDMf9bXkKqdjEpmFbkKKvqk 0Xqe6h/5m79kapfH/jGqqHpIVYkzP8+kyX2THWCBvrfT4lLEKpv5fEuY76Vd3PiV h4BRtsiMBgt2LE6YjuN9tRXg22NE9eM+Yx+SlFxpQd5KuLN+oDar/N+ArFTAUh+1 gcZFH2ZsGkSK8xK7XD/wbfigyQHB5fMfab6CyyHptSoT9c3KWCPQqVcTtU7+j9h3 0EJaH53jp0lPO8VBmFcI5ftccTosCQ4AWzx3KcsrOv7D3ZMPKfvpAWa4yXf225KM ab1FCmRQ+x23nLFyOXmpvhleD0ECAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQfOMt4 GvqDfnsj05VKRjAZaqcFBzAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDg4MS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qLcwDQYJKoZIhvcNAQELBQADggEBANEYE0Au57PsB2WXocDKerUjJLEQRLGTbzVL xD4erKI1nLgvpitMTabUn0gT1F11blGC2/9OWVePhYZ0Iyq/12T/JHaQt2cSTz8A SkGWu5l+99w0frZuzHOvFu25PfjKo2/gnBN2MlEyjld8SfWGM3grFP1aZw1Z/zrX LJJIoa7vUCskhSquUaruG+/fQvDJKl6dHCuRkAq+3a6sHVTbdUos0ZrPSsO8pUhb Kkok/z/U+OVVkNQico3LeSyd+MDl03EbKGTqPyxbM0auaDYuCHG/lsvXp72c1A8x Y7XgCtyt6xIY6VuizuFKJYfE7FEFISfkzCUvyZLqxlQeLU7xWQc= -----END CERTIFICATE-----Generated at Sat Mar 28 11:44:47 2026 by rpki-client