$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144883.roa File: AS144883.roa (raw, json) Hash identifier: MgfcjCuwBkYjS3v6JtBEVhIo2hUjLaVirXzOeo4PZRM= Subject key identifier: A2:7A:2C:7B:86:22:16:59:9D:0C:E4:92:F9:F0:C7:1E:5C:65:C6:A7 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 7723CFFB3CD42359E01399EBF1D3769C90A5D2C8 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144883.roa Signing time: Wed 04 Mar 2026 06:20:47 +0000 ROA not before: Wed 04 Mar 2026 06:15:47 +0000 ROA not after: Wed 03 Mar 2027 06:20:47 +0000 asID: 144883 IP address blocks: 240a:a8b9::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:23:cf:fb:3c:d4:23:59:e0:13:99:eb:f1:d3:76:9c:90:a5:d2:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:15:47 2026 GMT Not After : Mar 3 06:20:47 2027 GMT Subject: CN=A27A2C7B862216599D0CE492F9F0C71E5C65C6A7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:c4:4e:61:55:3b:a0:84:46:db:50:a3:e1:77: d6:e3:2c:ab:9b:55:3c:fa:45:ad:71:88:d5:d0:bd: d6:a0:56:2c:75:76:92:f0:a7:19:26:82:11:9f:71: f2:92:69:91:0b:35:d2:38:ce:a0:d4:47:d4:45:5b: cd:de:eb:bb:6c:ab:2e:84:82:85:ed:5a:99:f0:d3: ec:6f:b7:02:24:d6:d2:55:62:7e:62:8d:3f:9d:58: f1:66:f3:55:56:49:6d:c3:07:1d:63:61:f6:0f:60: f0:e0:30:6e:ac:aa:7f:44:e9:eb:98:39:cc:57:87: 9c:da:8c:aa:04:63:6a:55:53:05:90:c1:9e:b6:69: a1:c0:7c:e3:c4:53:a9:b5:ad:ff:3d:21:5c:72:a4: 3b:3c:9e:6f:34:20:b5:59:02:d9:3b:e0:09:ce:53: 88:5c:e0:6c:65:00:07:5e:13:42:fe:1d:ff:00:91: 99:d9:12:c0:05:32:b2:73:8f:35:f9:67:69:70:07: 4a:64:d0:7b:42:55:a2:57:88:69:2b:3e:b9:02:1c: dd:b6:98:08:97:a1:2d:be:65:d3:94:88:60:69:20: 44:fc:ef:89:b7:2d:c7:5a:5c:b6:c9:26:d4:1a:91: b9:aa:b8:f3:c4:7c:c0:fc:69:39:0c:09:69:4a:dd: c3:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:7A:2C:7B:86:22:16:59:9D:0C:E4:92:F9:F0:C7:1E:5C:65:C6:A7 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144883.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a8b9::/32 Signature Algorithm: sha256WithRSAEncryption 4f:fc:5b:11:2a:e1:56:73:b6:32:4e:1c:d1:46:54:d1:01:44: 6b:e4:7e:b4:7b:b4:f0:47:75:0d:08:65:46:30:b3:b3:77:aa: 86:44:3a:6c:f6:e2:b1:e7:66:9a:7f:26:2d:be:36:3d:7f:c6: eb:aa:3f:5a:5d:6b:cc:c4:e6:86:3e:e6:37:b4:f4:2b:24:66: 07:fb:fb:01:ee:93:fd:5e:dd:d3:f1:90:27:08:40:92:dd:3d: d0:67:4d:24:bd:16:8e:a0:64:eb:c1:6e:92:4d:41:3d:22:51: ad:e7:44:df:18:66:f1:a7:4c:81:f2:2a:a1:de:b0:5c:dd:83: 74:d0:d7:c3:b2:31:2f:75:39:0f:4a:e5:48:2f:04:cd:5e:b0: 0c:e3:42:89:ae:d4:14:50:c7:3b:dd:58:ec:d2:35:4a:95:25: f6:60:1b:bc:83:13:1e:16:f2:49:45:05:cf:02:93:19:7c:99: a9:04:3e:32:38:5a:5a:41:f5:bd:56:cd:af:30:93:ad:8f:2b: 1f:29:da:da:70:09:85:cb:43:10:18:86:af:76:3d:32:f6:3b: d4:d3:d0:06:b7:04:61:02:1d:8b:95:72:39:45:05:1e:64:d6: 38:77:97:3a:e5:16:12:d9:76:70:69:d5:5b:0a:0d:32:28:1c: 14:c2:2e:b7 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUdyPP+zzUI1ngE5nr8dN2nJCl0sgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTU0N1oX DTI3MDMwMzA2MjA0N1owMzExMC8GA1UEAxMoQTI3QTJDN0I4NjIyMTY1OTlEMENF NDkyRjlGMEM3MUU1QzY1QzZBNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALrETmFVO6CERttQo+F31uMsq5tVPPpFrXGI1dC91qBWLHV2kvCnGSaCEZ9x 8pJpkQs10jjOoNRH1EVbzd7ru2yrLoSChe1amfDT7G+3AiTW0lVifmKNP51Y8Wbz VVZJbcMHHWNh9g9g8OAwbqyqf0Tp65g5zFeHnNqMqgRjalVTBZDBnrZpocB848RT qbWt/z0hXHKkOzyebzQgtVkC2TvgCc5TiFzgbGUAB14TQv4d/wCRmdkSwAUysnOP NflnaXAHSmTQe0JVoleIaSs+uQIc3baYCJehLb5l05SIYGkgRPzvibctx1pctskm 1BqRuaq488R8wPxpOQwJaUrdwzUCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSieix7 hiIWWZ0M5JL58MceXGXGpzAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDg4My5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qLkwDQYJKoZIhvcNAQELBQADggEBAE/8WxEq4VZztjJOHNFGVNEBRGvkfrR7tPBH dQ0IZUYws7N3qoZEOmz24rHnZpp/Ji2+Nj1/xuuqP1pda8zE5oY+5je09CskZgf7 +wHuk/1e3dPxkCcIQJLdPdBnTSS9Fo6gZOvBbpJNQT0iUa3nRN8YZvGnTIHyKqHe sFzdg3TQ18OyMS91OQ9K5UgvBM1esAzjQomu1BRQxzvdWOzSNUqVJfZgG7yDEx4W 8klFBc8Ckxl8makEPjI4WlpB9b1Wza8wk62PKx8p2tpwCYXLQxAYhq92PTL2O9TT 0Aa3BGECHYuVcjlFBR5k1jh3lzrlFhLZdnBp1VsKDTIoHBTCLrc= -----END CERTIFICATE-----Generated at Sat Mar 28 15:54:33 2026 by rpki-client