$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144885.roa File: AS144885.roa (raw, json) Hash identifier: j8FEQJoa4lN1CnokkbOxVh9669r4zHGU1Om1PeczV1w= Subject key identifier: DC:6C:CD:8B:E7:A9:4B:45:70:C8:8E:75:78:DF:1F:7E:22:D6:BC:1B Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 5C75D3762B1F63138C99651428ED888908D04022 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144885.roa Signing time: Wed 04 Mar 2026 06:20:42 +0000 ROA not before: Wed 04 Mar 2026 06:15:42 +0000 ROA not after: Wed 03 Mar 2027 06:20:42 +0000 asID: 144885 IP address blocks: 240a:a8bb::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:75:d3:76:2b:1f:63:13:8c:99:65:14:28:ed:88:89:08:d0:40:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:15:42 2026 GMT Not After : Mar 3 06:20:42 2027 GMT Subject: CN=DC6CCD8BE7A94B4570C88E7578DF1F7E22D6BC1B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:2a:bf:97:11:65:a3:19:f2:db:cf:d9:e2:8d: 73:69:bc:00:20:26:c2:60:90:9e:50:ea:a7:d3:56: 63:ce:80:47:1a:2f:ce:9f:d8:07:55:2c:6f:eb:a0: fe:96:92:98:b4:6e:44:61:f4:ab:39:ff:60:8f:86: a9:ae:43:51:7f:17:ab:11:74:fc:05:4b:22:9f:e1: 28:26:98:8e:88:b0:70:29:4f:d1:16:a0:17:ea:76: d2:31:97:a7:e4:ae:6c:24:36:f4:13:32:b6:eb:b1: 71:f0:38:20:7a:b0:1e:e3:79:f6:1d:e2:66:fb:95: 24:57:57:b1:9b:74:62:a0:ec:a2:0d:90:45:86:61: ef:40:03:de:e6:3d:f2:33:e1:c4:ef:f5:f5:a1:e2: ba:15:c7:da:cd:a6:cd:be:10:45:d0:ed:68:1e:57: 9e:92:13:43:17:11:1e:32:d1:b5:fa:82:56:c3:d8: 37:3b:be:7c:fd:04:15:93:c5:03:51:01:92:a7:ee: 41:be:45:51:7d:dc:5a:d3:ca:71:af:a2:12:97:0a: 39:ef:7d:7c:6e:59:26:b4:55:41:79:b4:92:e3:51: 41:27:82:9f:45:31:f4:fd:0b:8d:e7:82:40:33:19: 6e:25:b5:73:e9:7d:73:40:19:ef:1f:ae:21:36:04: 1b:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:6C:CD:8B:E7:A9:4B:45:70:C8:8E:75:78:DF:1F:7E:22:D6:BC:1B X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144885.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a8bb::/32 Signature Algorithm: sha256WithRSAEncryption d0:bf:c4:9b:18:38:ee:be:a0:9b:54:86:2c:7c:07:bf:73:85: f1:e6:0c:e0:7b:b0:90:2f:45:40:07:6f:f3:43:78:ac:e2:2e: 5b:9e:c4:71:9e:7d:3b:80:77:79:fa:10:df:7d:10:cc:88:d3: a4:db:ea:78:1e:71:42:fc:5b:35:37:f7:17:2d:8f:b2:ff:ae: 89:be:ce:95:ad:9d:ca:19:a5:82:09:12:ba:85:9a:37:eb:5e: 93:f4:bb:8a:8c:b0:a4:1b:16:db:4c:68:f0:97:14:87:6e:c7: 2c:4a:cc:81:9b:a2:04:20:18:98:9a:45:4e:a9:a0:50:80:42: 08:bc:a9:70:03:47:08:6e:e9:a4:54:f0:2f:a2:60:dd:7a:eb: 74:a6:ae:95:71:63:a4:f4:8b:b5:b2:e7:27:d0:e0:71:2d:1b: b0:78:dd:98:b5:5d:ab:2d:81:35:ac:f6:d6:dc:3f:a9:88:03: 34:c4:d6:92:96:a7:9f:da:62:25:09:7b:e8:a6:13:d8:7d:a7: 71:d1:09:fa:90:6c:d2:10:4b:39:c9:6d:77:d3:2b:61:1f:b1: 29:a5:52:dc:70:1e:44:da:6f:c4:40:31:56:fb:b3:f8:0e:53: b2:e5:2b:06:6f:f8:02:49:b9:fd:7e:65:43:25:02:2c:88:92: fd:a7:50:bb -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUXHXTdisfYxOMmWUUKO2IiQjQQCIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTU0MloX DTI3MDMwMzA2MjA0MlowMzExMC8GA1UEAxMoREM2Q0NEOEJFN0E5NEI0NTcwQzg4 RTc1NzhERjFGN0UyMkQ2QkMxQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJ4qv5cRZaMZ8tvP2eKNc2m8ACAmwmCQnlDqp9NWY86ARxovzp/YB1Usb+ug /paSmLRuRGH0qzn/YI+Gqa5DUX8XqxF0/AVLIp/hKCaYjoiwcClP0RagF+p20jGX p+SubCQ29BMytuuxcfA4IHqwHuN59h3iZvuVJFdXsZt0YqDsog2QRYZh70AD3uY9 8jPhxO/19aHiuhXH2s2mzb4QRdDtaB5XnpITQxcRHjLRtfqCVsPYNzu+fP0EFZPF A1EBkqfuQb5FUX3cWtPKca+iEpcKOe99fG5ZJrRVQXm0kuNRQSeCn0Ux9P0LjeeC QDMZbiW1c+l9c0AZ7x+uITYEGwkCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBTcbM2L 56lLRXDIjnV43x9+Ita8GzAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDg4NS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qLswDQYJKoZIhvcNAQELBQADggEBANC/xJsYOO6+oJtUhix8B79zhfHmDOB7sJAv RUAHb/NDeKziLluexHGefTuAd3n6EN99EMyI06Tb6ngecUL8WzU39xctj7L/rom+ zpWtncoZpYIJErqFmjfrXpP0u4qMsKQbFttMaPCXFIduxyxKzIGbogQgGJiaRU6p oFCAQgi8qXADRwhu6aRU8C+iYN1663SmrpVxY6T0i7Wy5yfQ4HEtG7B43Zi1Xast gTWs9tbcP6mIAzTE1pKWp5/aYiUJe+imE9h9p3HRCfqQbNIQSznJbXfTK2EfsSml UtxwHkTab8RAMVb7s/gOU7LlKwZv+AJJuf1+ZUMlAiyIkv2nULs= -----END CERTIFICATE-----Generated at Sat Mar 28 14:30:40 2026 by rpki-client