$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144886.roa File: AS144886.roa (raw, json) Hash identifier: Or7owR8gHZGN5WnkzG2Z9gGkCahVVZKRv1OJaCVDmXo= Subject key identifier: A9:AC:E5:1F:F7:50:E2:23:FE:49:2F:37:3F:C8:CA:DE:55:D1:F9:5A Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 677AD4F05BE644C47E9E9AAF3632A98605D0ACEB Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144886.roa Signing time: Wed 04 Mar 2026 06:20:15 +0000 ROA not before: Wed 04 Mar 2026 06:15:15 +0000 ROA not after: Wed 03 Mar 2027 06:20:15 +0000 asID: 144886 IP address blocks: 240a:a8bc::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:7a:d4:f0:5b:e6:44:c4:7e:9e:9a:af:36:32:a9:86:05:d0:ac:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:15:15 2026 GMT Not After : Mar 3 06:20:15 2027 GMT Subject: CN=A9ACE51FF750E223FE492F373FC8CADE55D1F95A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:f8:f1:97:27:d8:02:5c:96:89:47:7a:1f:8b: 11:63:3e:d7:dd:21:4d:69:c3:fc:17:c0:30:a8:71: 3d:99:b5:c5:10:54:6c:ee:4a:1e:7f:40:ef:c9:07: 0e:60:4b:73:86:27:ce:f7:0d:0f:9c:d0:8f:be:86: b8:2e:3e:0f:6c:a5:33:5f:48:02:7a:bc:2d:d9:18: 70:1c:e8:67:f4:43:da:cd:f2:94:b7:f2:f6:65:58: e2:b2:8a:d3:61:46:06:6c:ad:13:ff:80:c9:53:0d: c6:a3:95:0b:67:0b:45:56:54:57:39:18:80:39:f5: 2a:04:0d:eb:6b:f7:4a:57:06:4e:c4:de:5f:f2:a9: 10:38:f4:b8:b3:e9:54:1e:55:96:94:9b:9e:cd:aa: d7:f8:9e:be:38:c4:60:49:c0:54:85:1b:33:e7:d0: da:cf:a7:b0:44:c7:46:26:4d:3f:5e:56:08:2a:35: c7:4b:8f:0a:69:13:93:88:ef:96:92:38:26:d8:bf: b8:ee:77:61:47:d4:c4:d0:23:95:d0:5d:d5:ae:94: 5d:1c:37:d3:04:1f:eb:e0:3d:9f:ab:59:4f:4f:09: 61:4b:b8:9f:a4:48:62:83:0f:54:05:46:8d:c6:6c: 4f:ec:35:75:f4:dd:38:b6:3d:59:8e:80:49:df:a4: bd:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:AC:E5:1F:F7:50:E2:23:FE:49:2F:37:3F:C8:CA:DE:55:D1:F9:5A X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144886.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a8bc::/32 Signature Algorithm: sha256WithRSAEncryption 8e:fc:95:b1:bd:2e:b0:98:1c:41:b2:de:0f:0e:2d:da:a2:be: b4:d5:d4:42:02:6a:fa:5b:e9:3c:53:cb:4a:ad:1b:bf:b8:b1: 23:8e:f2:87:da:68:00:db:1d:89:2b:07:e1:19:51:ff:66:14: a2:55:e1:46:95:97:c3:1b:63:9a:23:43:43:52:7e:f1:8f:9b: 02:8c:40:f0:1a:e4:b8:5b:7f:cc:af:58:02:33:2b:be:40:72: f7:40:8b:80:68:82:21:ae:10:ca:cc:c2:73:86:77:19:ad:42: b0:91:23:4f:d8:5b:7c:c0:69:ae:95:0c:e3:81:95:82:bb:af: f3:6f:d0:6c:ba:9f:41:82:ac:56:d4:7a:74:07:97:fc:64:44: 5e:a3:ce:7f:7f:1b:e4:1e:ea:be:20:96:30:b0:69:a5:d4:b3: ee:2b:f7:70:a1:32:3b:78:28:74:9b:fe:d0:fb:c0:c5:3d:d7: 71:68:f1:01:ee:c6:8d:df:a3:9f:65:65:15:15:8b:57:c8:d9: 14:ca:f6:36:55:25:11:79:98:89:a3:d6:c7:82:22:20:d7:92: 94:74:af:de:99:95:70:9b:2a:42:c7:a4:c6:53:84:fd:9f:5b: 3a:ec:a5:3c:d2:3e:7c:5a:48:d0:c2:78:96:a4:dd:cf:5d:58: 5c:54:e3:b8 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUZ3rU8FvmRMR+npqvNjKphgXQrOswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTUxNVoX DTI3MDMwMzA2MjAxNVowMzExMC8GA1UEAxMoQTlBQ0U1MUZGNzUwRTIyM0ZFNDky RjM3M0ZDOENBREU1NUQxRjk1QTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALH48Zcn2AJclolHeh+LEWM+190hTWnD/BfAMKhxPZm1xRBUbO5KHn9A78kH DmBLc4YnzvcND5zQj76GuC4+D2ylM19IAnq8LdkYcBzoZ/RD2s3ylLfy9mVY4rKK 02FGBmytE/+AyVMNxqOVC2cLRVZUVzkYgDn1KgQN62v3SlcGTsTeX/KpEDj0uLPp VB5VlpSbns2q1/ievjjEYEnAVIUbM+fQ2s+nsETHRiZNP15WCCo1x0uPCmkTk4jv lpI4Jti/uO53YUfUxNAjldBd1a6UXRw30wQf6+A9n6tZT08JYUu4n6RIYoMPVAVG jcZsT+w1dfTdOLY9WY6ASd+kve8CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSprOUf 91DiI/5JLzc/yMreVdH5WjAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDg4Ni5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qLwwDQYJKoZIhvcNAQELBQADggEBAI78lbG9LrCYHEGy3g8OLdqivrTV1EICavpb 6TxTy0qtG7+4sSOO8ofaaADbHYkrB+EZUf9mFKJV4UaVl8MbY5ojQ0NSfvGPmwKM QPAa5Lhbf8yvWAIzK75AcvdAi4BogiGuEMrMwnOGdxmtQrCRI0/YW3zAaa6VDOOB lYK7r/Nv0Gy6n0GCrFbUenQHl/xkRF6jzn9/G+Qe6r4gljCwaaXUs+4r93ChMjt4 KHSb/tD7wMU913Fo8QHuxo3fo59lZRUVi1fI2RTK9jZVJRF5mImj1seCIiDXkpR0 r96ZlXCbKkLHpMZThP2fWzrspTzSPnxaSNDCeJak3c9dWFxU47g= -----END CERTIFICATE-----Generated at Sat Mar 28 11:42:46 2026 by rpki-client