$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144891.roa File: AS144891.roa (raw, json) Hash identifier: 2dgYj42lIU44Zk8hhQh7xOXG8zWFUhtun7O6nJZRc5A= Subject key identifier: 4C:43:19:B6:EC:79:9E:17:F5:DB:57:68:E0:53:F4:9B:50:90:3E:1B Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 2A395074ED4A4322B47FB62FFF728D46EB492C1E Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144891.roa Signing time: Wed 04 Mar 2026 06:19:46 +0000 ROA not before: Wed 04 Mar 2026 06:14:46 +0000 ROA not after: Wed 03 Mar 2027 06:19:46 +0000 asID: 144891 IP address blocks: 240a:a8c1::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:39:50:74:ed:4a:43:22:b4:7f:b6:2f:ff:72:8d:46:eb:49:2c:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:14:46 2026 GMT Not After : Mar 3 06:19:46 2027 GMT Subject: CN=4C4319B6EC799E17F5DB5768E053F49B50903E1B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:cf:b6:07:c5:21:95:e8:ff:9d:58:09:c4:24: 56:ba:e7:32:45:38:0c:75:4f:c9:5e:8c:1d:d9:46: d7:7f:16:93:29:47:9c:03:93:b0:47:c3:fb:fe:2b: a6:6b:96:64:a1:cf:63:07:04:04:95:11:f1:65:26: 80:b0:95:bc:2b:ff:de:25:44:94:24:f9:f5:1b:d8: d7:0b:76:55:a0:de:42:e0:b3:96:ca:2c:8f:79:8d: fb:2a:9c:46:13:52:51:f1:a5:44:75:95:d6:70:4a: 85:e7:3b:82:c5:31:88:ae:47:7c:fc:1b:d8:9c:08: c7:2e:d4:ad:12:84:16:0c:93:8f:42:f6:27:7d:f2: f6:d0:d4:bb:f1:9d:6f:8e:eb:15:95:1a:53:38:12: 9c:b8:3d:26:2e:1a:0d:83:25:c5:db:01:3e:76:23: 88:1f:76:01:fd:29:65:78:b1:03:ba:79:16:ae:88: 08:85:46:9b:a3:5e:10:60:d1:c1:d2:aa:cd:4b:ae: 52:e9:57:7a:2e:ac:6e:87:09:fb:13:8c:e6:d7:4c: 1a:0b:cc:77:38:d9:cd:c7:84:7b:56:79:f1:87:6a: fc:40:35:ef:ae:4c:d5:66:26:44:3c:12:29:0a:a0: a4:1f:33:54:4b:b7:d5:4f:64:f0:76:1f:c1:32:c3: dc:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:43:19:B6:EC:79:9E:17:F5:DB:57:68:E0:53:F4:9B:50:90:3E:1B X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144891.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a8c1::/32 Signature Algorithm: sha256WithRSAEncryption 9a:94:e2:db:e4:d9:ae:dd:d3:c5:69:f5:87:7b:8a:28:e5:32: a9:c3:21:ae:0b:c8:de:48:50:5e:b9:3d:76:7f:cd:e0:22:01: 44:51:23:bb:16:55:37:68:45:82:6b:07:41:a7:12:5b:a1:74: a1:25:ff:c4:4c:29:c3:44:a9:44:dd:05:6b:37:aa:ea:64:b3: ad:df:cc:30:78:21:9b:83:cc:b4:e8:ad:42:f8:b3:7a:33:64: e5:f2:10:f4:76:c4:24:39:f9:e1:d3:b8:19:2f:40:b5:1c:db: b0:5c:6c:47:7c:f4:f8:e1:de:1d:1f:17:40:88:0a:bc:e6:d7: 4e:44:1e:db:fc:d5:16:3b:8c:14:05:5c:8c:e8:48:43:b5:c0: a6:03:c9:5f:58:ff:86:a7:1f:47:12:30:16:fa:94:3a:9d:04: f4:4f:00:10:fd:32:fb:dc:48:99:c6:3d:17:a3:88:f1:00:c8: 6b:ad:8a:cf:18:16:52:a2:92:b5:04:58:c1:0c:3e:70:d9:80: 51:89:6c:b0:e3:36:b5:0c:da:4b:51:be:23:4a:9a:af:44:18: 43:6c:14:af:32:de:de:74:4d:dc:ac:23:21:fd:00:8f:6a:f6: 09:db:e2:85:de:26:76:96:8c:a2:9b:e7:10:7e:69:1d:6c:54: f2:bf:0f:53 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUKjlQdO1KQyK0f7Yv/3KNRutJLB4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTQ0NloX DTI3MDMwMzA2MTk0NlowMzExMC8GA1UEAxMoNEM0MzE5QjZFQzc5OUUxN0Y1REI1 NzY4RTA1M0Y0OUI1MDkwM0UxQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANrPtgfFIZXo/51YCcQkVrrnMkU4DHVPyV6MHdlG138WkylHnAOTsEfD+/4r pmuWZKHPYwcEBJUR8WUmgLCVvCv/3iVElCT59RvY1wt2VaDeQuCzlsosj3mN+yqc RhNSUfGlRHWV1nBKhec7gsUxiK5HfPwb2JwIxy7UrRKEFgyTj0L2J33y9tDUu/Gd b47rFZUaUzgSnLg9Ji4aDYMlxdsBPnYjiB92Af0pZXixA7p5Fq6ICIVGm6NeEGDR wdKqzUuuUulXei6sbocJ+xOM5tdMGgvMdzjZzceEe1Z58Ydq/EA1765M1WYmRDwS KQqgpB8zVEu31U9k8HYfwTLD3BMCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRMQxm2 7HmeF/XbV2jgU/SbUJA+GzAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDg5MS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qMEwDQYJKoZIhvcNAQELBQADggEBAJqU4tvk2a7d08Vp9Yd7iijlMqnDIa4LyN5I UF65PXZ/zeAiAURRI7sWVTdoRYJrB0GnEluhdKEl/8RMKcNEqUTdBWs3qupks63f zDB4IZuDzLTorUL4s3ozZOXyEPR2xCQ5+eHTuBkvQLUc27BcbEd89Pjh3h0fF0CI Crzm105EHtv81RY7jBQFXIzoSEO1wKYDyV9Y/4anH0cSMBb6lDqdBPRPABD9Mvvc SJnGPRejiPEAyGutis8YFlKikrUEWMEMPnDZgFGJbLDjNrUM2ktRviNKmq9EGENs FK8y3t50TdysIyH9AI9q9gnb4oXeJnaWjKKb5xB+aR1sVPK/D1M= -----END CERTIFICATE-----Generated at Sat Mar 28 14:30:43 2026 by rpki-client