$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144894.roa File: AS144894.roa (raw, json) Hash identifier: 7MhOKvJPBVzIt6suapEdyiIvVK9XMt86aKZ+5RGxOtU= Subject key identifier: 78:34:99:5B:D8:8B:68:29:8F:12:97:0B:70:2A:8C:BB:0F:34:70:EB Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 5056FCB1AAECAB60B89EFE4192674807F2C5D985 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144894.roa Signing time: Wed 04 Mar 2026 06:21:50 +0000 ROA not before: Wed 04 Mar 2026 06:16:50 +0000 ROA not after: Wed 03 Mar 2027 06:21:50 +0000 asID: 144894 IP address blocks: 240a:a8c4::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:56:fc:b1:aa:ec:ab:60:b8:9e:fe:41:92:67:48:07:f2:c5:d9:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:16:50 2026 GMT Not After : Mar 3 06:21:50 2027 GMT Subject: CN=7834995BD88B68298F12970B702A8CBB0F3470EB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:d8:a8:ea:7a:c9:26:f2:0a:27:46:d1:6f:21: 22:42:de:c0:52:33:c2:05:25:21:8f:56:02:76:70: bd:b4:f5:69:fa:12:99:6d:f6:09:a3:82:56:ae:35: 9d:7c:77:ea:be:5a:b0:b3:5d:bb:17:87:17:03:19: 25:20:ae:ba:35:21:f0:2d:99:84:46:14:79:fe:ae: a2:b7:88:b1:47:37:76:18:af:a8:4b:08:0c:3a:87: 90:6d:83:f7:de:d8:46:b6:82:a6:57:cd:e2:8f:d3: 42:c7:df:06:5d:75:6c:7f:e0:d7:bc:12:8b:44:39: c5:cd:1c:3b:6f:a3:35:77:28:65:7b:f8:7e:b0:67: 67:93:d1:e6:13:19:3b:bc:51:ea:bb:ea:25:53:48: b7:e9:14:31:63:52:51:70:1a:f5:2e:08:b1:dc:de: 34:2e:1d:5d:ad:7a:14:70:96:a4:41:1b:40:d6:b9: db:14:9e:4c:84:ec:e2:ef:77:20:6f:ce:e2:65:26: d0:ae:0a:86:13:bf:fb:3e:10:5d:a5:18:d2:e4:55: b3:dd:57:69:b5:b0:63:7a:80:41:4a:a7:0a:02:41: 58:4f:33:4d:65:a0:e2:f2:a0:01:83:a3:13:d6:e4: 0c:bb:81:ec:e7:f7:07:47:60:e1:02:7d:2a:c5:0a: e8:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:34:99:5B:D8:8B:68:29:8F:12:97:0B:70:2A:8C:BB:0F:34:70:EB X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144894.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a8c4::/32 Signature Algorithm: sha256WithRSAEncryption 7b:0d:88:2e:9f:61:8c:c4:9e:15:7b:f7:a9:df:1b:ce:ec:0c: b5:30:3b:be:ec:da:12:4a:a5:74:40:9f:7f:f7:53:13:61:45: 27:6f:f8:cb:2b:c7:95:83:c8:84:8b:1b:fa:06:aa:39:ad:a3: 27:89:3f:83:5a:ff:53:75:d2:ed:68:0a:58:80:e1:93:2c:ab: 7e:dd:c2:d1:23:03:76:aa:58:d0:c0:6e:46:b7:cc:d7:7c:86: 65:d0:d8:55:f5:22:1c:11:4c:3b:1a:04:a6:aa:67:7c:b5:a8: 18:92:e4:1a:2e:cd:fa:02:4a:2e:1d:8a:80:88:f7:e0:b5:28: ec:f4:9e:78:c2:78:e6:9a:40:c7:a5:36:a0:9a:d8:57:56:52: c9:29:40:23:1e:20:30:c8:ac:39:b6:bd:1c:60:bf:5d:3e:fe: b5:9b:5d:de:f3:5f:92:35:37:c9:2f:89:df:f7:05:3a:3c:6c: 4b:4a:61:67:3b:06:e3:06:42:88:b4:39:81:a7:ec:e6:da:b6: 72:68:d5:27:71:77:3c:31:42:83:f3:04:aa:f8:b7:db:36:56: cc:72:a0:b8:37:d5:d1:53:03:3b:49:65:cb:aa:6c:98:50:58: 36:5e:60:43:fa:d9:d7:8d:36:9d:80:e3:c2:6f:bd:84:54:e5: 44:6b:1d:39 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUUFb8sarsq2C4nv5BkmdIB/LF2YUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTY1MFoX DTI3MDMwMzA2MjE1MFowMzExMC8GA1UEAxMoNzgzNDk5NUJEODhCNjgyOThGMTI5 NzBCNzAyQThDQkIwRjM0NzBFQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMrYqOp6ySbyCidG0W8hIkLewFIzwgUlIY9WAnZwvbT1afoSmW32CaOCVq41 nXx36r5asLNduxeHFwMZJSCuujUh8C2ZhEYUef6uoreIsUc3dhivqEsIDDqHkG2D 997YRraCplfN4o/TQsffBl11bH/g17wSi0Q5xc0cO2+jNXcoZXv4frBnZ5PR5hMZ O7xR6rvqJVNIt+kUMWNSUXAa9S4IsdzeNC4dXa16FHCWpEEbQNa52xSeTITs4u93 IG/O4mUm0K4KhhO/+z4QXaUY0uRVs91XabWwY3qAQUqnCgJBWE8zTWWg4vKgAYOj E9bkDLuB7Of3B0dg4QJ9KsUK6NUCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBR4NJlb 2ItoKY8SlwtwKoy7DzRw6zAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDg5NC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qMQwDQYJKoZIhvcNAQELBQADggEBAHsNiC6fYYzEnhV796nfG87sDLUwO77s2hJK pXRAn3/3UxNhRSdv+Msrx5WDyISLG/oGqjmtoyeJP4Na/1N10u1oCliA4ZMsq37d wtEjA3aqWNDAbka3zNd8hmXQ2FX1IhwRTDsaBKaqZ3y1qBiS5BouzfoCSi4dioCI 9+C1KOz0nnjCeOaaQMelNqCa2FdWUskpQCMeIDDIrDm2vRxgv10+/rWbXd7zX5I1 N8kvid/3BTo8bEtKYWc7BuMGQoi0OYGn7ObatnJo1SdxdzwxQoPzBKr4t9s2Vsxy oLg31dFTAztJZcuqbJhQWDZeYEP62deNNp2A48JvvYRU5URrHTk= -----END CERTIFICATE-----Generated at Sat Mar 28 11:44:07 2026 by rpki-client