$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144895.roa File: AS144895.roa (raw, json) Hash identifier: ayI58Adqn39VblFwc8NEDWMiCojlliJz46gE06jW1Io= Subject key identifier: 8B:C0:61:25:73:BB:05:63:04:45:B1:32:F9:72:23:33:82:0A:37:E7 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 6A8BE382836FAC326CE49BBFC9D1906AE3CDC52F Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144895.roa Signing time: Wed 04 Mar 2026 06:22:01 +0000 ROA not before: Wed 04 Mar 2026 06:17:01 +0000 ROA not after: Wed 03 Mar 2027 06:22:01 +0000 asID: 144895 IP address blocks: 240a:a8c5::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:8b:e3:82:83:6f:ac:32:6c:e4:9b:bf:c9:d1:90:6a:e3:cd:c5:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:17:01 2026 GMT Not After : Mar 3 06:22:01 2027 GMT Subject: CN=8BC0612573BB05630445B132F9722333820A37E7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:4a:90:00:e7:b8:34:46:bd:d0:36:5d:fa:5c: 87:25:54:7a:f6:de:bb:fe:5e:34:8a:bf:0b:94:34: ed:c1:5e:6d:86:1a:f0:83:6a:cb:fa:dc:71:cb:75: 69:36:62:77:21:c2:ea:21:26:ff:73:5f:aa:bf:b6: e4:4c:ea:36:0e:9f:51:ff:c0:b2:5c:d9:b0:c4:51: 00:c2:5b:f9:b4:bc:92:21:f6:4b:65:ad:36:b4:db: ee:77:0b:91:be:f2:4f:96:c2:b4:b6:64:e8:2c:53: b6:18:45:16:90:0e:9a:86:1f:4f:e3:f2:22:8e:cd: 20:d6:9d:ed:3f:00:5c:c2:b5:68:9b:77:d1:4f:78: ba:fe:d7:32:0d:9e:e6:3b:51:06:f3:00:b0:e3:6c: f8:f3:5f:94:2b:b3:05:58:61:65:86:d7:44:a6:d1: a9:9e:2c:5f:1e:23:70:5e:5b:2e:41:08:80:bc:ba: 38:f7:a0:a3:af:38:4a:5c:cd:ba:b4:10:6a:3a:5f: 25:da:22:e7:b0:20:15:bb:3c:f8:6b:85:2d:24:78: fb:de:25:33:c0:fc:aa:2a:81:af:d5:63:b7:8a:f8: 2a:1b:db:c3:67:70:dc:70:e7:00:96:6b:5e:5f:9f: 6b:01:db:7d:29:cc:8e:4e:31:b1:f6:cb:7e:57:9f: 72:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:C0:61:25:73:BB:05:63:04:45:B1:32:F9:72:23:33:82:0A:37:E7 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144895.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a8c5::/32 Signature Algorithm: sha256WithRSAEncryption 99:ee:fb:ec:a7:71:f1:f8:c0:bb:1d:37:3a:c4:db:db:40:a2: f5:09:bf:55:93:b0:14:36:6c:b7:42:0b:03:10:b6:66:fc:47: 2d:95:d5:b1:10:ba:97:35:c2:56:66:4b:77:08:56:d0:14:65: 26:2f:0e:d8:f3:f8:d6:bf:4e:dc:db:a4:24:4a:52:3b:2b:06: 04:fc:da:9b:af:26:00:65:ca:05:36:3f:ea:cd:13:88:a0:84: fc:6b:5f:d7:5c:41:36:a4:ad:de:b6:ae:f4:45:fd:a8:8b:51: 8f:bd:8f:ed:08:a3:64:61:1a:2a:09:c9:1e:01:80:77:22:34: 03:80:a4:e6:d0:be:2c:b8:a2:97:f8:83:46:eb:b4:51:41:78: 41:9c:b5:7d:e5:aa:20:2e:7f:d7:13:50:ae:5d:f3:0c:a5:b6: 81:9c:3d:6d:7f:5d:3f:c5:9a:89:cb:6d:63:9f:f8:62:91:82: cd:50:af:72:36:e9:3c:32:9d:df:01:90:64:9d:b7:30:91:b6: 34:ac:44:95:47:42:e6:70:21:ce:28:30:4c:58:c1:dc:83:d2: db:19:d9:95:e5:58:d9:02:3f:6b:77:9f:59:41:85:87:d2:bb: 47:3a:26:a1:57:f1:8e:5c:f5:af:06:63:45:f7:06:1b:6e:f6: 27:66:0c:8c -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUaovjgoNvrDJs5Ju/ydGQauPNxS8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTcwMVoX DTI3MDMwMzA2MjIwMVowMzExMC8GA1UEAxMoOEJDMDYxMjU3M0JCMDU2MzA0NDVC MTMyRjk3MjIzMzM4MjBBMzdFNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKhKkADnuDRGvdA2XfpchyVUevbeu/5eNIq/C5Q07cFebYYa8INqy/rccct1 aTZidyHC6iEm/3Nfqr+25EzqNg6fUf/AslzZsMRRAMJb+bS8kiH2S2WtNrTb7ncL kb7yT5bCtLZk6CxTthhFFpAOmoYfT+PyIo7NINad7T8AXMK1aJt30U94uv7XMg2e 5jtRBvMAsONs+PNflCuzBVhhZYbXRKbRqZ4sXx4jcF5bLkEIgLy6OPego684SlzN urQQajpfJdoi57AgFbs8+GuFLSR4+94lM8D8qiqBr9Vjt4r4Khvbw2dw3HDnAJZr Xl+fawHbfSnMjk4xsfbLflefcrUCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSLwGEl c7sFYwRFsTL5ciMzggo35zAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDg5NS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qMUwDQYJKoZIhvcNAQELBQADggEBAJnu++yncfH4wLsdNzrE29tAovUJv1WTsBQ2 bLdCCwMQtmb8Ry2V1bEQupc1wlZmS3cIVtAUZSYvDtjz+Na/TtzbpCRKUjsrBgT8 2puvJgBlygU2P+rNE4ighPxrX9dcQTakrd62rvRF/aiLUY+9j+0Io2RhGioJyR4B gHciNAOApObQviy4opf4g0brtFFBeEGctX3lqiAuf9cTUK5d8wyltoGcPW1/XT/F monLbWOf+GKRgs1Qr3I26Twynd8BkGSdtzCRtjSsRJVHQuZwIc4oMExYwdyD0tsZ 2ZXlWNkCP2t3n1lBhYfSu0c6JqFX8Y5c9a8GY0X3Bhtu9idmDIw= -----END CERTIFICATE-----Generated at Sat Mar 28 11:41:37 2026 by rpki-client