$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144899.roa File: AS144899.roa (raw, json) Hash identifier: aSQ6Ff9tDgEqvwW/zCo9ctOfdlAfYnaLw5vo5QEs2eo= Subject key identifier: 1B:A0:87:71:83:10:51:35:D2:23:01:6D:41:E1:05:D2:7D:1D:31:BA Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 3F1F15E8537763CC0EA299399DE2B681B5F06E Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144899.roa Signing time: Wed 04 Mar 2026 06:21:40 +0000 ROA not before: Wed 04 Mar 2026 06:16:40 +0000 ROA not after: Wed 03 Mar 2027 06:21:40 +0000 asID: 144899 IP address blocks: 240a:a8c9::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:1f:15:e8:53:77:63:cc:0e:a2:99:39:9d:e2:b6:81:b5:f0:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:16:40 2026 GMT Not After : Mar 3 06:21:40 2027 GMT Subject: CN=1BA0877183105135D223016D41E105D27D1D31BA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:dd:5d:6a:65:5d:4b:9f:41:9f:d9:9e:8c:41: 11:63:2d:7d:db:84:72:f5:0c:5a:22:bc:8f:0c:9b: 5a:79:a8:75:77:aa:5e:9c:1f:96:98:3d:86:c6:ca: bb:9b:b1:83:18:15:f7:41:a9:9d:fe:4e:8b:f9:95: 97:9f:c1:8d:36:61:79:c0:02:96:9d:05:61:b4:b2: d2:c4:9b:3d:08:7b:b7:cf:e6:e1:bc:3b:7a:f6:fd: 37:7e:bd:7b:cb:18:36:a0:d7:34:6a:8f:35:15:18: 94:4a:87:e5:12:62:2f:96:2e:19:e9:08:22:3c:e2: 90:b0:7b:cc:c9:2d:54:fc:48:a1:f1:3a:bb:fc:ce: d7:09:37:3e:53:9d:7f:9a:50:fd:16:5c:6e:6b:50: 6e:18:4e:ff:42:1e:61:c1:66:66:52:3c:e9:9f:f1: a3:37:8f:05:89:83:61:78:01:7e:4b:0b:19:a6:5d: 4f:f0:73:58:1a:94:4c:7d:e0:e6:bc:ab:8b:27:08: c3:0b:db:dd:c5:88:a9:2e:c6:d9:ff:73:d6:c6:62: 79:db:88:cc:44:58:17:3e:47:14:e0:6f:a7:50:b9: ed:df:5e:ba:60:c1:92:47:62:4b:01:1b:ed:38:65: b0:50:ac:d5:5b:0c:4f:c5:b1:a5:45:56:51:65:9e: cd:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:A0:87:71:83:10:51:35:D2:23:01:6D:41:E1:05:D2:7D:1D:31:BA X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144899.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a8c9::/32 Signature Algorithm: sha256WithRSAEncryption d9:7f:67:18:e8:b9:51:2d:59:1f:39:3b:f1:6f:de:27:56:1d: 8a:c7:ef:31:82:e2:7f:13:82:dd:86:6e:f9:15:a1:ba:b4:2d: d2:67:ad:1e:5b:b7:18:b8:9a:7b:f5:87:fe:09:47:24:f6:d6: 4d:21:4c:de:b1:7a:7a:9b:f7:86:cd:23:aa:0c:ff:80:2f:21: 59:ac:e1:8e:1b:85:e5:17:cf:17:b8:9e:05:7c:fb:56:d7:69: 19:16:a7:05:98:5b:7d:e4:e3:0b:9c:4e:c8:ec:2b:91:92:b8: d3:df:0e:c8:66:74:e7:94:50:d5:ef:d1:aa:62:a9:b1:41:71: e6:ff:9b:0f:7f:9b:3f:29:24:8b:c2:1b:7c:88:13:81:17:21: 85:15:8d:23:32:7a:33:08:8a:f1:6d:9b:f5:51:ad:e0:54:81: ec:49:56:4b:01:f2:19:8e:03:83:4f:b7:c3:62:b8:bd:77:7b: da:02:7b:49:58:87:e3:4e:4e:5d:ea:87:7c:da:df:32:74:93: fc:fd:bc:1c:45:37:65:46:ac:d1:ad:f6:41:e2:91:88:5a:ec: 67:92:7a:49:bf:c4:5e:da:4d:89:01:80:f3:e0:6a:d5:fd:13: 3b:28:00:1e:cc:8a:4b:95:68:7f:49:30:31:90:55:77:ab:e1: c1:24:51:13 -----BEGIN CERTIFICATE----- MIIE0TCCA7mgAwIBAgITPx8V6FN3Y8wOopk5neK2gbXwbjANBgkqhkiG9w0BAQsF ADBKMRUwEwYDVQQDDAxBOTFFNUQ2MTAwMDExMTAvBgNVBAUTKDA1RkM5QzVCODg1 MDZGN0MwRDNGODYyQzg4OTVCRUQ2N0U5RjhFQkEwHhcNMjYwMzA0MDYxNjQwWhcN MjcwMzAzMDYyMTQwWjAzMTEwLwYDVQQDEygxQkEwODc3MTgzMTA1MTM1RDIyMzAx NkQ0MUUxMDVEMjdEMUQzMUJBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlN1damVdS59Bn9mejEERYy1924Ry9QxaIryPDJtaeah1d6penB+WmD2Gxsq7 m7GDGBX3Qamd/k6L+ZWXn8GNNmF5wAKWnQVhtLLSxJs9CHu3z+bhvDt69v03fr17 yxg2oNc0ao81FRiUSoflEmIvli4Z6QgiPOKQsHvMyS1U/Eih8Tq7/M7XCTc+U51/ mlD9Flxua1BuGE7/Qh5hwWZmUjzpn/GjN48FiYNheAF+SwsZpl1P8HNYGpRMfeDm vKuLJwjDC9vdxYipLsbZ/3PWxmJ524jMRFgXPkcU4G+nULnt3166YMGSR2JLARvt OGWwUKzVWwxPxbGlRVZRZZ7N1wIDAQABo4IBxTCCAcEwHQYDVR0OBBYEFBugh3GD EFE10iMBbUHhBdJ9HTG6MB8GA1UdIwQYMBaAFAX8nFuIUG98DT+GLIiVvtZ+n466 MA4GA1UdDwEB/wQEAwIHgDBjBgNVHR8EXDBaMFigVqBUhlJyc3luYzovL3Jwa2ku Y2VybmV0Lm5ldC9yZXBvL2Nlcm5ldC8wLzA1RkM5QzVCODg1MDZGN0MwRDNGODYy Qzg4OTVCRUQ2N0U5RjhFQkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcw AoZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0JmeWNXNGhRYjN3TlA0WXNpSlctMW42Zmpy by5jZXIwTgYIKwYBBQUHAQsEQjBAMD4GCCsGAQUFBzALhjJyc3luYzovL3Jwa2ku Y2VybmV0Lm5ldC9yZXBvL2Nlcm5ldC8wL0FTMTQ0ODk5LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJAqo yTANBgkqhkiG9w0BAQsFAAOCAQEA2X9nGOi5US1ZHzk78W/eJ1YdisfvMYLifxOC 3YZu+RWhurQt0metHlu3GLiae/WH/glHJPbWTSFM3rF6epv3hs0jqgz/gC8hWazh jhuF5RfPF7ieBXz7VtdpGRanBZhbfeTjC5xOyOwrkZK4098OyGZ055RQ1e/RqmKp sUFx5v+bD3+bPykki8IbfIgTgRchhRWNIzJ6MwiK8W2b9VGt4FSB7ElWSwHyGY4D g0+3w2K4vXd72gJ7SViH405OXeqHfNrfMnST/P28HEU3ZUas0a32QeKRiFrsZ5J6 Sb/EXtpNiQGA8+Bq1f0TOygAHsyKS5Vof0kwMZBVd6vhwSRREw== -----END CERTIFICATE-----Generated at Sat Mar 28 13:14:05 2026 by rpki-client