$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144906.roa File: AS144906.roa (raw, json) Hash identifier: 2xcNlCHB+x/XVUIJtxmUVYVZ6Ku/7DHOKhQUHy0N5Yk= Subject key identifier: 3F:54:BD:4A:E7:24:EB:A9:5F:34:3F:7B:21:D1:B7:91:8C:10:B6:DF Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 1409A018AF908B82F23AA9D67D174D681A020FA5 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144906.roa Signing time: Wed 04 Mar 2026 06:22:11 +0000 ROA not before: Wed 04 Mar 2026 06:17:11 +0000 ROA not after: Wed 03 Mar 2027 06:22:11 +0000 asID: 144906 IP address blocks: 240a:a8d0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:09:a0:18:af:90:8b:82:f2:3a:a9:d6:7d:17:4d:68:1a:02:0f:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:17:11 2026 GMT Not After : Mar 3 06:22:11 2027 GMT Subject: CN=3F54BD4AE724EBA95F343F7B21D1B7918C10B6DF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:10:a3:3f:bc:c1:4d:9b:9b:ed:21:b1:7c:eb: 55:20:f7:6b:d0:8b:0b:da:26:09:94:de:7d:1b:9e: d9:ac:71:0c:81:69:0f:96:9b:04:06:b8:c7:dd:b0: 3b:ae:d5:25:1e:a2:55:5b:a6:0d:96:92:62:56:ae: 9e:25:8a:2d:19:ab:86:5c:40:1e:fc:35:4d:ca:f4: 6f:b6:f4:21:c0:e4:2a:e4:79:df:5c:73:61:aa:7b: b8:b3:86:45:2c:96:9b:9f:a0:68:59:86:02:c3:c5: 1e:b1:55:29:91:74:07:3b:c5:0d:c5:1a:26:e9:39: 94:68:c4:ec:92:a7:9e:52:7d:1f:97:3e:46:11:e7: 40:06:b0:0a:8b:4a:6c:b1:d1:3e:b3:20:63:fa:2a: 7d:4f:bc:16:60:28:00:17:06:8b:d1:86:9b:89:19: 92:72:71:0c:2d:dd:4a:48:51:61:f0:dc:7d:e6:9c: 4e:55:14:20:b1:79:9f:d0:f8:28:19:d4:e9:88:b1: 3e:b7:ae:a6:3d:dd:9b:57:77:f2:e2:b5:00:24:10: cf:39:6e:40:b2:97:6e:ff:77:5e:c0:60:06:b0:91: b7:57:ba:38:3a:25:b2:00:55:23:06:bc:58:df:fa: df:3b:ec:fe:ab:e9:da:72:94:bc:47:1d:f1:6d:05: 1c:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:54:BD:4A:E7:24:EB:A9:5F:34:3F:7B:21:D1:B7:91:8C:10:B6:DF X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144906.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a8d0::/32 Signature Algorithm: sha256WithRSAEncryption 95:98:80:22:61:c1:b5:fb:1c:6a:fb:01:6a:5c:38:ef:75:d7: 92:62:7e:80:fa:33:e2:ea:8e:03:44:22:8e:44:a8:9b:0e:8b: 0d:63:1a:a1:e6:2f:fe:e8:3e:2e:b0:fa:db:7a:44:2d:1f:2c: aa:9a:a4:8b:89:f7:c7:ea:85:63:59:18:84:27:b2:6e:8e:dd: 24:a3:91:71:38:de:89:80:0f:e4:48:57:f2:8b:6b:95:79:5f: c9:94:ae:cd:f3:3e:37:fb:55:02:aa:75:3c:a2:b6:cc:01:8a: bd:5a:26:61:2f:9c:75:d0:09:02:b7:76:bb:77:50:cb:79:db: 37:2a:70:ae:87:fa:f2:a8:e8:fb:af:0a:d9:b1:26:3c:49:97: 86:39:da:13:f9:75:80:8b:18:5d:74:c8:35:25:62:36:67:3b: 96:a8:5e:33:b1:31:b9:ec:aa:ef:7e:38:14:39:87:96:34:41: b0:f6:89:93:73:7c:fc:08:79:58:90:97:f8:b8:76:a7:ce:8a: 50:71:fd:32:4c:f7:36:ca:cd:68:95:0a:9c:de:3e:11:69:f9: cd:8d:8d:85:1f:1f:03:60:81:fa:4d:5e:6a:bd:2f:01:d5:fa: 66:eb:6d:5e:6e:9a:b2:7d:41:27:bd:b8:9a:16:70:0c:14:f8: 93:8e:a0:74 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUFAmgGK+Qi4LyOqnWfRdNaBoCD6UwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTcxMVoX DTI3MDMwMzA2MjIxMVowMzExMC8GA1UEAxMoM0Y1NEJENEFFNzI0RUJBOTVGMzQz RjdCMjFEMUI3OTE4QzEwQjZERjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMsQoz+8wU2bm+0hsXzrVSD3a9CLC9omCZTefRue2axxDIFpD5abBAa4x92w O67VJR6iVVumDZaSYlauniWKLRmrhlxAHvw1Tcr0b7b0IcDkKuR531xzYap7uLOG RSyWm5+gaFmGAsPFHrFVKZF0BzvFDcUaJuk5lGjE7JKnnlJ9H5c+RhHnQAawCotK bLHRPrMgY/oqfU+8FmAoABcGi9GGm4kZknJxDC3dSkhRYfDcfeacTlUUILF5n9D4 KBnU6YixPreupj3dm1d38uK1ACQQzzluQLKXbv93XsBgBrCRt1e6ODolsgBVIwa8 WN/63zvs/qvp2nKUvEcd8W0FHP0CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQ/VL1K 5yTrqV80P3sh0beRjBC23zAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDkwNi5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qNAwDQYJKoZIhvcNAQELBQADggEBAJWYgCJhwbX7HGr7AWpcOO9115JifoD6M+Lq jgNEIo5EqJsOiw1jGqHmL/7oPi6w+tt6RC0fLKqapIuJ98fqhWNZGIQnsm6O3SSj kXE43omAD+RIV/KLa5V5X8mUrs3zPjf7VQKqdTyitswBir1aJmEvnHXQCQK3drt3 UMt52zcqcK6H+vKo6PuvCtmxJjxJl4Y52hP5dYCLGF10yDUlYjZnO5aoXjOxMbns qu9+OBQ5h5Y0QbD2iZNzfPwIeViQl/i4dqfOilBx/TJM9zbKzWiVCpzePhFp+c2N jYUfHwNggfpNXmq9LwHV+mbrbV5umrJ9QSe9uJoWcAwU+JOOoHQ= -----END CERTIFICATE-----Generated at Sat Mar 28 11:42:38 2026 by rpki-client