$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144908.roa File: AS144908.roa (raw, json) Hash identifier: B6BIxYC2KTuMY0x52+Ig0ZMBAomGjsMkR4bhclhmsL0= Subject key identifier: 21:92:43:E8:B8:BF:7E:DB:61:9C:2E:A2:79:47:FD:E8:E3:2C:83:AE Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 1E505A6740939AA80515A7455468774831BB673B Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144908.roa Signing time: Wed 04 Mar 2026 06:20:57 +0000 ROA not before: Wed 04 Mar 2026 06:15:57 +0000 ROA not after: Wed 03 Mar 2027 06:20:57 +0000 asID: 144908 IP address blocks: 240a:a8d2::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:50:5a:67:40:93:9a:a8:05:15:a7:45:54:68:77:48:31:bb:67:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:15:57 2026 GMT Not After : Mar 3 06:20:57 2027 GMT Subject: CN=219243E8B8BF7EDB619C2EA27947FDE8E32C83AE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:f6:90:79:69:3e:c2:9d:93:cc:27:90:f7:5c: e1:ec:8a:40:a1:48:d7:dc:27:8b:f2:fb:2b:1c:74: e3:c8:23:fd:0a:24:b9:dd:e8:b9:c1:df:18:11:0a: 12:67:25:2f:6a:43:a6:4d:88:28:5c:de:30:99:30: 6c:5f:ca:96:9e:fb:b9:9f:c0:ce:8c:6d:33:ba:2c: ea:b4:89:3b:4b:c1:d2:e2:f2:95:63:04:89:17:e7: e2:b1:26:eb:f7:51:ad:d8:ae:e8:e9:09:81:2c:09: a8:20:5e:d8:58:19:64:9b:a8:e9:61:3a:9c:27:d0: 79:b4:6c:80:85:6c:9d:34:f5:99:9c:ed:13:2c:8f: 0e:95:26:fa:eb:10:38:e3:7f:1d:ff:50:59:e3:73: c0:e0:30:c4:3a:72:39:ea:bd:23:e8:bf:fb:70:05: 55:3b:b8:ae:af:fc:e3:74:90:93:c8:ab:03:84:8e: a8:ab:d3:1f:99:17:66:a6:9d:ac:7e:3e:9e:60:09: 87:83:62:c2:03:a9:f4:d1:cb:38:fd:7f:f5:94:bc: 8a:9d:78:7c:a3:75:db:42:ac:1e:5a:fa:75:9c:02: ac:4b:40:cd:79:17:9c:e6:8e:11:8c:8a:c3:97:77: ff:d6:64:35:a3:e9:fb:3b:1a:f1:d9:98:ea:0a:97: 4d:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:92:43:E8:B8:BF:7E:DB:61:9C:2E:A2:79:47:FD:E8:E3:2C:83:AE X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144908.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a8d2::/32 Signature Algorithm: sha256WithRSAEncryption 15:34:b9:3c:f3:d6:43:2f:19:0f:99:a7:b4:23:3f:98:51:ae: 85:59:92:b0:84:78:86:a1:2f:42:fa:a3:37:11:ac:3a:78:20: 4a:2f:6e:75:c1:85:5c:43:3a:bb:24:35:5f:8e:1a:7b:fc:ec: c8:39:1c:e2:3c:5e:96:64:d4:9f:d0:74:98:17:10:64:2d:96: 1c:df:b9:c7:e5:7b:b9:9c:81:cf:7e:ee:db:89:42:a9:b2:1b: 28:81:de:6b:a3:56:62:db:8a:9b:80:6d:0f:72:bf:a9:4d:43: e6:e5:28:2d:20:bf:95:24:f6:29:da:c0:aa:c1:9f:33:0c:19: 23:88:1a:29:78:cd:cb:6a:39:d5:7f:d2:1c:1c:59:e7:31:bb: 29:90:49:53:87:d7:18:ba:01:e6:76:91:b5:b2:4e:a1:65:33: 78:af:b3:93:26:46:30:5f:a2:8e:90:ce:f1:6a:2b:eb:e9:17: 1a:f7:df:e3:5a:33:93:4a:f2:7d:14:ba:dc:3b:61:cf:9b:67: 92:f9:75:14:fb:ef:5e:33:01:11:35:ed:d0:77:dc:1a:ab:fc: e3:3f:c7:fb:cd:16:86:19:96:e2:1b:65:7d:69:2c:12:ce:82: da:10:07:af:a7:c8:c3:82:6a:88:6e:7b:2e:e4:97:3f:23:60: a9:b1:c9:c8 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUHlBaZ0CTmqgFFadFVGh3SDG7ZzswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTU1N1oX DTI3MDMwMzA2MjA1N1owMzExMC8GA1UEAxMoMjE5MjQzRThCOEJGN0VEQjYxOUMy RUEyNzk0N0ZERThFMzJDODNBRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAI32kHlpPsKdk8wnkPdc4eyKQKFI19wni/L7Kxx048gj/Qokud3oucHfGBEK EmclL2pDpk2IKFzeMJkwbF/Klp77uZ/AzoxtM7os6rSJO0vB0uLylWMEiRfn4rEm 6/dRrdiu6OkJgSwJqCBe2FgZZJuo6WE6nCfQebRsgIVsnTT1mZztEyyPDpUm+usQ OON/Hf9QWeNzwOAwxDpyOeq9I+i/+3AFVTu4rq/843SQk8irA4SOqKvTH5kXZqad rH4+nmAJh4NiwgOp9NHLOP1/9ZS8ip14fKN120KsHlr6dZwCrEtAzXkXnOaOEYyK w5d3/9ZkNaPp+zsa8dmY6gqXTa8CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQhkkPo uL9+22GcLqJ5R/3o4yyDrjAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDkwOC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qNIwDQYJKoZIhvcNAQELBQADggEBABU0uTzz1kMvGQ+Zp7QjP5hRroVZkrCEeIah L0L6ozcRrDp4IEovbnXBhVxDOrskNV+OGnv87Mg5HOI8XpZk1J/QdJgXEGQtlhzf ucfle7mcgc9+7tuJQqmyGyiB3mujVmLbipuAbQ9yv6lNQ+blKC0gv5Uk9inawKrB nzMMGSOIGil4zctqOdV/0hwcWecxuymQSVOH1xi6AeZ2kbWyTqFlM3ivs5MmRjBf oo6QzvFqK+vpFxr33+NaM5NK8n0Uutw7Yc+bZ5L5dRT7714zARE17dB33Bqr/OM/ x/vNFoYZluIbZX1pLBLOgtoQB6+nyMOCaohuey7klz8jYKmxycg= -----END CERTIFICATE-----Generated at Sat Mar 28 11:41:37 2026 by rpki-client