$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144915.roa File: AS144915.roa (raw, json) Hash identifier: xwid0hdhfav5EKUw5WQUSSDKbcll474p7taVsP0KtCk= Subject key identifier: 3F:C4:95:D5:44:C1:61:44:5F:04:0F:5B:6C:41:55:F5:95:5D:17:14 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 3E7DAC87DD79CB544FE0D08171307B6E32713761 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144915.roa Signing time: Wed 04 Mar 2026 06:19:58 +0000 ROA not before: Wed 04 Mar 2026 06:14:58 +0000 ROA not after: Wed 03 Mar 2027 06:19:58 +0000 asID: 144915 IP address blocks: 240a:a8d9::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:7d:ac:87:dd:79:cb:54:4f:e0:d0:81:71:30:7b:6e:32:71:37:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:14:58 2026 GMT Not After : Mar 3 06:19:58 2027 GMT Subject: CN=3FC495D544C161445F040F5B6C4155F5955D1714 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:9d:a7:1c:69:35:04:34:f2:d4:9a:df:7b:37: 8a:63:f4:46:3b:db:d0:2a:fa:d6:6d:f3:38:f2:44: 39:b4:06:d1:31:0b:b9:80:0f:44:fd:55:ed:3c:0b: 1c:ab:67:7d:70:5c:bc:9f:e0:6b:10:19:f3:83:58: b0:72:1f:b2:88:dd:70:f6:e3:00:12:fe:28:73:b5: 0d:53:a3:e8:0d:11:f2:41:32:94:b1:f1:3d:b0:ca: ed:d0:87:48:74:2f:a3:e1:0c:3b:30:33:66:01:54: 20:1a:a8:50:1b:a2:ab:16:eb:50:b1:d8:f8:4c:59: c6:7d:ff:0a:5b:7c:f0:e2:f1:2b:86:d0:90:e4:5c: b8:9a:1b:2d:98:a5:4a:ce:d6:2e:a3:6b:87:9c:9c: 3e:c8:12:d6:d5:35:78:78:05:63:4a:ec:51:80:18: 61:c0:51:d2:69:d0:30:67:93:f7:38:0f:6a:e8:42: d6:84:05:ad:8c:83:a1:33:6b:ee:a4:27:d6:1d:f3: 9d:48:46:97:a3:77:7e:f5:41:cc:21:7c:85:89:2a: 42:e3:ff:d2:20:8f:7a:d2:19:ad:ff:b3:b1:30:d7: d0:0d:98:07:28:90:b9:67:35:d7:e2:ab:a6:c0:c5: 14:e9:fa:30:bc:3f:91:2f:4b:7a:98:4f:32:26:d7: 12:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:C4:95:D5:44:C1:61:44:5F:04:0F:5B:6C:41:55:F5:95:5D:17:14 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144915.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a8d9::/32 Signature Algorithm: sha256WithRSAEncryption 3c:d0:ea:a0:71:92:15:5b:c1:09:8c:09:c0:0c:21:3a:ae:ac: e5:f0:c9:20:e4:11:ab:f5:4b:76:80:a4:eb:c8:a2:1b:ae:b3: de:f0:ca:27:f1:ab:2a:4c:96:3f:0b:8c:28:f0:91:f9:da:e2: 77:98:7b:64:57:ce:75:a5:8c:40:2d:8f:a0:dc:a8:50:6e:e8: 37:33:cf:86:ac:01:ff:a7:59:0f:a1:fc:d8:5e:6f:7b:9e:0e: bb:60:21:d0:0b:68:a1:48:1f:82:48:1a:26:17:93:f4:3e:dc: 3f:06:78:f6:64:39:59:a0:65:05:c1:53:ca:08:a9:fd:fb:36: 6b:98:7d:70:4c:a6:ff:41:ca:a3:b6:ad:e4:63:14:32:86:5b: ad:06:96:68:5d:6d:86:e2:a5:da:4d:3a:e3:58:c9:c7:e1:93: 78:b8:01:9f:7d:dc:3e:dd:28:65:c5:69:ef:22:05:6e:2a:ed: 11:ea:b3:f7:31:31:39:77:1b:51:ca:c4:f4:90:ab:6e:bb:73: cf:fb:50:52:9c:82:71:56:91:e6:91:69:83:86:8e:88:8b:50: 1f:4e:a4:b7:6c:20:16:b3:77:cf:5b:2b:d2:10:63:c7:57:89: 54:a3:45:69:fa:54:2f:10:d3:5a:61:fa:e7:2a:01:f5:8e:07: b1:f6:6f:3b -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUPn2sh915y1RP4NCBcTB7bjJxN2EwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTQ1OFoX DTI3MDMwMzA2MTk1OFowMzExMC8GA1UEAxMoM0ZDNDk1RDU0NEMxNjE0NDVGMDQw RjVCNkM0MTU1RjU5NTVEMTcxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL2dpxxpNQQ08tSa33s3imP0Rjvb0Cr61m3zOPJEObQG0TELuYAPRP1V7TwL HKtnfXBcvJ/gaxAZ84NYsHIfsojdcPbjABL+KHO1DVOj6A0R8kEylLHxPbDK7dCH SHQvo+EMOzAzZgFUIBqoUBuiqxbrULHY+ExZxn3/Clt88OLxK4bQkORcuJobLZil Ss7WLqNrh5ycPsgS1tU1eHgFY0rsUYAYYcBR0mnQMGeT9zgPauhC1oQFrYyDoTNr 7qQn1h3znUhGl6N3fvVBzCF8hYkqQuP/0iCPetIZrf+zsTDX0A2YByiQuWc11+Kr psDFFOn6MLw/kS9LephPMibXEjcCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQ/xJXV RMFhRF8ED1tsQVX1lV0XFDAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDkxNS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qNkwDQYJKoZIhvcNAQELBQADggEBADzQ6qBxkhVbwQmMCcAMITqurOXwySDkEav1 S3aApOvIohuus97wyifxqypMlj8LjCjwkfna4neYe2RXznWljEAtj6DcqFBu6Dcz z4asAf+nWQ+h/Nheb3ueDrtgIdALaKFIH4JIGiYXk/Q+3D8GePZkOVmgZQXBU8oI qf37NmuYfXBMpv9ByqO2reRjFDKGW60GlmhdbYbipdpNOuNYycfhk3i4AZ993D7d KGXFae8iBW4q7RHqs/cxMTl3G1HKxPSQq267c8/7UFKcgnFWkeaRaYOGjoiLUB9O pLdsIBazd89bK9IQY8dXiVSjRWn6VC8Q01ph+ucqAfWOB7H2bzs= -----END CERTIFICATE-----Generated at Sat Mar 28 11:49:49 2026 by rpki-client