$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144917.roa File: AS144917.roa (raw, json) Hash identifier: 3m9Uu8fog3OY8tF71w8568YKnEQQxutonCcvbsm1uoA= Subject key identifier: A1:E6:D4:E7:F4:93:5D:47:1E:03:EA:37:AA:16:05:C3:9B:CF:44:6F Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 670D700E468D8AFA26BC7D61066E3961126111C6 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144917.roa Signing time: Wed 04 Mar 2026 06:21:04 +0000 ROA not before: Wed 04 Mar 2026 06:16:04 +0000 ROA not after: Wed 03 Mar 2027 06:21:04 +0000 asID: 144917 IP address blocks: 240a:a8db::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:0d:70:0e:46:8d:8a:fa:26:bc:7d:61:06:6e:39:61:12:61:11:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:16:04 2026 GMT Not After : Mar 3 06:21:04 2027 GMT Subject: CN=A1E6D4E7F4935D471E03EA37AA1605C39BCF446F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:71:4e:b4:de:60:81:c9:62:98:63:90:4f:96: 11:00:15:71:3e:06:24:ff:ca:93:c4:76:e6:b9:b5: de:19:63:ec:7d:0c:74:e4:04:65:70:91:20:66:c1: 60:b9:46:94:94:8a:f4:ab:3d:05:7e:a1:52:4e:46: ec:1c:c9:dc:e6:5b:25:28:95:1e:6d:30:5f:60:0c: 19:8b:43:37:d0:b6:33:56:07:32:e1:18:bf:8c:d6: ff:52:fd:ed:b0:76:84:de:80:a1:e9:a9:82:7d:e4: 5c:93:5d:50:46:8f:75:c1:04:9d:e0:8b:e4:7a:2a: b2:95:c7:b4:15:50:5c:c8:01:33:36:1f:45:84:d5: 5d:d3:88:17:54:d3:7e:d3:c1:45:87:cf:3c:f6:cb: d0:02:0d:27:9b:82:a2:8c:1c:9d:d4:e3:81:bc:e6: 12:4d:41:b4:03:5e:14:a8:24:30:6b:c0:03:5e:7d: c0:71:e3:3c:32:cc:f7:77:f1:dd:7d:7a:e6:79:67: ec:78:db:c7:99:c2:8c:87:e4:76:c4:22:10:6d:4f: 59:93:76:3b:fe:c7:9d:1b:3b:b7:a6:68:9a:6a:83: 55:df:86:b7:06:36:72:9d:8e:7c:47:ac:42:05:d9: f4:d2:b2:6a:ad:d0:f4:a3:55:b0:59:18:2c:77:78: 16:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:E6:D4:E7:F4:93:5D:47:1E:03:EA:37:AA:16:05:C3:9B:CF:44:6F X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144917.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a8db::/32 Signature Algorithm: sha256WithRSAEncryption 97:a4:7a:35:be:37:b6:f4:c2:0d:38:33:99:11:5e:96:38:9e: 44:3b:4e:20:cc:28:02:58:00:fb:da:ec:21:16:b6:51:ec:fc: ed:3b:09:d9:87:ba:53:d6:27:a6:ba:e7:3b:d9:ab:b8:81:d1: 8e:55:00:22:97:ce:41:0d:24:b1:c1:f5:50:eb:f6:dc:4b:8e: e4:67:f2:4e:d5:ea:ce:73:a9:91:8d:21:ec:c2:df:29:25:4f: aa:30:a6:39:13:07:10:36:cf:21:b6:4c:d3:0a:5c:55:09:1b: 96:d0:f0:fb:1e:7d:d2:b3:2d:f4:6a:57:11:46:bf:78:9b:8b: 42:a8:32:f6:c1:47:98:05:0a:cb:ee:18:49:1a:51:8b:c3:1d: c8:7d:61:f9:f7:e7:c4:d7:4a:b7:ab:2b:8e:59:b6:3c:d1:86: 20:ca:1d:0c:40:0f:d5:2e:a6:ce:2b:1d:d6:e3:7a:bc:ee:4b: d7:b3:ad:cf:cd:9f:e9:45:01:98:b4:6f:82:e8:48:90:b3:30: 76:b7:8e:62:51:1d:9a:ae:9a:dc:3e:d3:68:63:aa:6f:ec:6f: 2d:fc:b6:d8:5a:7f:9a:84:87:bd:32:12:6b:5c:34:86:ac:52: aa:3d:c6:ae:92:2a:94:52:fb:95:d1:f8:f4:21:61:44:fa:a9: 9e:d8:72:f1 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUZw1wDkaNivomvH1hBm45YRJhEcYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTYwNFoX DTI3MDMwMzA2MjEwNFowMzExMC8GA1UEAxMoQTFFNkQ0RTdGNDkzNUQ0NzFFMDNF QTM3QUExNjA1QzM5QkNGNDQ2RjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMNxTrTeYIHJYphjkE+WEQAVcT4GJP/Kk8R25rm13hlj7H0MdOQEZXCRIGbB YLlGlJSK9Ks9BX6hUk5G7BzJ3OZbJSiVHm0wX2AMGYtDN9C2M1YHMuEYv4zW/1L9 7bB2hN6Aoempgn3kXJNdUEaPdcEEneCL5HoqspXHtBVQXMgBMzYfRYTVXdOIF1TT ftPBRYfPPPbL0AINJ5uCoowcndTjgbzmEk1BtANeFKgkMGvAA159wHHjPDLM93fx 3X165nln7Hjbx5nCjIfkdsQiEG1PWZN2O/7HnRs7t6ZommqDVd+GtwY2cp2OfEes QgXZ9NKyaq3Q9KNVsFkYLHd4FtUCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSh5tTn 9JNdRx4D6jeqFgXDm89EbzAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDkxNy5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qNswDQYJKoZIhvcNAQELBQADggEBAJekejW+N7b0wg04M5kRXpY4nkQ7TiDMKAJY APva7CEWtlHs/O07CdmHulPWJ6a65zvZq7iB0Y5VACKXzkENJLHB9VDr9txLjuRn 8k7V6s5zqZGNIezC3yklT6owpjkTBxA2zyG2TNMKXFUJG5bQ8PsefdKzLfRqVxFG v3ibi0KoMvbBR5gFCsvuGEkaUYvDHch9Yfn358TXSrerK45ZtjzRhiDKHQxAD9Uu ps4rHdbjerzuS9ezrc/Nn+lFAZi0b4LoSJCzMHa3jmJRHZqumtw+02hjqm/sby38 tthaf5qEh70yEmtcNIasUqo9xq6SKpRS+5XR+PQhYUT6qZ7YcvE= -----END CERTIFICATE-----Generated at Sat Mar 28 11:49:58 2026 by rpki-client