$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144920.roa File: AS144920.roa (raw, json) Hash identifier: ZWrKEmWugWguwaBdLDcxDcBwSATlkMPEKb2+w9g4708= Subject key identifier: E9:EB:0B:19:4C:09:AA:2B:55:2A:30:8B:A7:3C:06:13:4A:FF:52:6A Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 4FE887A320A65B4E2E5584AD70AC706FD4B885CD Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144920.roa Signing time: Wed 04 Mar 2026 06:19:58 +0000 ROA not before: Wed 04 Mar 2026 06:14:58 +0000 ROA not after: Wed 03 Mar 2027 06:19:58 +0000 asID: 144920 IP address blocks: 240a:a8de::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:e8:87:a3:20:a6:5b:4e:2e:55:84:ad:70:ac:70:6f:d4:b8:85:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:14:58 2026 GMT Not After : Mar 3 06:19:58 2027 GMT Subject: CN=E9EB0B194C09AA2B552A308BA73C06134AFF526A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:da:bb:a4:15:e5:f8:f7:51:94:e3:11:3f:bb: 95:75:a8:9d:98:9c:fe:35:e4:2d:03:f9:93:5c:45: f5:bb:dc:46:0a:99:0e:19:09:5a:ab:bc:d4:49:49: 57:d4:c8:96:47:0d:86:9c:e8:46:c1:ef:94:e5:c0: 66:47:5a:e6:44:c1:57:ff:36:81:42:f2:e7:2d:63: f7:70:2d:d2:5f:5c:df:7a:ca:fa:69:1f:0e:4b:bf: c9:1f:ea:b6:ab:f9:01:9c:9b:80:1e:d3:f1:3e:bf: 62:f2:80:d2:c7:64:94:5f:00:06:4b:13:b0:87:1e: 6c:40:00:d0:8a:71:df:2d:66:c1:ca:3d:e6:79:aa: 77:3f:57:58:39:19:0b:04:f0:74:d5:99:fb:eb:02: f4:23:56:2b:da:57:94:d1:a0:eb:8d:47:2e:99:e1: 85:b0:f1:fb:e8:1a:5c:b0:43:69:29:4a:78:9b:84: b9:8b:f7:cf:bd:1a:ae:58:f9:1c:15:ab:02:59:73: 71:b3:c2:a7:4b:ae:76:27:2b:e4:9d:fe:8d:fb:a0: c4:21:e4:12:5e:15:4c:84:61:bd:be:1a:45:b7:1b: e2:46:ff:7d:99:76:e0:fd:24:b6:80:ec:8b:a6:ef: 62:50:16:ff:31:cc:02:37:34:f1:60:ee:00:2d:0e: e0:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:EB:0B:19:4C:09:AA:2B:55:2A:30:8B:A7:3C:06:13:4A:FF:52:6A X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144920.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a8de::/32 Signature Algorithm: sha256WithRSAEncryption 73:0e:27:44:2a:76:c6:3e:df:d3:61:51:28:74:33:c5:52:11: d2:98:b2:70:9b:8e:eb:09:75:b4:75:7a:a2:f3:94:c1:23:3a: 00:11:ab:ad:d1:ca:64:85:af:0e:88:ce:9d:8b:f3:65:f1:a7: d8:63:a0:77:0b:4a:aa:6d:7a:dd:b5:44:24:59:e9:4b:e9:05: a7:65:37:f3:d6:ab:26:5b:8c:2b:8c:35:bf:f8:ab:ce:8c:25: 47:bc:f6:4a:f8:47:3c:f6:60:36:54:69:6b:c6:d4:84:9f:ee: d0:ca:f5:9f:15:d7:97:37:72:cb:46:72:e8:0d:63:78:c7:84: df:27:3f:01:9a:20:5e:62:24:6c:70:96:00:56:af:37:fa:84: 8b:1c:fa:4f:6d:b9:04:e6:4c:63:7e:04:97:db:eb:47:7b:e8: 63:26:d8:ed:0c:85:82:bd:fd:97:aa:a4:b8:fb:a4:77:20:7e: 21:ce:ca:3a:a6:72:72:dc:b7:42:fd:e8:1e:69:96:4f:84:cf: 24:4e:e4:15:5f:92:1e:10:52:81:a2:75:bb:49:44:16:e0:3f: 90:b4:5f:f6:7a:4a:e0:b2:1a:db:fd:27:5e:30:95:20:3a:54: 34:a6:c8:99:fd:a2:37:38:da:f6:6e:22:4f:ec:bb:9c:e5:33: b0:1a:cc:e7 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUT+iHoyCmW04uVYStcKxwb9S4hc0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTQ1OFoX DTI3MDMwMzA2MTk1OFowMzExMC8GA1UEAxMoRTlFQjBCMTk0QzA5QUEyQjU1MkEz MDhCQTczQzA2MTM0QUZGNTI2QTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANLau6QV5fj3UZTjET+7lXWonZic/jXkLQP5k1xF9bvcRgqZDhkJWqu81ElJ V9TIlkcNhpzoRsHvlOXAZkda5kTBV/82gULy5y1j93At0l9c33rK+mkfDku/yR/q tqv5AZybgB7T8T6/YvKA0sdklF8ABksTsIcebEAA0Ipx3y1mwco95nmqdz9XWDkZ CwTwdNWZ++sC9CNWK9pXlNGg641HLpnhhbDx++gaXLBDaSlKeJuEuYv3z70arlj5 HBWrAllzcbPCp0uudicr5J3+jfugxCHkEl4VTIRhvb4aRbcb4kb/fZl24P0ktoDs i6bvYlAW/zHMAjc08WDuAC0O4OUCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBTp6wsZ TAmqK1UqMIunPAYTSv9SajAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDkyMC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qN4wDQYJKoZIhvcNAQELBQADggEBAHMOJ0QqdsY+39NhUSh0M8VSEdKYsnCbjusJ dbR1eqLzlMEjOgARq63RymSFrw6Izp2L82Xxp9hjoHcLSqptet21RCRZ6UvpBadl N/PWqyZbjCuMNb/4q86MJUe89kr4Rzz2YDZUaWvG1ISf7tDK9Z8V15c3cstGcugN Y3jHhN8nPwGaIF5iJGxwlgBWrzf6hIsc+k9tuQTmTGN+BJfb60d76GMm2O0MhYK9 /ZeqpLj7pHcgfiHOyjqmcnLct0L96B5plk+EzyRO5BVfkh4QUoGidbtJRBbgP5C0 X/Z6SuCyGtv9J14wlSA6VDSmyJn9ojc42vZuIk/su5zlM7AazOc= -----END CERTIFICATE-----Generated at Sat Mar 28 11:46:01 2026 by rpki-client