$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144922.roa File: AS144922.roa (raw, json) Hash identifier: wlonMG3N37+iVFadRN61IThhDCPhKNfWEsuTiLX/4/o= Subject key identifier: F0:F8:FB:FA:C5:59:0E:9D:DD:79:6F:92:70:5C:F0:6D:80:B2:F3:7A Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 6C442BF2D54CB4F176C4DBD46516B1C2F87D0D4A Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144922.roa Signing time: Wed 04 Mar 2026 06:21:09 +0000 ROA not before: Wed 04 Mar 2026 06:16:09 +0000 ROA not after: Wed 03 Mar 2027 06:21:09 +0000 asID: 144922 IP address blocks: 240a:a8e0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:44:2b:f2:d5:4c:b4:f1:76:c4:db:d4:65:16:b1:c2:f8:7d:0d:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:16:09 2026 GMT Not After : Mar 3 06:21:09 2027 GMT Subject: CN=F0F8FBFAC5590E9DDD796F92705CF06D80B2F37A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:5a:56:f9:7f:d9:17:b8:3a:5a:96:fc:77:e2: b4:28:ba:c0:73:70:95:e7:ff:b1:af:29:01:13:e5: a1:8d:08:78:38:66:43:13:b3:83:02:88:48:5d:27: 78:0c:1a:55:f2:92:e7:eb:8f:f1:72:89:4b:91:8c: b3:50:20:4e:a9:c1:0e:6f:50:dc:ff:1a:a0:04:9f: e1:2d:21:32:36:5e:d4:3b:60:41:ae:08:74:37:5c: 33:ff:fb:15:af:63:30:8f:68:cb:e2:b1:88:96:81: ca:97:44:26:49:f6:c2:3d:7f:3c:0a:14:4e:15:76: e1:c5:bc:d8:56:73:26:57:18:f9:5f:4a:d8:f6:4f: 8f:7e:4f:a6:4d:d0:81:4a:59:92:ab:1a:81:3e:a2: 2c:4e:99:d3:0c:9b:5e:db:37:f7:db:38:b2:9b:15: 78:72:fb:d0:d2:f9:df:d3:30:e1:2c:0c:22:6c:c6: c1:46:69:78:91:f3:a5:bd:06:04:e5:6a:5b:1d:98: c8:0b:38:e7:90:a7:8b:04:f2:be:8a:9f:1f:0c:a8: e6:1f:5e:3f:ab:fb:c9:4d:b5:34:93:e7:e1:79:6a: a0:5d:bb:7f:74:af:6c:30:c8:a2:51:90:bf:06:69: 9a:38:3d:26:ef:16:56:4c:a5:11:ab:95:d1:0f:09: 62:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:F8:FB:FA:C5:59:0E:9D:DD:79:6F:92:70:5C:F0:6D:80:B2:F3:7A X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144922.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a8e0::/32 Signature Algorithm: sha256WithRSAEncryption d1:f3:c1:69:1a:d9:09:84:8f:8e:2e:44:03:33:f1:3f:c2:05: a7:03:70:5c:9a:11:34:63:53:4c:99:70:42:30:9b:17:ce:1d: 37:23:e6:7f:d9:81:57:69:b2:f7:a5:c6:da:26:b5:f7:a5:44: 0e:c4:74:69:81:8a:ce:6e:63:3b:20:8e:9d:66:e1:00:37:aa: 70:a8:c8:d8:c8:8e:e8:62:2c:21:c7:dd:29:63:aa:bc:e5:52: 81:91:cc:30:1a:a8:fd:b4:cf:92:cd:4c:9f:2f:ca:4e:86:7c: 90:72:88:35:aa:76:6e:cb:44:78:a9:6a:29:45:df:47:fe:88: 16:b2:55:29:fd:1d:f4:f7:39:7c:ce:ac:55:92:6d:58:1e:04: 93:a3:50:4b:36:b2:00:da:f9:7a:04:79:8c:ea:05:ab:c0:a3: 85:22:05:86:90:d5:8f:a6:8a:cc:bc:7e:6f:6e:7a:8c:16:5d: b4:e7:6d:95:5b:86:8a:44:9c:ef:99:a5:ff:e7:fd:14:00:44: b4:1c:ef:8e:d1:2b:77:61:ba:8a:d8:bb:25:18:41:4a:f4:c9: 52:e3:29:35:92:d4:20:66:eb:7d:6d:85:36:6a:c7:3d:b9:58: 26:b6:73:4f:9e:18:16:36:e7:32:a2:d8:38:07:f3:77:7a:94: 81:f2:60:c7 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUbEQr8tVMtPF2xNvUZRaxwvh9DUowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTYwOVoX DTI3MDMwMzA2MjEwOVowMzExMC8GA1UEAxMoRjBGOEZCRkFDNTU5MEU5RERENzk2 RjkyNzA1Q0YwNkQ4MEIyRjM3QTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK1aVvl/2Re4OlqW/HfitCi6wHNwlef/sa8pARPloY0IeDhmQxOzgwKISF0n eAwaVfKS5+uP8XKJS5GMs1AgTqnBDm9Q3P8aoASf4S0hMjZe1DtgQa4IdDdcM//7 Fa9jMI9oy+KxiJaBypdEJkn2wj1/PAoUThV24cW82FZzJlcY+V9K2PZPj35Ppk3Q gUpZkqsagT6iLE6Z0wybXts399s4spsVeHL70NL539Mw4SwMImzGwUZpeJHzpb0G BOVqWx2YyAs455CniwTyvoqfHwyo5h9eP6v7yU21NJPn4XlqoF27f3SvbDDIolGQ vwZpmjg9Ju8WVkylEauV0Q8JYi0CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBTw+Pv6 xVkOnd15b5JwXPBtgLLzejAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDkyMi5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qOAwDQYJKoZIhvcNAQELBQADggEBANHzwWka2QmEj44uRAMz8T/CBacDcFyaETRj U0yZcEIwmxfOHTcj5n/ZgVdpsvelxtomtfelRA7EdGmBis5uYzsgjp1m4QA3qnCo yNjIjuhiLCHH3SljqrzlUoGRzDAaqP20z5LNTJ8vyk6GfJByiDWqdm7LRHipailF 30f+iBayVSn9HfT3OXzOrFWSbVgeBJOjUEs2sgDa+XoEeYzqBavAo4UiBYaQ1Y+m isy8fm9ueowWXbTnbZVbhopEnO+Zpf/n/RQARLQc747RK3dhuorYuyUYQUr0yVLj KTWS1CBm631thTZqxz25WCa2c0+eGBY25zKi2DgH83d6lIHyYMc= -----END CERTIFICATE-----Generated at Sat Mar 28 11:43:03 2026 by rpki-client