$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144924.roa File: AS144924.roa (raw, json) Hash identifier: Q8ANdtnjm5aOSmuh1trQ2WiUAwkP9K2QoR63M681F10= Subject key identifier: 31:21:93:71:DE:C0:6C:9D:71:53:99:3A:CC:14:80:45:B2:E1:FE:D1 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 408B9D1234225D9B349108143902A83010661F1D Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144924.roa Signing time: Wed 04 Mar 2026 06:19:53 +0000 ROA not before: Wed 04 Mar 2026 06:14:53 +0000 ROA not after: Wed 03 Mar 2027 06:19:53 +0000 asID: 144924 IP address blocks: 240a:a8e2::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:8b:9d:12:34:22:5d:9b:34:91:08:14:39:02:a8:30:10:66:1f:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:14:53 2026 GMT Not After : Mar 3 06:19:53 2027 GMT Subject: CN=31219371DEC06C9D7153993ACC148045B2E1FED1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:51:5e:c5:c6:bf:6e:44:78:00:ad:0f:d0:83: 09:fd:3a:9f:b5:ac:80:3b:3e:b3:be:c1:40:18:3d: 14:76:16:af:79:cd:21:20:c7:91:fc:83:be:bb:f4: 59:98:74:ef:1c:17:00:62:84:5d:2d:28:a2:0b:63: cb:2f:1c:10:76:87:0b:d0:64:01:58:a0:9b:ff:42: 71:91:ad:63:34:64:68:3a:ba:ed:fd:e5:15:66:6c: 20:1a:60:72:3c:83:82:e9:fe:2f:a0:39:05:96:ab: 3c:86:90:eb:4f:4d:44:6c:ae:61:61:a5:67:98:ef: d7:2f:51:61:69:85:08:ff:ee:42:f7:1d:b8:d5:2b: 3e:03:21:c1:6a:69:5e:20:d2:3d:82:aa:ca:39:a3: 61:ba:40:6d:64:73:0c:2a:f7:11:8d:45:eb:be:35: 5c:0f:bf:a6:9a:51:ba:39:cb:8e:46:1f:dd:e7:e6: 9a:e2:9f:a4:58:f5:c5:cb:27:c7:00:74:99:59:01: 02:58:6f:eb:ea:cc:88:00:f9:71:60:7a:e6:ce:88: cb:1c:50:e2:eb:df:cf:c3:f7:d2:25:62:43:17:d2: 5e:42:61:e8:8f:b1:49:09:39:63:55:e1:7d:8a:21: 19:19:8a:50:63:9a:91:98:d7:ea:9d:f6:fa:25:9b: 40:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:21:93:71:DE:C0:6C:9D:71:53:99:3A:CC:14:80:45:B2:E1:FE:D1 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144924.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a8e2::/32 Signature Algorithm: sha256WithRSAEncryption 77:0d:26:37:46:9f:69:c5:3a:fa:e1:bc:d3:66:fa:2a:d9:47: 94:0e:b0:58:b4:ee:98:f2:99:ea:2b:95:1f:45:73:5b:2e:3e: 17:ad:f3:f0:20:c0:02:98:c1:81:1d:8b:81:1c:db:92:de:89: 86:9f:2c:87:8b:22:79:2f:7d:3e:7a:8c:ff:32:5a:78:07:bb: 18:88:ec:d9:6c:72:e1:80:e8:91:c4:b6:75:04:2a:76:d3:d9: f9:3a:da:67:04:7f:46:d0:69:e6:d7:f1:94:8e:d6:2a:78:8e: 40:f9:24:c8:53:c8:10:6e:59:3b:d0:24:e5:17:2a:8c:80:41: f0:2e:ea:04:f0:62:69:16:a9:45:2f:1d:57:a0:02:86:e3:72: 96:a7:c7:65:94:b1:56:a4:5e:27:e4:66:c9:d4:5a:02:b3:16: 8e:0a:c9:bb:21:d3:4e:3c:6e:d9:cb:f0:60:67:c4:8b:5e:40: 7a:8b:f8:09:d4:db:16:6f:a5:3f:a5:85:82:5c:62:b1:fe:2f: 9e:ec:e2:bb:2c:59:46:99:5d:7b:4e:d9:dc:19:cc:e6:55:41: 25:a0:40:a7:2b:31:b6:64:33:41:f4:f0:a0:39:98:be:4e:a6: 49:b2:48:c6:c8:a0:64:76:9c:17:02:71:cd:1b:7e:6e:13:7f: 4f:ba:29:26 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUQIudEjQiXZs0kQgUOQKoMBBmHx0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTQ1M1oX DTI3MDMwMzA2MTk1M1owMzExMC8GA1UEAxMoMzEyMTkzNzFERUMwNkM5RDcxNTM5 OTNBQ0MxNDgwNDVCMkUxRkVEMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJpRXsXGv25EeACtD9CDCf06n7WsgDs+s77BQBg9FHYWr3nNISDHkfyDvrv0 WZh07xwXAGKEXS0oogtjyy8cEHaHC9BkAVigm/9CcZGtYzRkaDq67f3lFWZsIBpg cjyDgun+L6A5BZarPIaQ609NRGyuYWGlZ5jv1y9RYWmFCP/uQvcduNUrPgMhwWpp XiDSPYKqyjmjYbpAbWRzDCr3EY1F6741XA+/pppRujnLjkYf3efmmuKfpFj1xcsn xwB0mVkBAlhv6+rMiAD5cWB65s6IyxxQ4uvfz8P30iViQxfSXkJh6I+xSQk5Y1Xh fYohGRmKUGOakZjX6p32+iWbQE8CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQxIZNx 3sBsnXFTmTrMFIBFsuH+0TAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDkyNC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qOIwDQYJKoZIhvcNAQELBQADggEBAHcNJjdGn2nFOvrhvNNm+irZR5QOsFi07pjy meorlR9Fc1suPhet8/AgwAKYwYEdi4Ec25LeiYafLIeLInkvfT56jP8yWngHuxiI 7NlscuGA6JHEtnUEKnbT2fk62mcEf0bQaebX8ZSO1ip4jkD5JMhTyBBuWTvQJOUX KoyAQfAu6gTwYmkWqUUvHVegAobjcpanx2WUsVakXifkZsnUWgKzFo4Kybsh0048 btnL8GBnxIteQHqL+AnU2xZvpT+lhYJcYrH+L57s4rssWUaZXXtO2dwZzOZVQSWg QKcrMbZkM0H08KA5mL5OpkmySMbIoGR2nBcCcc0bfm4Tf0+6KSY= -----END CERTIFICATE-----Generated at Sat Mar 28 11:45:56 2026 by rpki-client