$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144925.roa File: AS144925.roa (raw, json) Hash identifier: 404/aROE3D+ERk9ljiOVk8+1kHrCByrcsnVJh+Lpg4g= Subject key identifier: CB:7F:17:F2:70:B1:94:59:1C:22:07:4C:6B:E5:4F:07:F6:29:84:42 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 754ECDAA6BA3B8C241ADC16630B97CE0AD09A20C Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144925.roa Signing time: Wed 04 Mar 2026 06:19:42 +0000 ROA not before: Wed 04 Mar 2026 06:14:42 +0000 ROA not after: Wed 03 Mar 2027 06:19:42 +0000 asID: 144925 IP address blocks: 240a:a8e3::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:4e:cd:aa:6b:a3:b8:c2:41:ad:c1:66:30:b9:7c:e0:ad:09:a2:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:14:42 2026 GMT Not After : Mar 3 06:19:42 2027 GMT Subject: CN=CB7F17F270B194591C22074C6BE54F07F6298442 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:9b:e2:b2:7a:69:ea:d4:41:8d:5b:fe:bc:d6: b5:e9:c4:b2:f3:d5:46:63:d1:89:a1:4d:04:26:3f: 5e:be:62:ca:59:71:4a:91:be:35:96:e4:79:d1:f2: d0:44:94:ac:5b:79:1a:1a:3d:61:a5:b9:55:eb:05: 2a:14:6c:63:02:64:80:11:7c:30:d2:70:ae:4e:8c: dd:da:6b:9a:02:10:4d:ec:e4:1a:7c:05:ec:d3:91: e2:7b:8a:77:6b:09:5a:6f:19:d5:88:ae:32:9e:61: 26:fc:06:7c:4b:e4:d0:4b:57:6a:21:86:e7:d7:62: c8:eb:d5:e9:f2:e8:68:b6:d6:cb:4d:92:b2:a7:0f: cd:ea:76:dc:90:43:e3:8e:27:3c:ab:a0:13:27:a0: ac:05:94:a6:84:40:df:24:8e:d0:a1:f1:35:2f:2b: c9:2b:af:77:1b:8d:82:86:1f:b8:62:4a:2a:ae:2f: cb:00:8c:d1:65:5c:3d:3b:40:29:75:d6:89:6b:df: b3:7f:db:88:21:65:42:cd:ab:29:02:19:63:3d:4a: e3:4d:95:9a:76:ac:32:29:4b:05:c9:0d:1a:b3:19: 72:6a:27:99:f6:52:50:5d:70:79:c0:72:d7:b8:25: 83:c7:d7:4f:97:dd:0d:02:3f:32:94:4a:12:e5:fe: a9:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:7F:17:F2:70:B1:94:59:1C:22:07:4C:6B:E5:4F:07:F6:29:84:42 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144925.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a8e3::/32 Signature Algorithm: sha256WithRSAEncryption 31:bd:1c:d6:ed:a7:7c:ef:63:25:b0:3a:e2:87:e8:bd:32:d6: 21:04:4a:dc:cf:3b:f0:bf:65:63:16:01:0e:ed:1e:7c:7e:b0: b4:62:8a:6b:03:1e:f7:32:a7:b3:fd:6e:b5:47:4b:48:7c:de: 68:ea:90:f4:53:f0:09:21:27:71:27:eb:f1:02:3e:29:e7:03: 7d:9e:3e:81:08:82:07:a7:10:16:34:9f:73:7a:e4:e5:aa:e7: c9:59:08:27:bb:f4:6d:1c:5a:0c:85:aa:dc:90:ac:a7:70:be: 94:49:1b:ee:e6:8c:82:04:09:5c:5c:bd:8f:0d:fd:71:b9:bf: 38:3a:4a:f2:91:09:00:25:d8:33:ab:1d:7a:e3:99:cb:29:45: a6:91:e1:f1:94:af:03:24:1f:f9:30:01:e5:f8:f9:f7:07:b5: b5:9a:45:45:29:6c:06:d4:d3:e9:55:4e:41:29:3f:f2:c5:dc: 46:14:fb:7b:a1:1f:79:06:a5:2f:2d:dc:e1:f5:fa:8e:9b:92: 54:ba:2f:bb:f9:dc:89:89:99:e0:29:79:ed:e9:ca:b3:18:ae: 00:80:dd:cf:99:03:58:e9:3b:9f:68:ae:df:da:d7:e5:aa:a4: cb:30:24:2e:29:76:e7:1d:b7:ee:37:82:dc:e7:bc:cc:29:76: 23:51:89:a5 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUdU7NqmujuMJBrcFmMLl84K0JogwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTQ0MloX DTI3MDMwMzA2MTk0MlowMzExMC8GA1UEAxMoQ0I3RjE3RjI3MEIxOTQ1OTFDMjIw NzRDNkJFNTRGMDdGNjI5ODQ0MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKWb4rJ6aerUQY1b/rzWtenEsvPVRmPRiaFNBCY/Xr5iyllxSpG+NZbkedHy 0ESUrFt5Gho9YaW5VesFKhRsYwJkgBF8MNJwrk6M3dprmgIQTezkGnwF7NOR4nuK d2sJWm8Z1YiuMp5hJvwGfEvk0EtXaiGG59diyOvV6fLoaLbWy02SsqcPzep23JBD 444nPKugEyegrAWUpoRA3ySO0KHxNS8rySuvdxuNgoYfuGJKKq4vywCM0WVcPTtA KXXWiWvfs3/biCFlQs2rKQIZYz1K402VmnasMilLBckNGrMZcmonmfZSUF1wecBy 17glg8fXT5fdDQI/MpRKEuX+qS8CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBTLfxfy cLGUWRwiB0xr5U8H9imEQjAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDkyNS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qOMwDQYJKoZIhvcNAQELBQADggEBADG9HNbtp3zvYyWwOuKH6L0y1iEEStzPO/C/ ZWMWAQ7tHnx+sLRiimsDHvcyp7P9brVHS0h83mjqkPRT8AkhJ3En6/ECPinnA32e PoEIggenEBY0n3N65OWq58lZCCe79G0cWgyFqtyQrKdwvpRJG+7mjIIECVxcvY8N /XG5vzg6SvKRCQAl2DOrHXrjmcspRaaR4fGUrwMkH/kwAeX4+fcHtbWaRUUpbAbU 0+lVTkEpP/LF3EYU+3uhH3kGpS8t3OH1+o6bklS6L7v53ImJmeApee3pyrMYrgCA 3c+ZA1jpO59ort/a1+WqpMswJC4pducdt+43gtznvMwpdiNRiaU= -----END CERTIFICATE-----Generated at Sat Mar 28 11:50:02 2026 by rpki-client