$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144946.roa File: AS144946.roa (raw, json) Hash identifier: MAmdkWr1XVpRMX94IC9q2CWnAPSGRFvyk5kQHhLTRRc= Subject key identifier: 69:BF:15:EF:09:E2:3E:B1:52:B8:15:FB:59:BE:A7:C1:0D:DA:51:21 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 35D4021784C7FAF9E74C7AD82BF9E3842243F60D Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144946.roa Signing time: Wed 04 Mar 2026 06:21:52 +0000 ROA not before: Wed 04 Mar 2026 06:16:52 +0000 ROA not after: Wed 03 Mar 2027 06:21:52 +0000 asID: 144946 IP address blocks: 240a:a8f8::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:d4:02:17:84:c7:fa:f9:e7:4c:7a:d8:2b:f9:e3:84:22:43:f6:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:16:52 2026 GMT Not After : Mar 3 06:21:52 2027 GMT Subject: CN=69BF15EF09E23EB152B815FB59BEA7C10DDA5121 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:b7:f1:90:b5:8f:65:46:f2:33:b3:43:6d:2a: b1:ae:73:2a:5e:76:87:b4:6f:07:8d:54:36:f4:5c: c1:72:4e:a9:28:ce:ad:c0:cd:1b:4d:af:3b:9f:d3: 20:53:f3:91:03:f4:2e:ec:6b:5b:38:df:41:b4:e9: 67:2d:6c:ab:c0:9c:71:30:f7:ef:d4:32:d2:76:3f: e0:17:8e:8c:26:77:5c:02:85:43:b6:16:6a:db:9b: dd:b4:7e:73:ee:14:99:85:1c:e2:9b:29:7b:8d:3c: 69:a4:c6:23:67:cf:bc:3c:1d:4c:88:d3:be:67:0e: 9c:dd:4c:7a:07:f5:03:15:f0:3d:06:31:18:0b:05: 40:cb:06:bf:d7:93:8b:e7:7b:03:4a:2e:f6:7b:e7: 13:1a:c3:76:81:2e:df:96:c6:f9:3a:98:5c:0d:a1: 0f:c5:6a:8a:cf:5e:f4:84:c7:69:94:5d:c6:d5:00: 69:02:24:af:29:07:dd:f1:60:74:e0:ee:72:42:8c: 8c:3c:14:d5:7f:0c:cc:e8:67:7e:76:6a:8b:b9:dd: ae:9a:4d:bb:3c:ec:07:a9:aa:36:ce:43:08:16:7f: fd:59:93:fc:6e:89:a2:53:0c:f2:98:59:3d:b3:65: 2a:0c:32:c9:a1:24:9c:81:81:ff:95:95:14:35:57: 7b:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:BF:15:EF:09:E2:3E:B1:52:B8:15:FB:59:BE:A7:C1:0D:DA:51:21 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144946.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a8f8::/32 Signature Algorithm: sha256WithRSAEncryption 7f:c4:a7:d4:71:64:41:8f:0c:76:1b:cf:57:e4:e5:cc:0f:fd: e1:27:dd:93:aa:e2:be:35:4b:dd:11:4f:08:cf:39:58:9a:62: ab:e7:66:37:ae:1a:e3:b8:61:81:77:2e:83:a8:d6:8c:0c:ea: c5:c1:09:3f:2f:42:70:a0:00:b9:75:f9:1b:de:55:b7:35:54: 16:ad:87:0e:c7:9e:3d:dd:02:25:f6:fa:a5:16:12:67:c6:3d: e7:f1:fb:cf:50:a6:8f:1f:18:6a:c1:1d:76:38:0a:49:56:d8: 7c:98:eb:32:78:2d:04:1a:b9:cb:14:1b:3f:94:08:16:de:4e: b8:90:ac:55:af:15:ba:ce:25:7b:3f:20:0c:e1:19:1d:e8:1d: c1:21:0d:a4:40:88:80:7e:50:a1:f3:77:5a:9f:c4:52:bf:0d: c4:c4:aa:0c:ce:f7:a0:2b:0f:e0:7e:bb:72:45:1c:db:63:78: 68:89:c8:e9:4e:34:ea:7a:e1:e8:f5:d9:63:f3:b3:a3:8f:4b: b6:74:23:d1:e2:14:20:cc:90:68:93:11:43:9a:4c:7d:18:75: 32:3e:66:de:6d:22:a8:60:6a:85:45:3a:0d:04:45:bb:4d:e7: 47:6b:ad:56:ae:23:7e:80:7c:df:2f:57:5a:e7:98:b6:0e:0b: 1d:9f:d4:75 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUNdQCF4TH+vnnTHrYK/njhCJD9g0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTY1MloX DTI3MDMwMzA2MjE1MlowMzExMC8GA1UEAxMoNjlCRjE1RUYwOUUyM0VCMTUyQjgx NUZCNTlCRUE3QzEwRERBNTEyMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMa38ZC1j2VG8jOzQ20qsa5zKl52h7RvB41UNvRcwXJOqSjOrcDNG02vO5/T IFPzkQP0LuxrWzjfQbTpZy1sq8CccTD379Qy0nY/4BeOjCZ3XAKFQ7YWatub3bR+ c+4UmYUc4pspe408aaTGI2fPvDwdTIjTvmcOnN1Megf1AxXwPQYxGAsFQMsGv9eT i+d7A0ou9nvnExrDdoEu35bG+TqYXA2hD8Vqis9e9ITHaZRdxtUAaQIkrykH3fFg dODuckKMjDwU1X8MzOhnfnZqi7ndrppNuzzsB6mqNs5DCBZ//VmT/G6JolMM8phZ PbNlKgwyyaEknIGB/5WVFDVXe/ECAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRpvxXv CeI+sVK4FftZvqfBDdpRITAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDk0Ni5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qPgwDQYJKoZIhvcNAQELBQADggEBAH/Ep9RxZEGPDHYbz1fk5cwP/eEn3ZOq4r41 S90RTwjPOViaYqvnZjeuGuO4YYF3LoOo1owM6sXBCT8vQnCgALl1+RveVbc1VBat hw7Hnj3dAiX2+qUWEmfGPefx+89Qpo8fGGrBHXY4CklW2HyY6zJ4LQQaucsUGz+U CBbeTriQrFWvFbrOJXs/IAzhGR3oHcEhDaRAiIB+UKHzd1qfxFK/DcTEqgzO96Ar D+B+u3JFHNtjeGiJyOlONOp64ej12WPzs6OPS7Z0I9HiFCDMkGiTEUOaTH0YdTI+ Zt5tIqhgaoVFOg0ERbtN50drrVauI36AfN8vV1rnmLYOCx2f1HU= -----END CERTIFICATE-----Generated at Sat Mar 28 13:15:20 2026 by rpki-client