$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144951.roa File: AS144951.roa (raw, json) Hash identifier: 560PXeCL9aEm+wjru58UCPRaX8sbUUGEBaknaruqaX8= Subject key identifier: 44:7D:11:5D:23:BB:4E:23:AF:0B:BE:89:45:AB:E8:17:3C:E8:B5:DF Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 28BA1B6ED0DE67F5EE13798ACB3797CC60661941 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144951.roa Signing time: Wed 04 Mar 2026 06:20:33 +0000 ROA not before: Wed 04 Mar 2026 06:15:33 +0000 ROA not after: Wed 03 Mar 2027 06:20:33 +0000 asID: 144951 IP address blocks: 240a:a8fd::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:ba:1b:6e:d0:de:67:f5:ee:13:79:8a:cb:37:97:cc:60:66:19:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:15:33 2026 GMT Not After : Mar 3 06:20:33 2027 GMT Subject: CN=447D115D23BB4E23AF0BBE8945ABE8173CE8B5DF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:80:43:1f:88:f3:68:86:73:d2:9c:55:df:a6: 3e:d2:a6:4b:3a:5a:5c:3d:41:05:aa:de:f1:8b:6a: 0c:b4:88:ea:45:6a:a6:0f:23:e0:bf:89:9f:4f:1f: 5f:04:f6:43:42:2b:9f:40:47:24:0b:72:f0:26:0f: 2f:84:ad:74:04:19:9b:a2:9a:b0:ee:0c:35:82:58: 93:7f:6a:cf:22:ed:e0:9e:f3:ef:68:fc:2c:9d:49: 4c:ec:3f:94:d1:8e:fb:95:ae:30:e0:ab:8b:31:99: ad:d3:1f:4e:99:7e:4f:c6:a0:6f:21:c7:23:d5:34: b6:8f:58:93:62:e0:2b:38:71:d1:64:42:b1:b9:bc: f3:9c:e8:77:55:ac:91:05:83:5a:26:91:70:e6:ee: 85:3c:3d:37:54:c3:d4:c5:d2:a7:e2:1b:00:0d:9c: 08:85:37:df:9d:6b:9b:8b:8d:8d:95:b0:70:c7:cb: 2b:9d:71:a6:28:7d:c6:3a:1f:65:29:36:b4:71:d7: 95:96:d8:25:af:b0:e7:e5:b4:a3:7f:c3:34:2a:8c: 74:52:9c:80:70:40:6d:cc:6f:7c:f0:ab:b7:b9:02: 24:fc:74:db:5b:e0:0a:1b:f4:14:71:15:43:10:90: 9b:c4:4f:48:29:c6:e0:84:8a:95:c6:97:5f:56:04: 7c:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:7D:11:5D:23:BB:4E:23:AF:0B:BE:89:45:AB:E8:17:3C:E8:B5:DF X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144951.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a8fd::/32 Signature Algorithm: sha256WithRSAEncryption 33:81:24:5e:39:0f:e2:a8:67:9c:20:02:30:00:79:74:35:c0: 44:94:52:3d:fa:ec:73:8b:b2:8b:d0:62:ff:40:47:8b:77:b8: 5e:2c:3b:9f:78:90:6a:5e:b7:41:5d:01:3b:01:ed:be:c4:1e: ff:8c:a6:d5:fa:70:72:56:a7:ac:1e:41:03:47:ea:0c:a5:99: 10:3b:25:26:04:c4:da:6c:05:34:55:35:21:63:1a:7d:6e:33: 2d:c2:78:f1:2b:e6:53:63:6d:8d:98:03:6a:2a:ff:55:96:e5: eb:3a:fa:d2:2c:2a:1f:f3:a9:48:62:cf:ad:c6:45:c8:be:04: b4:d0:7b:f0:f7:11:53:5b:6c:70:93:92:48:0e:09:fc:a7:72: 49:9b:81:a9:0f:67:9d:45:52:a9:a9:47:6d:de:b5:fe:f4:6a: 19:ad:10:d1:3c:27:2f:1d:5b:ba:30:58:85:54:3b:6e:e1:d8: 03:1e:90:c0:22:9d:1a:2e:57:16:74:74:02:00:b1:2b:d6:dd: 8e:af:60:85:2a:ba:f2:5b:52:91:8d:cc:a4:b2:9b:69:8d:eb: eb:a7:e4:81:14:5d:eb:d1:4e:64:13:88:be:7f:fd:51:03:c6: db:db:4a:67:e8:52:e9:f6:f5:95:11:15:ce:16:c8:ae:59:7e: e4:8b:47:d9 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUKLobbtDeZ/XuE3mKyzeXzGBmGUEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTUzM1oX DTI3MDMwMzA2MjAzM1owMzExMC8GA1UEAxMoNDQ3RDExNUQyM0JCNEUyM0FGMEJC RTg5NDVBQkU4MTczQ0U4QjVERjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKeAQx+I82iGc9KcVd+mPtKmSzpaXD1BBare8YtqDLSI6kVqpg8j4L+Jn08f XwT2Q0Irn0BHJAty8CYPL4StdAQZm6KasO4MNYJYk39qzyLt4J7z72j8LJ1JTOw/ lNGO+5WuMOCrizGZrdMfTpl+T8agbyHHI9U0to9Yk2LgKzhx0WRCsbm885zod1Ws kQWDWiaRcObuhTw9N1TD1MXSp+IbAA2cCIU3351rm4uNjZWwcMfLK51xpih9xjof ZSk2tHHXlZbYJa+w5+W0o3/DNCqMdFKcgHBAbcxvfPCrt7kCJPx021vgChv0FHEV QxCQm8RPSCnG4ISKlcaXX1YEfCMCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBREfRFd I7tOI68LvolFq+gXPOi13zAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDk1MS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qP0wDQYJKoZIhvcNAQELBQADggEBADOBJF45D+KoZ5wgAjAAeXQ1wESUUj367HOL sovQYv9AR4t3uF4sO594kGpet0FdATsB7b7EHv+MptX6cHJWp6weQQNH6gylmRA7 JSYExNpsBTRVNSFjGn1uMy3CePEr5lNjbY2YA2oq/1WW5es6+tIsKh/zqUhiz63G Rci+BLTQe/D3EVNbbHCTkkgOCfynckmbgakPZ51FUqmpR23etf70ahmtENE8Jy8d W7owWIVUO27h2AMekMAinRouVxZ0dAIAsSvW3Y6vYIUquvJbUpGNzKSym2mN6+un 5IEUXevRTmQTiL5//VEDxtvbSmfoUun29ZURFc4WyK5ZfuSLR9k= -----END CERTIFICATE-----Generated at Sat Mar 28 11:44:28 2026 by rpki-client