$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144958.roa File: AS144958.roa (raw, json) Hash identifier: shQyebbnSYe6TertRVmno6Vkn4WzQtSebfPdDsmCEVc= Subject key identifier: 1A:A3:E0:9D:48:2E:E9:91:2D:0E:AA:34:A3:2D:51:1F:E3:B9:09:6D Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 2CCA894861444B84B2CB8A2ED6BFBB9ADF945037 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144958.roa Signing time: Wed 04 Mar 2026 06:20:42 +0000 ROA not before: Wed 04 Mar 2026 06:15:42 +0000 ROA not after: Wed 03 Mar 2027 06:20:42 +0000 asID: 144958 IP address blocks: 240a:a904::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:ca:89:48:61:44:4b:84:b2:cb:8a:2e:d6:bf:bb:9a:df:94:50:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:15:42 2026 GMT Not After : Mar 3 06:20:42 2027 GMT Subject: CN=1AA3E09D482EE9912D0EAA34A32D511FE3B9096D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:3e:84:4a:1e:15:87:83:d9:4e:82:29:89:2e: e2:d1:e5:3d:6a:cc:de:dd:00:f9:b7:bb:59:20:7d: 49:ab:a9:aa:e9:0a:ac:55:67:87:68:07:e4:cf:79: 11:ef:f3:6d:1f:24:cb:9a:56:c1:5e:a5:d6:ce:b9: f4:b2:a7:46:b0:ba:62:9d:87:f4:9b:8c:b2:ee:73: 48:7c:3d:2c:37:24:2e:b4:86:80:e0:b7:c0:27:d7: f3:8d:7a:03:0c:cc:54:bf:c1:1e:84:3c:4e:cb:0e: b4:42:6d:f2:59:dd:b2:a6:d0:1b:dc:3f:4c:29:1a: 6b:31:ec:ea:36:18:69:76:8e:d9:4e:d3:b4:4b:20: a0:e9:27:b0:d0:20:5f:d1:2f:d2:ca:9d:39:fb:da: 7e:45:4a:10:46:a6:6a:c8:89:23:dd:6c:45:9e:46: d2:5f:9c:f3:19:51:21:b0:ac:38:89:db:d5:66:9e: 3b:19:10:ff:b7:63:77:a4:a8:36:cd:c7:4c:48:ac: be:0b:c9:d8:c1:de:7d:e5:c0:4a:a1:2d:e7:41:2e: 7a:59:b0:2f:a1:b9:6e:17:63:02:24:6c:52:7d:a2: d2:4d:9c:fb:5a:54:17:cb:20:0f:4b:25:86:48:b2: 41:10:30:04:97:4a:36:9a:c7:9b:8c:ed:1c:1b:9b: 05:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:A3:E0:9D:48:2E:E9:91:2D:0E:AA:34:A3:2D:51:1F:E3:B9:09:6D X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144958.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a904::/32 Signature Algorithm: sha256WithRSAEncryption 36:95:a4:a6:8b:bd:69:7c:c7:74:ee:c0:81:ea:1d:ef:5a:c2: 3c:08:0c:b5:9c:65:90:96:20:ca:58:5f:f3:b5:69:56:f5:77: 3f:e8:25:88:f4:a2:d8:8d:f8:09:d4:65:09:a5:aa:62:f6:5e: 63:19:cf:99:7b:53:5e:82:eb:73:eb:44:42:6c:08:f6:82:89: 0a:94:74:87:b4:81:8d:4f:ea:6f:52:81:94:55:ac:8e:eb:b8: dc:9a:64:8e:0f:f5:2b:59:83:8e:de:a8:dd:56:d0:14:4d:75: 29:c0:82:0d:f0:19:bf:ff:21:52:cc:23:74:01:ed:53:fd:ac: ba:e5:d0:1f:63:31:04:09:46:71:5c:e5:8c:62:6d:db:4a:5b: ad:f7:57:26:40:2f:6e:ca:54:c7:fc:e1:0e:fe:77:ec:8b:f4: d0:11:68:d2:09:a2:aa:71:2d:27:a7:62:8f:51:d8:fe:dd:ed: 20:ac:6a:44:1f:dc:a4:c6:36:9e:65:3a:03:51:a1:47:04:3a: d8:a8:05:f4:0f:4c:77:36:23:f3:11:90:15:72:45:52:e8:aa: 47:84:90:af:66:a2:15:46:13:2b:03:18:89:e0:1c:1a:79:87: ba:7f:13:59:a1:aa:85:99:09:3d:95:ef:b2:73:9f:6b:6e:4d: c7:96:db:69 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIULMqJSGFES4Syy4ou1r+7mt+UUDcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTU0MloX DTI3MDMwMzA2MjA0MlowMzExMC8GA1UEAxMoMUFBM0UwOUQ0ODJFRTk5MTJEMEVB QTM0QTMyRDUxMUZFM0I5MDk2RDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKg+hEoeFYeD2U6CKYku4tHlPWrM3t0A+be7WSB9SaupqukKrFVnh2gH5M95 Ee/zbR8ky5pWwV6l1s659LKnRrC6Yp2H9JuMsu5zSHw9LDckLrSGgOC3wCfX8416 AwzMVL/BHoQ8TssOtEJt8lndsqbQG9w/TCkaazHs6jYYaXaO2U7TtEsgoOknsNAg X9Ev0sqdOfvafkVKEEamasiJI91sRZ5G0l+c8xlRIbCsOInb1WaeOxkQ/7djd6So Ns3HTEisvgvJ2MHefeXASqEt50EuelmwL6G5bhdjAiRsUn2i0k2c+1pUF8sgD0sl hkiyQRAwBJdKNprHm4ztHBubBYECAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQao+Cd SC7pkS0OqjSjLVEf47kJbTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDk1OC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qQQwDQYJKoZIhvcNAQELBQADggEBADaVpKaLvWl8x3TuwIHqHe9awjwIDLWcZZCW IMpYX/O1aVb1dz/oJYj0otiN+AnUZQmlqmL2XmMZz5l7U16C63PrREJsCPaCiQqU dIe0gY1P6m9SgZRVrI7ruNyaZI4P9StZg47eqN1W0BRNdSnAgg3wGb//IVLMI3QB 7VP9rLrl0B9jMQQJRnFc5YxibdtKW633VyZAL27KVMf84Q7+d+yL9NARaNIJoqpx LSenYo9R2P7d7SCsakQf3KTGNp5lOgNRoUcEOtioBfQPTHc2I/MRkBVyRVLoqkeE kK9mohVGEysDGIngHBp5h7p/E1mhqoWZCT2V77Jzn2tuTceW22k= -----END CERTIFICATE-----Generated at Sat Mar 28 11:44:12 2026 by rpki-client