$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144959.roa File: AS144959.roa (raw, json) Hash identifier: yBiPTu2JQZOszQuduI0iwR131MHQzwjVWY1iZWwedZ0= Subject key identifier: 2B:DD:C0:F6:44:5A:A1:51:B7:B2:25:DD:B4:9A:81:F1:BD:0C:E0:94 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 2BA531E48DAB1CD3DFBE3F5D7525DC06220BF1CD Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144959.roa Signing time: Wed 04 Mar 2026 06:22:05 +0000 ROA not before: Wed 04 Mar 2026 06:17:05 +0000 ROA not after: Wed 03 Mar 2027 06:22:05 +0000 asID: 144959 IP address blocks: 240a:a905::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:a5:31:e4:8d:ab:1c:d3:df:be:3f:5d:75:25:dc:06:22:0b:f1:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:17:05 2026 GMT Not After : Mar 3 06:22:05 2027 GMT Subject: CN=2BDDC0F6445AA151B7B225DDB49A81F1BD0CE094 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:a6:3e:14:6f:8a:47:ea:0d:8e:11:ce:f6:4c: 07:c8:a4:3e:8f:8d:cf:61:91:a9:57:52:4d:ce:61: 20:06:be:67:fe:c1:50:30:f7:35:87:61:43:f4:ca: 84:be:a6:a5:90:3e:98:e3:f7:25:bd:43:f6:40:c9: 56:a6:7e:42:bf:ef:57:91:da:2f:63:b4:e9:ad:56: db:d9:e9:bf:e4:26:cc:72:1a:4c:ae:49:7c:36:bd: e8:60:17:b9:72:84:00:d8:5b:ab:66:6a:01:50:44: c4:7e:99:e9:61:d2:cd:40:b9:8b:7f:98:1a:11:1b: 5e:ff:a1:13:8d:9c:22:1d:17:70:71:f6:62:88:00: 4e:13:3e:84:8f:87:49:34:cc:e2:15:c5:74:05:46: 21:10:67:a2:13:24:ef:c4:87:3d:ab:b3:de:d3:19: e4:bf:87:02:b2:0c:c0:37:ed:96:5f:a6:47:66:13: a5:58:1e:ff:b9:45:2b:d0:43:13:08:64:c3:e4:7c: 10:6c:a7:6d:22:8d:58:e4:b5:25:75:15:6b:b9:db: 52:26:a5:ba:6b:8b:1b:e1:26:e0:82:a3:ad:66:84: ee:eb:9b:71:3c:b6:02:d0:b8:07:96:1f:5e:c5:c2: 51:3a:32:7c:43:82:7a:65:9a:11:26:94:24:72:65: 2c:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:DD:C0:F6:44:5A:A1:51:B7:B2:25:DD:B4:9A:81:F1:BD:0C:E0:94 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144959.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a905::/32 Signature Algorithm: sha256WithRSAEncryption b4:3d:08:4a:5f:f4:27:a2:6a:03:54:57:f8:58:18:d1:37:ae: 27:22:9c:32:94:de:a3:73:20:26:3b:fd:5b:de:cc:e5:ed:3a: 25:91:9c:7b:d2:93:ce:75:57:10:ee:61:80:e3:fa:12:85:4d: ae:71:e4:83:d7:08:2c:3e:21:60:c0:46:60:ef:3e:14:ef:bf: 14:67:3f:b3:be:2a:3f:11:93:70:f0:c3:d5:ba:da:13:2e:82: 2b:29:9d:3e:18:ae:6c:73:d8:2f:33:5b:59:d4:13:30:dd:cb: 7f:70:fc:7c:4c:33:ed:92:bd:60:1c:f8:24:c6:a4:53:34:6b: 85:02:f7:24:85:cf:4d:65:57:6c:49:ae:43:7c:e9:7d:8a:57: 76:5d:4e:7e:c6:c5:5b:92:38:e4:2b:a0:d9:06:60:6a:21:0d: 13:77:9f:73:78:26:7a:05:2d:e4:f8:98:3a:95:e4:94:9b:51: 14:af:6e:51:33:af:65:87:dc:95:7a:4a:c5:bd:e0:7f:81:1b: 0c:b8:dc:a6:23:99:00:05:ff:f6:d4:36:94:99:d2:e8:54:a2: 6d:ae:d6:30:6e:3e:75:cb:a1:1c:ee:8c:6f:09:97:2c:7c:07: 4f:fa:16:bb:96:34:77:a8:56:5a:fe:21:e7:8b:37:24:f3:06: e6:58:fc:a3 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUK6Ux5I2rHNPfvj9ddSXcBiIL8c0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTcwNVoX DTI3MDMwMzA2MjIwNVowMzExMC8GA1UEAxMoMkJEREMwRjY0NDVBQTE1MUI3QjIy NUREQjQ5QTgxRjFCRDBDRTA5NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJumPhRvikfqDY4RzvZMB8ikPo+Nz2GRqVdSTc5hIAa+Z/7BUDD3NYdhQ/TK hL6mpZA+mOP3Jb1D9kDJVqZ+Qr/vV5HaL2O06a1W29npv+QmzHIaTK5JfDa96GAX uXKEANhbq2ZqAVBExH6Z6WHSzUC5i3+YGhEbXv+hE42cIh0XcHH2YogAThM+hI+H STTM4hXFdAVGIRBnohMk78SHPauz3tMZ5L+HArIMwDftll+mR2YTpVge/7lFK9BD Ewhkw+R8EGynbSKNWOS1JXUVa7nbUialumuLG+Em4IKjrWaE7uubcTy2AtC4B5Yf XsXCUToyfEOCemWaESaUJHJlLEkCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQr3cD2 RFqhUbeyJd20moHxvQzglDAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDk1OS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qQUwDQYJKoZIhvcNAQELBQADggEBALQ9CEpf9CeiagNUV/hYGNE3ricinDKU3qNz ICY7/VvezOXtOiWRnHvSk851VxDuYYDj+hKFTa5x5IPXCCw+IWDARmDvPhTvvxRn P7O+Kj8Rk3Dww9W62hMugispnT4Yrmxz2C8zW1nUEzDdy39w/HxMM+2SvWAc+CTG pFM0a4UC9ySFz01lV2xJrkN86X2KV3ZdTn7GxVuSOOQroNkGYGohDRN3n3N4JnoF LeT4mDqV5JSbURSvblEzr2WH3JV6SsW94H+BGwy43KYjmQAF//bUNpSZ0uhUom2u 1jBuPnXLoRzujG8Jlyx8B0/6FruWNHeoVlr+IeeLNyTzBuZY/KM= -----END CERTIFICATE-----Generated at Sat Mar 28 11:44:00 2026 by rpki-client