$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144962.roa File: AS144962.roa (raw, json) Hash identifier: LwsvWERPTGegWy0joJghFp2pHLt/ZDrGHVrbjNleUqk= Subject key identifier: 1C:4E:43:14:09:C0:FE:01:80:73:5A:5F:00:9A:5F:78:7E:A7:F5:EF Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 46FB09213F4AC9AA653FED0B444D91808C97F33E Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144962.roa Signing time: Wed 04 Mar 2026 06:20:17 +0000 ROA not before: Wed 04 Mar 2026 06:15:17 +0000 ROA not after: Wed 03 Mar 2027 06:20:17 +0000 asID: 144962 IP address blocks: 240a:a908::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:fb:09:21:3f:4a:c9:aa:65:3f:ed:0b:44:4d:91:80:8c:97:f3:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:15:17 2026 GMT Not After : Mar 3 06:20:17 2027 GMT Subject: CN=1C4E431409C0FE0180735A5F009A5F787EA7F5EF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:2e:e2:a4:2c:7c:a5:ab:b8:20:ee:1a:a5:58: 73:f2:6e:08:78:40:c2:8e:1c:04:57:ee:fc:02:58: 14:48:ef:a3:ea:da:41:b1:48:78:39:5d:61:de:4b: 9e:d9:4b:43:2d:62:df:84:cc:51:f7:81:51:ce:60: 7a:4f:99:58:4b:66:bb:e1:cd:67:09:08:62:b5:fe: 95:7a:5c:0d:5d:83:77:06:cc:2e:a1:d0:3e:87:77: 07:f9:16:ce:e2:d8:e3:30:d4:66:2d:a4:ee:72:88: 4b:80:2a:64:9c:88:c0:b1:e0:20:c8:25:ca:46:8e: 3d:72:10:91:78:15:26:f7:37:f1:9f:27:89:d8:78: df:db:8c:f3:de:7d:bf:c5:45:5b:1a:0d:4e:fe:75: 59:8f:3c:20:ab:7c:24:5e:fa:c7:16:fa:5b:8b:69: 0a:85:77:7a:21:b1:24:f5:13:a8:a7:a4:28:fd:af: 60:78:ce:8a:44:70:a9:82:64:c4:96:1a:db:6b:c8: 3e:be:51:25:75:75:25:89:c1:4d:90:cb:b6:10:96: 7f:ae:dd:a8:65:50:82:8c:02:53:c2:68:b3:13:ad: 22:1a:55:3e:6a:61:27:93:29:e8:03:8d:67:d8:58: 3d:0c:d8:19:2f:b6:0a:be:54:3a:a8:a9:13:69:32: a4:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:4E:43:14:09:C0:FE:01:80:73:5A:5F:00:9A:5F:78:7E:A7:F5:EF X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144962.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a908::/32 Signature Algorithm: sha256WithRSAEncryption af:49:88:92:03:2d:9f:e0:6a:fc:83:46:77:e7:2d:d5:30:b0: 66:a7:fa:bb:00:4c:3e:b8:a0:79:83:e2:92:47:9f:34:25:b7: d4:70:34:46:37:f5:9d:e6:0f:60:ef:72:4f:1f:97:5b:36:e5: 11:04:36:4d:3a:fe:26:57:b2:90:71:cc:dc:db:1e:a7:2e:ad: a3:73:f2:2d:ce:10:1e:5c:96:08:f9:0b:28:94:08:a4:dd:72: c7:fb:ef:d9:31:cc:89:24:73:1b:dd:ea:88:e2:3b:21:a2:05: 8d:7d:6a:a8:a3:9a:87:77:66:d2:7c:51:f2:2c:45:24:7f:4d: f5:8d:a9:8d:c5:68:cc:45:a2:21:e5:61:80:8d:57:39:29:ed: 1d:70:fe:8d:0e:da:1e:8b:e1:41:90:54:85:4f:a7:8f:70:b5: cd:da:f2:fa:8f:2d:b9:b5:3e:13:c3:a3:70:64:90:e0:0b:21: 47:a2:6a:4f:11:de:5b:5c:02:eb:37:27:10:d4:a8:45:86:00: 93:ef:d6:c5:3e:0c:49:9e:d3:ad:ab:7d:34:ab:27:4d:8c:77: 6b:2d:51:08:bb:cc:82:9e:89:5e:6a:e0:01:8b:58:b5:cc:4d: 1b:aa:c6:40:25:ac:26:27:25:9f:21:d4:d7:ed:13:b9:ff:bb: 1e:0e:a5:98 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIURvsJIT9KyaplP+0LRE2RgIyX8z4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTUxN1oX DTI3MDMwMzA2MjAxN1owMzExMC8GA1UEAxMoMUM0RTQzMTQwOUMwRkUwMTgwNzM1 QTVGMDA5QTVGNzg3RUE3RjVFRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALcu4qQsfKWruCDuGqVYc/JuCHhAwo4cBFfu/AJYFEjvo+raQbFIeDldYd5L ntlLQy1i34TMUfeBUc5gek+ZWEtmu+HNZwkIYrX+lXpcDV2DdwbMLqHQPod3B/kW zuLY4zDUZi2k7nKIS4AqZJyIwLHgIMglykaOPXIQkXgVJvc38Z8nidh439uM8959 v8VFWxoNTv51WY88IKt8JF76xxb6W4tpCoV3eiGxJPUTqKekKP2vYHjOikRwqYJk xJYa22vIPr5RJXV1JYnBTZDLthCWf67dqGVQgowCU8JosxOtIhpVPmphJ5Mp6AON Z9hYPQzYGS+2Cr5UOqipE2kypA0CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQcTkMU CcD+AYBzWl8Aml94fqf17zAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDk2Mi5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qQgwDQYJKoZIhvcNAQELBQADggEBAK9JiJIDLZ/gavyDRnfnLdUwsGan+rsATD64 oHmD4pJHnzQlt9RwNEY39Z3mD2Dvck8fl1s25REENk06/iZXspBxzNzbHqcuraNz 8i3OEB5clgj5CyiUCKTdcsf779kxzIkkcxvd6ojiOyGiBY19aqijmod3ZtJ8UfIs RSR/TfWNqY3FaMxFoiHlYYCNVzkp7R1w/o0O2h6L4UGQVIVPp49wtc3a8vqPLbm1 PhPDo3BkkOALIUeiak8R3ltcAus3JxDUqEWGAJPv1sU+DEme062rfTSrJ02Md2st UQi7zIKeiV5q4AGLWLXMTRuqxkAlrCYnJZ8h1NftE7n/ux4OpZg= -----END CERTIFICATE-----Generated at Sat Mar 28 11:49:52 2026 by rpki-client