$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144968.roa File: AS144968.roa (raw, json) Hash identifier: 03o+MeA9CEefL3Ss7YX32rAFUg7yDhGMRUS3wO38vUY= Subject key identifier: C2:53:AD:2B:F8:A9:FE:DF:52:58:F3:2D:07:05:FC:41:DF:44:37:B4 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 4FC9BE189C75CF4B0646C4F209E86331E5CE63B9 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144968.roa Signing time: Wed 04 Mar 2026 06:21:31 +0000 ROA not before: Wed 04 Mar 2026 06:16:31 +0000 ROA not after: Wed 03 Mar 2027 06:21:31 +0000 asID: 144968 IP address blocks: 240a:a90e::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:c9:be:18:9c:75:cf:4b:06:46:c4:f2:09:e8:63:31:e5:ce:63:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:16:31 2026 GMT Not After : Mar 3 06:21:31 2027 GMT Subject: CN=C253AD2BF8A9FEDF5258F32D0705FC41DF4437B4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:b6:2d:0d:ea:cb:32:8f:3c:41:58:af:9d:99: 44:ef:06:03:12:d8:3e:d1:c6:e0:cb:85:e3:1f:2b: 21:85:81:19:48:71:82:66:c9:e7:4d:09:4c:5a:88: bd:f2:35:5e:61:14:04:1f:27:28:e4:07:47:c2:cc: e8:75:8f:09:d6:6c:b3:77:7f:59:50:7f:12:d0:ce: c0:f2:75:cf:1b:d5:7b:12:b9:08:ac:a8:6d:1c:d8: e6:1c:49:5a:91:5e:b8:4d:9b:58:24:cb:2a:ef:77: ed:f0:37:a6:f9:f1:a0:f9:2b:fe:54:7f:09:13:f9: 0a:0c:72:45:69:3a:47:53:9b:9e:55:e2:29:b3:95: ce:a3:2e:b6:86:8c:4d:79:4e:dd:78:72:99:70:47: 0b:f5:7e:d5:7b:1e:47:e9:20:e4:f1:ad:0b:5f:70: 7e:e5:2e:ae:6c:a2:d9:30:66:02:da:4c:79:28:e1: 89:b4:ce:3a:7f:73:c6:a5:79:c8:31:20:50:38:15: c8:39:99:82:b1:87:b9:40:b5:aa:b3:9b:21:34:a0: 19:cf:27:03:90:e2:df:ba:6b:f5:d7:ab:cc:9e:18: 40:ef:b5:89:99:ef:d3:cf:50:d0:c5:4d:6a:7b:3a: 45:c5:d5:0f:ae:d5:49:61:4c:f8:23:e7:c9:2f:07: 53:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:53:AD:2B:F8:A9:FE:DF:52:58:F3:2D:07:05:FC:41:DF:44:37:B4 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144968.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a90e::/32 Signature Algorithm: sha256WithRSAEncryption c9:24:a0:50:42:3e:4a:e2:11:9b:79:a9:0b:89:b9:95:82:cc: 15:e3:dc:6d:d4:94:ae:5a:a8:eb:25:9c:4a:a3:64:ba:35:7d: 98:f3:19:a5:a3:23:be:f6:13:21:cd:c6:07:ba:40:f6:d8:87: 3b:66:66:d0:d3:a1:71:f7:8b:0f:a9:fe:74:8f:b6:b6:44:ed: 8c:b9:33:7a:68:ae:32:5e:92:45:a0:2d:82:80:9f:2d:dc:35: 7d:69:cd:0f:63:a4:68:79:b0:e3:95:ee:a8:99:fd:6e:7f:aa: 00:95:ec:45:79:9d:1a:04:7d:06:f6:2f:6b:ec:56:45:dc:84: 35:9e:bf:01:8e:1e:ba:cf:31:7a:b8:4e:78:6b:a1:8e:9e:69: 16:10:8a:d6:b5:02:2f:32:3e:10:5b:c6:f8:35:32:37:d0:41: 21:b3:88:f8:20:a0:da:65:dd:49:7f:2f:a8:19:f2:b3:7a:2c: bb:72:b0:5b:9e:4a:af:49:70:c1:fb:80:c9:a1:8f:6d:ed:79: 52:94:d3:db:40:70:e4:72:ba:42:18:d1:63:b3:67:fb:17:fc: 8f:61:7c:60:eb:24:e8:27:56:89:3e:bf:5e:19:bc:db:61:5b: aa:cb:2c:f9:7a:f0:d1:71:13:04:9f:fc:66:b3:f4:41:d1:13: 2e:3a:f2:ff -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUT8m+GJx1z0sGRsTyCehjMeXOY7kwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTYzMVoX DTI3MDMwMzA2MjEzMVowMzExMC8GA1UEAxMoQzI1M0FEMkJGOEE5RkVERjUyNThG MzJEMDcwNUZDNDFERjQ0MzdCNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJO2LQ3qyzKPPEFYr52ZRO8GAxLYPtHG4MuF4x8rIYWBGUhxgmbJ500JTFqI vfI1XmEUBB8nKOQHR8LM6HWPCdZss3d/WVB/EtDOwPJ1zxvVexK5CKyobRzY5hxJ WpFeuE2bWCTLKu937fA3pvnxoPkr/lR/CRP5CgxyRWk6R1ObnlXiKbOVzqMutoaM TXlO3XhymXBHC/V+1XseR+kg5PGtC19wfuUurmyi2TBmAtpMeSjhibTOOn9zxqV5 yDEgUDgVyDmZgrGHuUC1qrObITSgGc8nA5Di37pr9derzJ4YQO+1iZnv089Q0MVN ans6RcXVD67VSWFM+CPnyS8HU1kCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBTCU60r +Kn+31JY8y0HBfxB30Q3tDAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDk2OC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qQ4wDQYJKoZIhvcNAQELBQADggEBAMkkoFBCPkriEZt5qQuJuZWCzBXj3G3UlK5a qOslnEqjZLo1fZjzGaWjI772EyHNxge6QPbYhztmZtDToXH3iw+p/nSPtrZE7Yy5 M3porjJekkWgLYKAny3cNX1pzQ9jpGh5sOOV7qiZ/W5/qgCV7EV5nRoEfQb2L2vs VkXchDWevwGOHrrPMXq4TnhroY6eaRYQita1Ai8yPhBbxvg1MjfQQSGziPggoNpl 3Ul/L6gZ8rN6LLtysFueSq9JcMH7gMmhj23teVKU09tAcORyukIY0WOzZ/sX/I9h fGDrJOgnVok+v14ZvNthW6rLLPl68NFxEwSf/Gaz9EHREy468v8= -----END CERTIFICATE-----Generated at Sat Mar 28 11:44:48 2026 by rpki-client