$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144971.roa File: AS144971.roa (raw, json) Hash identifier: nWX4NQVUKwEUjLZ/WVdhYcrd7gwbgH07NK5be8QbXr8= Subject key identifier: A9:FC:C2:CF:02:D2:F9:B5:95:63:44:C0:3D:D2:4E:CA:82:ED:88:79 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 79AB45B6210498ABBBD56D4B025A99C364B811DB Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144971.roa Signing time: Wed 04 Mar 2026 06:19:30 +0000 ROA not before: Wed 04 Mar 2026 06:14:30 +0000 ROA not after: Wed 03 Mar 2027 06:19:30 +0000 asID: 144971 IP address blocks: 240a:a911::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:ab:45:b6:21:04:98:ab:bb:d5:6d:4b:02:5a:99:c3:64:b8:11:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:14:30 2026 GMT Not After : Mar 3 06:19:30 2027 GMT Subject: CN=A9FCC2CF02D2F9B5956344C03DD24ECA82ED8879 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:e5:e6:a7:47:b4:60:90:92:05:fb:e4:20:a1: d8:fe:fe:df:d5:88:73:60:00:2e:5d:52:6e:3a:47: 84:9a:7d:70:4c:dc:e9:46:67:b3:1a:1d:f7:31:15: 13:26:49:1d:c1:45:fd:ce:fd:85:de:45:35:16:78: a7:ff:55:43:d5:5f:a2:34:d8:ae:71:7a:db:ac:98: 29:b6:00:0b:81:fc:94:73:12:19:38:8b:c9:8e:a6: 61:00:0d:95:8a:28:46:f1:5e:09:56:e4:a9:0b:3c: 7a:76:60:ce:97:aa:5e:1e:c4:64:7b:ab:41:6b:96: e2:4c:7c:38:1e:04:90:66:bd:ad:bb:cc:f0:ad:aa: 16:3c:48:de:da:10:4b:9e:ac:46:99:25:56:e2:08: c0:ab:91:ee:65:04:64:d9:f2:fb:a3:bd:d8:54:06: 64:45:47:c8:bd:bc:8a:57:27:72:38:7d:3d:3a:94: c7:9e:74:c8:b4:b3:06:8b:c1:e7:1d:9f:7f:44:1e: 4c:bc:df:15:a1:62:e0:0e:e1:f6:bf:38:78:e5:07: e3:d4:3d:e2:71:a6:8d:9f:f8:33:a8:bf:56:b9:2c: 3a:4a:d0:6a:bf:3a:64:15:92:5a:bb:37:83:bf:1f: db:20:79:b8:8b:8f:9c:ae:67:4e:62:b2:38:d0:51: a9:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:FC:C2:CF:02:D2:F9:B5:95:63:44:C0:3D:D2:4E:CA:82:ED:88:79 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144971.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a911::/32 Signature Algorithm: sha256WithRSAEncryption 51:76:c0:53:bb:b1:08:a1:d8:1b:3c:f3:0e:9c:08:d0:b1:41: 60:d8:17:f1:ad:9f:3f:0d:33:6e:88:04:72:1c:a7:52:d5:87: 21:93:a9:1e:73:ab:d6:36:84:63:39:f8:9f:b9:80:0e:6c:4b: 3c:68:51:1a:6a:19:ee:82:30:11:5b:9e:fe:59:84:58:16:ae: 22:c0:7c:58:b7:28:66:e4:27:c6:4c:b2:9e:28:ff:b0:86:af: 75:5f:d4:37:a7:6f:d1:17:9c:d8:e0:ef:4d:b9:64:64:03:f5: 19:a9:06:c1:e9:d2:c0:78:78:d4:4f:ba:85:fb:8b:12:ed:4b: 68:68:18:74:ff:36:22:9a:ea:7b:f4:39:a4:f6:fe:2c:14:6a: ea:0f:46:64:d9:78:71:ea:71:03:92:be:c7:db:82:94:c5:b7: 98:98:ca:c1:cc:fa:8b:df:ff:77:f5:51:dd:14:8c:a1:87:30: 0c:43:1f:f5:90:60:14:b2:7f:5b:4e:d5:a5:8a:99:5f:f7:db: 82:7d:50:b5:e0:2a:a1:ea:91:45:c0:c2:a7:b3:5f:2a:ae:02: 65:8f:d7:13:2f:08:72:45:3b:2b:21:43:e2:dc:ce:bd:d1:e4: 8f:6a:ff:c1:6c:aa:04:73:4c:84:08:11:3a:da:67:b9:49:e3: 5e:81:ef:02 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUeatFtiEEmKu71W1LAlqZw2S4EdswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTQzMFoX DTI3MDMwMzA2MTkzMFowMzExMC8GA1UEAxMoQTlGQ0MyQ0YwMkQyRjlCNTk1NjM0 NEMwM0REMjRFQ0E4MkVEODg3OTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANDl5qdHtGCQkgX75CCh2P7+39WIc2AALl1SbjpHhJp9cEzc6UZnsxod9zEV EyZJHcFF/c79hd5FNRZ4p/9VQ9VfojTYrnF626yYKbYAC4H8lHMSGTiLyY6mYQAN lYooRvFeCVbkqQs8enZgzpeqXh7EZHurQWuW4kx8OB4EkGa9rbvM8K2qFjxI3toQ S56sRpklVuIIwKuR7mUEZNny+6O92FQGZEVHyL28ilcncjh9PTqUx550yLSzBovB 5x2ff0QeTLzfFaFi4A7h9r84eOUH49Q94nGmjZ/4M6i/VrksOkrQar86ZBWSWrs3 g78f2yB5uIuPnK5nTmKyONBRqSECAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSp/MLP AtL5tZVjRMA90k7Kgu2IeTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDk3MS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qREwDQYJKoZIhvcNAQELBQADggEBAFF2wFO7sQih2Bs88w6cCNCxQWDYF/Gtnz8N M26IBHIcp1LVhyGTqR5zq9Y2hGM5+J+5gA5sSzxoURpqGe6CMBFbnv5ZhFgWriLA fFi3KGbkJ8ZMsp4o/7CGr3Vf1Denb9EXnNjg7025ZGQD9RmpBsHp0sB4eNRPuoX7 ixLtS2hoGHT/NiKa6nv0OaT2/iwUauoPRmTZeHHqcQOSvsfbgpTFt5iYysHM+ovf /3f1Ud0UjKGHMAxDH/WQYBSyf1tO1aWKmV/324J9ULXgKqHqkUXAwqezXyquAmWP 1xMvCHJFOyshQ+Lczr3R5I9q/8FsqgRzTIQIETraZ7lJ416B7wI= -----END CERTIFICATE-----Generated at Sat Mar 28 14:30:37 2026 by rpki-client