$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144978.roa File: AS144978.roa (raw, json) Hash identifier: unZ/P88l6nwhNFWEH2IXIK39gZPv4zRei0hjUqKDV9E= Subject key identifier: 44:82:9E:6E:F8:13:5A:A6:87:63:55:8F:EB:AD:39:B2:D2:44:4E:19 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 699D30C41E8D3EAFAA9D961E70744418E98C04BC Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144978.roa Signing time: Wed 04 Mar 2026 06:21:36 +0000 ROA not before: Wed 04 Mar 2026 06:16:36 +0000 ROA not after: Wed 03 Mar 2027 06:21:36 +0000 asID: 144978 IP address blocks: 240a:a918::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:9d:30:c4:1e:8d:3e:af:aa:9d:96:1e:70:74:44:18:e9:8c:04:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:16:36 2026 GMT Not After : Mar 3 06:21:36 2027 GMT Subject: CN=44829E6EF8135AA68763558FEBAD39B2D2444E19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:29:72:f0:b9:4c:04:f7:bd:92:23:18:b1:73: 15:30:a9:f0:dc:d8:e5:f4:aa:90:79:cc:d6:82:5d: 65:93:a3:d3:0e:14:9e:ca:ed:03:eb:d0:d3:ca:56: 78:a8:6f:c6:f9:13:43:60:be:cc:fa:e6:a7:88:22: 38:ce:cb:8b:b4:d0:e2:6a:ff:86:f5:23:25:f6:1e: 23:b0:3e:16:2a:70:76:5e:46:ea:9b:7e:93:81:67: d8:de:56:e4:b3:73:1b:b6:e9:7a:a8:79:fb:88:e0: bd:cc:4d:0d:35:e0:89:5f:cf:87:bc:4d:ad:e4:5b: 6f:e2:c3:69:c9:20:bd:13:1b:72:92:8f:88:6b:d7: 9f:40:ba:70:52:a4:b2:ff:d9:5c:1a:20:88:bc:81: 01:22:63:0d:95:dd:20:8c:45:4a:87:7c:43:13:43: 4f:0f:61:75:9e:2a:a5:5c:b1:11:61:11:ce:48:71: 25:48:7e:bf:91:c7:93:36:7e:a6:2d:ef:3b:ad:eb: b7:71:f5:a7:e1:40:06:39:dc:25:aa:46:5c:51:18: f6:c7:ec:00:53:ba:6f:17:91:3f:c4:f6:51:c4:5c: a8:0b:97:e8:07:4c:83:c4:a2:52:32:20:7e:27:f7: a4:fe:f9:b8:d5:15:6d:ff:da:37:bb:e3:cd:ba:82: d2:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:82:9E:6E:F8:13:5A:A6:87:63:55:8F:EB:AD:39:B2:D2:44:4E:19 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144978.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a918::/32 Signature Algorithm: sha256WithRSAEncryption 32:d1:93:22:6c:7f:67:78:1e:4e:e5:0c:b9:83:4f:b9:7b:8d: 49:b4:f7:d3:b3:5f:31:25:33:6a:57:51:3a:9f:08:77:81:de: b8:8f:f9:63:6a:8a:96:2e:51:cb:68:e2:d1:61:fc:39:ec:b4: ba:f3:56:71:23:42:bf:47:89:9c:72:e6:b9:63:ea:29:90:c4: 52:47:9e:bb:0f:a7:c0:cc:ad:21:1e:76:3d:f3:43:de:48:95: c3:ae:d8:02:da:52:5d:b6:ef:d7:1f:8b:02:36:c0:f2:35:e8: 84:40:2e:ed:be:3d:11:08:ba:b0:9f:f2:3c:c6:59:0d:27:d7: dc:fc:e9:f5:0f:56:22:d9:d9:d9:f5:36:13:39:76:7b:83:d7: 64:81:b9:03:82:0d:62:d6:1d:e6:8c:ba:93:32:5d:25:fb:35: 06:66:85:2f:07:69:83:b4:9f:60:27:ec:f1:a3:2b:4d:41:e5: 56:1a:84:bb:a0:75:29:a1:e2:c5:c5:51:34:d5:ca:9f:20:62: 20:06:50:7f:99:2b:1a:ba:17:65:83:3d:d5:d4:9c:d8:ed:98: c1:e0:97:3b:58:f3:8a:5e:44:4c:91:9d:d0:0e:1e:a2:38:d6: 25:18:71:9d:76:02:06:55:b8:b3:b6:65:bd:12:8f:76:52:2c: 71:67:b8:a5 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUaZ0wxB6NPq+qnZYecHREGOmMBLwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTYzNloX DTI3MDMwMzA2MjEzNlowMzExMC8GA1UEAxMoNDQ4MjlFNkVGODEzNUFBNjg3NjM1 NThGRUJBRDM5QjJEMjQ0NEUxOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKIpcvC5TAT3vZIjGLFzFTCp8NzY5fSqkHnM1oJdZZOj0w4UnsrtA+vQ08pW eKhvxvkTQ2C+zPrmp4giOM7Li7TQ4mr/hvUjJfYeI7A+Fipwdl5G6pt+k4Fn2N5W 5LNzG7bpeqh5+4jgvcxNDTXgiV/Ph7xNreRbb+LDackgvRMbcpKPiGvXn0C6cFKk sv/ZXBogiLyBASJjDZXdIIxFSod8QxNDTw9hdZ4qpVyxEWERzkhxJUh+v5HHkzZ+ pi3vO63rt3H1p+FABjncJapGXFEY9sfsAFO6bxeRP8T2UcRcqAuX6AdMg8SiUjIg fif3pP75uNUVbf/aN7vjzbqC0qkCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBREgp5u +BNapodjVY/rrTmy0kROGTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDk3OC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qRgwDQYJKoZIhvcNAQELBQADggEBADLRkyJsf2d4Hk7lDLmDT7l7jUm099OzXzEl M2pXUTqfCHeB3riP+WNqipYuUcto4tFh/DnstLrzVnEjQr9HiZxy5rlj6imQxFJH nrsPp8DMrSEedj3zQ95IlcOu2ALaUl2279cfiwI2wPI16IRALu2+PREIurCf8jzG WQ0n19z86fUPViLZ2dn1NhM5dnuD12SBuQOCDWLWHeaMupMyXSX7NQZmhS8HaYO0 n2An7PGjK01B5VYahLugdSmh4sXFUTTVyp8gYiAGUH+ZKxq6F2WDPdXUnNjtmMHg lztY84peREyRndAOHqI41iUYcZ12AgZVuLO2Zb0Sj3ZSLHFnuKU= -----END CERTIFICATE-----Generated at Sat Mar 28 11:50:00 2026 by rpki-client