$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144979.roa File: AS144979.roa (raw, json) Hash identifier: nM9cJZ7kRo7k5tOlayGBIC/W19LOOFBtkOTqA8W5dnk= Subject key identifier: 12:E8:36:75:71:3E:FA:DD:C3:5E:57:77:16:E9:84:CA:62:85:73:50 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 45CD0B485FA76DFE0B69AB315C96F0255B79C22A Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144979.roa Signing time: Wed 04 Mar 2026 06:21:26 +0000 ROA not before: Wed 04 Mar 2026 06:16:26 +0000 ROA not after: Wed 03 Mar 2027 06:21:26 +0000 asID: 144979 IP address blocks: 240a:a919::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:cd:0b:48:5f:a7:6d:fe:0b:69:ab:31:5c:96:f0:25:5b:79:c2:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:16:26 2026 GMT Not After : Mar 3 06:21:26 2027 GMT Subject: CN=12E83675713EFADDC35E577716E984CA62857350 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:4f:88:3f:fa:d5:50:f8:bd:af:fc:d1:e9:18: 73:95:60:1d:52:4f:63:be:8c:e0:0b:bd:b9:5f:7b: 97:6a:1c:9a:0e:1e:17:89:56:1d:5a:66:66:a6:a2: 82:32:46:33:30:cc:a5:1e:fa:04:88:f4:5a:6d:a0: 5e:cc:2e:f1:67:24:3a:2e:9e:68:4e:e5:cd:c0:37: 94:ec:e9:e6:19:33:ed:50:92:fb:79:62:14:92:fb: 39:be:d8:21:8f:21:c6:9c:5a:a4:c3:ff:bb:bc:b8: c2:9b:90:2e:54:b5:ea:7f:84:67:15:a6:5d:f3:7f: 83:30:63:9d:66:3a:9a:8a:56:93:fd:b9:c7:84:e7: 07:a9:b2:12:10:93:e9:a5:2e:5c:5d:ba:33:33:fa: 7a:fb:6f:87:de:69:05:dc:13:8c:7f:22:cb:69:61: ea:34:82:b7:f4:cb:e6:ae:e9:31:5a:f1:b1:ff:a3: 3c:35:33:46:06:26:50:49:b3:91:72:5e:a8:6d:7f: 4c:39:83:da:66:b8:d4:d0:17:a6:44:78:ab:ed:db: 1d:73:d3:2d:16:96:af:2a:09:a9:c0:a6:2b:de:ca: d3:52:fb:22:9b:45:fa:f0:f8:bc:1e:c9:e0:28:69: df:0b:29:a3:51:45:bd:6c:36:b7:8e:08:12:5f:82: b5:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:E8:36:75:71:3E:FA:DD:C3:5E:57:77:16:E9:84:CA:62:85:73:50 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144979.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a919::/32 Signature Algorithm: sha256WithRSAEncryption 7a:79:1b:37:a7:9a:bd:fc:49:47:d6:59:69:79:93:b7:e3:42: 23:4d:23:3c:fe:f6:8f:b4:2f:67:24:1b:04:e3:6e:c9:b1:4f: 43:11:ea:5b:3f:20:62:c8:c9:e3:71:c4:bb:2c:d0:4c:be:50: 2f:9d:5b:78:85:4c:2c:29:70:58:ef:08:c3:bb:b8:22:92:99: 81:fd:91:5d:d1:61:cc:65:3a:23:bc:a6:7f:59:fe:1b:ef:14: 31:f3:fd:83:9f:fb:77:e6:2a:64:23:4a:4a:c2:95:0b:c5:03: 35:b8:2f:d5:f7:fc:71:a4:68:b7:a6:e3:be:8b:47:69:68:e7: 52:a7:fb:4a:3b:ab:52:5f:6a:4c:74:81:35:d0:b4:35:23:e2: 5a:3f:fe:0f:cb:ed:e5:89:a9:76:48:43:da:f2:d3:63:2d:12: 74:a2:51:c0:1b:13:8a:b8:6f:0c:09:cd:73:7f:78:97:fc:10: c8:21:30:15:ad:3e:de:07:ee:35:45:d0:a4:82:af:53:01:34: bd:b7:57:ea:21:0f:f3:71:4f:78:11:40:e3:f7:f1:b0:b3:a9: 9f:43:9a:b1:8f:c8:e1:4b:41:d9:2b:06:fc:9c:bc:d8:de:82: b0:a7:0c:47:02:19:e4:e7:67:2a:49:bb:e0:b7:94:53:af:84: 0b:e1:65:ae -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIURc0LSF+nbf4LaasxXJbwJVt5wiowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTYyNloX DTI3MDMwMzA2MjEyNlowMzExMC8GA1UEAxMoMTJFODM2NzU3MTNFRkFEREMzNUU1 Nzc3MTZFOTg0Q0E2Mjg1NzM1MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALRPiD/61VD4va/80ekYc5VgHVJPY76M4Au9uV97l2ocmg4eF4lWHVpmZqai gjJGMzDMpR76BIj0Wm2gXswu8WckOi6eaE7lzcA3lOzp5hkz7VCS+3liFJL7Ob7Y IY8hxpxapMP/u7y4wpuQLlS16n+EZxWmXfN/gzBjnWY6mopWk/25x4TnB6myEhCT 6aUuXF26MzP6evtvh95pBdwTjH8iy2lh6jSCt/TL5q7pMVrxsf+jPDUzRgYmUEmz kXJeqG1/TDmD2ma41NAXpkR4q+3bHXPTLRaWryoJqcCmK97K01L7IptF+vD4vB7J 4Chp3wspo1FFvWw2t44IEl+CtY8CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQS6DZ1 cT763cNeV3cW6YTKYoVzUDAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDk3OS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qRkwDQYJKoZIhvcNAQELBQADggEBAHp5Gzenmr38SUfWWWl5k7fjQiNNIzz+9o+0 L2ckGwTjbsmxT0MR6ls/IGLIyeNxxLss0Ey+UC+dW3iFTCwpcFjvCMO7uCKSmYH9 kV3RYcxlOiO8pn9Z/hvvFDHz/YOf+3fmKmQjSkrClQvFAzW4L9X3/HGkaLem476L R2lo51Kn+0o7q1Jfakx0gTXQtDUj4lo//g/L7eWJqXZIQ9ry02MtEnSiUcAbE4q4 bwwJzXN/eJf8EMghMBWtPt4H7jVF0KSCr1MBNL23V+ohD/NxT3gRQOP38bCzqZ9D mrGPyOFLQdkrBvycvNjegrCnDEcCGeTnZypJu+C3lFOvhAvhZa4= -----END CERTIFICATE-----Generated at Sat Mar 28 11:42:29 2026 by rpki-client