$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144982.roa File: AS144982.roa (raw, json) Hash identifier: rrzGIR75UshTwE0ZkTbTh8SrJ+wtpsdSJFTw80ElS4Y= Subject key identifier: B2:91:C2:6D:82:B3:1D:E4:4D:30:6A:F2:06:50:6D:36:A1:33:45:91 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 2674150C175FF29EFBF9B8F083834B4135A91CD4 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144982.roa Signing time: Wed 04 Mar 2026 06:22:06 +0000 ROA not before: Wed 04 Mar 2026 06:17:06 +0000 ROA not after: Wed 03 Mar 2027 06:22:06 +0000 asID: 144982 IP address blocks: 240a:a91c::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:74:15:0c:17:5f:f2:9e:fb:f9:b8:f0:83:83:4b:41:35:a9:1c:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:17:06 2026 GMT Not After : Mar 3 06:22:06 2027 GMT Subject: CN=B291C26D82B31DE44D306AF206506D36A1334591 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:f5:30:3d:08:c1:3e:85:f5:74:85:54:af:f0: cc:55:1c:59:27:58:cc:2e:15:cb:75:40:20:02:63: 35:5d:0e:37:f3:7b:34:60:eb:50:de:85:25:b3:b2: a2:fc:ca:e9:f2:d9:0b:70:6f:8f:5b:72:d3:f4:71: ab:22:5f:09:27:b0:e5:1b:27:b1:8d:26:08:ca:57: ba:0c:b9:98:b9:74:89:e8:83:98:0c:a4:1d:88:ab: 41:1b:b6:e1:7d:b0:b2:de:11:59:25:8b:e7:84:cf: 49:10:bd:ab:dd:66:d1:13:5d:ae:2d:09:0f:5f:4b: c0:2d:d4:4b:65:c0:15:4a:fe:7c:9d:33:e4:56:11: 72:61:7f:e1:06:a8:be:d2:2c:38:15:9f:18:c5:72: 2c:55:cc:d7:5b:ff:a2:93:4f:0a:97:35:1c:6f:b9: 18:3a:29:3e:ee:9d:0c:82:3a:22:2d:cd:8a:9a:82: cf:31:c9:db:15:c2:d9:0f:3f:30:f0:c6:42:48:4e: f4:0f:ff:82:f3:95:10:c5:59:27:e5:00:9c:5b:d0: c7:59:ed:e1:da:04:f2:85:02:81:05:5a:6e:51:82: 0c:85:9f:a4:71:4a:5e:25:d3:19:8e:62:a0:ca:2c: 75:94:84:30:ac:b8:3f:a2:e0:e8:eb:05:0d:01:9d: 01:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:91:C2:6D:82:B3:1D:E4:4D:30:6A:F2:06:50:6D:36:A1:33:45:91 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144982.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a91c::/32 Signature Algorithm: sha256WithRSAEncryption 33:2f:63:1e:bc:a4:03:a5:4d:59:6a:c2:bd:4c:25:30:7a:9b: 35:71:56:8b:55:94:06:e4:c5:21:13:38:a6:45:35:e6:cf:d8: e5:f4:9f:7f:b7:0e:22:b4:16:d8:d6:3a:5d:cd:74:bb:af:a0: 2f:c6:a6:b3:dd:86:82:4a:1d:18:d0:7d:98:f1:0f:9b:39:0e: a0:ad:52:75:62:94:d9:25:86:88:87:18:7c:6b:43:92:cf:d2: 7f:40:f9:b6:07:ea:ae:58:5e:21:ad:d2:12:73:e5:99:37:1f: 89:6f:19:40:d1:85:de:09:21:f9:51:fc:91:80:e9:8e:80:43: bc:6c:17:c7:bf:3d:60:4b:c7:1b:63:82:22:7a:12:46:c9:48: e1:e2:a5:e3:c5:1e:0f:e1:34:14:21:34:34:74:e1:19:24:bf: 1d:aa:d6:55:6e:33:58:c8:8c:92:8b:78:1d:8c:85:76:dc:51: c2:85:fb:3e:1f:ab:fa:cd:58:85:96:af:da:eb:4f:56:37:ab: aa:65:55:d5:6a:e9:79:01:dd:41:2c:96:e5:21:11:1a:68:0b: c7:38:a5:1d:4f:b4:51:43:1e:94:b0:4b:0f:19:a1:4d:7b:08: 9b:a4:f7:1d:8a:fd:0b:23:ca:d2:d8:aa:c8:9a:20:48:81:0e: 33:d2:96:55 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUJnQVDBdf8p77+bjwg4NLQTWpHNQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTcwNloX DTI3MDMwMzA2MjIwNlowMzExMC8GA1UEAxMoQjI5MUMyNkQ4MkIzMURFNDREMzA2 QUYyMDY1MDZEMzZBMTMzNDU5MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAN31MD0IwT6F9XSFVK/wzFUcWSdYzC4Vy3VAIAJjNV0ON/N7NGDrUN6FJbOy ovzK6fLZC3Bvj1ty0/RxqyJfCSew5RsnsY0mCMpXugy5mLl0ieiDmAykHYirQRu2 4X2wst4RWSWL54TPSRC9q91m0RNdri0JD19LwC3US2XAFUr+fJ0z5FYRcmF/4Qao vtIsOBWfGMVyLFXM11v/opNPCpc1HG+5GDopPu6dDII6Ii3NipqCzzHJ2xXC2Q8/ MPDGQkhO9A//gvOVEMVZJ+UAnFvQx1nt4doE8oUCgQVablGCDIWfpHFKXiXTGY5i oMosdZSEMKy4P6Lg6OsFDQGdAX0CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSykcJt grMd5E0wavIGUG02oTNFkTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDk4Mi5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qRwwDQYJKoZIhvcNAQELBQADggEBADMvYx68pAOlTVlqwr1MJTB6mzVxVotVlAbk xSETOKZFNebP2OX0n3+3DiK0FtjWOl3NdLuvoC/GprPdhoJKHRjQfZjxD5s5DqCt UnVilNklhoiHGHxrQ5LP0n9A+bYH6q5YXiGt0hJz5Zk3H4lvGUDRhd4JIflR/JGA 6Y6AQ7xsF8e/PWBLxxtjgiJ6EkbJSOHipePFHg/hNBQhNDR04Rkkvx2q1lVuM1jI jJKLeB2MhXbcUcKF+z4fq/rNWIWWr9rrT1Y3q6plVdVq6XkB3UEsluUhERpoC8c4 pR1PtFFDHpSwSw8ZoU17CJuk9x2K/QsjytLYqsiaIEiBDjPSllU= -----END CERTIFICATE-----Generated at Sat Mar 28 11:43:32 2026 by rpki-client