$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144990.roa File: AS144990.roa (raw, json) Hash identifier: t/dzSFJQ0cdOsxYT8rlVcAYK3s1McSAHd3fq/8GDt/k= Subject key identifier: B0:52:01:40:57:8D:6F:8C:73:87:C6:58:0C:2E:09:1B:F2:29:87:98 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 273B9291FDC217AEB6CBE0AC997F1CC8CDD51CBC Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144990.roa Signing time: Wed 04 Mar 2026 06:20:33 +0000 ROA not before: Wed 04 Mar 2026 06:15:33 +0000 ROA not after: Wed 03 Mar 2027 06:20:33 +0000 asID: 144990 IP address blocks: 240a:a924::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:3b:92:91:fd:c2:17:ae:b6:cb:e0:ac:99:7f:1c:c8:cd:d5:1c:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:15:33 2026 GMT Not After : Mar 3 06:20:33 2027 GMT Subject: CN=B0520140578D6F8C7387C6580C2E091BF2298798 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fc:58:85:6f:ec:f9:ac:3f:cc:95:f7:54:7e:01: 68:48:c4:07:3c:2d:59:48:c7:d1:b7:2b:8d:77:8b: e9:9f:38:d1:04:b6:90:4a:bf:58:b0:f9:8d:6c:22: c7:e8:28:c2:cb:21:ca:4f:34:9a:69:1b:b5:06:71: cf:e8:8a:84:d6:a8:0b:53:11:02:33:bf:30:40:cd: 9f:2e:27:e9:35:a0:56:b5:01:c5:ed:d8:4a:57:ce: f9:a6:04:04:e8:1a:3d:0f:99:85:d0:c9:cc:a2:68: b5:cd:d7:5d:93:01:4e:00:59:08:5d:75:86:68:41: 09:77:9d:46:a5:8a:33:41:d6:44:f7:e0:61:9c:61: 59:fe:5f:27:a3:f6:13:72:17:d0:43:04:62:42:e0: a6:37:2e:5d:61:55:c5:f3:25:ca:55:8c:72:a0:6a: 18:49:47:1b:2d:ae:dd:c0:60:3e:8e:2b:ef:2e:e7: c1:d2:9d:c7:ee:40:40:3b:6f:1a:a3:a4:72:c9:2b: 45:03:71:40:0c:84:70:b5:da:90:62:bf:f3:ab:3a: 22:f4:87:9d:37:24:9b:61:7c:1a:c7:f0:ac:9c:23: 2a:19:6f:21:5f:26:aa:6f:72:e4:e7:e4:5e:06:13: 16:9c:af:62:79:c9:bd:72:55:1e:91:7b:86:a6:dc: bc:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:52:01:40:57:8D:6F:8C:73:87:C6:58:0C:2E:09:1B:F2:29:87:98 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144990.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a924::/32 Signature Algorithm: sha256WithRSAEncryption a4:e6:57:87:3b:77:6a:05:95:42:ab:ae:6e:06:7f:58:cf:fe: aa:be:00:fc:f3:d7:a1:91:c4:d0:52:3c:f4:60:b9:1f:f5:c8: 40:f7:1e:2b:96:e8:d7:df:eb:6b:83:cf:07:b7:da:3a:4f:8a: 83:1a:02:56:41:25:b6:26:1c:2d:1c:97:7e:45:00:1c:15:05: d1:57:23:17:85:97:e6:21:07:32:ba:25:04:e1:24:a9:78:9b: 4c:4a:bf:8f:f7:84:c3:00:e0:bb:1b:b4:8b:2a:8c:db:2d:de: 69:46:1b:66:5c:87:ad:1d:be:f3:77:f9:a0:d6:26:9f:b4:7c: 5f:65:04:a2:93:ba:8f:42:bd:96:10:74:d0:65:17:67:8e:75: 89:75:c0:43:9a:8d:42:89:12:d7:ab:79:17:3d:84:ec:15:f9: a1:b3:83:50:df:3d:3f:d7:0e:ca:75:c5:b9:1a:a2:6c:93:f3: d2:c3:66:74:1b:6b:93:0d:e0:d2:ca:d9:35:61:49:db:0c:59: 38:65:92:be:e4:0d:2b:0b:3f:05:d2:c7:ff:df:70:6c:0c:e0: 57:bf:c6:71:e5:27:8a:d4:f4:fd:ca:0e:c7:38:11:ce:ff:0c: 49:5a:22:c8:19:d1:48:d6:14:7f:47:29:a4:cb:7b:8b:2e:9d: d2:05:6e:3a -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUJzuSkf3CF662y+CsmX8cyM3VHLwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTUzM1oX DTI3MDMwMzA2MjAzM1owMzExMC8GA1UEAxMoQjA1MjAxNDA1NzhENkY4QzczODdD NjU4MEMyRTA5MUJGMjI5ODc5ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAPxYhW/s+aw/zJX3VH4BaEjEBzwtWUjH0bcrjXeL6Z840QS2kEq/WLD5jWwi x+gowsshyk80mmkbtQZxz+iKhNaoC1MRAjO/MEDNny4n6TWgVrUBxe3YSlfO+aYE BOgaPQ+ZhdDJzKJotc3XXZMBTgBZCF11hmhBCXedRqWKM0HWRPfgYZxhWf5fJ6P2 E3IX0EMEYkLgpjcuXWFVxfMlylWMcqBqGElHGy2u3cBgPo4r7y7nwdKdx+5AQDtv GqOkcskrRQNxQAyEcLXakGK/86s6IvSHnTckm2F8GsfwrJwjKhlvIV8mqm9y5Ofk XgYTFpyvYnnJvXJVHpF7hqbcvGsCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSwUgFA V41vjHOHxlgMLgkb8imHmDAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDk5MC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qSQwDQYJKoZIhvcNAQELBQADggEBAKTmV4c7d2oFlUKrrm4Gf1jP/qq+APzz16GR xNBSPPRguR/1yED3HiuW6Nff62uDzwe32jpPioMaAlZBJbYmHC0cl35FABwVBdFX IxeFl+YhBzK6JQThJKl4m0xKv4/3hMMA4LsbtIsqjNst3mlGG2Zch60dvvN3+aDW Jp+0fF9lBKKTuo9CvZYQdNBlF2eOdYl1wEOajUKJEtereRc9hOwV+aGzg1DfPT/X Dsp1xbkaomyT89LDZnQba5MN4NLK2TVhSdsMWThlkr7kDSsLPwXSx//fcGwM4Fe/ xnHlJ4rU9P3KDsc4Ec7/DElaIsgZ0UjWFH9HKaTLe4sundIFbjo= -----END CERTIFICATE-----Generated at Sat Mar 28 11:46:03 2026 by rpki-client