$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144122.roa File: AS144122.roa (raw, json) Hash identifier: uvInGHru4VT6b/VlXrd34Nc9NoeOBYfrmqN98n2dPGk= Subject key identifier: 17:9C:59:E2:B1:4B:F6:49:2A:1B:6A:6D:16:45:6C:F8:47:A7:A2:08 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 374B91CFA44A734F0B7C4120183526BCEBD8B58C Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144122.roa Signing time: Wed 04 Mar 2026 06:12:56 +0000 ROA not before: Wed 04 Mar 2026 06:07:56 +0000 ROA not after: Wed 03 Mar 2027 06:12:56 +0000 asID: 144122 IP address blocks: 240a:a5c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:4b:91:cf:a4:4a:73:4f:0b:7c:41:20:18:35:26:bc:eb:d8:b5:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:07:56 2026 GMT Not After : Mar 3 06:12:56 2027 GMT Subject: CN=179C59E2B14BF6492A1B6A6D16456CF847A7A208 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:79:8d:3b:6f:41:ed:ac:8b:43:61:bc:94:9f: 45:a2:8d:e3:11:ac:ee:a0:b4:a1:19:e5:fa:1a:9f: 52:85:b5:52:7f:43:2b:0d:8d:8c:96:b3:c1:71:8a: 7a:1a:48:3d:e8:33:5b:a8:86:05:a6:3e:42:74:8b: cb:a2:72:aa:39:4d:1f:41:28:f0:2c:d7:e2:99:c4: 68:0c:dc:42:47:40:dd:26:99:20:9b:3f:45:2b:a8: 6e:a4:fd:bf:bf:02:a0:f2:4b:7e:46:5a:ee:b2:3b: 51:0e:8b:c8:9f:6a:55:d6:85:2d:bd:4a:10:bf:56: 77:da:dd:79:d7:46:c6:17:a1:a9:a5:c2:02:17:c3: cf:56:03:b9:c4:a9:49:dd:b3:8d:4a:ea:57:0c:07: db:e6:23:db:53:6b:66:c1:b2:f4:75:4d:93:c0:53: 47:48:62:dc:e5:d7:d5:57:5d:6a:4c:35:98:17:56: 84:6c:cc:b3:4d:cf:05:62:0c:9e:da:51:78:71:86: ba:aa:e0:10:77:c9:95:f6:6f:e3:d6:9c:41:00:ff: eb:70:c2:17:de:c2:0a:98:fa:39:14:03:e4:68:90: 92:e4:80:36:24:3a:31:1c:97:28:b6:66:38:23:b5: 46:c6:a3:da:fd:a6:c3:12:12:31:1a:87:57:46:a1: ae:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:9C:59:E2:B1:4B:F6:49:2A:1B:6A:6D:16:45:6C:F8:47:A7:A2:08 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144122.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a5c0::/32 Signature Algorithm: sha256WithRSAEncryption 74:ca:37:2d:c2:48:a5:9f:a0:00:64:b7:32:ea:6a:16:60:11: a7:27:21:4b:6a:8a:c0:f3:aa:4b:81:d7:20:5f:43:4d:76:aa: a6:23:4d:31:68:2d:37:74:8a:bc:ad:82:63:5e:8d:60:f9:a2: b5:84:0d:25:cd:f2:57:7b:da:a8:a5:13:74:ba:36:dc:e8:13: 5e:94:a2:6b:28:e9:9a:ba:6d:18:11:18:4a:51:d4:2c:79:e2: 97:f2:8e:c3:b6:3b:ba:a6:7e:3a:84:7c:1e:94:cc:62:35:3b: 9f:10:42:ac:ec:ff:13:17:7e:96:83:d6:c7:23:52:1c:b5:a8: 46:60:35:19:39:e6:af:41:8b:3c:00:4f:5d:d6:4b:52:14:56: 76:1d:d4:ca:8e:03:4c:f5:28:af:c2:a0:29:ec:fe:cb:a0:57: 70:63:73:52:2a:4f:8b:7a:49:02:03:6b:08:83:11:d3:38:f5: ca:14:ed:47:c7:5b:60:76:d1:27:85:ac:f0:c4:51:37:ec:d1: 6e:eb:db:e2:15:dd:32:12:79:47:f7:71:dd:11:e0:0f:bf:ee: 38:a3:5d:6c:df:34:38:e0:35:bb:92:0b:c8:64:e2:86:a7:23: 46:5b:9f:90:1d:51:ce:cd:00:34:24:9a:21:e5:35:b6:0c:2d: fa:00:b0:c8 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUN0uRz6RKc08LfEEgGDUmvOvYtYwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDc1NloX DTI3MDMwMzA2MTI1NlowMzExMC8GA1UEAxMoMTc5QzU5RTJCMTRCRjY0OTJBMUI2 QTZEMTY0NTZDRjg0N0E3QTIwODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKN5jTtvQe2si0NhvJSfRaKN4xGs7qC0oRnl+hqfUoW1Un9DKw2NjJazwXGK ehpIPegzW6iGBaY+QnSLy6JyqjlNH0Eo8CzX4pnEaAzcQkdA3SaZIJs/RSuobqT9 v78CoPJLfkZa7rI7UQ6LyJ9qVdaFLb1KEL9Wd9rdeddGxhehqaXCAhfDz1YDucSp Sd2zjUrqVwwH2+Yj21NrZsGy9HVNk8BTR0hi3OXX1Vddakw1mBdWhGzMs03PBWIM ntpReHGGuqrgEHfJlfZv49acQQD/63DCF97CCpj6ORQD5GiQkuSANiQ6MRyXKLZm OCO1Rsaj2v2mwxISMRqHV0ahrrUCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQXnFni sUv2SSobam0WRWz4R6eiCDAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDEyMi5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK pcAwDQYJKoZIhvcNAQELBQADggEBAHTKNy3CSKWfoABktzLqahZgEacnIUtqisDz qkuB1yBfQ012qqYjTTFoLTd0irytgmNejWD5orWEDSXN8ld72qilE3S6NtzoE16U omso6Zq6bRgRGEpR1Cx54pfyjsO2O7qmfjqEfB6UzGI1O58QQqzs/xMXfpaD1scj Uhy1qEZgNRk55q9BizwAT13WS1IUVnYd1MqOA0z1KK/CoCns/sugV3Bjc1IqT4t6 SQIDawiDEdM49coU7UfHW2B20SeFrPDEUTfs0W7r2+IV3TISeUf3cd0R4A+/7jij XWzfNDjgNbuSC8hk4oanI0Zbn5AdUc7NADQkmiHlNbYMLfoAsMg= -----END CERTIFICATE-----Generated at Sat Mar 28 11:44:29 2026 by rpki-client