$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144167.roa File: AS144167.roa (raw, json) Hash identifier: 9zrvEKHxjafElBgVFMToXzqgnbcZgzEPhrUiNtyThZ4= Subject key identifier: 8A:82:6B:71:FD:9B:BA:8C:AE:04:B4:4C:5F:9A:FB:5F:15:4B:D1:EF Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 1918420FE75834AAD47E7B1E50D5A31E891523C1 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144167.roa Signing time: Wed 04 Mar 2026 06:15:27 +0000 ROA not before: Wed 04 Mar 2026 06:10:27 +0000 ROA not after: Wed 03 Mar 2027 06:15:27 +0000 asID: 144167 IP address blocks: 240a:a5ed::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:18:42:0f:e7:58:34:aa:d4:7e:7b:1e:50:d5:a3:1e:89:15:23:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:10:27 2026 GMT Not After : Mar 3 06:15:27 2027 GMT Subject: CN=8A826B71FD9BBA8CAE04B44C5F9AFB5F154BD1EF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:e1:74:9e:1a:7a:9e:97:d4:ec:93:5d:58:db: cf:44:93:97:59:59:28:81:8a:d0:44:0b:78:27:e3: da:b3:0a:da:c0:e0:ef:ca:5f:8a:03:31:e9:87:55: 95:ac:31:27:ad:8b:8d:fd:9d:80:1b:b8:3b:7f:aa: bb:2f:42:25:ce:52:96:72:7a:55:40:f2:ff:e9:4a: 48:bd:1d:4a:6f:bd:03:27:d4:db:33:b8:aa:be:83: 18:a7:87:cf:0a:03:97:b6:6f:b9:3c:fe:88:7d:a0: ee:2c:e6:df:fb:ce:3b:54:f5:f1:54:63:cc:72:6c: 79:a9:17:66:d6:d0:25:f2:15:3e:70:ab:12:e4:08: db:75:05:b4:52:08:5d:ff:c2:67:8d:eb:94:af:96: 4f:20:b0:8b:12:da:44:de:fe:60:fb:0b:9f:f1:75: 2d:3c:29:6c:61:ad:f6:2d:2d:d3:f2:e7:e3:63:59: 93:4f:7a:b2:72:ce:c0:ea:64:a5:e4:fa:ea:29:c5: df:55:8c:15:3b:05:21:24:35:38:24:ee:1f:90:ea: 2a:8f:cf:ee:b6:43:b1:c7:60:22:2e:54:ab:c8:68: 3f:b3:99:33:b9:97:c7:92:d2:65:b0:e0:fa:dd:31: d2:5b:3e:1f:12:a2:8b:f5:9d:97:66:73:b7:b2:84: c1:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:82:6B:71:FD:9B:BA:8C:AE:04:B4:4C:5F:9A:FB:5F:15:4B:D1:EF X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144167.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a5ed::/32 Signature Algorithm: sha256WithRSAEncryption c3:be:de:9a:5a:7e:d0:ed:b8:72:62:d4:99:5d:39:be:ea:58: 04:93:30:af:1e:1b:87:b4:a0:71:83:64:82:4f:41:15:c2:c4: 5d:94:c7:bd:2b:5f:6a:f4:64:42:e4:6c:24:59:98:87:b1:a7: 15:68:f0:f1:1c:ab:7b:aa:ab:45:d1:51:8e:3c:2d:d6:70:f8: 0c:c4:4d:02:2a:5a:04:9a:59:55:57:2d:fa:69:a6:7d:b9:86: 95:f8:f0:0b:12:76:dc:1e:b8:97:3e:c5:52:5a:05:d9:32:8f: 0a:49:98:a0:17:be:88:32:ca:cc:56:87:2f:ff:d7:17:f5:3b: e9:d1:e2:e1:07:4c:d7:f3:46:23:6f:a5:d9:1f:18:3a:22:ca: 5a:8e:ae:64:9c:ab:69:50:14:b8:e3:75:a8:7b:1a:1e:7f:11: 91:e1:bd:c5:99:fe:82:8d:e7:17:50:3d:ca:9b:f0:40:9f:2a: 49:b2:47:6a:df:47:24:6b:a1:01:68:aa:7b:c4:13:a9:96:4e: 58:c7:ee:36:c6:88:fc:e1:f0:8d:4c:5a:79:8e:fd:76:5f:5e: 3b:22:ba:6f:05:37:77:62:51:b7:de:81:23:be:9e:1c:36:99: 30:b2:3c:ca:88:c0:f8:bb:f5:88:7c:7d:87:aa:79:74:e9:3a: 3a:97:3a:a3 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUGRhCD+dYNKrUfnseUNWjHokVI8EwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTAyN1oX DTI3MDMwMzA2MTUyN1owMzExMC8GA1UEAxMoOEE4MjZCNzFGRDlCQkE4Q0FFMDRC NDRDNUY5QUZCNUYxNTRCRDFFRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKzhdJ4aep6X1OyTXVjbz0STl1lZKIGK0EQLeCfj2rMK2sDg78pfigMx6YdV lawxJ62Ljf2dgBu4O3+quy9CJc5SlnJ6VUDy/+lKSL0dSm+9AyfU2zO4qr6DGKeH zwoDl7ZvuTz+iH2g7izm3/vOO1T18VRjzHJseakXZtbQJfIVPnCrEuQI23UFtFII Xf/CZ43rlK+WTyCwixLaRN7+YPsLn/F1LTwpbGGt9i0t0/Ln42NZk096snLOwOpk peT66inF31WMFTsFISQ1OCTuH5DqKo/P7rZDscdgIi5Uq8hoP7OZM7mXx5LSZbDg +t0x0ls+HxKii/Wdl2Zzt7KEwacCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSKgmtx /Zu6jK4EtExfmvtfFUvR7zAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDE2Ny5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK pe0wDQYJKoZIhvcNAQELBQADggEBAMO+3ppaftDtuHJi1JldOb7qWASTMK8eG4e0 oHGDZIJPQRXCxF2Ux70rX2r0ZELkbCRZmIexpxVo8PEcq3uqq0XRUY48LdZw+AzE TQIqWgSaWVVXLfpppn25hpX48AsSdtweuJc+xVJaBdkyjwpJmKAXvogyysxWhy// 1xf1O+nR4uEHTNfzRiNvpdkfGDoiylqOrmScq2lQFLjjdah7Gh5/EZHhvcWZ/oKN 5xdQPcqb8ECfKkmyR2rfRyRroQFoqnvEE6mWTljH7jbGiPzh8I1MWnmO/XZfXjsi um8FN3diUbfegSO+nhw2mTCyPMqIwPi79Yh8fYeqeXTpOjqXOqM= -----END CERTIFICATE-----Generated at Sat Mar 28 13:18:10 2026 by rpki-client