$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144171.roa File: AS144171.roa (raw, json) Hash identifier: Ye9DgA9RHtxMSshTc3VEQFnk3/Rd3feIw+ZVQzSrF+M= Subject key identifier: A6:78:3F:AB:6F:EC:F2:60:9E:D4:89:00:84:02:E6:E8:75:AB:88:69 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 107888D4AA18A0C7C86AC508B9F0A3E6EFA44E84 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144171.roa Signing time: Wed 04 Mar 2026 06:15:04 +0000 ROA not before: Wed 04 Mar 2026 06:10:04 +0000 ROA not after: Wed 03 Mar 2027 06:15:04 +0000 asID: 144171 IP address blocks: 240a:a5f1::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:78:88:d4:aa:18:a0:c7:c8:6a:c5:08:b9:f0:a3:e6:ef:a4:4e:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:10:04 2026 GMT Not After : Mar 3 06:15:04 2027 GMT Subject: CN=A6783FAB6FECF2609ED489008402E6E875AB8869 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:a1:86:05:11:bf:a0:22:4d:1c:76:da:b2:aa: a8:ea:23:0e:41:ca:97:5f:63:bb:a2:b2:19:4e:dc: 2d:54:38:7f:d7:20:e3:76:30:50:24:08:78:0b:7b: 28:30:fd:3f:f9:85:af:47:0c:b1:d1:d8:a4:dd:81: 98:d6:66:5d:22:88:b7:89:ba:94:37:1f:21:ce:c7: 5b:31:b1:37:e9:ef:60:ce:24:3f:bf:2f:f6:f2:fa: 16:ef:47:ad:75:ad:01:fa:29:f7:4b:6c:89:27:e6: ea:d9:3c:26:a2:af:a3:ba:d6:bb:77:05:7b:d3:07: e6:22:3e:8f:94:e0:6a:cc:2d:27:5d:0f:07:f0:06: 58:44:47:c4:ee:85:5b:7b:20:be:45:93:6a:64:f2: a0:66:13:d0:fe:64:7c:db:53:72:9f:1e:c1:b1:35: f2:6a:46:4c:b5:2d:d2:88:2c:b9:6e:02:37:a1:d9: d7:4b:30:5a:1e:47:0d:94:97:05:47:a6:b6:ee:42: 60:26:e6:83:36:2a:96:a4:7a:99:5a:24:b5:da:56: 7a:6c:5c:32:75:1d:39:5a:8c:7a:a2:bc:81:c3:49: c6:eb:89:e3:46:e5:02:f2:e4:c3:95:91:5e:bf:9c: 43:d1:d8:5d:b5:37:e7:35:45:bb:a2:00:9d:b6:65: 00:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:78:3F:AB:6F:EC:F2:60:9E:D4:89:00:84:02:E6:E8:75:AB:88:69 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144171.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a5f1::/32 Signature Algorithm: sha256WithRSAEncryption 28:89:fb:d5:28:b7:8a:f8:e0:3a:74:7a:f9:da:a2:d1:22:cf: cb:cb:84:b3:f3:8a:63:e3:45:7b:84:00:0b:26:4b:8a:a9:5c: b7:b6:0b:00:0b:ab:48:17:3b:5b:94:f5:e9:17:72:19:71:1f: e6:97:1a:4f:1d:08:d5:b6:b7:7d:a5:c4:09:c1:7b:96:9b:d1: 56:41:7c:ba:14:7e:f0:aa:94:5a:92:db:a6:6c:8d:98:12:0c: 59:00:f6:d2:61:90:fc:25:f3:04:71:d8:95:0a:bd:cd:00:95: 81:a4:eb:36:64:41:2a:51:e5:ee:88:82:cf:a6:01:f4:3a:11: 7a:be:a7:5e:6b:93:66:48:f9:67:2c:89:2a:c2:b1:6b:2b:6d: c7:98:21:b5:fa:c0:63:2c:e3:32:1d:9e:bf:77:9f:f1:9e:90: 2f:b2:ed:c3:69:71:ca:d7:2b:b4:2e:d3:18:6d:8a:7e:58:63: 88:5e:85:b4:af:3a:04:74:a4:e7:25:9b:62:ac:4c:ca:77:5f: 9f:96:13:84:8f:5f:76:64:4b:dd:90:96:26:5d:9d:56:20:49: 0a:a3:e9:25:d1:f3:67:c5:8f:fd:ec:ea:52:b6:a1:f7:0e:31: 4c:e5:2f:4d:ad:f1:a4:4b:28:40:0b:77:ba:b8:bd:f7:24:b7: ab:7e:02:62 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUEHiI1KoYoMfIasUIufCj5u+kToQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTAwNFoX DTI3MDMwMzA2MTUwNFowMzExMC8GA1UEAxMoQTY3ODNGQUI2RkVDRjI2MDlFRDQ4 OTAwODQwMkU2RTg3NUFCODg2OTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJOhhgURv6AiTRx22rKqqOojDkHKl19ju6KyGU7cLVQ4f9cg43YwUCQIeAt7 KDD9P/mFr0cMsdHYpN2BmNZmXSKIt4m6lDcfIc7HWzGxN+nvYM4kP78v9vL6Fu9H rXWtAfop90tsiSfm6tk8JqKvo7rWu3cFe9MH5iI+j5TgaswtJ10PB/AGWERHxO6F W3sgvkWTamTyoGYT0P5kfNtTcp8ewbE18mpGTLUt0ogsuW4CN6HZ10swWh5HDZSX BUemtu5CYCbmgzYqlqR6mVoktdpWemxcMnUdOVqMeqK8gcNJxuuJ40blAvLkw5WR Xr+cQ9HYXbU35zVFu6IAnbZlAGMCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSmeD+r b+zyYJ7UiQCEAubodauIaTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDE3MS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK pfEwDQYJKoZIhvcNAQELBQADggEBACiJ+9Uot4r44Dp0evnaotEiz8vLhLPzimPj RXuEAAsmS4qpXLe2CwALq0gXO1uU9ekXchlxH+aXGk8dCNW2t32lxAnBe5ab0VZB fLoUfvCqlFqS26ZsjZgSDFkA9tJhkPwl8wRx2JUKvc0AlYGk6zZkQSpR5e6Igs+m AfQ6EXq+p15rk2ZI+WcsiSrCsWsrbceYIbX6wGMs4zIdnr93n/GekC+y7cNpccrX K7Qu0xhtin5YY4hehbSvOgR0pOclm2KsTMp3X5+WE4SPX3ZkS92QliZdnVYgSQqj 6SXR82fFj/3s6lK2ofcOMUzlL02t8aRLKEALd7q4vfckt6t+AmI= -----END CERTIFICATE-----Generated at Sat Mar 28 11:44:04 2026 by rpki-client