$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144172.roa File: AS144172.roa (raw, json) Hash identifier: ZLXDQVcMWc7MxeajEk0mPrgLFKUWGEZSA0uvTAw5+xM= Subject key identifier: 4C:42:1D:4A:7E:40:D7:28:69:99:40:A7:AA:2B:F9:31:12:54:41:B9 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 30F8F976522D87E79C0D3F79613CCF719E9AA881 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144172.roa Signing time: Wed 04 Mar 2026 06:15:40 +0000 ROA not before: Wed 04 Mar 2026 06:10:40 +0000 ROA not after: Wed 03 Mar 2027 06:15:40 +0000 asID: 144172 IP address blocks: 240a:a5f2::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:f8:f9:76:52:2d:87:e7:9c:0d:3f:79:61:3c:cf:71:9e:9a:a8:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:10:40 2026 GMT Not After : Mar 3 06:15:40 2027 GMT Subject: CN=4C421D4A7E40D728699940A7AA2BF931125441B9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:d0:5f:b6:b0:f7:6b:32:7f:5e:3b:ad:54:86: a6:aa:c5:12:59:66:d9:83:4b:63:dd:67:c0:0c:3f: 6c:46:76:bb:f8:1b:52:46:87:9d:06:a2:8d:8b:7d: f0:2f:55:32:52:76:83:c0:59:08:02:01:fb:05:2a: bc:f0:3a:fc:a7:3f:d6:64:b7:da:79:6f:ca:72:03: 84:f4:2f:11:61:73:d5:b7:d7:6e:33:8a:1a:48:53: 65:e7:20:8c:c5:bd:7b:6a:4e:52:5a:58:6a:40:cb: 3b:16:dc:b3:ba:f5:b4:db:dc:27:fa:61:6b:12:06: 3d:7f:d9:6a:d2:87:f5:19:5a:61:1c:ad:e7:3d:65: 61:4e:ec:1f:75:7d:a3:4a:34:db:57:74:ba:6e:20: 00:14:97:8b:41:1d:08:56:c9:9d:3d:16:10:db:6c: 15:54:5e:5f:d5:c4:71:85:6d:4c:90:c0:6a:85:e1: d8:d8:63:0b:0b:18:2c:15:a6:27:00:cc:07:df:8c: 36:10:7e:45:30:e1:d0:14:73:d6:6c:4a:c5:84:15: 57:a3:30:8e:a7:d0:67:b2:0c:63:14:22:bf:f6:ed: 88:d9:b6:6e:c5:d6:ca:aa:32:4e:37:78:d3:0d:60: ce:91:db:a7:cc:cd:50:6e:f8:3f:82:8a:88:78:cd: 4b:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:42:1D:4A:7E:40:D7:28:69:99:40:A7:AA:2B:F9:31:12:54:41:B9 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144172.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a5f2::/32 Signature Algorithm: sha256WithRSAEncryption 46:ee:b6:40:9d:a2:1c:4a:b6:db:94:bc:0d:e8:91:1a:7f:f4: fc:cb:e5:f8:ca:0b:7c:35:b7:87:3a:0b:53:54:87:d6:65:58: f5:64:8e:44:0c:8c:99:a7:40:38:03:3a:de:c5:d7:fa:91:a2: 11:85:72:59:24:06:ee:a5:2b:11:c1:38:85:fd:07:79:cb:b5: d1:d6:a7:eb:6b:dd:91:27:c6:97:b9:ac:c0:29:31:c2:da:09: 0e:34:32:76:3f:87:6f:18:5c:90:dc:5e:8b:07:34:74:27:27: 4d:0a:0a:ff:53:7c:e6:5c:fb:5a:c9:bf:ff:93:16:cb:4b:1d: 5e:b9:1b:71:1b:60:b9:29:91:7e:80:44:13:8c:0a:fc:a7:33: a5:3a:fa:02:47:96:d8:47:54:8b:ad:b9:ca:dc:aa:0f:bc:71: 34:b0:18:b7:2b:2e:94:81:6d:ea:92:2a:08:0f:11:fa:cf:b5: 8e:da:82:a3:30:b1:c7:03:0e:d9:36:2c:97:e8:c2:ff:57:65: 3a:7c:23:9e:9b:00:af:22:8b:80:df:e2:84:dc:c7:2c:c8:2a: 4b:e2:a6:b0:5b:fd:c3:07:31:c6:e0:8a:22:e4:44:4d:b4:60: e0:48:6b:f5:1b:74:e5:5a:ac:b2:77:c0:f5:c8:d0:03:74:f6: 24:e7:84:15 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUMPj5dlIth+ecDT95YTzPcZ6aqIEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTA0MFoX DTI3MDMwMzA2MTU0MFowMzExMC8GA1UEAxMoNEM0MjFENEE3RTQwRDcyODY5OTk0 MEE3QUEyQkY5MzExMjU0NDFCOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK3QX7aw92syf147rVSGpqrFEllm2YNLY91nwAw/bEZ2u/gbUkaHnQaijYt9 8C9VMlJ2g8BZCAIB+wUqvPA6/Kc/1mS32nlvynIDhPQvEWFz1bfXbjOKGkhTZecg jMW9e2pOUlpYakDLOxbcs7r1tNvcJ/phaxIGPX/ZatKH9RlaYRyt5z1lYU7sH3V9 o0o021d0um4gABSXi0EdCFbJnT0WENtsFVReX9XEcYVtTJDAaoXh2NhjCwsYLBWm JwDMB9+MNhB+RTDh0BRz1mxKxYQVV6MwjqfQZ7IMYxQiv/btiNm2bsXWyqoyTjd4 0w1gzpHbp8zNUG74P4KKiHjNS78CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRMQh1K fkDXKGmZQKeqK/kxElRBuTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDE3Mi5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK pfIwDQYJKoZIhvcNAQELBQADggEBAEbutkCdohxKttuUvA3okRp/9PzL5fjKC3w1 t4c6C1NUh9ZlWPVkjkQMjJmnQDgDOt7F1/qRohGFclkkBu6lKxHBOIX9B3nLtdHW p+tr3ZEnxpe5rMApMcLaCQ40MnY/h28YXJDcXosHNHQnJ00KCv9TfOZc+1rJv/+T FstLHV65G3EbYLkpkX6ARBOMCvynM6U6+gJHlthHVIutucrcqg+8cTSwGLcrLpSB beqSKggPEfrPtY7agqMwsccDDtk2LJfowv9XZTp8I56bAK8ii4Df4oTcxyzIKkvi prBb/cMHMcbgiiLkRE20YOBIa/UbdOVarLJ3wPXI0AN09iTnhBU= -----END CERTIFICATE-----Generated at Sat Mar 28 11:42:42 2026 by rpki-client