$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144177.roa File: AS144177.roa (raw, json) Hash identifier: b22xII8bb2ePfni1ao+Cdobu4DyO4cXSo42OKmv2RZw= Subject key identifier: 48:DD:F6:CD:33:6D:D5:B6:D6:D6:23:D9:97:7C:3F:44:27:4F:F5:EA Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 07974F73243F321F7C17C2090EB5168311E69765 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144177.roa Signing time: Wed 04 Mar 2026 06:14:37 +0000 ROA not before: Wed 04 Mar 2026 06:09:37 +0000 ROA not after: Wed 03 Mar 2027 06:14:37 +0000 asID: 144177 IP address blocks: 240a:a5f7::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:97:4f:73:24:3f:32:1f:7c:17:c2:09:0e:b5:16:83:11:e6:97:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:09:37 2026 GMT Not After : Mar 3 06:14:37 2027 GMT Subject: CN=48DDF6CD336DD5B6D6D623D9977C3F44274FF5EA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:f7:a2:05:53:37:8a:39:89:6a:6f:7f:00:4c: de:2c:46:e6:3a:99:a5:1e:9b:f1:93:be:a5:16:ad: 69:e3:08:77:ab:8e:c3:3a:65:50:29:23:f6:96:4f: 0c:bf:b4:42:9c:6a:0f:1e:3a:b6:63:6a:6a:1d:a4: 28:3a:44:2d:8e:86:7a:38:b1:c3:29:08:dd:da:8b: e3:1d:af:85:60:a3:45:f9:95:9c:11:97:ba:8c:03: 0e:d9:6d:57:0d:ec:fa:09:7e:30:6d:ed:03:9f:de: ad:d4:9b:6f:e6:18:d9:7d:d6:5e:da:9d:d4:cb:5c: a5:cd:8b:e9:50:8f:35:2f:b8:9f:ca:32:8f:f9:ff: 7b:26:7d:cb:29:ea:74:21:d0:69:90:cc:0c:53:1a: 7c:98:3c:96:08:8a:22:8c:c3:d4:54:b3:53:f9:ea: 19:85:ca:bf:ac:44:96:a3:62:cd:39:dc:07:70:91: 1f:95:b8:81:ee:af:cb:2c:dc:46:87:07:cc:26:ac: e8:b6:34:b6:f0:92:a9:95:33:c3:dd:87:ee:a2:7c: 1c:a2:4d:28:ec:40:88:ef:f8:34:79:de:b4:71:ff: 97:7b:1d:57:d9:1e:66:06:36:8c:88:84:ca:b1:37: 23:2c:8b:87:53:e7:de:09:e3:05:f6:15:f8:12:f0: bd:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:DD:F6:CD:33:6D:D5:B6:D6:D6:23:D9:97:7C:3F:44:27:4F:F5:EA X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144177.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a5f7::/32 Signature Algorithm: sha256WithRSAEncryption 52:b4:77:ff:61:80:35:12:d2:15:1b:fa:7b:f0:fe:c5:e2:06: 93:e1:4a:14:fd:70:db:1f:cd:f1:0d:25:6f:49:ab:8e:ca:59: 47:8b:38:53:aa:06:fb:e7:ae:a5:4c:2d:38:af:ed:55:7d:91: 01:70:8c:7f:dc:71:c2:6b:d1:60:bb:df:2d:8f:4a:29:a6:e0: f2:f4:9a:1e:4f:12:35:cd:06:df:30:c1:24:39:73:40:a0:05: 8a:5e:82:77:f8:f5:96:8b:29:00:65:f6:2a:47:e9:98:45:99: 6e:a7:85:f6:38:39:7d:6b:e6:63:3f:52:f1:9d:6a:5e:ce:99: d3:c8:94:bd:fa:df:15:51:1f:8e:71:98:5d:f5:7e:f4:49:97: ad:d7:a0:b2:80:d9:0e:b0:51:3c:1f:47:17:63:16:ff:4e:b6: c0:1a:7c:b0:da:55:2c:67:23:cc:4f:dc:84:b7:04:14:4c:14: 57:00:3c:f9:99:0e:13:c4:63:99:07:50:18:cf:af:c9:ed:d6: d7:0c:ed:f9:1d:55:2d:68:5f:3b:43:9a:65:6e:98:27:ff:74: 91:bb:09:87:c7:42:88:3e:e6:c0:76:3c:a3:8a:00:2c:75:ab: dd:b1:57:8d:74:6b:cf:da:f2:95:15:22:0d:e0:9b:09:c3:e0: ba:2a:83:25 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUB5dPcyQ/Mh98F8IJDrUWgxHml2UwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDkzN1oX DTI3MDMwMzA2MTQzN1owMzExMC8GA1UEAxMoNDhEREY2Q0QzMzZERDVCNkQ2RDYy M0Q5OTc3QzNGNDQyNzRGRjVFQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANH3ogVTN4o5iWpvfwBM3ixG5jqZpR6b8ZO+pRataeMId6uOwzplUCkj9pZP DL+0QpxqDx46tmNqah2kKDpELY6GejixwykI3dqL4x2vhWCjRfmVnBGXuowDDtlt Vw3s+gl+MG3tA5/erdSbb+YY2X3WXtqd1Mtcpc2L6VCPNS+4n8oyj/n/eyZ9yynq dCHQaZDMDFMafJg8lgiKIozD1FSzU/nqGYXKv6xElqNizTncB3CRH5W4ge6vyyzc RocHzCas6LY0tvCSqZUzw92H7qJ8HKJNKOxAiO/4NHnetHH/l3sdV9keZgY2jIiE yrE3IyyLh1Pn3gnjBfYV+BLwvYUCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRI3fbN M23VttbWI9mXfD9EJ0/16jAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDE3Ny5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK pfcwDQYJKoZIhvcNAQELBQADggEBAFK0d/9hgDUS0hUb+nvw/sXiBpPhShT9cNsf zfENJW9Jq47KWUeLOFOqBvvnrqVMLTiv7VV9kQFwjH/cccJr0WC73y2PSimm4PL0 mh5PEjXNBt8wwSQ5c0CgBYpegnf49ZaLKQBl9ipH6ZhFmW6nhfY4OX1r5mM/UvGd al7OmdPIlL363xVRH45xmF31fvRJl63XoLKA2Q6wUTwfRxdjFv9OtsAafLDaVSxn I8xP3IS3BBRMFFcAPPmZDhPEY5kHUBjPr8nt1tcM7fkdVS1oXztDmmVumCf/dJG7 CYfHQog+5sB2PKOKACx1q92xV410a8/a8pUVIg3gmwnD4LoqgyU= -----END CERTIFICATE-----Generated at Sat Mar 28 11:49:49 2026 by rpki-client