$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144178.roa File: AS144178.roa (raw, json) Hash identifier: HnsrVgDDNbiAiic0lruXhMMXV6mLgu1ttE0edzB5Ycg= Subject key identifier: 56:11:2F:A6:F5:16:E8:84:B7:8C:3A:84:81:38:0B:B2:7D:D3:C6:FA Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 2D74085EA2CA74BC3CFBFD725FBF0FE076907837 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144178.roa Signing time: Wed 04 Mar 2026 06:15:14 +0000 ROA not before: Wed 04 Mar 2026 06:10:14 +0000 ROA not after: Wed 03 Mar 2027 06:15:14 +0000 asID: 144178 IP address blocks: 240a:a5f8::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:74:08:5e:a2:ca:74:bc:3c:fb:fd:72:5f:bf:0f:e0:76:90:78:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:10:14 2026 GMT Not After : Mar 3 06:15:14 2027 GMT Subject: CN=56112FA6F516E884B78C3A8481380BB27DD3C6FA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:21:dd:69:12:d6:53:2f:d7:81:65:d3:63:3a: f5:c8:ab:c2:27:cb:15:92:55:df:cf:64:8e:2f:73: 99:30:a8:c8:52:ec:11:52:88:a7:60:28:18:1c:02: 9f:45:44:6c:3f:48:6f:34:ff:6b:56:56:71:6d:d1: ac:34:bd:f6:b4:ef:b2:79:58:8d:21:e3:e5:2a:aa: cb:e1:a7:31:09:ff:a2:eb:ff:1e:a9:94:cb:ef:8f: 79:f4:a2:b9:ea:9f:98:76:16:26:aa:8d:1f:ec:45: b2:cf:8a:fe:cc:34:68:31:0c:3e:68:20:0d:65:c1: db:8d:35:ab:d0:7c:00:6d:b1:b5:2e:97:41:70:82: b0:29:35:7f:c5:2f:1f:48:62:30:a0:8f:ca:08:9f: de:0a:c1:06:b2:30:70:1c:8a:78:b5:5e:87:29:51: 21:2f:0e:1b:93:74:16:db:38:25:b2:f3:36:9d:eb: 23:6e:52:da:eb:10:e3:d0:77:46:65:a9:94:da:fd: 71:fd:19:57:fd:a5:7e:4f:1f:29:d1:25:ef:95:01: 56:7e:ac:8b:9f:c8:0a:e8:10:7a:fb:0a:ac:38:f6: c5:c8:0d:71:28:85:31:13:2b:41:83:b5:fc:5a:90: 2d:e4:1d:ae:d5:ec:29:b8:7f:b1:75:20:c3:e6:8e: b9:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:11:2F:A6:F5:16:E8:84:B7:8C:3A:84:81:38:0B:B2:7D:D3:C6:FA X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144178.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a5f8::/32 Signature Algorithm: sha256WithRSAEncryption 72:1f:4c:d4:b2:6a:5a:f2:a3:db:c2:48:50:73:a6:f4:66:c0: dc:66:cd:1e:2e:09:84:ff:5c:a7:4f:c8:28:b1:6b:95:f6:48: ab:bb:72:5a:c9:9c:a5:79:df:3b:48:90:b3:b6:bb:4c:e0:f8: bc:51:62:3b:1b:23:c8:71:bc:4b:81:e2:af:16:b4:c5:79:75: 41:f1:93:d8:b5:63:29:67:37:88:fb:4a:34:99:b8:4a:d8:e5: e5:95:9f:84:78:8f:79:0c:08:e7:fc:13:af:f0:70:14:59:4b: 90:c0:21:e7:48:4c:39:56:a8:0d:bb:be:7f:12:41:64:91:33: b9:ab:82:fb:82:06:8f:7c:1a:9e:19:5a:9b:c3:9d:0d:15:b3: f1:5b:42:8f:a3:3d:36:20:35:fe:b6:04:13:d2:a5:85:b5:9f: aa:95:24:c4:0d:f9:6b:c0:32:59:4d:7c:14:e3:fc:44:91:52: c0:9c:cf:e4:7d:3f:08:21:03:dc:c6:aa:d6:94:ac:30:03:4b: 79:78:61:78:cb:0e:2c:c4:37:5a:3d:e3:4c:d9:aa:8c:61:cd: de:b2:fc:d7:49:1e:75:49:b9:ee:05:73:de:68:e8:65:35:98: 06:dc:d4:f1:31:b6:ea:14:59:b9:3c:2f:1c:14:31:61:eb:9d: 72:bd:a0:98 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIULXQIXqLKdLw8+/1yX78P4HaQeDcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTAxNFoX DTI3MDMwMzA2MTUxNFowMzExMC8GA1UEAxMoNTYxMTJGQTZGNTE2RTg4NEI3OEMz QTg0ODEzODBCQjI3REQzQzZGQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALAh3WkS1lMv14Fl02M69cirwifLFZJV389kji9zmTCoyFLsEVKIp2AoGBwC n0VEbD9IbzT/a1ZWcW3RrDS99rTvsnlYjSHj5Sqqy+GnMQn/ouv/HqmUy++PefSi ueqfmHYWJqqNH+xFss+K/sw0aDEMPmggDWXB2401q9B8AG2xtS6XQXCCsCk1f8Uv H0hiMKCPygif3grBBrIwcByKeLVehylRIS8OG5N0Fts4JbLzNp3rI25S2usQ49B3 RmWplNr9cf0ZV/2lfk8fKdEl75UBVn6si5/ICugQevsKrDj2xcgNcSiFMRMrQYO1 /FqQLeQdrtXsKbh/sXUgw+aOuc0CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRWES+m 9RbohLeMOoSBOAuyfdPG+jAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDE3OC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK pfgwDQYJKoZIhvcNAQELBQADggEBAHIfTNSyalryo9vCSFBzpvRmwNxmzR4uCYT/ XKdPyCixa5X2SKu7clrJnKV53ztIkLO2u0zg+LxRYjsbI8hxvEuB4q8WtMV5dUHx k9i1YylnN4j7SjSZuErY5eWVn4R4j3kMCOf8E6/wcBRZS5DAIedITDlWqA27vn8S QWSRM7mrgvuCBo98Gp4ZWpvDnQ0Vs/FbQo+jPTYgNf62BBPSpYW1n6qVJMQN+WvA MllNfBTj/ESRUsCcz+R9PwghA9zGqtaUrDADS3l4YXjLDizEN1o940zZqoxhzd6y /NdJHnVJue4Fc95o6GU1mAbc1PExtuoUWbk8LxwUMWHrnXK9oJg= -----END CERTIFICATE-----Generated at Sat Mar 28 11:41:07 2026 by rpki-client