$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144179.roa File: AS144179.roa (raw, json) Hash identifier: 3t0jJrGGXejtAa7KFRhEqYKWnsc1WWw6eZe6gumut5w= Subject key identifier: E0:1D:9B:09:9A:37:1B:EA:5B:C3:D7:A8:D5:12:60:B8:7E:8F:EB:D8 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 7C426E4C5E40BB12A3868D616D7121884D71D861 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144179.roa Signing time: Wed 04 Mar 2026 06:14:22 +0000 ROA not before: Wed 04 Mar 2026 06:09:22 +0000 ROA not after: Wed 03 Mar 2027 06:14:22 +0000 asID: 144179 IP address blocks: 240a:a5f9::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:42:6e:4c:5e:40:bb:12:a3:86:8d:61:6d:71:21:88:4d:71:d8:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:09:22 2026 GMT Not After : Mar 3 06:14:22 2027 GMT Subject: CN=E01D9B099A371BEA5BC3D7A8D51260B87E8FEBD8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:cb:1f:31:70:ff:9a:d7:ed:bc:08:a8:f8:ca: d0:3e:8c:84:3e:0b:56:35:d7:ab:66:14:e0:1c:e0: 44:ad:29:39:76:6b:f6:60:c9:b5:97:c2:38:cc:f4: 63:ad:7c:d4:18:51:b7:19:78:85:67:c7:8d:65:d4: 66:fc:c1:b8:00:bc:5f:f1:47:78:84:79:7a:08:e1: a1:c3:4f:01:47:c5:be:d0:64:fe:03:de:63:c1:d7: 69:bc:20:37:23:be:e8:95:5c:c1:e3:20:dc:33:05: cf:d5:da:75:30:c8:45:91:a6:41:ed:37:d0:6b:a7: 90:1b:17:42:7b:92:d9:0d:99:49:c6:c5:e7:e3:ac: 76:b6:1d:a5:7f:92:58:89:d0:c8:a0:e3:54:ad:f3: d5:05:f3:f3:88:96:a9:66:fa:59:86:5c:07:b7:68: 12:73:6f:e6:0c:76:75:0c:4c:83:50:50:98:46:53: b1:0c:19:b7:fa:4e:ab:7e:e2:61:29:e3:71:b3:d2: d5:51:10:f3:9b:28:1e:4b:95:49:83:fb:65:3c:60: 9b:e3:1f:7c:7c:ab:70:79:17:fa:18:57:f7:87:b3: 3d:60:50:80:58:0e:5f:30:d6:60:a9:99:43:c8:b2: f1:ba:66:6f:b7:dc:db:77:85:0d:38:45:6e:69:be: 28:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:1D:9B:09:9A:37:1B:EA:5B:C3:D7:A8:D5:12:60:B8:7E:8F:EB:D8 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144179.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a5f9::/32 Signature Algorithm: sha256WithRSAEncryption dc:76:32:23:5d:59:bd:f0:9a:d1:ae:ab:48:c5:80:10:d4:b1: 32:6f:41:dd:68:f9:ea:a2:90:44:80:19:ce:a9:e0:88:53:00: 0d:7a:df:39:7b:b4:30:16:3b:8b:87:3a:57:2d:55:29:56:57: 92:53:9c:b7:69:b0:3d:d4:c8:42:39:fe:ed:01:11:23:86:cd: 15:a9:2c:bd:1f:21:1c:3f:15:cd:32:76:2d:da:fc:26:1a:e7: 11:ae:00:53:f0:29:5a:4d:67:70:49:9c:6e:d2:a7:3a:66:02: 07:fc:dd:35:ef:12:50:81:81:fa:c2:c5:b1:9c:97:cd:67:02: 02:f6:3b:81:8f:d9:a5:40:61:ab:bd:92:39:84:60:d0:8c:5a: 4f:5c:91:c0:5e:10:90:f3:15:08:a7:23:9a:15:03:81:98:79: e1:f6:d3:0e:e7:1b:1e:67:6d:f6:53:74:b6:e9:62:30:aa:89: e9:a1:d7:1c:81:cc:c6:9a:93:ac:65:c8:1a:0b:42:52:49:6d: 29:33:1e:ea:61:8d:6a:c7:af:eb:8a:a4:5a:4a:18:db:14:74: 8b:8d:29:40:b9:91:e8:5f:59:37:b5:51:49:4e:9e:8e:bd:21: 6e:c3:2b:86:b1:54:49:66:31:0e:a4:8f:5d:35:1d:fb:f2:2f: c7:46:81:56 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUfEJuTF5AuxKjho1hbXEhiE1x2GEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDkyMloX DTI3MDMwMzA2MTQyMlowMzExMC8GA1UEAxMoRTAxRDlCMDk5QTM3MUJFQTVCQzNE N0E4RDUxMjYwQjg3RThGRUJEODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALDLHzFw/5rX7bwIqPjK0D6MhD4LVjXXq2YU4BzgRK0pOXZr9mDJtZfCOMz0 Y6181BhRtxl4hWfHjWXUZvzBuAC8X/FHeIR5egjhocNPAUfFvtBk/gPeY8HXabwg NyO+6JVcweMg3DMFz9XadTDIRZGmQe030GunkBsXQnuS2Q2ZScbF5+OsdrYdpX+S WInQyKDjVK3z1QXz84iWqWb6WYZcB7doEnNv5gx2dQxMg1BQmEZTsQwZt/pOq37i YSnjcbPS1VEQ85soHkuVSYP7ZTxgm+MffHyrcHkX+hhX94ezPWBQgFgOXzDWYKmZ Q8iy8bpmb7fc23eFDThFbmm+KD0CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBTgHZsJ mjcb6lvD16jVEmC4fo/r2DAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDE3OS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK pfkwDQYJKoZIhvcNAQELBQADggEBANx2MiNdWb3wmtGuq0jFgBDUsTJvQd1o+eqi kESAGc6p4IhTAA163zl7tDAWO4uHOlctVSlWV5JTnLdpsD3UyEI5/u0BESOGzRWp LL0fIRw/Fc0ydi3a/CYa5xGuAFPwKVpNZ3BJnG7SpzpmAgf83TXvElCBgfrCxbGc l81nAgL2O4GP2aVAYau9kjmEYNCMWk9ckcBeEJDzFQinI5oVA4GYeeH20w7nGx5n bfZTdLbpYjCqiemh1xyBzMaak6xlyBoLQlJJbSkzHuphjWrHr+uKpFpKGNsUdIuN KUC5kehfWTe1UUlOno69IW7DK4axVElmMQ6kj101HfvyL8dGgVY= -----END CERTIFICATE-----Generated at Sat Mar 28 11:45:46 2026 by rpki-client