$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144180.roa File: AS144180.roa (raw, json) Hash identifier: SSNo84uzuDjqJUw8Mh+Bai6hg4G4v/MtO07QOMtOyAk= Subject key identifier: 4B:0A:34:66:50:05:42:D7:1E:C7:BB:42:FC:9B:70:65:35:60:C1:68 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 6921174ECCBA389645CFA4C716C7590FCD641FFE Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144180.roa Signing time: Wed 04 Mar 2026 06:15:38 +0000 ROA not before: Wed 04 Mar 2026 06:10:38 +0000 ROA not after: Wed 03 Mar 2027 06:15:38 +0000 asID: 144180 IP address blocks: 240a:a5fa::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:21:17:4e:cc:ba:38:96:45:cf:a4:c7:16:c7:59:0f:cd:64:1f:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:10:38 2026 GMT Not After : Mar 3 06:15:38 2027 GMT Subject: CN=4B0A3466500542D71EC7BB42FC9B70653560C168 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:cd:ba:38:26:36:8a:3a:a7:9f:ab:cf:86:07: 65:d1:9a:1b:4c:f5:07:75:23:c2:91:40:21:9c:fd: 39:fb:a0:17:aa:f7:a7:cf:63:ca:87:09:47:b6:9c: 8d:d4:54:22:e6:a7:b0:40:c1:00:55:f3:72:11:af: 75:c5:65:05:c3:9a:fd:f7:21:50:4c:6c:83:9d:bc: de:b7:fb:c6:5b:60:86:1b:3a:95:a8:d5:a2:69:69: 52:f6:4c:ec:83:c1:0c:c0:8a:98:f8:c6:46:92:74: 7a:a7:82:a5:40:52:f0:e0:de:6f:8e:26:db:29:d7: d9:50:9d:68:f3:6f:6b:b5:1b:ff:f4:63:85:34:cb: fd:70:16:06:66:50:e2:ff:6d:c7:98:25:17:0a:f9: e2:dc:9b:dd:7d:3e:9e:46:5a:b4:4a:4d:8f:1d:d9: 5d:9e:5b:01:29:b0:82:41:d8:79:0e:21:06:16:f6: e1:82:16:31:41:bb:11:44:cc:fd:b4:b5:51:2a:90: c5:29:fb:3f:29:b9:d1:39:a2:cf:89:bf:4a:df:f8: f7:ec:b5:5d:6b:45:0e:ea:3f:8b:b8:2c:66:58:35: aa:a1:cd:49:ea:c1:1c:65:09:0c:b6:65:36:fb:aa: 26:0a:8d:0b:a8:9a:ef:27:b1:b3:3a:62:8d:3a:11: 47:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:0A:34:66:50:05:42:D7:1E:C7:BB:42:FC:9B:70:65:35:60:C1:68 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144180.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a5fa::/32 Signature Algorithm: sha256WithRSAEncryption 30:d1:06:2e:9f:c8:40:04:76:d8:95:8a:c6:7e:c1:1b:76:38: 29:7d:37:2a:d2:35:80:57:72:98:35:20:23:47:25:98:47:87: f1:fc:a0:09:9e:28:55:a6:81:29:f2:13:57:e2:14:9e:c0:d5: 8a:65:ab:ab:89:84:fe:ae:f8:66:78:ae:d2:a4:9f:ee:51:e5: 55:02:5c:ba:87:8a:76:e6:4f:18:78:c1:20:cb:62:82:26:28: fa:ae:f2:4e:6a:a1:46:51:95:1b:4b:1e:ee:b6:b2:b2:14:0d: f9:fd:cf:d1:63:69:78:52:5e:59:97:3c:c5:94:4e:76:f9:0a: 77:e2:a8:68:7f:c7:c3:8e:d8:b5:48:f8:9c:dc:83:40:1a:05: eb:94:8e:a4:5a:ac:63:c4:3c:09:da:8e:b4:da:4b:71:88:61: 26:5f:e5:d7:3a:11:b4:e7:ba:5a:20:03:27:06:16:2b:75:b0: f4:b0:2b:2f:57:43:96:dd:84:fc:12:a2:3a:5f:f7:9d:60:48: 95:67:ab:a2:57:5f:42:77:54:cb:11:ab:5d:25:f7:c1:f8:fa: 21:29:36:c9:e2:d3:c6:51:d4:f1:36:45:2b:5f:0a:37:c3:f1: f6:f1:e7:a4:3d:b7:5d:5d:ef:cd:62:19:7e:a8:06:67:b5:56: f8:02:25:47 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUaSEXTsy6OJZFz6THFsdZD81kH/4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTAzOFoX DTI3MDMwMzA2MTUzOFowMzExMC8GA1UEAxMoNEIwQTM0NjY1MDA1NDJENzFFQzdC QjQyRkM5QjcwNjUzNTYwQzE2ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAN7NujgmNoo6p5+rz4YHZdGaG0z1B3UjwpFAIZz9OfugF6r3p89jyocJR7ac jdRUIuansEDBAFXzchGvdcVlBcOa/fchUExsg5283rf7xltghhs6lajVomlpUvZM 7IPBDMCKmPjGRpJ0eqeCpUBS8ODeb44m2ynX2VCdaPNva7Ub//RjhTTL/XAWBmZQ 4v9tx5glFwr54tyb3X0+nkZatEpNjx3ZXZ5bASmwgkHYeQ4hBhb24YIWMUG7EUTM /bS1USqQxSn7Pym50Tmiz4m/St/49+y1XWtFDuo/i7gsZlg1qqHNSerBHGUJDLZl NvuqJgqNC6ia7yexszpijToRRzkCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRLCjRm UAVC1x7Hu0L8m3BlNWDBaDAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDE4MC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK pfowDQYJKoZIhvcNAQELBQADggEBADDRBi6fyEAEdtiVisZ+wRt2OCl9NyrSNYBX cpg1ICNHJZhHh/H8oAmeKFWmgSnyE1fiFJ7A1Yplq6uJhP6u+GZ4rtKkn+5R5VUC XLqHinbmTxh4wSDLYoImKPqu8k5qoUZRlRtLHu62srIUDfn9z9FjaXhSXlmXPMWU Tnb5CnfiqGh/x8OO2LVI+Jzcg0AaBeuUjqRarGPEPAnajrTaS3GIYSZf5dc6EbTn ulogAycGFit1sPSwKy9XQ5bdhPwSojpf951gSJVnq6JXX0J3VMsRq10l98H4+iEp Nsni08ZR1PE2RStfCjfD8fbx56Q9t11d781iGX6oBme1VvgCJUc= -----END CERTIFICATE-----Generated at Sat Mar 28 11:46:03 2026 by rpki-client