$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144185.roa File: AS144185.roa (raw, json) Hash identifier: 7oNK0bWSk+wvkJMjeAVyD2Rlzi+ZkE8FO1/SQgK8eJo= Subject key identifier: 02:F6:CC:B2:9D:37:EB:40:E4:D3:1E:C9:B4:AF:99:74:61:EA:97:DF Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 2871C98FA6EDE2C6166296A1C5F8655F1F053D4A Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144185.roa Signing time: Wed 04 Mar 2026 06:14:45 +0000 ROA not before: Wed 04 Mar 2026 06:09:45 +0000 ROA not after: Wed 03 Mar 2027 06:14:45 +0000 asID: 144185 IP address blocks: 240a:a5ff::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:71:c9:8f:a6:ed:e2:c6:16:62:96:a1:c5:f8:65:5f:1f:05:3d:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:09:45 2026 GMT Not After : Mar 3 06:14:45 2027 GMT Subject: CN=02F6CCB29D37EB40E4D31EC9B4AF997461EA97DF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:98:be:27:1d:15:53:f0:b1:fe:c2:ec:eb:07: 44:54:fb:35:d8:d6:63:f1:4e:64:cd:5b:fa:e4:54: 45:9b:6e:b8:f5:f1:f8:c3:07:16:bc:88:30:b0:c3: fb:89:c3:41:8d:6c:d4:fb:55:26:9e:ba:b2:e9:62: 99:1e:32:cf:c1:79:de:7f:f6:db:19:f3:38:3d:61: cc:3f:47:c5:19:c0:91:44:db:09:5c:32:55:93:ef: bb:e4:92:f9:6a:da:9d:75:30:33:14:35:a8:c9:af: 7b:ae:18:6a:a2:d1:ec:89:d4:0c:7e:17:b3:bf:13: c2:37:5d:b9:d6:55:eb:93:5c:b0:d9:fd:ac:6a:bd: fa:9b:a7:f4:ff:04:fb:e6:08:86:3f:7a:e1:29:1b: 9b:80:5a:bd:88:68:ae:75:92:4b:de:da:af:e5:4b: 23:ab:96:5b:d4:16:ec:9c:f3:4a:93:0f:3b:4c:89: 03:f4:ff:d3:62:a6:43:20:05:f8:37:fa:bd:24:0d: e2:e2:7a:75:21:88:1d:51:c1:0d:bf:2d:55:ea:3d: 6a:62:26:2a:66:83:c7:b7:5d:e3:3a:51:37:a1:99: 9d:6e:f7:3e:a7:54:18:11:06:33:10:36:55:83:fa: c4:96:90:a5:43:f7:fe:8c:f3:08:a3:e5:ca:ad:83: 4d:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:F6:CC:B2:9D:37:EB:40:E4:D3:1E:C9:B4:AF:99:74:61:EA:97:DF X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144185.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a5ff::/32 Signature Algorithm: sha256WithRSAEncryption 97:1a:35:35:f4:d2:80:94:d4:8d:97:e9:e3:33:d0:61:43:cb: ae:b6:2b:8d:54:f8:df:d7:da:12:49:2b:a2:34:74:05:bd:f2: 51:bc:80:21:f2:00:54:7f:48:4d:8b:b9:f7:aa:92:65:ba:56: 91:af:c5:e9:7e:25:25:54:7b:77:1f:2b:50:8f:8b:47:2e:69: f3:1b:72:ff:c7:21:a0:2a:23:6a:e2:e0:22:f5:66:e6:10:25: 89:b6:ca:85:6b:e5:4e:ca:17:7a:22:bf:59:91:dd:1c:b5:be: 2a:4f:c6:63:e3:12:10:9e:d2:cd:1f:bd:76:f8:c0:86:82:9b: 7e:46:ee:28:cf:47:82:c0:18:43:89:2f:6b:e7:dd:45:31:57: 85:6a:4f:36:89:b8:a8:70:12:0a:bb:f8:63:e2:a4:cc:5d:fd: 06:c4:45:1c:fe:7d:9c:7a:f1:26:2c:c7:fd:d4:b5:d6:5d:dc: 80:d4:99:01:cc:02:e6:56:0b:86:85:03:14:b7:9c:f1:84:59: 37:d6:92:da:66:21:15:3d:da:d7:5d:44:ac:3f:b2:7b:5f:41: fd:c1:dd:0a:d1:28:83:2a:17:dd:b4:d9:f6:2a:b3:2a:d6:d8: c0:80:3e:ed:68:1e:80:fa:6b:8d:22:b7:72:8c:9d:59:90:b7: ec:77:53:66 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUKHHJj6bt4sYWYpahxfhlXx8FPUowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDk0NVoX DTI3MDMwMzA2MTQ0NVowMzExMC8GA1UEAxMoMDJGNkNDQjI5RDM3RUI0MEU0RDMx RUM5QjRBRjk5NzQ2MUVBOTdERjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALiYvicdFVPwsf7C7OsHRFT7NdjWY/FOZM1b+uRURZtuuPXx+MMHFryIMLDD +4nDQY1s1PtVJp66sulimR4yz8F53n/22xnzOD1hzD9HxRnAkUTbCVwyVZPvu+SS +WranXUwMxQ1qMmve64YaqLR7InUDH4Xs78TwjddudZV65NcsNn9rGq9+pun9P8E ++YIhj964Skbm4BavYhornWSS97ar+VLI6uWW9QW7JzzSpMPO0yJA/T/02KmQyAF +Df6vSQN4uJ6dSGIHVHBDb8tVeo9amImKmaDx7dd4zpRN6GZnW73PqdUGBEGMxA2 VYP6xJaQpUP3/ozzCKPlyq2DTVECAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQC9syy nTfrQOTTHsm0r5l0YeqX3zAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDE4NS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK pf8wDQYJKoZIhvcNAQELBQADggEBAJcaNTX00oCU1I2X6eMz0GFDy662K41U+N/X 2hJJK6I0dAW98lG8gCHyAFR/SE2LufeqkmW6VpGvxel+JSVUe3cfK1CPi0cuafMb cv/HIaAqI2ri4CL1ZuYQJYm2yoVr5U7KF3oiv1mR3Ry1vipPxmPjEhCe0s0fvXb4 wIaCm35G7ijPR4LAGEOJL2vn3UUxV4VqTzaJuKhwEgq7+GPipMxd/QbERRz+fZx6 8SYsx/3UtdZd3IDUmQHMAuZWC4aFAxS3nPGEWTfWktpmIRU92tddRKw/sntfQf3B 3QrRKIMqF9202fYqsyrW2MCAPu1oHoD6a40it3KMnVmQt+x3U2Y= -----END CERTIFICATE-----Generated at Sat Mar 28 11:44:45 2026 by rpki-client