$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145012.roa File: AS145012.roa (raw, json) Hash identifier: j7gHh2SECum2Kx700o16RKx2IQglJw1wfFe6xZovZFA= Subject key identifier: 2F:B0:AB:B5:1D:BE:1B:D7:E0:18:8B:1B:F2:8D:DC:EE:CC:EF:68:CB Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 2F2C4469A6C3F58BF2BA38FF7C399465034264B5 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145012.roa Signing time: Wed 04 Mar 2026 06:22:31 +0000 ROA not before: Wed 04 Mar 2026 06:17:31 +0000 ROA not after: Wed 03 Mar 2027 06:22:31 +0000 asID: 145012 IP address blocks: 240a:a93a::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:2c:44:69:a6:c3:f5:8b:f2:ba:38:ff:7c:39:94:65:03:42:64:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:17:31 2026 GMT Not After : Mar 3 06:22:31 2027 GMT Subject: CN=2FB0ABB51DBE1BD7E0188B1BF28DDCEECCEF68CB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:a9:42:fa:9a:1b:ad:72:ca:30:8e:34:be:15: 6a:ba:cd:44:c2:6e:52:45:98:91:2d:28:7d:1a:1c: f4:e1:0f:4f:af:bb:f5:78:d6:b5:a3:9c:1b:f4:d2: 34:82:45:1a:d9:32:03:e0:d5:a7:9d:1c:f9:13:be: 09:cb:52:5a:6c:bf:e7:0f:5c:de:30:c3:7d:94:1f: 9a:ed:d8:da:bb:e7:df:3c:84:a1:06:b0:9e:08:1f: e5:1c:ba:53:cb:ae:ec:86:ef:70:bd:f9:f2:cb:ea: 1f:65:3c:ca:55:f2:18:4d:1f:e4:bf:37:bb:47:22: e7:4c:97:fa:65:66:6e:b8:c3:0a:85:55:a1:d7:78: ef:d8:5a:48:78:79:50:13:4f:1b:83:35:1b:eb:4b: c1:c1:53:51:b1:3a:e8:43:c3:e8:07:7a:5d:27:57: b5:b2:84:28:b8:8a:f3:7a:69:54:4b:3c:74:fe:56: 0a:a7:58:ef:44:e4:2e:b9:f3:24:30:87:d3:21:1e: cf:18:d9:95:e5:2d:4f:d4:5a:8d:d9:08:b2:b1:2f: 8e:e8:8a:e0:d4:c9:13:ef:61:de:7a:23:79:7f:d9: 73:5e:14:16:4b:1e:f8:b6:77:80:94:11:20:d5:0c: db:2b:fe:fb:b5:69:ac:1f:57:92:c2:83:73:77:1d: bd:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:B0:AB:B5:1D:BE:1B:D7:E0:18:8B:1B:F2:8D:DC:EE:CC:EF:68:CB X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145012.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a93a::/32 Signature Algorithm: sha256WithRSAEncryption 2d:2d:dc:54:b1:d9:84:19:eb:80:25:0e:49:c6:04:e4:9c:95: 9f:47:ae:4d:77:31:a5:a2:55:67:23:5d:b3:72:5e:47:3b:7e: 42:d4:3a:1d:af:d1:df:1e:d7:db:09:a7:da:8c:56:c9:6f:ba: 21:cc:01:d2:83:ef:42:52:f4:d9:e9:ea:b3:ef:b3:d5:83:d0: b3:ea:e2:6e:2a:26:55:63:31:bd:eb:a2:d5:94:18:75:69:eb: 98:20:96:ba:99:77:91:55:b1:4b:7c:5c:07:81:a0:c7:f1:c5: d3:e1:6d:4b:f1:52:3d:90:8c:95:cb:e4:8b:fa:7f:97:0d:50: aa:ae:e8:61:e7:55:e8:33:64:5b:a7:ef:c5:e6:9d:5b:fe:17: b2:4b:db:94:f2:41:51:a2:99:6e:8b:ae:f4:b0:12:31:48:29: cc:08:3f:e5:78:5e:63:f1:dc:db:a5:0a:3e:f6:67:9a:8b:8a: 2c:b8:8c:67:d2:c9:07:44:e1:33:c2:0c:a2:a7:7f:cc:82:12: e2:bf:7e:60:0c:d8:26:c4:a5:db:9e:dc:33:c6:d0:46:ed:c4: 7e:60:43:9b:10:94:4e:3f:ef:a8:04:5c:94:14:71:cc:c4:8e: 90:63:e5:88:4c:d3:f3:a0:17:89:84:40:e8:d6:bb:e2:63:3b: a7:c9:a4:92 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIULyxEaabD9Yvyujj/fDmUZQNCZLUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTczMVoX DTI3MDMwMzA2MjIzMVowMzExMC8GA1UEAxMoMkZCMEFCQjUxREJFMUJEN0UwMTg4 QjFCRjI4RERDRUVDQ0VGNjhDQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMapQvqaG61yyjCONL4VarrNRMJuUkWYkS0ofRoc9OEPT6+79XjWtaOcG/TS NIJFGtkyA+DVp50c+RO+CctSWmy/5w9c3jDDfZQfmu3Y2rvn3zyEoQawnggf5Ry6 U8uu7IbvcL358svqH2U8ylXyGE0f5L83u0ci50yX+mVmbrjDCoVVodd479haSHh5 UBNPG4M1G+tLwcFTUbE66EPD6Ad6XSdXtbKEKLiK83ppVEs8dP5WCqdY70TkLrnz JDCH0yEezxjZleUtT9RajdkIsrEvjuiK4NTJE+9h3nojeX/Zc14UFkse+LZ3gJQR INUM2yv++7VprB9XksKDc3cdvSsCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQvsKu1 Hb4b1+AYixvyjdzuzO9oyzAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTAxMi5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qTowDQYJKoZIhvcNAQELBQADggEBAC0t3FSx2YQZ64AlDknGBOSclZ9Hrk13MaWi VWcjXbNyXkc7fkLUOh2v0d8e19sJp9qMVslvuiHMAdKD70JS9Nnp6rPvs9WD0LPq 4m4qJlVjMb3rotWUGHVp65gglrqZd5FVsUt8XAeBoMfxxdPhbUvxUj2QjJXL5Iv6 f5cNUKqu6GHnVegzZFun78XmnVv+F7JL25TyQVGimW6LrvSwEjFIKcwIP+V4XmPx 3NulCj72Z5qLiiy4jGfSyQdE4TPCDKKnf8yCEuK/fmAM2CbEpdue3DPG0EbtxH5g Q5sQlE4/76gEXJQUcczEjpBj5YhM0/OgF4mEQOjWu+JjO6fJpJI= -----END CERTIFICATE-----Generated at Sat Mar 28 15:53:33 2026 by rpki-client