$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145025.roa File: AS145025.roa (raw, json) Hash identifier: UxEIYwlgnquo2FSH+f7W8yQj+Z4xAjHG7l7t4jA/Lsw= Subject key identifier: 6A:8D:D2:23:80:14:C8:26:33:D2:DB:03:9D:F2:62:60:11:02:40:00 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 16D40C0FB690215C7051DA6CEED54FE6E551EA13 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145025.roa Signing time: Wed 04 Mar 2026 06:21:26 +0000 ROA not before: Wed 04 Mar 2026 06:16:26 +0000 ROA not after: Wed 03 Mar 2027 06:21:26 +0000 asID: 145025 IP address blocks: 240a:a947::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:d4:0c:0f:b6:90:21:5c:70:51:da:6c:ee:d5:4f:e6:e5:51:ea:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:16:26 2026 GMT Not After : Mar 3 06:21:26 2027 GMT Subject: CN=6A8DD2238014C82633D2DB039DF2626011024000 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:af:49:81:6d:1d:24:bb:18:89:f0:40:db:09: b4:3f:d1:56:ff:3f:92:ed:9f:2c:64:4f:e3:cf:b1: 2c:07:21:78:b9:4e:a0:81:4b:45:0c:68:61:0a:cb: 76:52:b2:aa:8d:ce:76:16:7b:33:dc:cc:ba:53:61: f9:ce:92:4c:39:4c:ec:65:dd:60:1d:20:f9:c6:9c: 24:f1:a3:0b:b8:32:70:2e:6f:93:65:f7:54:13:a6: 3c:6b:f1:6d:84:9c:3e:a6:8c:5a:02:8b:bd:a4:3c: e0:90:f2:ef:d5:0c:30:da:d7:79:ad:a6:03:ec:db: f1:56:2a:a3:a0:7b:56:2c:00:00:0e:0c:be:a1:77: 63:f6:a8:bb:ac:e5:e9:c7:97:7c:8e:e3:22:44:0f: f4:31:7a:13:e2:6d:34:b9:e1:20:34:02:21:8b:74: 85:86:2b:e6:12:0e:be:52:0e:38:f0:9b:1b:67:b0: ac:11:80:f2:f8:98:6a:5a:42:e5:f5:de:eb:0a:9c: bc:e2:f8:bd:0b:5a:f4:6d:89:c7:aa:41:01:90:1d: 5b:61:25:c8:ab:98:96:1b:66:fd:16:3d:d1:08:35: 59:e2:ca:bc:da:a5:fa:09:dd:b7:69:80:98:73:ea: d1:d2:98:70:3d:dc:b1:37:57:30:8a:97:85:29:1d: f1:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:8D:D2:23:80:14:C8:26:33:D2:DB:03:9D:F2:62:60:11:02:40:00 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145025.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a947::/32 Signature Algorithm: sha256WithRSAEncryption 8d:f1:84:20:be:70:14:29:44:9f:f8:bc:74:5b:ba:19:61:9c: f4:38:f8:bb:2a:86:4d:d2:1f:97:2b:b6:c5:f7:9e:4c:66:00: 5c:96:99:fb:3b:80:b2:17:2d:58:e2:ae:cd:4b:13:40:e3:92: 22:21:68:8e:77:c1:70:c9:f8:bd:c0:86:68:e7:48:1e:9e:55: ab:70:b5:c8:25:75:13:4c:5a:4e:83:dd:a9:fe:02:1e:f2:20: 8e:1e:22:ef:5f:78:d0:8e:f6:ad:5b:84:96:c6:5e:c2:98:4c: 9a:87:f0:4a:f8:4d:a4:40:bc:3f:b7:c2:f6:de:0d:a3:4d:0b: 3f:43:c0:d0:eb:31:7e:6a:7b:ec:8c:0d:a3:53:0a:53:e6:9e: 9e:01:23:8d:68:fd:c4:24:ee:44:f7:cb:71:d5:95:c3:37:49: 85:26:d8:c7:c9:ce:c8:64:5f:6f:a9:1d:fa:51:b7:6d:08:ea: 3d:6e:50:d2:c0:5f:d0:21:43:a1:9f:59:f4:eb:e1:85:cd:9a: 05:18:84:40:34:1a:0b:9b:c3:a2:42:d7:aa:33:db:6a:f1:65: 99:4d:a1:bd:79:c9:84:14:9a:f3:0a:58:04:d0:33:1b:da:2d: 38:22:27:07:3f:34:65:f7:2e:8e:65:e0:c2:aa:a8:17:73:6e: 3e:69:d4:eb -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUFtQMD7aQIVxwUdps7tVP5uVR6hMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTYyNloX DTI3MDMwMzA2MjEyNlowMzExMC8GA1UEAxMoNkE4REQyMjM4MDE0QzgyNjMzRDJE QjAzOURGMjYyNjAxMTAyNDAwMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANmvSYFtHSS7GInwQNsJtD/RVv8/ku2fLGRP48+xLAcheLlOoIFLRQxoYQrL dlKyqo3OdhZ7M9zMulNh+c6STDlM7GXdYB0g+cacJPGjC7gycC5vk2X3VBOmPGvx bYScPqaMWgKLvaQ84JDy79UMMNrXea2mA+zb8VYqo6B7ViwAAA4MvqF3Y/aou6zl 6ceXfI7jIkQP9DF6E+JtNLnhIDQCIYt0hYYr5hIOvlIOOPCbG2ewrBGA8viYalpC 5fXe6wqcvOL4vQta9G2Jx6pBAZAdW2ElyKuYlhtm/RY90Qg1WeLKvNql+gndt2mA mHPq0dKYcD3csTdXMIqXhSkd8VECAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRqjdIj gBTIJjPS2wOd8mJgEQJAADAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTAyNS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qUcwDQYJKoZIhvcNAQELBQADggEBAI3xhCC+cBQpRJ/4vHRbuhlhnPQ4+Lsqhk3S H5crtsX3nkxmAFyWmfs7gLIXLVjirs1LE0DjkiIhaI53wXDJ+L3AhmjnSB6eVatw tcgldRNMWk6D3an+Ah7yII4eIu9feNCO9q1bhJbGXsKYTJqH8Er4TaRAvD+3wvbe DaNNCz9DwNDrMX5qe+yMDaNTClPmnp4BI41o/cQk7kT3y3HVlcM3SYUm2MfJzshk X2+pHfpRt20I6j1uUNLAX9AhQ6GfWfTr4YXNmgUYhEA0Ggubw6JC16oz22rxZZlN ob15yYQUmvMKWATQMxvaLTgiJwc/NGX3Lo5l4MKqqBdzbj5p1Os= -----END CERTIFICATE-----Generated at Sat Mar 28 11:46:17 2026 by rpki-client