$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145071.roa File: AS145071.roa (raw, json) Hash identifier: ZlIBqgvXf/X+bWL9Fy0riqQs6jflmqmzgKf1fBXDzS0= Subject key identifier: 64:D5:04:BA:99:DD:0A:A1:DF:F1:2F:9C:80:C7:AF:4F:C5:C4:E1:3B Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 6C2ACF7CBCCD23C02C033268AE7B52CE2C3B71E8 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145071.roa Signing time: Wed 04 Mar 2026 06:21:00 +0000 ROA not before: Wed 04 Mar 2026 06:16:00 +0000 ROA not after: Wed 03 Mar 2027 06:21:00 +0000 asID: 145071 IP address blocks: 240a:a975::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:2a:cf:7c:bc:cd:23:c0:2c:03:32:68:ae:7b:52:ce:2c:3b:71:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:16:00 2026 GMT Not After : Mar 3 06:21:00 2027 GMT Subject: CN=64D504BA99DD0AA1DFF12F9C80C7AF4FC5C4E13B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:a6:1d:63:39:3a:3d:1e:2e:11:59:3f:58:df: e5:8c:7d:9a:f2:36:96:a0:4b:60:0d:63:44:01:7f: 4d:62:3a:b0:cc:6b:34:65:f3:1c:77:dc:7e:be:4b: 35:7b:89:6e:fc:a1:89:aa:69:0d:71:b1:e6:fb:a0: 01:9b:b3:f2:93:2c:3f:7f:8e:b1:4c:4e:d0:8e:03: 48:48:09:1a:a3:d2:e8:0c:55:b4:a0:0f:69:bc:f9: 49:f2:01:34:96:ed:d1:75:db:25:cd:de:18:33:b7: cb:82:a0:37:20:04:a5:5e:77:bb:30:30:cb:ad:16: ba:4e:b9:98:b8:30:e9:06:25:21:fc:b5:0c:28:79: 12:ca:c4:99:35:77:c6:0b:f7:50:0c:c1:49:b2:11: 51:59:91:73:ec:a3:d3:2a:70:ba:42:84:72:5d:0e: d5:a1:a1:1b:47:e9:ac:73:84:9f:00:86:e3:6d:63: 74:1d:fa:bc:39:23:f5:11:5f:e2:86:f9:28:34:23: 2e:fd:78:98:97:cb:62:87:66:03:0e:e9:e6:a1:cd: eb:67:3c:da:a6:ca:81:a4:dc:fc:b1:55:39:ae:d9: 98:9d:00:27:70:e0:cf:30:d2:4b:67:b4:62:a8:3d: 01:d9:c5:ac:58:dc:3a:19:89:c8:c4:b5:dc:2b:67: 25:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:D5:04:BA:99:DD:0A:A1:DF:F1:2F:9C:80:C7:AF:4F:C5:C4:E1:3B X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145071.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a975::/32 Signature Algorithm: sha256WithRSAEncryption 2c:b0:46:32:27:c4:18:f2:5d:0f:e9:07:c5:46:4c:0f:3b:eb: 8e:a7:e7:c5:f5:29:f9:f3:d0:55:d3:ca:ca:09:6b:ad:32:ec: cd:dc:88:9d:de:99:97:52:d8:ef:5f:a0:8b:b8:a7:cd:26:65: 83:85:04:ef:94:02:1f:0a:f3:9e:73:f1:b5:3f:6b:4a:54:6f: 2b:07:5c:4a:0b:d3:a2:70:75:b0:3a:be:b7:42:cd:b0:5e:59: e8:9a:e2:03:95:f0:58:7d:6c:7c:f9:fc:bf:86:14:9a:d7:a8: 43:5f:23:14:69:fd:80:c5:90:33:eb:8b:22:8d:cb:80:7f:f4: 1d:f7:5a:b7:05:ec:bd:7e:76:e9:e8:c2:f5:4a:ec:a0:2e:09: 54:17:f8:be:ea:d3:46:67:c7:4c:7e:ab:da:3c:70:cd:9d:3a: 29:f7:df:0d:3c:29:1c:57:7b:cb:dd:9a:f9:45:9d:1c:f6:34: 34:e9:e1:e1:32:52:c3:7d:0e:d4:ef:f2:a1:7e:0a:3f:f5:a1: 6f:51:c4:22:d7:bb:8a:83:e9:e8:20:5d:46:62:26:04:e9:b8: 6f:82:e7:5f:01:bf:d6:4a:c6:af:cd:84:1c:f8:97:fc:1c:a8: fb:f4:68:bb:50:e4:7d:f0:de:e8:54:91:2a:6b:aa:8b:03:98: 10:3d:dc:11 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUbCrPfLzNI8AsAzJorntSziw7cegwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTYwMFoX DTI3MDMwMzA2MjEwMFowMzExMC8GA1UEAxMoNjRENTA0QkE5OUREMEFBMURGRjEy RjlDODBDN0FGNEZDNUM0RTEzQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMemHWM5Oj0eLhFZP1jf5Yx9mvI2lqBLYA1jRAF/TWI6sMxrNGXzHHfcfr5L NXuJbvyhiappDXGx5vugAZuz8pMsP3+OsUxO0I4DSEgJGqPS6AxVtKAPabz5SfIB NJbt0XXbJc3eGDO3y4KgNyAEpV53uzAwy60Wuk65mLgw6QYlIfy1DCh5EsrEmTV3 xgv3UAzBSbIRUVmRc+yj0ypwukKEcl0O1aGhG0fprHOEnwCG421jdB36vDkj9RFf 4ob5KDQjLv14mJfLYodmAw7p5qHN62c82qbKgaTc/LFVOa7ZmJ0AJ3DgzzDSS2e0 Yqg9AdnFrFjcOhmJyMS13CtnJbcCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRk1QS6 md0Kod/xL5yAx69PxcThOzAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTA3MS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qXUwDQYJKoZIhvcNAQELBQADggEBACywRjInxBjyXQ/pB8VGTA87646n58X1Kfnz 0FXTysoJa60y7M3ciJ3emZdS2O9foIu4p80mZYOFBO+UAh8K855z8bU/a0pUbysH XEoL06JwdbA6vrdCzbBeWeia4gOV8Fh9bHz5/L+GFJrXqENfIxRp/YDFkDPriyKN y4B/9B33WrcF7L1+dunowvVK7KAuCVQX+L7q00Znx0x+q9o8cM2dOin33w08KRxX e8vdmvlFnRz2NDTp4eEyUsN9DtTv8qF+Cj/1oW9RxCLXu4qD6eggXUZiJgTpuG+C 518Bv9ZKxq/NhBz4l/wcqPv0aLtQ5H3w3uhUkSprqosDmBA93BE= -----END CERTIFICATE-----Generated at Sat Mar 28 11:41:14 2026 by rpki-client