$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145072.roa File: AS145072.roa (raw, json) Hash identifier: bd1SS5VNvsMbPQ7ZflUSraVqec0W8xX2Yr8tIOvnrjU= Subject key identifier: 4E:EF:A7:BB:7D:76:F9:CA:28:FC:5A:D3:47:3D:79:80:A2:9D:34:BB Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 4959FD3B39F43659B89A52D604C58A4709C5D863 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145072.roa Signing time: Wed 04 Mar 2026 06:20:18 +0000 ROA not before: Wed 04 Mar 2026 06:15:18 +0000 ROA not after: Wed 03 Mar 2027 06:20:18 +0000 asID: 145072 IP address blocks: 240a:a976::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:59:fd:3b:39:f4:36:59:b8:9a:52:d6:04:c5:8a:47:09:c5:d8:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:15:18 2026 GMT Not After : Mar 3 06:20:18 2027 GMT Subject: CN=4EEFA7BB7D76F9CA28FC5AD3473D7980A29D34BB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:97:fe:b4:81:b3:6a:37:11:69:f1:33:23:23: f6:60:21:ed:35:a6:53:e0:43:dd:6c:b6:c1:b6:6b: 57:51:a5:f6:64:76:72:1e:a5:61:5f:a3:67:5a:18: ee:1f:1d:fb:83:eb:35:c8:83:0f:ed:d8:e2:cb:43: a5:68:4f:4b:16:fa:db:64:88:d7:b1:9a:77:e4:c0: b3:66:d9:e4:b2:06:e1:fc:22:0c:84:c3:0f:e5:73: db:f0:bb:08:a1:07:a7:0f:b1:03:bb:f7:c3:43:04: 32:45:60:fe:48:d3:4c:a8:2c:9c:06:06:4e:90:1e: c2:87:13:6d:94:44:b2:6c:2d:2c:f5:c6:f2:66:b1: fe:0a:8d:4a:84:99:f5:90:9d:75:ee:67:22:3f:ca: a1:7f:ca:6c:d6:0d:2b:24:b8:21:d4:3d:47:50:aa: 8c:a6:b7:97:89:43:bb:1f:91:4a:bc:4f:97:6e:4d: ef:39:c8:bb:40:38:4f:e3:c2:b5:23:5e:d8:65:00: c4:5e:39:04:e4:2b:a5:09:05:8d:fd:16:a0:d6:6a: 78:d9:91:d9:49:3a:15:8f:93:d7:59:1e:44:0e:ac: 31:9e:1f:a5:af:15:e0:54:86:c3:d6:e7:eb:9d:8b: b0:86:ec:13:27:bb:01:04:70:8f:27:b3:77:b4:93: 2b:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:EF:A7:BB:7D:76:F9:CA:28:FC:5A:D3:47:3D:79:80:A2:9D:34:BB X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145072.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a976::/32 Signature Algorithm: sha256WithRSAEncryption 35:b5:3a:cd:ab:aa:dd:67:41:5f:d0:f2:78:db:ca:19:b7:9c: 13:ec:5d:62:c4:1e:4b:86:42:41:44:70:9f:c6:28:47:06:37: 42:f9:3a:d4:f3:1e:e8:1d:f0:1b:84:9d:b7:a6:5d:32:60:55: cc:98:dd:76:5a:d7:cb:22:5a:4d:9f:a9:2f:d3:a6:fa:fa:2e: bc:f9:b9:f2:a1:e7:b8:8d:9f:80:27:c2:4d:3e:2a:0b:91:e5: 62:5b:e2:ea:af:e1:d5:c6:98:e4:ca:ca:1a:64:c7:2f:b4:94: b6:db:ae:9a:4d:18:a5:65:5a:33:77:48:16:96:9d:14:0f:31: 99:6a:eb:e5:93:b2:73:b3:84:50:87:e5:e6:10:14:56:dd:55: 2c:d6:f5:d5:38:f7:01:47:8c:b6:f6:52:71:dc:f5:9f:f5:55: 46:5d:c3:74:4a:4a:4e:4a:52:47:6a:6f:df:fa:10:cf:2d:83: 55:44:99:ef:3d:8f:c4:6d:a0:cd:19:bc:f9:72:dd:06:3a:23: 55:21:de:42:82:1a:e8:76:9d:ba:be:2e:0a:d5:cc:7b:3c:bc: 49:27:fa:c8:2f:1f:f5:95:b6:c0:02:02:bc:30:e2:50:a4:f8: de:d2:29:00:91:33:72:f2:69:1f:19:3a:b8:2c:bc:1a:62:eb: 7d:1e:8a:d6 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUSVn9Ozn0Nlm4mlLWBMWKRwnF2GMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTUxOFoX DTI3MDMwMzA2MjAxOFowMzExMC8GA1UEAxMoNEVFRkE3QkI3RDc2RjlDQTI4RkM1 QUQzNDczRDc5ODBBMjlEMzRCQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALeX/rSBs2o3EWnxMyMj9mAh7TWmU+BD3Wy2wbZrV1Gl9mR2ch6lYV+jZ1oY 7h8d+4PrNciDD+3Y4stDpWhPSxb622SI17Gad+TAs2bZ5LIG4fwiDITDD+Vz2/C7 CKEHpw+xA7v3w0MEMkVg/kjTTKgsnAYGTpAewocTbZREsmwtLPXG8max/gqNSoSZ 9ZCdde5nIj/KoX/KbNYNKyS4IdQ9R1CqjKa3l4lDux+RSrxPl25N7znIu0A4T+PC tSNe2GUAxF45BOQrpQkFjf0WoNZqeNmR2Uk6FY+T11keRA6sMZ4fpa8V4FSGw9bn 652LsIbsEye7AQRwjyezd7STKz8CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRO76e7 fXb5yij8WtNHPXmAop00uzAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTA3Mi5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qXYwDQYJKoZIhvcNAQELBQADggEBADW1Os2rqt1nQV/Q8njbyhm3nBPsXWLEHkuG QkFEcJ/GKEcGN0L5OtTzHugd8BuEnbemXTJgVcyY3XZa18siWk2fqS/Tpvr6Lrz5 ufKh57iNn4Anwk0+KguR5WJb4uqv4dXGmOTKyhpkxy+0lLbbrppNGKVlWjN3SBaW nRQPMZlq6+WTsnOzhFCH5eYQFFbdVSzW9dU49wFHjLb2UnHc9Z/1VUZdw3RKSk5K Ukdqb9/6EM8tg1VEme89j8RtoM0ZvPly3QY6I1Uh3kKCGuh2nbq+LgrVzHs8vEkn +sgvH/WVtsACArww4lCk+N7SKQCRM3LyaR8ZOrgsvBpi630eitY= -----END CERTIFICATE-----Generated at Sat Mar 28 11:41:16 2026 by rpki-client