$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145077.roa File: AS145077.roa (raw, json) Hash identifier: yab1WI75eYN/y/ce3G0EA9cMnVktITjCgvvkNQJ979c= Subject key identifier: 85:09:79:BC:49:60:F3:FD:9A:3D:F9:19:3B:A9:39:47:23:9A:A7:BD Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 6D7D14BE280B3A02923909D1C297583EDF9628F7 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145077.roa Signing time: Wed 04 Mar 2026 06:21:38 +0000 ROA not before: Wed 04 Mar 2026 06:16:38 +0000 ROA not after: Wed 03 Mar 2027 06:21:38 +0000 asID: 145077 IP address blocks: 240a:a97b::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:7d:14:be:28:0b:3a:02:92:39:09:d1:c2:97:58:3e:df:96:28:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:16:38 2026 GMT Not After : Mar 3 06:21:38 2027 GMT Subject: CN=850979BC4960F3FD9A3DF9193BA93947239AA7BD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:86:ef:54:77:2a:6d:53:30:5c:c0:36:86:fe: ef:9f:ce:d1:dc:0a:c1:4c:11:06:04:c4:fa:8e:d2: 85:9c:51:ac:62:7c:43:a4:46:24:a3:df:a5:1f:26: 33:10:64:f2:5f:e9:78:8f:87:74:c8:89:6c:99:45: ae:f3:22:01:83:e3:0f:e4:e4:9e:75:7a:ff:97:30: f8:37:fb:07:57:c7:8a:a3:81:9f:2e:8c:90:8b:6d: 47:9f:9c:ef:3f:17:e6:90:b5:67:9b:e6:55:c8:65: cb:55:99:75:31:43:17:6e:f4:21:77:72:b9:4c:5b: b3:1f:17:89:42:37:ca:74:f4:53:eb:3d:e1:80:5a: bc:26:3e:2f:a3:cb:d8:c8:97:be:ec:b8:e5:17:49: ad:f3:c7:29:62:14:bd:11:d0:38:a4:58:93:b2:35: ad:4d:03:86:6c:5b:5c:6c:be:de:a6:ad:85:2f:76: 34:bd:71:d3:3d:ce:d2:b2:57:7c:5e:a4:84:b6:f9: 7f:47:30:55:d2:fe:3a:69:2e:b4:d4:6a:fc:b4:2d: 3e:a6:cd:9b:db:b6:71:0a:55:76:fb:c5:68:ac:e8: 9f:2d:5e:5c:f7:8d:f3:b9:0c:f6:0b:c1:90:8c:b0: 28:d3:ba:d2:1c:c1:56:0d:6c:55:ce:1c:d1:95:85: 26:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:09:79:BC:49:60:F3:FD:9A:3D:F9:19:3B:A9:39:47:23:9A:A7:BD X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145077.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a97b::/32 Signature Algorithm: sha256WithRSAEncryption a2:a9:51:69:15:12:b1:94:14:41:ff:e7:33:00:83:91:c7:75: f4:8e:00:8d:86:2a:a1:73:92:59:67:dd:25:2e:ac:2d:92:ae: 1e:15:ed:87:99:bd:08:bb:ee:12:6e:ef:58:12:bb:d5:77:dc: 58:02:44:e7:98:45:a2:50:04:b5:22:92:65:e9:48:1f:58:4a: 7b:b2:71:05:02:95:7e:f1:6a:a5:4d:f6:96:f7:11:12:fe:f2: 99:91:16:80:7c:27:34:4a:5b:1b:dc:a2:c4:ce:27:79:75:2c: 03:9e:4d:0d:e7:e6:3e:f7:09:2b:1c:10:12:be:32:03:58:01: a4:9c:90:5d:50:dc:02:d4:64:1f:a6:f6:11:eb:22:65:10:d4: 05:45:9d:75:ce:61:ee:d7:25:a6:a8:e6:cb:6a:a8:55:68:0e: 00:1d:e2:44:2d:77:7d:89:fb:6a:97:33:a3:0a:b8:ba:06:9d: 8e:38:bb:72:9f:4f:48:fd:b3:43:4c:89:1b:0c:66:72:fc:dc: 88:bc:b5:c3:40:61:9c:a6:de:27:1c:a6:55:ff:73:96:0d:24: d6:92:c9:dd:11:38:c0:e7:84:95:11:c8:2e:fd:ea:b7:66:96: f4:da:76:56:92:88:27:99:e7:64:78:8b:29:0f:c0:89:4c:02: 72:4e:95:e2 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUbX0UvigLOgKSOQnRwpdYPt+WKPcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTYzOFoX DTI3MDMwMzA2MjEzOFowMzExMC8GA1UEAxMoODUwOTc5QkM0OTYwRjNGRDlBM0RG OTE5M0JBOTM5NDcyMzlBQTdCRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMKG71R3Km1TMFzANob+75/O0dwKwUwRBgTE+o7ShZxRrGJ8Q6RGJKPfpR8m MxBk8l/peI+HdMiJbJlFrvMiAYPjD+TknnV6/5cw+Df7B1fHiqOBny6MkIttR5+c 7z8X5pC1Z5vmVchly1WZdTFDF270IXdyuUxbsx8XiUI3ynT0U+s94YBavCY+L6PL 2MiXvuy45RdJrfPHKWIUvRHQOKRYk7I1rU0DhmxbXGy+3qathS92NL1x0z3O0rJX fF6khLb5f0cwVdL+OmkutNRq/LQtPqbNm9u2cQpVdvvFaKzony1eXPeN87kM9gvB kIywKNO60hzBVg1sVc4c0ZWFJncCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSFCXm8 SWDz/Zo9+Rk7qTlHI5qnvTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTA3Ny5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qXswDQYJKoZIhvcNAQELBQADggEBAKKpUWkVErGUFEH/5zMAg5HHdfSOAI2GKqFz klln3SUurC2Srh4V7YeZvQi77hJu71gSu9V33FgCROeYRaJQBLUikmXpSB9YSnuy cQUClX7xaqVN9pb3ERL+8pmRFoB8JzRKWxvcosTOJ3l1LAOeTQ3n5j73CSscEBK+ MgNYAaSckF1Q3ALUZB+m9hHrImUQ1AVFnXXOYe7XJaao5stqqFVoDgAd4kQtd32J +2qXM6MKuLoGnY44u3KfT0j9s0NMiRsMZnL83Ii8tcNAYZym3iccplX/c5YNJNaS yd0ROMDnhJURyC796rdmlvTadlaSiCeZ52R4iykPwIlMAnJOleI= -----END CERTIFICATE-----Generated at Sat Mar 28 11:42:00 2026 by rpki-client