$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145087.roa File: AS145087.roa (raw, json) Hash identifier: 4AUSPILkGdDqTf1yWS6YIw5KdelVoc6Wx4LEzDW3rTs= Subject key identifier: 95:B0:32:BF:AA:17:D6:06:2C:8B:82:37:1A:1A:1C:F7:CB:E0:3F:9D Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 295E588F6E9A5A5D0DF7C1F13B577CE4C3083771 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145087.roa Signing time: Wed 04 Mar 2026 06:20:33 +0000 ROA not before: Wed 04 Mar 2026 06:15:33 +0000 ROA not after: Wed 03 Mar 2027 06:20:33 +0000 asID: 145087 IP address blocks: 240a:a985::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:5e:58:8f:6e:9a:5a:5d:0d:f7:c1:f1:3b:57:7c:e4:c3:08:37:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:15:33 2026 GMT Not After : Mar 3 06:20:33 2027 GMT Subject: CN=95B032BFAA17D6062C8B82371A1A1CF7CBE03F9D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:5d:c4:52:c2:24:3f:06:a8:14:87:a2:ca:db: 13:c5:55:e6:15:62:a2:06:9b:05:0f:1d:d2:2d:3a: 9c:64:3e:d3:d9:51:5a:6f:44:a5:f8:b2:64:8f:6f: e9:e2:4f:8d:1b:f6:3a:52:61:87:23:5f:03:17:dc: 4f:7f:f2:17:ca:7e:9d:1a:71:72:db:8e:eb:4e:f2: e9:28:65:07:00:23:61:c0:6f:b6:30:6d:77:83:c4: 95:2f:87:4f:26:8f:5b:d9:4c:34:88:9a:93:d0:8e: 83:c0:e7:6c:99:da:7c:c6:91:9b:7a:38:8a:61:3c: 18:f9:45:1f:1d:13:3f:8b:52:30:39:83:76:81:0f: 70:2b:a6:27:60:09:cd:62:3d:55:5c:c1:6c:e6:2a: 46:78:51:f4:ea:5b:50:6c:3c:16:c2:e4:c5:97:b8: f2:20:3c:3e:62:01:d8:3e:b3:74:bc:91:2f:9c:f8: d2:a8:36:c2:83:a7:55:86:c6:87:fb:ba:ba:13:b3: 2f:1a:09:0b:a4:d0:e8:46:fb:5e:9d:36:4c:bc:eb: 5d:8e:3a:d0:3a:4e:5c:bf:9d:66:73:03:e1:fe:7c: 6f:dc:36:50:f7:61:6b:a4:cb:08:94:3f:26:44:98: 73:29:6a:9b:7a:e7:2d:a7:c3:25:04:93:ce:10:a9: 9c:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:B0:32:BF:AA:17:D6:06:2C:8B:82:37:1A:1A:1C:F7:CB:E0:3F:9D X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145087.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a985::/32 Signature Algorithm: sha256WithRSAEncryption 08:3d:96:bc:1b:3a:be:cd:78:e2:dc:07:4e:4d:33:04:ce:74: 85:08:5c:f1:73:37:c4:3d:e4:58:6b:b2:6d:60:7d:8f:58:24: 79:f4:5f:88:2c:0a:15:a2:01:3f:ec:bd:09:81:2c:76:c8:32: 17:c9:6c:02:af:be:c1:bb:6a:01:1f:9c:f8:ca:99:8a:cd:24: b1:d1:43:dd:c4:6c:2b:20:84:94:84:e8:89:92:50:1c:9c:80: d3:f7:42:e7:b8:c4:76:4f:86:ac:bf:31:e9:0c:b6:43:34:ec: b6:b5:b7:e8:46:14:0e:c8:10:97:67:db:ce:5d:7b:d5:f3:bd: 86:b1:71:c6:6d:32:45:08:64:84:6c:38:01:cb:fc:7d:9f:e4: 69:5e:1d:45:8c:de:d6:62:fd:ba:da:7e:60:8a:17:6e:5a:cc: 52:a2:ff:80:d7:c0:c2:16:2a:4d:e7:53:dd:76:2e:9f:4b:2f: f8:fa:84:83:35:4a:a3:4c:9e:07:cf:a8:c5:4d:05:ac:19:83: 7d:1a:50:c2:a5:a2:c7:ec:be:46:a2:87:7d:38:34:6c:88:5b: 5b:a4:27:7b:ec:60:cb:c3:14:9b:a9:e0:55:9e:70:c6:12:2d: 6b:8f:78:a6:d6:16:1c:34:81:b9:b2:cf:16:69:50:5e:66:c8: a7:d6:dd:c8 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUKV5Yj26aWl0N98HxO1d85MMIN3EwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTUzM1oX DTI3MDMwMzA2MjAzM1owMzExMC8GA1UEAxMoOTVCMDMyQkZBQTE3RDYwNjJDOEI4 MjM3MUExQTFDRjdDQkUwM0Y5RDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALhdxFLCJD8GqBSHosrbE8VV5hViogabBQ8d0i06nGQ+09lRWm9EpfiyZI9v 6eJPjRv2OlJhhyNfAxfcT3/yF8p+nRpxctuO607y6ShlBwAjYcBvtjBtd4PElS+H TyaPW9lMNIiak9COg8DnbJnafMaRm3o4imE8GPlFHx0TP4tSMDmDdoEPcCumJ2AJ zWI9VVzBbOYqRnhR9OpbUGw8FsLkxZe48iA8PmIB2D6zdLyRL5z40qg2woOnVYbG h/u6uhOzLxoJC6TQ6Eb7Xp02TLzrXY460DpOXL+dZnMD4f58b9w2UPdha6TLCJQ/ JkSYcylqm3rnLafDJQSTzhCpnFkCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSVsDK/ qhfWBiyLgjcaGhz3y+A/nTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTA4Ny5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qYUwDQYJKoZIhvcNAQELBQADggEBAAg9lrwbOr7NeOLcB05NMwTOdIUIXPFzN8Q9 5Fhrsm1gfY9YJHn0X4gsChWiAT/svQmBLHbIMhfJbAKvvsG7agEfnPjKmYrNJLHR Q93EbCsghJSE6ImSUBycgNP3Que4xHZPhqy/MekMtkM07La1t+hGFA7IEJdn285d e9XzvYaxccZtMkUIZIRsOAHL/H2f5GleHUWM3tZi/brafmCKF25azFKi/4DXwMIW Kk3nU912Lp9LL/j6hIM1SqNMngfPqMVNBawZg30aUMKlosfsvkaih304NGyIW1uk J3vsYMvDFJup4FWecMYSLWuPeKbWFhw0gbmyzxZpUF5myKfW3cg= -----END CERTIFICATE-----Generated at Sat Mar 28 11:41:33 2026 by rpki-client