$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145180.roa File: AS145180.roa (raw, json) Hash identifier: lFbQpaqhSJXXVVoi1oJmQhugB/R2OEnqqITRtIxwY2I= Subject key identifier: D1:A8:CC:1D:B7:A6:71:CF:B6:EA:7B:5E:CA:87:E7:22:F5:D6:0E:C1 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 620FCDD3BED716B5152E20E9B17BDD7896D76C1E Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145180.roa Signing time: Wed 04 Mar 2026 06:21:22 +0000 ROA not before: Wed 04 Mar 2026 06:16:22 +0000 ROA not after: Wed 03 Mar 2027 06:21:22 +0000 asID: 145180 IP address blocks: 240a:a9e2::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:0f:cd:d3:be:d7:16:b5:15:2e:20:e9:b1:7b:dd:78:96:d7:6c:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:16:22 2026 GMT Not After : Mar 3 06:21:22 2027 GMT Subject: CN=D1A8CC1DB7A671CFB6EA7B5ECA87E722F5D60EC1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:89:b7:27:86:c4:d4:e7:c3:c8:f2:6b:12:d3: e3:e9:7f:e9:24:d4:dd:82:20:2e:eb:cc:c5:fd:c9: 7c:16:23:10:f3:1e:a3:c0:aa:74:a2:8c:1b:23:5d: a4:55:25:b0:0f:40:00:b9:45:12:61:1c:60:49:31: c3:3d:26:e8:9e:92:70:1b:e3:73:45:3e:92:b3:5a: 53:4b:79:a6:ab:0e:fb:8a:ec:e5:ca:74:e7:6f:13: e4:28:85:26:7d:1b:09:c8:ad:6b:e9:28:16:5e:77: dd:99:7c:9b:c0:83:b6:b3:22:3f:16:4b:fd:62:5e: 73:1c:f9:d2:89:60:86:98:10:e3:3b:2c:5b:48:8f: a2:b4:49:f2:49:3d:de:c2:e0:e9:23:51:ba:6c:f2: aa:61:c3:09:3a:93:9c:75:b9:59:8b:34:38:d8:47: 62:43:9f:3e:a4:65:66:e4:15:01:a5:b2:69:54:93: 52:65:84:ca:35:cf:e1:10:6b:90:4a:a0:17:e8:77: 44:3f:6c:04:ea:c6:73:39:8a:17:b3:e7:29:f5:9b: d4:b1:5f:76:b3:65:ba:bc:c3:ec:02:61:36:1d:0d: 0d:ed:d0:3f:54:8a:d8:02:11:31:d6:bc:e0:69:3a: 1c:c7:37:b1:00:3b:7c:92:b4:87:f5:0f:56:d9:fa: 69:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:A8:CC:1D:B7:A6:71:CF:B6:EA:7B:5E:CA:87:E7:22:F5:D6:0E:C1 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145180.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a9e2::/32 Signature Algorithm: sha256WithRSAEncryption 17:13:4d:16:79:df:71:6e:fb:72:8c:d0:76:cf:ae:7b:7b:9b: 29:79:2b:f5:ae:57:a8:aa:d8:1a:34:b6:10:58:c3:c6:28:8b: ff:58:a2:2c:e8:a7:e2:cc:91:25:3a:f0:1f:e9:69:d9:8d:41: b6:96:87:c2:1d:40:8c:f1:c2:2c:6e:fd:bb:a9:19:de:f8:eb: 77:d5:3b:cc:fd:34:a1:a2:a8:a4:f7:21:26:47:93:d0:90:a5: f5:45:45:7b:6f:76:32:12:ae:7c:32:cf:4c:df:f0:fb:2f:40: 24:71:fe:ae:35:4a:6c:75:6f:84:19:8b:1c:8e:97:a2:96:db: 98:0e:50:c0:92:09:da:a8:a8:bf:1f:66:9b:e1:10:22:85:54: 1b:eb:40:9c:76:0a:06:0e:81:c5:0d:ba:c8:1a:aa:92:9d:98: ff:1e:df:4c:e2:77:83:e0:23:b4:7c:fa:6a:98:c6:8f:6a:b0: 70:06:ef:0c:2b:e3:a3:0a:88:77:d3:b6:74:e5:6d:10:76:e4: db:94:97:c8:32:47:02:6f:72:b3:fa:63:4b:f1:42:57:ba:c2: 5d:f7:84:ac:67:a1:e3:1b:18:8c:de:76:cb:58:06:29:28:79: b9:25:1b:03:9f:42:a4:91:02:b0:d2:7e:e3:49:d8:fd:9e:94: d3:5a:6c:28 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUYg/N077XFrUVLiDpsXvdeJbXbB4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTYyMloX DTI3MDMwMzA2MjEyMlowMzExMC8GA1UEAxMoRDFBOENDMURCN0E2NzFDRkI2RUE3 QjVFQ0E4N0U3MjJGNUQ2MEVDMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMmJtyeGxNTnw8jyaxLT4+l/6STU3YIgLuvMxf3JfBYjEPMeo8CqdKKMGyNd pFUlsA9AALlFEmEcYEkxwz0m6J6ScBvjc0U+krNaU0t5pqsO+4rs5cp0528T5CiF Jn0bCcita+koFl533Zl8m8CDtrMiPxZL/WJecxz50olghpgQ4zssW0iPorRJ8kk9 3sLg6SNRumzyqmHDCTqTnHW5WYs0ONhHYkOfPqRlZuQVAaWyaVSTUmWEyjXP4RBr kEqgF+h3RD9sBOrGczmKF7PnKfWb1LFfdrNlurzD7AJhNh0NDe3QP1SK2AIRMda8 4Gk6HMc3sQA7fJK0h/UPVtn6abMCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBTRqMwd t6Zxz7bqe17Kh+ci9dYOwTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTE4MC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qeIwDQYJKoZIhvcNAQELBQADggEBABcTTRZ533Fu+3KM0HbPrnt7myl5K/WuV6iq 2Bo0thBYw8Yoi/9Yoizop+LMkSU68B/padmNQbaWh8IdQIzxwixu/bupGd7463fV O8z9NKGiqKT3ISZHk9CQpfVFRXtvdjISrnwyz0zf8PsvQCRx/q41Smx1b4QZixyO l6KW25gOUMCSCdqoqL8fZpvhECKFVBvrQJx2CgYOgcUNusgaqpKdmP8e30zid4Pg I7R8+mqYxo9qsHAG7wwr46MKiHfTtnTlbRB25NuUl8gyRwJvcrP6Y0vxQle6wl33 hKxnoeMbGIzedstYBikoebklGwOfQqSRArDSfuNJ2P2elNNabCg= -----END CERTIFICATE-----Generated at Sat Mar 28 11:41:15 2026 by rpki-client