$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145184.roa File: AS145184.roa (raw, json) Hash identifier: Vz7SlLnJ1r1yWVAhv7T9WcZmtXKpj6XW3dB+T+Fu71w= Subject key identifier: B9:72:D9:1A:FA:FA:36:90:12:98:B3:9F:E4:3C:D0:93:18:CB:36:3E Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 69C3A54D0FC38ACB50F00A207ACDB583027EA2C2 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145184.roa Signing time: Wed 04 Mar 2026 06:21:53 +0000 ROA not before: Wed 04 Mar 2026 06:16:53 +0000 ROA not after: Wed 03 Mar 2027 06:21:53 +0000 asID: 145184 IP address blocks: 240a:a9e6::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:c3:a5:4d:0f:c3:8a:cb:50:f0:0a:20:7a:cd:b5:83:02:7e:a2:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:16:53 2026 GMT Not After : Mar 3 06:21:53 2027 GMT Subject: CN=B972D91AFAFA36901298B39FE43CD09318CB363E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:f6:b2:a0:c2:3d:91:2f:90:d1:f3:7c:0b:bf: 43:5f:89:8d:ff:28:1d:d2:e6:ae:05:69:3f:16:1c: 76:59:b1:a6:a0:ff:35:4d:41:5c:af:1f:60:ca:7e: 63:a2:21:aa:1d:23:e7:9f:5c:38:43:59:c0:a7:a3: 2e:9f:82:ef:7e:a9:0b:e2:e7:01:98:af:65:b2:68: 4d:ab:44:ea:23:ee:71:46:c6:12:15:cf:46:03:f3: f2:6f:f8:e4:48:d6:7f:50:8d:10:1c:f1:6e:38:cf: 24:8d:68:1f:e4:7c:aa:44:05:88:d3:f8:9a:b7:66: ed:83:21:06:00:e8:ca:a6:2d:60:78:d7:33:07:e6: 1d:68:e5:91:d3:df:24:ec:39:12:a5:79:0d:42:8b: cb:c6:b6:07:5f:b1:d5:f1:af:1e:4d:d4:53:37:b6: 3c:ef:bb:d4:06:34:5f:ee:51:7a:9e:1b:eb:7e:9d: b3:5f:f2:1a:1c:12:26:cc:ad:08:d3:45:4c:2d:16: 56:72:e2:c2:ba:ba:8e:f2:ca:a8:80:51:8e:d4:29: 56:69:2b:62:0b:9f:fd:9c:b5:df:82:1a:e0:10:43: a6:47:56:03:5c:28:71:a2:bd:88:a4:5b:c2:6c:50: 51:41:92:a1:ad:7d:2c:97:79:7d:79:d8:e0:b0:ce: 64:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:72:D9:1A:FA:FA:36:90:12:98:B3:9F:E4:3C:D0:93:18:CB:36:3E X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145184.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a9e6::/32 Signature Algorithm: sha256WithRSAEncryption 72:81:a8:31:b0:f3:23:bc:c4:ae:3f:66:bc:86:d5:12:35:62: 6e:76:6f:6a:01:46:35:9c:2e:05:b8:85:83:2e:ab:51:de:af: 88:50:7d:dd:d2:88:50:65:73:09:9d:bc:f6:ff:bb:b7:75:85: 8f:8b:61:56:7f:b0:f2:ed:94:be:43:b8:e7:54:ed:c4:92:ae: 40:34:92:40:80:7c:9b:0a:33:36:eb:ba:f2:d7:bc:31:00:00: d3:e4:10:92:d6:76:21:ac:40:ed:c6:ef:e2:f6:15:a3:98:67: 6c:ea:84:c0:ed:4a:b3:56:ef:18:8e:9e:46:3e:21:f3:0e:76: aa:0d:e0:d6:b9:57:a8:1d:73:2f:39:5c:65:0e:ad:61:98:af: f7:ed:82:5a:fb:9c:ab:85:38:d0:8b:ba:60:17:38:32:a0:81: 3b:70:de:07:ba:78:5c:49:dc:89:2c:6a:b6:93:08:4d:1a:fe: 0a:7d:08:33:32:ce:f7:9a:4a:53:13:a4:bd:30:6c:df:d9:91: 96:e8:aa:ba:f0:a5:27:98:f3:dd:25:da:34:bf:16:17:bc:9d: 62:27:e0:11:58:f8:e3:b9:cc:4f:fb:8d:4f:52:2f:d8:d6:be: c7:bd:09:8f:51:62:90:c3:79:76:ff:e6:71:4e:da:e1:4a:a5: 0a:b2:1f:c4 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUacOlTQ/DistQ8Aoges21gwJ+osIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTY1M1oX DTI3MDMwMzA2MjE1M1owMzExMC8GA1UEAxMoQjk3MkQ5MUFGQUZBMzY5MDEyOThC MzlGRTQzQ0QwOTMxOENCMzYzRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALj2sqDCPZEvkNHzfAu/Q1+Jjf8oHdLmrgVpPxYcdlmxpqD/NU1BXK8fYMp+ Y6Ihqh0j559cOENZwKejLp+C736pC+LnAZivZbJoTatE6iPucUbGEhXPRgPz8m/4 5EjWf1CNEBzxbjjPJI1oH+R8qkQFiNP4mrdm7YMhBgDoyqYtYHjXMwfmHWjlkdPf JOw5EqV5DUKLy8a2B1+x1fGvHk3UUze2PO+71AY0X+5Rep4b636ds1/yGhwSJsyt CNNFTC0WVnLiwrq6jvLKqIBRjtQpVmkrYguf/Zy134Ia4BBDpkdWA1wocaK9iKRb wmxQUUGSoa19LJd5fXnY4LDOZIMCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBS5ctka +vo2kBKYs5/kPNCTGMs2PjAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTE4NC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qeYwDQYJKoZIhvcNAQELBQADggEBAHKBqDGw8yO8xK4/ZryG1RI1Ym52b2oBRjWc LgW4hYMuq1Her4hQfd3SiFBlcwmdvPb/u7d1hY+LYVZ/sPLtlL5DuOdU7cSSrkA0 kkCAfJsKMzbruvLXvDEAANPkEJLWdiGsQO3G7+L2FaOYZ2zqhMDtSrNW7xiOnkY+ IfMOdqoN4Na5V6gdcy85XGUOrWGYr/ftglr7nKuFONCLumAXODKggTtw3ge6eFxJ 3IksaraTCE0a/gp9CDMyzveaSlMTpL0wbN/ZkZboqrrwpSeY890l2jS/Fhe8nWIn 4BFY+OO5zE/7jU9SL9jWvse9CY9RYpDDeXb/5nFO2uFKpQqyH8Q= -----END CERTIFICATE-----Generated at Sat Mar 28 13:15:20 2026 by rpki-client