$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145198.roa File: AS145198.roa (raw, json) Hash identifier: Xlc/Yu1l0igmcu2gD17ezMPZi8vjn7PoGda6S9qtPVQ= Subject key identifier: 4B:32:B4:EF:3B:04:8F:39:A3:A7:5E:A2:F5:11:B9:1F:3A:17:49:A3 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 7A4A075FDC8ACC8669F9F25CA45D7E91776A6091 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145198.roa Signing time: Wed 04 Mar 2026 06:19:47 +0000 ROA not before: Wed 04 Mar 2026 06:14:47 +0000 ROA not after: Wed 03 Mar 2027 06:19:47 +0000 asID: 145198 IP address blocks: 240a:a9f4::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:4a:07:5f:dc:8a:cc:86:69:f9:f2:5c:a4:5d:7e:91:77:6a:60:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:14:47 2026 GMT Not After : Mar 3 06:19:47 2027 GMT Subject: CN=4B32B4EF3B048F39A3A75EA2F511B91F3A1749A3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:14:4f:4c:06:16:a9:79:0c:ab:28:b1:22:57: 00:34:bc:b9:7e:99:42:31:62:b1:06:f6:6b:13:96: db:ac:1c:3d:a0:7b:b6:c1:6e:11:b0:0d:36:0c:66: f1:3e:5d:da:af:36:65:03:89:e1:58:60:b9:e2:cb: 91:70:2b:9e:fe:2d:14:35:cc:9e:2d:b0:ac:c6:a9: 0e:70:b2:6c:c7:fd:3a:f7:0e:6b:eb:6b:ba:bc:2b: 13:7b:6c:07:11:b6:83:49:37:53:86:b1:35:0d:07: 58:5c:3f:d9:5c:1e:f1:dd:6d:19:dd:28:9b:8c:53: 35:b7:e6:38:a2:4c:95:c5:0f:75:0a:36:62:06:0c: a4:3f:02:80:4a:b1:e2:8b:0f:43:b7:f9:2a:fe:da: b1:eb:e8:f8:69:43:fb:f8:9c:05:60:c6:8a:9b:09: fe:28:5d:5c:41:4b:97:60:3e:59:62:0c:27:d5:c0: 78:73:47:17:66:63:8d:6e:86:a3:65:c6:0c:ee:71: 94:e2:6b:6d:b0:7f:db:0b:29:3e:6c:8e:b2:a7:20: bb:7a:3d:1b:f9:b7:55:6f:7e:3b:d4:af:b4:ac:db: 0d:a9:d1:1c:f6:79:be:79:73:60:35:8b:1a:0f:a7: ed:00:3c:c4:a8:b6:a6:a2:34:a7:0b:10:31:5b:6c: 54:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:32:B4:EF:3B:04:8F:39:A3:A7:5E:A2:F5:11:B9:1F:3A:17:49:A3 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145198.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a9f4::/32 Signature Algorithm: sha256WithRSAEncryption 28:41:fc:ad:0b:35:65:40:92:d8:df:f8:85:30:3b:51:4e:e4: 8e:5f:5b:82:aa:1d:c7:56:2b:59:be:00:16:3f:4b:27:68:d6: 5c:b8:29:be:b9:05:5b:63:e3:7f:cb:6c:d9:8d:6c:b7:69:04: ee:58:45:d1:5a:83:b7:94:e0:8a:fa:36:98:c1:74:85:3f:95: 33:2c:4d:8c:8f:d5:15:9c:7f:80:f3:07:1d:ac:99:b4:60:16: f7:46:66:b0:9c:f8:8f:d0:28:43:24:f8:6e:1c:6c:1d:91:1f: ae:76:3b:52:3f:16:ba:1d:c1:11:87:b2:fa:b7:75:e6:86:f2: 16:58:43:54:9a:8e:d1:c2:24:2d:a8:12:fb:c2:93:09:4e:a1: d9:2a:ac:96:f0:46:85:5f:b0:0c:38:a7:62:ae:9c:2a:ae:19: fc:f2:8e:78:e6:02:70:dc:39:06:7e:27:25:a0:d7:57:56:53: 16:fc:37:a0:a2:96:d1:9c:1c:7b:91:3b:58:0d:45:59:b0:9d: 72:d6:0d:ac:2b:f9:d1:13:1c:86:d3:3f:ee:42:93:18:8f:9c: 70:d2:b8:89:36:6f:40:a0:51:8b:c4:b6:8a:55:5d:c9:c7:92: 21:c7:0e:cf:3f:16:c8:a2:78:b4:92:50:fc:ab:8b:80:62:a9: c1:2e:9d:86 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUekoHX9yKzIZp+fJcpF1+kXdqYJEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTQ0N1oX DTI3MDMwMzA2MTk0N1owMzExMC8GA1UEAxMoNEIzMkI0RUYzQjA0OEYzOUEzQTc1 RUEyRjUxMUI5MUYzQTE3NDlBMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKEUT0wGFql5DKsosSJXADS8uX6ZQjFisQb2axOW26wcPaB7tsFuEbANNgxm 8T5d2q82ZQOJ4VhgueLLkXArnv4tFDXMni2wrMapDnCybMf9OvcOa+trurwrE3ts BxG2g0k3U4axNQ0HWFw/2Vwe8d1tGd0om4xTNbfmOKJMlcUPdQo2YgYMpD8CgEqx 4osPQ7f5Kv7asevo+GlD+/icBWDGipsJ/ihdXEFLl2A+WWIMJ9XAeHNHF2ZjjW6G o2XGDO5xlOJrbbB/2wspPmyOsqcgu3o9G/m3VW9+O9SvtKzbDanRHPZ5vnlzYDWL Gg+n7QA8xKi2pqI0pwsQMVtsVLkCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRLMrTv OwSPOaOnXqL1EbkfOhdJozAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTE5OC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qfQwDQYJKoZIhvcNAQELBQADggEBAChB/K0LNWVAktjf+IUwO1FO5I5fW4KqHcdW K1m+ABY/Sydo1ly4Kb65BVtj43/LbNmNbLdpBO5YRdFag7eU4Ir6NpjBdIU/lTMs TYyP1RWcf4DzBx2smbRgFvdGZrCc+I/QKEMk+G4cbB2RH652O1I/FrodwRGHsvq3 deaG8hZYQ1SajtHCJC2oEvvCkwlOodkqrJbwRoVfsAw4p2KunCquGfzyjnjmAnDc OQZ+JyWg11dWUxb8N6CiltGcHHuRO1gNRVmwnXLWDawr+dETHIbTP+5CkxiPnHDS uIk2b0CgUYvEtopVXcnHkiHHDs8/FsiieLSSUPyri4BiqcEunYY= -----END CERTIFICATE-----Generated at Sat Mar 28 11:41:59 2026 by rpki-client