$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145203.roa File: AS145203.roa (raw, json) Hash identifier: FvQtvT56v42WjATw3HdSPruSdBHmaRnzC3kRRifUrYk= Subject key identifier: AD:90:61:CB:AC:B5:4D:FA:77:AD:F5:8F:A6:29:2B:1B:3F:7F:65:18 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 4D9FDAA61BEB3376116A0A69D6AF3928B0183D31 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145203.roa Signing time: Wed 04 Mar 2026 06:20:53 +0000 ROA not before: Wed 04 Mar 2026 06:15:53 +0000 ROA not after: Wed 03 Mar 2027 06:20:53 +0000 asID: 145203 IP address blocks: 240a:a9f9::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:9f:da:a6:1b:eb:33:76:11:6a:0a:69:d6:af:39:28:b0:18:3d:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:15:53 2026 GMT Not After : Mar 3 06:20:53 2027 GMT Subject: CN=AD9061CBACB54DFA77ADF58FA6292B1B3F7F6518 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:bb:e4:7b:8d:43:08:4b:fd:f7:5e:4b:20:04: a6:cd:6b:ce:42:22:aa:3d:69:77:25:a3:e4:d3:b5: 31:20:0a:1d:21:f9:b2:d2:16:f5:be:03:34:24:53: eb:0f:69:8e:7a:b0:80:9e:42:45:d3:f4:6c:d2:39: ad:07:d4:2d:d4:69:71:ce:d2:d0:25:59:57:42:fe: ac:49:58:19:31:0a:4e:a3:c4:53:b3:8e:3e:62:09: 58:14:ef:0f:e3:f9:a1:05:56:fe:a4:60:0a:43:a9: ee:f6:a4:d4:42:0c:97:9c:39:14:82:4d:f9:2e:62: e7:67:d6:2b:f9:df:dd:b0:15:13:9f:5e:52:db:ff: f8:f6:f0:4f:51:35:7a:20:7e:3f:de:c3:d3:7b:8e: bc:19:03:32:bd:32:6b:aa:91:d2:e5:16:d3:eb:99: 2c:f3:2f:0f:58:f6:c4:f2:54:0b:47:c7:40:50:c7: 2d:8d:6e:04:a5:bb:ba:fd:23:ee:74:82:4a:21:49: 29:b9:25:3b:06:d6:db:67:fc:a3:93:51:b1:6f:15: a5:4c:d7:0d:bd:4d:82:ea:3c:0c:70:04:71:6d:c3: 61:9d:fb:17:55:80:63:84:da:9f:4c:63:f9:e3:39: 1f:f8:ef:b7:8e:dc:53:23:90:ec:f0:ae:b4:4b:2e: 8a:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:90:61:CB:AC:B5:4D:FA:77:AD:F5:8F:A6:29:2B:1B:3F:7F:65:18 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145203.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a9f9::/32 Signature Algorithm: sha256WithRSAEncryption a8:78:c0:03:2d:08:08:cc:40:56:2f:93:99:e4:6b:65:f9:26: fa:a3:24:f0:46:27:c6:f6:bc:99:38:9d:4b:24:43:0c:cc:b5: 76:8c:32:d2:cd:ac:0b:50:7f:3a:9c:56:71:71:a7:bb:4c:45: cf:a6:03:5a:f5:04:72:55:99:96:24:6d:f8:a7:dd:9c:78:4c: 8c:d8:cf:3b:93:2f:f8:a5:97:08:27:34:69:33:7f:94:5f:a4: d2:a8:62:fb:7c:54:1a:74:fa:89:6e:52:d1:3a:ef:6f:a3:3f: ad:7c:6f:50:0a:a8:b5:11:32:7a:24:5c:71:88:d9:76:6f:02: 09:52:8e:e4:c3:ea:fc:62:52:4b:d9:2c:99:c2:50:01:5d:f1: 29:17:bd:b2:32:16:86:34:a3:e8:d7:4d:71:f0:e2:58:6a:13: e1:61:68:bc:51:c2:03:67:bb:60:c3:cd:c0:90:84:71:51:9a: f0:c6:56:cb:cb:40:f2:21:6e:ed:85:0a:3f:c5:7b:06:ea:d5: f0:87:35:90:27:d7:b6:96:e2:98:a9:76:a9:54:c2:cb:76:b0: 80:cb:8e:4b:c7:9c:ee:2b:5e:db:bf:ac:93:e2:44:00:7c:a9: 88:1c:ac:8c:c1:77:3e:4e:54:e7:dd:c4:ce:38:d1:f3:d9:41: 9e:1a:32:78 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUTZ/aphvrM3YRagpp1q85KLAYPTEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTU1M1oX DTI3MDMwMzA2MjA1M1owMzExMC8GA1UEAxMoQUQ5MDYxQ0JBQ0I1NERGQTc3QURG NThGQTYyOTJCMUIzRjdGNjUxODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMW75HuNQwhL/fdeSyAEps1rzkIiqj1pdyWj5NO1MSAKHSH5stIW9b4DNCRT 6w9pjnqwgJ5CRdP0bNI5rQfULdRpcc7S0CVZV0L+rElYGTEKTqPEU7OOPmIJWBTv D+P5oQVW/qRgCkOp7vak1EIMl5w5FIJN+S5i52fWK/nf3bAVE59eUtv/+PbwT1E1 eiB+P97D03uOvBkDMr0ya6qR0uUW0+uZLPMvD1j2xPJUC0fHQFDHLY1uBKW7uv0j 7nSCSiFJKbklOwbW22f8o5NRsW8VpUzXDb1Nguo8DHAEcW3DYZ37F1WAY4Tan0xj +eM5H/jvt47cUyOQ7PCutEsuinsCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBStkGHL rLVN+net9Y+mKSsbP39lGDAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTIwMy5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qfkwDQYJKoZIhvcNAQELBQADggEBAKh4wAMtCAjMQFYvk5nka2X5JvqjJPBGJ8b2 vJk4nUskQwzMtXaMMtLNrAtQfzqcVnFxp7tMRc+mA1r1BHJVmZYkbfin3Zx4TIzY zzuTL/illwgnNGkzf5RfpNKoYvt8VBp0+oluUtE672+jP618b1AKqLURMnokXHGI 2XZvAglSjuTD6vxiUkvZLJnCUAFd8SkXvbIyFoY0o+jXTXHw4lhqE+FhaLxRwgNn u2DDzcCQhHFRmvDGVsvLQPIhbu2FCj/Fewbq1fCHNZAn17aW4pipdqlUwst2sIDL jkvHnO4rXtu/rJPiRAB8qYgcrIzBdz5OVOfdxM440fPZQZ4aMng= -----END CERTIFICATE-----Generated at Sat Mar 28 11:41:24 2026 by rpki-client