$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145207.roa File: AS145207.roa (raw, json) Hash identifier: RFPr6shncXWe/wDnp5gREM1v3yH/DCZRvqvswDA8lVs= Subject key identifier: 4A:03:9C:39:B5:6F:30:8D:59:41:6A:84:8B:B2:F9:98:AE:41:23:CA Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 04B847BB3765C8ED98847A5660E7C8368EF5835B Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145207.roa Signing time: Wed 04 Mar 2026 06:20:43 +0000 ROA not before: Wed 04 Mar 2026 06:15:43 +0000 ROA not after: Wed 03 Mar 2027 06:20:43 +0000 asID: 145207 IP address blocks: 240a:a9fd::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:b8:47:bb:37:65:c8:ed:98:84:7a:56:60:e7:c8:36:8e:f5:83:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:15:43 2026 GMT Not After : Mar 3 06:20:43 2027 GMT Subject: CN=4A039C39B56F308D59416A848BB2F998AE4123CA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:8c:79:7e:9e:b7:47:36:39:b2:f9:38:f5:0f: 54:25:0b:4c:e4:46:b7:f6:41:c2:fb:f8:6a:80:81: 9a:e1:2f:43:95:dc:89:65:3a:ae:b0:df:18:74:be: 52:d2:07:d8:f3:f3:27:79:38:80:75:8f:35:07:01: 1b:9c:f2:2e:b8:c5:c0:3e:3c:93:27:eb:35:ad:83: 97:2c:fa:ee:a2:f2:32:ca:96:c1:fe:98:9b:9e:6a: 25:3b:fd:63:95:89:8d:8f:1d:11:31:b9:87:c2:a6: d0:89:f4:77:1b:fb:65:46:02:84:d8:b0:32:d3:ee: fa:5d:07:04:60:e4:00:75:90:8e:26:86:98:93:53: 85:1b:cb:d7:63:68:95:f5:d4:50:2e:08:64:b6:03: d1:e7:8b:4b:8d:64:3a:48:b1:d5:8b:2d:00:07:80: 92:b3:d9:a1:8b:c7:89:0a:cb:a3:51:8d:23:38:ef: f0:b0:ef:0b:1f:6f:90:cf:54:82:2b:28:f9:e0:2b: 0a:d5:0d:e6:7f:27:ff:84:30:c3:69:32:51:68:29: bf:26:68:56:ff:2e:6a:83:79:a8:80:d3:01:9e:e9: 64:3a:41:e3:06:23:36:44:ca:0b:25:18:68:c4:63: e5:02:37:12:17:25:78:6b:e2:47:41:5a:15:52:49: 02:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:03:9C:39:B5:6F:30:8D:59:41:6A:84:8B:B2:F9:98:AE:41:23:CA X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145207.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a9fd::/32 Signature Algorithm: sha256WithRSAEncryption 7a:e7:4d:b7:f5:42:38:61:e7:60:a9:28:7f:3e:4b:ab:15:7c: f5:11:46:ae:0d:23:fe:1e:0d:7c:b8:b7:96:30:b1:67:b4:06: 55:79:b5:41:9c:ec:13:a2:a2:71:4c:39:75:5b:5c:02:75:b2: de:c3:8f:bd:71:4c:7a:a4:04:6f:2a:fd:26:94:5e:77:c7:ea: 55:e2:f5:19:e0:6d:5e:08:b8:d6:9a:86:d9:fe:61:77:6b:b5: 2b:20:c0:a0:cc:9f:7a:49:46:81:72:fe:54:90:1e:86:c8:a7: 50:f2:23:46:9b:88:28:31:ca:12:e3:af:1b:e1:19:64:7a:21: 5e:3a:d0:ba:d4:54:be:ef:b2:b6:b1:ca:13:ff:1d:b8:87:2b: 6e:34:c1:17:6a:30:13:ca:be:76:a3:89:ba:00:fa:9a:19:0f: 62:ad:40:1c:53:63:88:dd:57:50:ab:a7:9d:d4:53:8a:05:4b: 80:15:93:72:53:f7:d2:38:eb:c5:23:3a:48:c9:19:93:7d:eb: 53:05:92:55:0b:6d:7d:d5:6b:24:9f:51:39:7d:e8:8c:e1:88: 92:63:dc:36:a4:d1:30:20:c9:20:aa:1e:96:b6:9c:0f:7a:99: 90:1a:fd:50:51:54:9e:23:2b:30:56:14:5d:76:c1:76:b6:16: 24:f6:b1:7b -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUBLhHuzdlyO2YhHpWYOfINo71g1swDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTU0M1oX DTI3MDMwMzA2MjA0M1owMzExMC8GA1UEAxMoNEEwMzlDMzlCNTZGMzA4RDU5NDE2 QTg0OEJCMkY5OThBRTQxMjNDQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMeMeX6et0c2ObL5OPUPVCULTORGt/ZBwvv4aoCBmuEvQ5XciWU6rrDfGHS+ UtIH2PPzJ3k4gHWPNQcBG5zyLrjFwD48kyfrNa2Dlyz67qLyMsqWwf6Ym55qJTv9 Y5WJjY8dETG5h8Km0In0dxv7ZUYChNiwMtPu+l0HBGDkAHWQjiaGmJNThRvL12No lfXUUC4IZLYD0eeLS41kOkix1YstAAeAkrPZoYvHiQrLo1GNIzjv8LDvCx9vkM9U giso+eArCtUN5n8n/4Qww2kyUWgpvyZoVv8uaoN5qIDTAZ7pZDpB4wYjNkTKCyUY aMRj5QI3EhcleGviR0FaFVJJAv0CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRKA5w5 tW8wjVlBaoSLsvmYrkEjyjAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTIwNy5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qf0wDQYJKoZIhvcNAQELBQADggEBAHrnTbf1Qjhh52CpKH8+S6sVfPURRq4NI/4e DXy4t5YwsWe0BlV5tUGc7BOionFMOXVbXAJ1st7Dj71xTHqkBG8q/SaUXnfH6lXi 9RngbV4IuNaahtn+YXdrtSsgwKDMn3pJRoFy/lSQHobIp1DyI0abiCgxyhLjrxvh GWR6IV460LrUVL7vsraxyhP/HbiHK240wRdqMBPKvnajiboA+poZD2KtQBxTY4jd V1Crp53UU4oFS4AVk3JT99I468UjOkjJGZN961MFklULbX3VaySfUTl96IzhiJJj 3Dak0TAgySCqHpa2nA96mZAa/VBRVJ4jKzBWFF12wXa2FiT2sXs= -----END CERTIFICATE-----Generated at Sat Mar 28 11:41:29 2026 by rpki-client