$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145208.roa File: AS145208.roa (raw, json) Hash identifier: nOzIOSWh0kmfomJU73r+QyXpJk8/6/Cb9SzNyuSBwek= Subject key identifier: 1C:2B:15:18:91:2D:8A:79:71:00:35:56:D0:F8:AC:57:3E:D9:0C:F4 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 4C0FB02C37361F3D123118A262B536949E8776F7 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145208.roa Signing time: Wed 04 Mar 2026 06:22:02 +0000 ROA not before: Wed 04 Mar 2026 06:17:02 +0000 ROA not after: Wed 03 Mar 2027 06:22:02 +0000 asID: 145208 IP address blocks: 240a:a9fe::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:0f:b0:2c:37:36:1f:3d:12:31:18:a2:62:b5:36:94:9e:87:76:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:17:02 2026 GMT Not After : Mar 3 06:22:02 2027 GMT Subject: CN=1C2B1518912D8A7971003556D0F8AC573ED90CF4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:8c:81:a1:3e:90:90:a6:8d:00:c8:64:58:eb: 41:2d:0e:d4:97:7c:31:e0:4d:4c:8a:27:f6:a4:32: 4e:5d:e7:b9:61:45:bb:cd:d8:7f:1b:fa:3b:3c:db: 5e:90:f8:07:21:32:3a:b7:9b:a1:0f:87:db:97:55: 08:7d:34:7a:6f:3b:42:5d:e0:b1:41:4f:ce:42:9e: df:e6:85:58:71:4f:2e:2d:62:0a:b5:e4:3d:09:05: 6f:a1:8a:ba:08:78:76:6c:f7:1a:ac:13:12:d9:82: e5:00:d1:ec:a2:6b:5c:8b:34:88:52:28:ce:97:f7: d1:f3:5f:8a:7b:73:2b:2e:57:50:e9:a4:1e:38:84: 02:b4:f0:ce:9b:ed:ec:cf:c6:22:3a:32:56:d4:46: 48:0d:98:bc:ab:ba:ee:a7:ee:d7:ae:1f:32:13:d1: 8a:ac:08:7a:57:9e:04:3c:ad:60:de:71:43:bf:da: 54:2b:26:83:94:aa:ef:9d:7a:e8:7f:15:d9:94:67: 8a:8f:b7:44:f8:be:5e:93:19:50:65:f7:c5:50:3c: 0f:fa:50:b4:57:ba:58:be:69:8e:d5:32:03:3a:66: c7:dd:cc:4e:e9:1d:1b:b8:ff:33:50:b0:10:79:dc: 37:8a:74:f5:8a:cb:d8:51:ef:29:fe:b5:2d:90:ce: f7:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:2B:15:18:91:2D:8A:79:71:00:35:56:D0:F8:AC:57:3E:D9:0C:F4 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145208.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a9fe::/32 Signature Algorithm: sha256WithRSAEncryption 28:b0:90:7d:9c:3f:75:16:d2:a5:30:e3:e2:b7:2f:f7:a5:5e: 17:d4:b9:e2:08:a2:8f:ef:70:db:ef:1d:cc:fe:57:4b:8f:5b: bb:95:c3:6d:d8:1e:3c:31:4b:d4:5c:93:87:08:f9:6f:fb:76: 65:fa:6b:7d:78:ed:b4:66:f7:b0:31:4e:66:6d:c5:c2:02:5c: fb:0a:23:e1:29:99:1f:81:ed:68:36:c0:0c:b1:56:89:8d:3e: af:47:97:1e:74:a6:82:39:df:6e:f3:bb:e4:67:6a:77:28:07: 15:95:b5:c4:10:b6:91:9d:e3:c7:2e:f3:3d:b7:c7:f5:a5:d5: d6:56:a4:bb:aa:4e:c3:f3:c4:3c:6e:73:53:61:44:55:32:e2: 2f:c3:3c:ed:dc:c6:b6:f9:74:af:c1:da:b5:64:b6:b3:17:9f: 80:c3:50:c3:62:fa:2a:c6:9f:f6:b0:64:a9:55:b9:5a:40:c5: 07:43:af:aa:fa:d6:c2:ff:34:63:d4:63:7b:fc:38:ef:7d:63: 40:72:bd:4b:43:ee:81:1c:f4:af:49:8a:01:a3:4d:1f:d0:e7: ae:43:cb:3b:cc:3b:eb:5b:76:05:e1:f8:2b:61:84:61:32:95: 26:b2:f1:df:05:5a:7a:30:43:3e:15:78:31:e0:c2:8f:5f:73: 59:4c:e4:e4 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUTA+wLDc2Hz0SMRiiYrU2lJ6HdvcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTcwMloX DTI3MDMwMzA2MjIwMlowMzExMC8GA1UEAxMoMUMyQjE1MTg5MTJEOEE3OTcxMDAz NTU2RDBGOEFDNTczRUQ5MENGNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAPKMgaE+kJCmjQDIZFjrQS0O1Jd8MeBNTIon9qQyTl3nuWFFu83Yfxv6Ozzb XpD4ByEyOreboQ+H25dVCH00em87Ql3gsUFPzkKe3+aFWHFPLi1iCrXkPQkFb6GK ugh4dmz3GqwTEtmC5QDR7KJrXIs0iFIozpf30fNfintzKy5XUOmkHjiEArTwzpvt 7M/GIjoyVtRGSA2YvKu67qfu164fMhPRiqwIeleeBDytYN5xQ7/aVCsmg5Sq7516 6H8V2ZRnio+3RPi+XpMZUGX3xVA8D/pQtFe6WL5pjtUyAzpmx93MTukdG7j/M1Cw EHncN4p09YrL2FHvKf61LZDO9yUCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQcKxUY kS2KeXEANVbQ+KxXPtkM9DAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTIwOC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qf4wDQYJKoZIhvcNAQELBQADggEBACiwkH2cP3UW0qUw4+K3L/elXhfUueIIoo/v cNvvHcz+V0uPW7uVw23YHjwxS9Rck4cI+W/7dmX6a3147bRm97AxTmZtxcICXPsK I+EpmR+B7Wg2wAyxVomNPq9Hlx50poI5327zu+RnancoBxWVtcQQtpGd48cu8z23 x/Wl1dZWpLuqTsPzxDxuc1NhRFUy4i/DPO3cxrb5dK/B2rVktrMXn4DDUMNi+irG n/awZKlVuVpAxQdDr6r61sL/NGPUY3v8OO99Y0ByvUtD7oEc9K9JigGjTR/Q565D yzvMO+tbdgXh+CthhGEylSay8d8FWnowQz4VeDHgwo9fc1lM5OQ= -----END CERTIFICATE-----Generated at Sat Mar 28 11:41:21 2026 by rpki-client