$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145210.roa File: AS145210.roa (raw, json) Hash identifier: QTOJkFpYWWAPN/GqQPHfZj/mzMDJanetS0qvMc8bfBQ= Subject key identifier: B2:27:AF:2F:B6:F6:60:87:E1:F3:51:03:F7:84:5E:D6:86:11:49:54 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 5D6CCB4562FCDDA1BFA15522D7D7B1F1D9476ECF Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145210.roa Signing time: Wed 04 Mar 2026 06:20:54 +0000 ROA not before: Wed 04 Mar 2026 06:15:54 +0000 ROA not after: Wed 03 Mar 2027 06:20:54 +0000 asID: 145210 IP address blocks: 240a:aa00::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:6c:cb:45:62:fc:dd:a1:bf:a1:55:22:d7:d7:b1:f1:d9:47:6e:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:15:54 2026 GMT Not After : Mar 3 06:20:54 2027 GMT Subject: CN=B227AF2FB6F66087E1F35103F7845ED686114954 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:98:6a:01:3e:8d:ea:68:8c:5f:f2:d2:e7:0b: d1:97:0d:6c:ed:c8:22:f8:da:bd:cc:42:c1:de:d1: f3:3b:1b:5a:eb:3e:84:d9:4f:23:36:16:46:dc:77: bc:b0:ea:36:d5:c0:21:88:0b:cc:0f:c1:6f:97:f8: 3e:1f:c1:b0:0e:ec:2b:ad:16:81:70:3d:39:81:59: 4e:92:86:90:dd:2b:25:72:4f:1f:91:89:1e:d7:7b: e7:0e:c6:e9:1b:b3:b6:3e:40:7e:3d:06:55:a8:4b: 0c:c4:7c:0c:53:a7:5e:15:b3:0a:af:a4:11:2a:18: 04:62:53:48:34:d9:f5:ad:e2:8f:05:d0:a7:2d:e1: 26:ba:64:24:e7:cb:d5:c2:28:6c:c0:de:c1:57:97: a9:48:ae:0e:27:a8:87:43:e3:9e:60:0c:d8:a4:d9: 30:50:1d:59:46:c3:f2:8e:85:e6:45:6b:e1:1c:2c: e3:0f:5d:40:e1:06:51:47:40:4f:d2:99:1a:9d:0b: 93:1e:6b:5f:79:8b:96:17:91:c1:ed:ba:aa:55:8d: ac:e1:e2:c6:4a:d3:5a:7f:f9:d2:53:94:4b:17:1d: 7b:af:d3:dd:10:8b:a4:bf:27:c0:48:c8:cc:f2:80: 2f:88:08:71:bd:be:5e:ef:46:9b:d0:d9:d7:e1:65: f7:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:27:AF:2F:B6:F6:60:87:E1:F3:51:03:F7:84:5E:D6:86:11:49:54 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145210.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:aa00::/32 Signature Algorithm: sha256WithRSAEncryption 19:2a:d1:43:d8:e6:db:08:8e:5a:68:29:b6:7a:d5:64:86:cd: 57:b2:f3:bc:9f:70:d3:dc:67:25:73:e5:16:fd:01:b6:da:a0: 02:bf:4d:cf:36:01:d7:ef:ff:41:bb:50:67:54:b7:d0:a3:a1: b7:14:19:dc:c7:6f:4f:31:cf:d1:f0:c7:88:15:05:8c:00:d1: 56:56:80:c2:4a:5c:24:dc:d8:0d:73:28:20:5e:79:64:59:57: 1c:fd:aa:d8:8c:bc:b8:b7:4a:de:2b:06:64:e3:1a:15:0d:c7: 4f:8f:6b:ac:74:ce:85:c9:42:ad:7e:04:bb:f0:63:4b:df:0d: 08:07:f6:77:74:31:68:07:76:9a:01:9b:5c:21:0e:e1:be:b0: e7:59:c0:e1:9d:16:98:b0:3a:d6:18:df:b0:ea:a9:da:0d:f7: 63:ec:86:ac:ca:b6:ff:1a:3d:a6:35:30:01:3d:fc:83:7a:90: df:df:bf:2a:5c:8f:d0:26:ba:90:40:f9:dc:ad:76:cb:ee:8d: 44:78:b1:54:b7:10:66:43:84:91:18:a3:46:ed:52:18:f4:d3: 7b:d9:85:0b:bc:3b:f5:6c:55:98:06:fb:ef:d2:f9:2d:74:47: 39:6e:b0:c5:48:93:27:c3:99:4c:ae:56:50:73:af:8a:08:c3: d8:9d:c7:fd -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUXWzLRWL83aG/oVUi19ex8dlHbs8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTU1NFoX DTI3MDMwMzA2MjA1NFowMzExMC8GA1UEAxMoQjIyN0FGMkZCNkY2NjA4N0UxRjM1 MTAzRjc4NDVFRDY4NjExNDk1NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJiYagE+jepojF/y0ucL0ZcNbO3IIvjavcxCwd7R8zsbWus+hNlPIzYWRtx3 vLDqNtXAIYgLzA/Bb5f4Ph/BsA7sK60WgXA9OYFZTpKGkN0rJXJPH5GJHtd75w7G 6Ruztj5Afj0GVahLDMR8DFOnXhWzCq+kESoYBGJTSDTZ9a3ijwXQpy3hJrpkJOfL 1cIobMDewVeXqUiuDieoh0PjnmAM2KTZMFAdWUbD8o6F5kVr4Rws4w9dQOEGUUdA T9KZGp0Lkx5rX3mLlheRwe26qlWNrOHixkrTWn/50lOUSxcde6/T3RCLpL8nwEjI zPKAL4gIcb2+Xu9Gm9DZ1+Fl91ECAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSyJ68v tvZgh+HzUQP3hF7WhhFJVDAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTIxMC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qgAwDQYJKoZIhvcNAQELBQADggEBABkq0UPY5tsIjlpoKbZ61WSGzVey87yfcNPc ZyVz5Rb9AbbaoAK/Tc82Adfv/0G7UGdUt9CjobcUGdzHb08xz9Hwx4gVBYwA0VZW gMJKXCTc2A1zKCBeeWRZVxz9qtiMvLi3St4rBmTjGhUNx0+Pa6x0zoXJQq1+BLvw Y0vfDQgH9nd0MWgHdpoBm1whDuG+sOdZwOGdFpiwOtYY37DqqdoN92PshqzKtv8a PaY1MAE9/IN6kN/fvypcj9AmupBA+dytdsvujUR4sVS3EGZDhJEYo0btUhj003vZ hQu8O/VsVZgG++/S+S10RzlusMVIkyfDmUyuVlBzr4oIw9idx/0= -----END CERTIFICATE-----Generated at Sat Mar 28 11:42:57 2026 by rpki-client