$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145216.roa File: AS145216.roa (raw, json) Hash identifier: Pmq1RrUxp0Go6Y0HJhurKdvGJznsHsRSX7DpGoCqX+U= Subject key identifier: EF:62:12:A4:9B:9D:EF:2D:D2:E8:53:23:FC:AF:40:80:77:11:60:2A Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 667B52E32FA7793A4BDEFFDD8FBCA521D5CCEE4C Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145216.roa Signing time: Wed 04 Mar 2026 06:20:21 +0000 ROA not before: Wed 04 Mar 2026 06:15:21 +0000 ROA not after: Wed 03 Mar 2027 06:20:21 +0000 asID: 145216 IP address blocks: 240a:aa06::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:7b:52:e3:2f:a7:79:3a:4b:de:ff:dd:8f:bc:a5:21:d5:cc:ee:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:15:21 2026 GMT Not After : Mar 3 06:20:21 2027 GMT Subject: CN=EF6212A49B9DEF2DD2E85323FCAF40807711602A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:33:f3:9b:1a:99:bb:75:c2:5f:fc:a1:84:54: ad:93:14:d1:ed:56:68:f3:a5:61:c4:9b:92:43:9d: 5c:8e:10:bd:4c:ef:69:d4:2d:b9:ba:f0:2f:2d:52: eb:06:5e:a2:2b:e6:01:b5:3a:0d:cd:09:ce:bf:03: 6f:ed:87:58:14:8c:53:7e:85:c8:4c:2c:c0:ce:1f: 88:96:3c:fb:41:e1:18:b2:ea:36:d5:b6:cd:91:a0: 7a:f6:18:4e:24:38:de:9d:1a:a0:ed:73:c9:dc:82: cb:17:a9:4b:c2:c2:e4:a0:bf:4e:76:35:f5:0a:c8: 70:18:b4:76:57:fa:07:23:d7:6e:2c:70:11:2c:49: 30:b5:4e:12:75:ee:e7:e6:93:2c:02:88:f2:a5:fd: 0b:af:96:30:41:09:d5:81:7a:fe:7c:81:43:d2:01: 7a:3b:a9:b0:e8:8e:ad:c4:14:f2:a4:94:f4:83:a9: 00:97:7c:d2:2a:f5:9d:ef:bc:1f:4f:e2:d2:84:5b: 76:17:64:d6:39:f6:9b:8f:35:37:62:e3:10:39:89: d5:7a:b9:80:09:4a:8f:cb:0d:55:6a:5c:4e:21:4d: ff:8c:a5:7e:57:08:bd:b6:ad:ff:9a:1a:27:89:b4: 08:3a:5c:9b:c8:cb:19:42:d1:19:f5:42:d9:bf:aa: 13:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:62:12:A4:9B:9D:EF:2D:D2:E8:53:23:FC:AF:40:80:77:11:60:2A X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145216.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:aa06::/32 Signature Algorithm: sha256WithRSAEncryption 38:69:37:df:07:ce:19:78:21:4a:29:26:e5:77:80:64:36:63: 2f:17:44:22:1d:86:d3:99:f3:3c:30:8f:41:66:5c:2a:4f:d4: 21:f3:ff:5f:dd:c7:c9:fd:cf:a4:82:e8:53:3b:00:52:e2:db: 5d:2d:94:4c:a0:b0:bd:66:59:0e:bd:77:c3:40:2f:0a:94:52: cf:51:58:75:76:dc:97:a2:c6:b2:c1:c6:29:8d:2d:9f:ec:02: b6:7f:c2:fa:da:e1:f8:fa:8e:4a:45:eb:e4:df:c7:b3:f7:fe: 07:5a:2b:9c:6c:82:dd:7c:25:e2:90:24:74:74:16:09:c2:87: 3e:54:61:a8:ef:e7:89:3a:cb:67:d3:fe:00:3a:7e:4d:48:b0: 38:8c:01:57:7c:18:65:ff:28:04:32:29:1e:f4:c3:cb:64:5a: 5a:54:d8:c7:4d:a5:99:d3:a9:ef:7a:d3:6b:c4:b4:6d:58:89: 80:95:b3:64:cb:05:91:11:08:f5:91:ef:23:74:16:58:ec:7b: ed:57:57:77:9b:65:8a:35:93:4f:f5:b2:4f:79:c4:9a:05:a2: 54:bd:38:a0:f2:de:eb:0b:d5:72:d7:2d:9d:d5:87:bb:60:80: b7:f7:7c:c5:68:9a:ca:c8:af:82:16:bd:1a:2c:b9:16:27:91: b9:a5:cc:db -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUZntS4y+neTpL3v/dj7ylIdXM7kwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTUyMVoX DTI3MDMwMzA2MjAyMVowMzExMC8GA1UEAxMoRUY2MjEyQTQ5QjlERUYyREQyRTg1 MzIzRkNBRjQwODA3NzExNjAyQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALMz85sambt1wl/8oYRUrZMU0e1WaPOlYcSbkkOdXI4QvUzvadQtubrwLy1S 6wZeoivmAbU6Dc0Jzr8Db+2HWBSMU36FyEwswM4fiJY8+0HhGLLqNtW2zZGgevYY TiQ43p0aoO1zydyCyxepS8LC5KC/TnY19QrIcBi0dlf6ByPXbixwESxJMLVOEnXu 5+aTLAKI8qX9C6+WMEEJ1YF6/nyBQ9IBejupsOiOrcQU8qSU9IOpAJd80ir1ne+8 H0/i0oRbdhdk1jn2m481N2LjEDmJ1Xq5gAlKj8sNVWpcTiFN/4ylflcIvbat/5oa J4m0CDpcm8jLGULRGfVC2b+qE0sCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBTvYhKk m53vLdLoUyP8r0CAdxFgKjAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTIxNi5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qgYwDQYJKoZIhvcNAQELBQADggEBADhpN98Hzhl4IUopJuV3gGQ2Yy8XRCIdhtOZ 8zwwj0FmXCpP1CHz/1/dx8n9z6SC6FM7AFLi210tlEygsL1mWQ69d8NALwqUUs9R WHV23JeixrLBximNLZ/sArZ/wvra4fj6jkpF6+Tfx7P3/gdaK5xsgt18JeKQJHR0 FgnChz5UYajv54k6y2fT/gA6fk1IsDiMAVd8GGX/KAQyKR70w8tkWlpU2MdNpZnT qe9602vEtG1YiYCVs2TLBZERCPWR7yN0Fljse+1XV3ebZYo1k0/1sk95xJoFolS9 OKDy3usL1XLXLZ3Vh7tggLf3fMVomsrIr4IWvRosuRYnkbmlzNs= -----END CERTIFICATE-----Generated at Sat Mar 28 14:26:36 2026 by rpki-client