$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145227.roa File: AS145227.roa (raw, json) Hash identifier: XCie5YyEeZqCcVjR59C8l+5k3Qx+uT9reX7WconsFUc= Subject key identifier: 9E:18:D9:DA:A9:4A:2A:30:D2:62:69:5A:F6:2B:C6:CD:7B:8A:EC:9D Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 23BC960C196FF378AA924444079FB710D6C9E03F Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145227.roa Signing time: Wed 04 Mar 2026 06:20:02 +0000 ROA not before: Wed 04 Mar 2026 06:15:02 +0000 ROA not after: Wed 03 Mar 2027 06:20:02 +0000 asID: 145227 IP address blocks: 240a:aa11::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:bc:96:0c:19:6f:f3:78:aa:92:44:44:07:9f:b7:10:d6:c9:e0:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:15:02 2026 GMT Not After : Mar 3 06:20:02 2027 GMT Subject: CN=9E18D9DAA94A2A30D262695AF62BC6CD7B8AEC9D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:e5:a8:73:a8:01:9c:f4:b6:82:bb:0c:53:22: f6:1c:df:19:4a:41:ba:47:f0:db:fb:f7:7f:bc:d8: 97:e1:5f:bc:69:b5:92:49:96:8e:ca:a3:b5:a8:45: 4b:a5:a8:ce:13:db:6a:96:e9:3a:d1:97:9f:03:0d: 6f:f0:b3:a7:0a:5e:36:66:72:4d:8b:aa:df:79:61: cc:a7:98:c3:7e:a6:f0:fb:73:55:fe:91:5d:e9:cc: e5:d6:8c:19:16:af:d7:57:4f:4f:55:d0:a1:4b:1b: 7a:2a:af:f4:0a:9e:e5:55:1c:cc:e0:68:ad:a1:bb: ed:da:b1:1b:ec:83:41:bd:86:2c:99:5b:a6:07:9f: 0e:ed:c0:db:af:0c:5b:3e:72:c9:e7:6d:38:d1:c6: ef:22:1c:01:8e:63:b3:af:bb:a2:c1:02:b4:ef:ed: 28:7b:57:5f:82:9d:b8:a5:7b:08:3b:21:b8:1a:99: b6:07:4d:69:a0:47:b7:85:e7:eb:6e:96:e6:05:0c: 18:bc:85:7d:24:d4:ff:21:1d:3f:7a:71:17:79:83: f2:e4:7e:16:95:aa:00:bf:b6:33:a3:e5:97:30:b4: d4:24:85:8f:7c:89:c3:31:d6:2a:5c:7c:53:83:81: fa:82:9a:27:5e:c7:94:f6:07:6e:a9:91:4e:cc:fd: d2:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:18:D9:DA:A9:4A:2A:30:D2:62:69:5A:F6:2B:C6:CD:7B:8A:EC:9D X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145227.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:aa11::/32 Signature Algorithm: sha256WithRSAEncryption 4c:cb:28:2a:ed:dc:4c:a5:df:29:46:87:89:36:99:5c:30:e8: 01:6e:b9:74:cc:d6:6c:f5:ed:b3:92:c5:01:58:f5:7f:41:61: cf:f9:3d:6a:62:8c:d4:28:0e:88:67:81:f8:21:9d:c0:f8:10: 2c:d6:c6:7e:28:0c:b4:50:7c:7b:16:f0:3a:4b:cd:4d:59:5b: b1:58:88:f6:4b:1b:fe:14:18:da:17:e3:80:48:4d:1a:f8:d7: 0e:51:5e:0d:44:6f:9f:d6:ba:1b:fe:9a:63:8e:58:f0:80:9b: 90:d0:4c:a3:47:96:b9:44:d9:09:8a:b2:f3:3e:5d:9e:26:cd: d7:9a:3f:e2:cd:05:49:bd:14:41:66:ac:b8:02:e1:c3:99:60: 18:f6:5f:21:6a:63:df:3d:45:f9:14:e9:03:10:00:19:a0:54: 5e:66:b7:29:cf:ca:69:c9:69:bb:61:c7:8e:c1:0d:b0:d9:01: b4:9d:27:27:d3:da:1c:99:21:cc:60:1a:6e:da:55:f3:8e:5d: 40:e0:fc:5c:47:af:10:ac:43:b8:91:51:f0:be:d3:bf:08:75: 61:de:ae:a5:7f:27:b2:f4:90:95:bc:ad:08:7f:13:72:99:f1: e1:b1:72:8b:d4:b4:7c:5e:4e:f3:83:3f:32:38:06:a6:df:a2: 6c:82:22:d9 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUI7yWDBlv83iqkkREB5+3ENbJ4D8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTUwMloX DTI3MDMwMzA2MjAwMlowMzExMC8GA1UEAxMoOUUxOEQ5REFBOTRBMkEzMEQyNjI2 OTVBRjYyQkM2Q0Q3QjhBRUM5RDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANXlqHOoAZz0toK7DFMi9hzfGUpBukfw2/v3f7zYl+FfvGm1kkmWjsqjtahF S6WozhPbapbpOtGXnwMNb/CzpwpeNmZyTYuq33lhzKeYw36m8PtzVf6RXenM5daM GRav11dPT1XQoUsbeiqv9Aqe5VUczOBoraG77dqxG+yDQb2GLJlbpgefDu3A268M Wz5yyedtONHG7yIcAY5js6+7osECtO/tKHtXX4KduKV7CDshuBqZtgdNaaBHt4Xn 626W5gUMGLyFfSTU/yEdP3pxF3mD8uR+FpWqAL+2M6PllzC01CSFj3yJwzHWKlx8 U4OB+oKaJ17HlPYHbqmRTsz90ssCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSeGNna qUoqMNJiaVr2K8bNe4rsnTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTIyNy5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qhEwDQYJKoZIhvcNAQELBQADggEBAEzLKCrt3Eyl3ylGh4k2mVww6AFuuXTM1mz1 7bOSxQFY9X9BYc/5PWpijNQoDohngfghncD4ECzWxn4oDLRQfHsW8DpLzU1ZW7FY iPZLG/4UGNoX44BITRr41w5RXg1Eb5/Wuhv+mmOOWPCAm5DQTKNHlrlE2QmKsvM+ XZ4mzdeaP+LNBUm9FEFmrLgC4cOZYBj2XyFqY989RfkU6QMQABmgVF5mtynPymnJ abthx47BDbDZAbSdJyfT2hyZIcxgGm7aVfOOXUDg/FxHrxCsQ7iRUfC+078IdWHe rqV/J7L0kJW8rQh/E3KZ8eGxcovUtHxeTvODPzI4BqbfomyCItk= -----END CERTIFICATE-----Generated at Sat Mar 28 11:41:26 2026 by rpki-client