$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145241.roa File: AS145241.roa (raw, json) Hash identifier: i9QNhFzL8sz0K6ND6aBgDKc7q0qAJObFvArwLHzbOz8= Subject key identifier: B0:4D:E2:01:D8:BB:D2:2D:25:CB:6F:D2:39:AA:E3:C6:01:57:1E:29 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 7413197D32B7BC3754A2723FD1B83F9F2BD1C0A2 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145241.roa Signing time: Wed 04 Mar 2026 06:21:58 +0000 ROA not before: Wed 04 Mar 2026 06:16:58 +0000 ROA not after: Wed 03 Mar 2027 06:21:58 +0000 asID: 145241 IP address blocks: 240a:aa1f::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:13:19:7d:32:b7:bc:37:54:a2:72:3f:d1:b8:3f:9f:2b:d1:c0:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:16:58 2026 GMT Not After : Mar 3 06:21:58 2027 GMT Subject: CN=B04DE201D8BBD22D25CB6FD239AAE3C601571E29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:fa:be:64:88:3e:a3:84:9c:96:ba:8b:94:b5: 66:fb:5e:40:bf:b8:7a:b9:fa:b6:c5:81:97:a5:20: d7:ae:69:32:f2:80:c6:f3:31:8c:e1:f9:40:c3:50: 32:fe:d6:5f:ba:4b:6e:c8:18:a9:df:62:af:b4:9c: c0:db:3b:af:cb:0a:2b:60:1e:ad:ae:14:33:df:6a: 44:c0:4a:4a:79:2c:b9:04:7d:87:e8:d3:8b:0c:f5: 09:42:8e:20:6f:d7:7b:f8:70:e0:45:8e:72:a7:4c: 69:12:1c:8f:f5:1e:00:59:88:b3:1a:2f:8b:78:91: c2:fb:44:3d:56:05:c2:b7:bb:bd:d3:4d:7a:cf:bf: f9:96:25:bf:e0:b3:f7:5c:d6:11:63:6f:4e:60:57: d8:1b:e2:9c:fb:bc:fa:4c:c2:c6:c3:97:fd:76:f6: ef:3f:76:63:ba:8b:10:78:82:9f:94:0d:b5:ae:e5: 3d:49:35:4e:f9:a5:45:f6:15:a6:84:48:44:e1:27: 26:b2:9c:f4:ec:fc:b3:6c:43:24:41:5c:60:26:2a: 2b:94:5b:0f:58:12:c7:3d:4e:11:d5:e9:1f:ef:2a: 96:b8:05:2e:44:ca:f5:67:c3:fe:ac:d5:56:2c:9a: 2a:fa:95:e0:19:cc:46:75:4a:6f:2c:4d:89:42:7a: 92:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:4D:E2:01:D8:BB:D2:2D:25:CB:6F:D2:39:AA:E3:C6:01:57:1E:29 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145241.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:aa1f::/32 Signature Algorithm: sha256WithRSAEncryption 73:1c:41:fe:6d:70:17:20:3d:e2:f0:e5:fc:8b:f9:ad:bf:9b: 56:86:3e:6c:a1:8c:d8:58:85:ed:e2:4e:94:84:7f:04:5a:ef: 3c:e2:6e:31:d2:82:02:c8:90:c7:17:b7:88:00:4a:ba:38:3b: 2f:cb:4f:d7:8b:7c:7f:8a:96:18:a1:51:2c:af:ab:9f:c1:b4: 0b:68:93:c9:8b:9c:c4:dd:7e:74:33:2b:d5:af:29:66:25:1d: fb:52:1f:df:33:01:b3:f3:9c:d4:cb:6a:36:e4:5e:1b:64:b2: 7e:34:26:cd:7b:04:a0:b0:fe:9f:ef:8c:69:96:d8:4e:a5:50: a8:67:7c:77:6a:c0:92:fa:4d:3f:dd:7b:ef:50:4e:72:05:ed: 80:6f:b7:e6:92:c6:b0:6e:f0:fa:d7:ec:c4:41:04:14:76:68: 04:df:79:c2:f6:f1:f6:e5:7a:db:89:d2:b9:ac:4c:6e:34:23: e9:65:85:c3:f5:02:51:45:86:e2:77:87:d7:ac:46:4c:64:f8: 0a:08:1b:8b:38:d1:fa:e0:2b:78:ed:29:54:b8:e5:5d:aa:01: 1e:2f:34:4f:1f:0d:e0:bd:d3:20:b4:26:ec:16:a6:bc:eb:0b: 10:3e:ef:80:5f:24:7d:2b:73:73:66:4e:ce:ab:fc:56:30:a6: b8:6f:e2:7f -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUdBMZfTK3vDdUonI/0bg/nyvRwKIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTY1OFoX DTI3MDMwMzA2MjE1OFowMzExMC8GA1UEAxMoQjA0REUyMDFEOEJCRDIyRDI1Q0I2 RkQyMzlBQUUzQzYwMTU3MUUyOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALf6vmSIPqOEnJa6i5S1ZvteQL+4ern6tsWBl6Ug165pMvKAxvMxjOH5QMNQ Mv7WX7pLbsgYqd9ir7ScwNs7r8sKK2Aera4UM99qRMBKSnksuQR9h+jTiwz1CUKO IG/Xe/hw4EWOcqdMaRIcj/UeAFmIsxovi3iRwvtEPVYFwre7vdNNes+/+ZYlv+Cz 91zWEWNvTmBX2BvinPu8+kzCxsOX/Xb27z92Y7qLEHiCn5QNta7lPUk1TvmlRfYV poRIROEnJrKc9Oz8s2xDJEFcYCYqK5RbD1gSxz1OEdXpH+8qlrgFLkTK9WfD/qzV ViyaKvqV4BnMRnVKbyxNiUJ6kiMCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSwTeIB 2LvSLSXLb9I5quPGAVceKTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTI0MS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qh8wDQYJKoZIhvcNAQELBQADggEBAHMcQf5tcBcgPeLw5fyL+a2/m1aGPmyhjNhY he3iTpSEfwRa7zzibjHSggLIkMcXt4gASro4Oy/LT9eLfH+KlhihUSyvq5/BtAto k8mLnMTdfnQzK9WvKWYlHftSH98zAbPznNTLajbkXhtksn40Js17BKCw/p/vjGmW 2E6lUKhnfHdqwJL6TT/de+9QTnIF7YBvt+aSxrBu8PrX7MRBBBR2aATfecL28fbl etuJ0rmsTG40I+llhcP1AlFFhuJ3h9esRkxk+AoIG4s40frgK3jtKVS45V2qAR4v NE8fDeC90yC0JuwWprzrCxA+74BfJH0rc3NmTs6r/FYwprhv4n8= -----END CERTIFICATE-----Generated at Sat Mar 28 11:42:19 2026 by rpki-client