$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145272.roa File: AS145272.roa (raw, json) Hash identifier: 4CvTB0pdDHZxvBCdKxaKGJc5m1XbhTv6c8dfxLrx1kQ= Subject key identifier: 2C:2A:05:FC:18:6A:7C:EF:A5:1C:F8:65:44:57:55:39:E4:E9:4A:9B Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 47B586D002258538AF5997C8BCDCD4ACB57F21DA Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145272.roa Signing time: Wed 04 Mar 2026 06:22:07 +0000 ROA not before: Wed 04 Mar 2026 06:17:07 +0000 ROA not after: Wed 03 Mar 2027 06:22:07 +0000 asID: 145272 IP address blocks: 240a:aa3e::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:b5:86:d0:02:25:85:38:af:59:97:c8:bc:dc:d4:ac:b5:7f:21:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:17:07 2026 GMT Not After : Mar 3 06:22:07 2027 GMT Subject: CN=2C2A05FC186A7CEFA51CF86544575539E4E94A9B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:ed:4d:96:18:0d:34:74:5d:73:b1:38:09:c6: e3:1c:32:c0:b5:ed:cd:07:8e:a1:fb:75:cc:91:f7: c0:91:89:d8:02:a5:78:68:df:c5:32:1b:ee:76:8a: d9:31:40:1c:a7:2c:5c:8c:87:92:49:1b:36:e4:9f: d5:13:07:db:a7:66:69:31:d6:7c:fc:b9:f8:2c:c5: 73:21:79:ea:06:62:59:c2:08:f9:c7:48:e3:3d:b3: b1:fc:84:0b:08:28:d0:e2:5c:fd:86:1d:fe:40:31: 94:3b:f7:c2:81:88:42:80:5f:5d:6b:a0:a2:dc:d2: 39:f0:b4:a5:9f:3c:5a:37:9a:40:82:86:04:08:f1: ed:f6:b7:07:90:31:8a:e6:74:07:29:01:3f:0f:8d: 91:d8:67:7c:82:f5:8d:7e:02:33:a9:67:72:73:ca: 90:c0:7c:85:ea:f2:c4:f4:d9:b4:de:4c:5c:27:38: 06:4a:af:d3:90:f0:ff:fe:aa:64:a9:b6:8c:0f:4e: cc:7f:87:7f:6e:16:33:57:16:b4:d2:50:9f:ce:aa: 06:54:e2:b6:2c:33:63:fe:67:87:6e:b5:92:f8:d6: 5e:d9:a1:5c:f0:e1:68:0b:c0:1b:dc:05:0e:8a:7c: 97:b9:61:87:a1:d9:da:0e:f0:97:a0:3a:dd:57:7b: cd:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:2A:05:FC:18:6A:7C:EF:A5:1C:F8:65:44:57:55:39:E4:E9:4A:9B X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145272.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:aa3e::/32 Signature Algorithm: sha256WithRSAEncryption 23:5b:36:1c:e4:f1:32:a7:cd:83:77:5f:1b:a6:08:e9:3b:a0: 54:e9:b5:9e:32:9b:8a:51:0d:85:30:f1:d7:96:73:84:c2:8c: 2a:69:57:e5:1b:43:e7:14:26:ea:7b:c4:53:70:1b:a6:70:b8: 1a:f8:fe:1a:a0:13:01:cc:c9:a3:be:20:0a:ef:61:d3:63:a4: 81:01:e6:5f:08:a1:db:fe:2e:5b:74:0f:e3:34:a7:a5:45:24: a8:2a:31:b3:16:ee:c4:7b:bf:ec:48:55:4c:44:c3:80:b6:d8: 0c:fe:85:8e:9e:08:fd:87:0f:5a:13:61:d8:3d:5b:56:a6:3a: de:62:bf:47:0c:d2:c2:98:19:5d:ab:cf:20:cc:a2:15:cf:eb: 53:39:04:f0:bf:7e:30:b4:ca:c1:5a:dd:b7:86:c0:e0:88:ca: 7b:2f:e7:cd:78:4e:8b:32:b2:d9:46:08:23:d0:2e:b4:ac:65: 8b:18:25:3e:27:a2:fc:8a:86:ad:ba:99:75:ca:46:64:fa:12: ec:c5:58:8b:cf:67:7d:2b:d2:c7:82:f9:dd:34:ad:83:07:15: dd:a1:b1:38:5c:5c:ef:e2:4d:ca:a9:3f:e8:95:52:c8:26:c4: 8e:4e:1f:49:69:57:bf:fe:9d:ad:0b:f3:73:eb:d0:9a:23:96: ea:18:ef:19 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUR7WG0AIlhTivWZfIvNzUrLV/IdowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTcwN1oX DTI3MDMwMzA2MjIwN1owMzExMC8GA1UEAxMoMkMyQTA1RkMxODZBN0NFRkE1MUNG ODY1NDQ1NzU1MzlFNEU5NEE5QjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMftTZYYDTR0XXOxOAnG4xwywLXtzQeOoft1zJH3wJGJ2AKleGjfxTIb7naK 2TFAHKcsXIyHkkkbNuSf1RMH26dmaTHWfPy5+CzFcyF56gZiWcII+cdI4z2zsfyE Cwgo0OJc/YYd/kAxlDv3woGIQoBfXWugotzSOfC0pZ88WjeaQIKGBAjx7fa3B5Ax iuZ0BykBPw+NkdhnfIL1jX4CM6lncnPKkMB8heryxPTZtN5MXCc4Bkqv05Dw//6q ZKm2jA9OzH+Hf24WM1cWtNJQn86qBlTitiwzY/5nh261kvjWXtmhXPDhaAvAG9wF Dop8l7lhh6HZ2g7wl6A63Vd7zXcCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQsKgX8 GGp876Uc+GVEV1U55OlKmzAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTI3Mi5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qj4wDQYJKoZIhvcNAQELBQADggEBACNbNhzk8TKnzYN3XxumCOk7oFTptZ4ym4pR DYUw8deWc4TCjCppV+UbQ+cUJup7xFNwG6ZwuBr4/hqgEwHMyaO+IArvYdNjpIEB 5l8Iodv+Llt0D+M0p6VFJKgqMbMW7sR7v+xIVUxEw4C22Az+hY6eCP2HD1oTYdg9 W1amOt5iv0cM0sKYGV2rzyDMohXP61M5BPC/fjC0ysFa3beGwOCIynsv5814Tosy stlGCCPQLrSsZYsYJT4novyKhq26mXXKRmT6EuzFWIvPZ30r0seC+d00rYMHFd2h sThcXO/iTcqpP+iVUsgmxI5OH0lpV7/+na0L83Pr0JojluoY7xk= -----END CERTIFICATE-----Generated at Sat Mar 28 11:41:14 2026 by rpki-client