$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145317.roa File: AS145317.roa (raw, json) Hash identifier: LhxQXMhS2aVMNw47KJ3CMP5qNDcVDW5WXEo2UDJbKtc= Subject key identifier: D0:81:ED:CE:03:CF:78:1B:E3:1A:42:1D:33:0B:DC:7F:AB:66:38:A5 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 6B88168D4E124A712AE324581C7C062539887FFB Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145317.roa Signing time: Wed 04 Mar 2026 06:22:16 +0000 ROA not before: Wed 04 Mar 2026 06:17:16 +0000 ROA not after: Wed 03 Mar 2027 06:22:16 +0000 asID: 145317 IP address blocks: 240a:aa6b::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:88:16:8d:4e:12:4a:71:2a:e3:24:58:1c:7c:06:25:39:88:7f:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:17:16 2026 GMT Not After : Mar 3 06:22:16 2027 GMT Subject: CN=D081EDCE03CF781BE31A421D330BDC7FAB6638A5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:fa:87:f9:80:49:59:96:1c:96:8d:6b:e0:27: ab:de:e3:ef:b8:6b:7c:53:d6:66:4b:54:3c:11:02: 7a:ff:97:ed:0a:80:c7:0c:d2:4b:a6:37:1c:39:dc: 30:77:c3:61:22:e2:e0:a0:2a:a3:da:ea:7b:cc:bd: 96:22:77:f4:a7:ad:3f:40:70:ce:01:38:2c:79:ad: d1:76:5e:be:e5:2f:52:7d:29:c1:bb:98:87:a0:2f: 1e:2f:9a:4f:13:44:74:d5:22:6f:b6:0c:e4:10:ed: 82:d7:b6:81:68:26:18:42:93:c6:2c:c7:fb:09:c2: d7:71:e5:08:37:33:d6:aa:fa:83:60:50:e5:f6:3d: f9:4b:4a:44:79:84:57:2d:61:af:af:93:55:9a:96: 27:41:2c:40:bc:3e:3b:eb:40:59:41:0b:96:3a:2b: 2b:0c:95:d8:82:7e:10:67:6c:ad:a9:72:b0:f0:dc: 51:3b:9b:45:f4:09:59:f0:4e:57:aa:f4:19:8d:a4: 0c:20:ee:5a:00:ad:d5:e5:63:5e:dd:69:5a:6a:4f: 45:08:da:f8:24:e6:ff:a2:56:67:99:e1:87:85:d5: 2d:4f:1c:c7:e6:9a:3d:d0:0c:ab:b6:20:8e:7f:7f: 90:03:8f:87:16:a6:0d:02:59:c8:e8:34:44:65:17: 42:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:81:ED:CE:03:CF:78:1B:E3:1A:42:1D:33:0B:DC:7F:AB:66:38:A5 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145317.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:aa6b::/32 Signature Algorithm: sha256WithRSAEncryption bf:50:bb:a6:d2:0c:16:88:c6:60:04:bc:43:62:11:86:7a:a5: 37:a9:c8:33:06:ac:f2:bf:4d:8e:ee:d2:c6:56:74:50:e2:3f: e1:d5:2c:19:1b:68:c5:92:ce:34:b7:61:a6:6b:a7:a4:1b:bf: e3:bb:78:63:59:e5:70:4d:b4:7d:90:2a:39:ac:e8:da:78:a9: f3:e5:ca:43:17:7c:20:48:64:bc:8b:d3:b7:8e:46:da:c2:69: 4e:fe:19:f2:01:c1:5a:9f:1d:e2:6a:ae:d4:54:0f:e9:fe:fa: c5:2b:b6:d2:24:68:a3:84:b8:6f:19:54:d4:e6:24:70:fc:a3: 32:f9:00:a3:6d:d9:f2:ba:05:da:d0:01:31:4c:cf:23:29:77: 20:62:27:c5:cd:02:b9:b3:2d:1a:1a:cf:2a:28:28:4d:d7:a2: c1:88:85:ca:3a:9d:1c:fe:83:73:ea:47:bc:d8:81:63:8b:dc: 4d:89:83:37:06:a7:0c:19:d4:07:2e:1f:1a:94:f1:57:c8:2c: 16:15:9a:ea:14:68:4c:67:a4:e9:af:6f:30:f1:70:fe:22:11: c1:45:6e:cc:58:b4:0d:5d:38:7d:6d:f0:a1:b4:57:6d:62:7a: 65:f5:b0:7a:78:72:af:64:cb:e0:42:6d:0f:93:b3:e8:ce:b0: 7d:e0:55:1d -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUa4gWjU4SSnEq4yRYHHwGJTmIf/swDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTcxNloX DTI3MDMwMzA2MjIxNlowMzExMC8GA1UEAxMoRDA4MUVEQ0UwM0NGNzgxQkUzMUE0 MjFEMzMwQkRDN0ZBQjY2MzhBNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALL6h/mASVmWHJaNa+Anq97j77hrfFPWZktUPBECev+X7QqAxwzSS6Y3HDnc MHfDYSLi4KAqo9rqe8y9liJ39KetP0BwzgE4LHmt0XZevuUvUn0pwbuYh6AvHi+a TxNEdNUib7YM5BDtgte2gWgmGEKTxizH+wnC13HlCDcz1qr6g2BQ5fY9+UtKRHmE Vy1hr6+TVZqWJ0EsQLw+O+tAWUELljorKwyV2IJ+EGdsralysPDcUTubRfQJWfBO V6r0GY2kDCDuWgCt1eVjXt1pWmpPRQja+CTm/6JWZ5nhh4XVLU8cx+aaPdAMq7Yg jn9/kAOPhxamDQJZyOg0RGUXQoUCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBTQge3O A894G+MaQh0zC9x/q2Y4pTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTMxNy5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qmswDQYJKoZIhvcNAQELBQADggEBAL9Qu6bSDBaIxmAEvENiEYZ6pTepyDMGrPK/ TY7u0sZWdFDiP+HVLBkbaMWSzjS3YaZrp6Qbv+O7eGNZ5XBNtH2QKjms6Np4qfPl ykMXfCBIZLyL07eORtrCaU7+GfIBwVqfHeJqrtRUD+n++sUrttIkaKOEuG8ZVNTm JHD8ozL5AKNt2fK6BdrQATFMzyMpdyBiJ8XNArmzLRoazyooKE3XosGIhco6nRz+ g3PqR7zYgWOL3E2JgzcGpwwZ1AcuHxqU8VfILBYVmuoUaExnpOmvbzDxcP4iEcFF bsxYtA1dOH1t8KG0V21iemX1sHp4cq9ky+BCbQ+Ts+jOsH3gVR0= -----END CERTIFICATE-----Generated at Sat Mar 28 11:44:21 2026 by rpki-client