$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145333.roa File: AS145333.roa (raw, json) Hash identifier: ULrBTN8m5Dk9sbYP+QkkvptpLZnZf3jaPa7507KZgLE= Subject key identifier: C1:6E:02:33:D2:0D:AC:76:3A:6D:6B:05:A8:3B:28:E5:E1:9B:3F:DE Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 79EEAA6CF18343764734E0329AE022E336FA52F9 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145333.roa Signing time: Wed 04 Mar 2026 06:20:28 +0000 ROA not before: Wed 04 Mar 2026 06:15:28 +0000 ROA not after: Wed 03 Mar 2027 06:20:28 +0000 asID: 145333 IP address blocks: 240a:aa7b::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:ee:aa:6c:f1:83:43:76:47:34:e0:32:9a:e0:22:e3:36:fa:52:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:15:28 2026 GMT Not After : Mar 3 06:20:28 2027 GMT Subject: CN=C16E0233D20DAC763A6D6B05A83B28E5E19B3FDE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:17:94:53:cc:1a:92:9c:ff:c0:70:bb:f4:78: 52:e7:75:5e:87:c2:09:e6:08:93:15:ff:7c:30:8c: fd:76:dc:79:ad:df:d0:86:89:6a:f7:82:a3:20:8e: e9:50:07:29:ec:0f:b5:e2:4f:db:13:ba:20:22:39: 40:7f:b7:5a:b4:3e:ab:4b:44:d0:06:7a:20:6f:54: 1e:d8:28:4f:cc:f0:69:7d:56:02:9a:63:3b:ec:54: fe:88:d4:60:42:de:2b:1d:ec:de:01:60:a9:fe:93: 02:81:a1:28:2b:d0:a5:45:78:fb:82:81:59:af:6f: 27:65:fe:5e:1e:2d:15:96:19:68:e6:86:82:17:80: 0b:2b:79:14:05:a3:ae:22:ca:64:c9:a6:be:79:93: 9a:c6:4d:ee:c6:56:16:44:47:37:c8:5b:77:7c:a8: 34:f2:88:c5:c7:49:ce:a1:a7:cd:15:de:58:ff:19: 5b:e3:51:e7:35:0f:d4:d1:8f:c9:be:c0:e6:a0:50: 36:d1:ce:f7:9c:dc:be:73:d6:af:da:63:f5:f7:07: 2f:dd:71:be:dc:6f:38:5d:5e:c3:15:5b:ec:01:b5: ea:57:8e:83:0a:1d:43:98:30:0a:89:3d:2a:61:dd: 8c:67:95:93:2f:0d:c8:fc:f6:b9:8f:a4:1b:ec:c8: 51:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:6E:02:33:D2:0D:AC:76:3A:6D:6B:05:A8:3B:28:E5:E1:9B:3F:DE X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145333.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:aa7b::/32 Signature Algorithm: sha256WithRSAEncryption 2f:ef:dc:b7:03:e5:a1:98:50:4b:12:36:e2:8c:f4:8f:8d:83: ba:b3:c7:a8:de:6e:a2:82:8a:cf:7e:b9:22:8c:ef:af:f7:81: 33:53:82:d6:e7:d6:2d:d8:25:1b:6b:c7:45:45:ce:8f:ee:8e: 30:d2:99:61:d1:ad:a0:f8:c5:af:0a:6e:04:99:8f:81:d9:80: 1e:33:24:4b:ea:5a:04:8b:16:5b:92:47:b4:82:f7:70:5a:49: b9:cd:99:d1:ac:c1:ba:57:f8:32:38:32:98:0d:05:e0:b9:93: 08:03:8e:d1:34:ea:bc:56:ff:54:cb:0a:8d:d2:28:d2:ba:39: a7:74:94:5d:7e:42:bf:5d:c3:e8:44:9a:3f:65:23:54:ae:e5: 20:15:da:6f:ef:b8:6e:f5:44:17:62:68:10:a0:d7:65:1f:e2: f8:84:b0:a4:54:fe:74:ba:d6:3c:89:43:2a:06:c7:61:0a:7e: 3f:44:63:f5:4b:f8:6c:dc:b9:fd:15:cf:4d:dd:24:fb:df:53: f4:2f:dc:b9:0e:67:dd:37:b2:95:17:30:9f:57:c7:09:7f:56: 03:c8:77:e8:f7:be:24:22:f3:d2:79:33:5a:6b:18:cd:24:64: f6:a0:c2:8b:21:c6:33:aa:b5:f7:38:8e:b1:b4:d2:39:f4:40: a2:de:b9:80 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUee6qbPGDQ3ZHNOAymuAi4zb6UvkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTUyOFoX DTI3MDMwMzA2MjAyOFowMzExMC8GA1UEAxMoQzE2RTAyMzNEMjBEQUM3NjNBNkQ2 QjA1QTgzQjI4RTVFMTlCM0ZERTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMUXlFPMGpKc/8Bwu/R4Uud1XofCCeYIkxX/fDCM/Xbcea3f0IaJaveCoyCO 6VAHKewPteJP2xO6ICI5QH+3WrQ+q0tE0AZ6IG9UHtgoT8zwaX1WAppjO+xU/ojU YELeKx3s3gFgqf6TAoGhKCvQpUV4+4KBWa9vJ2X+Xh4tFZYZaOaGgheACyt5FAWj riLKZMmmvnmTmsZN7sZWFkRHN8hbd3yoNPKIxcdJzqGnzRXeWP8ZW+NR5zUP1NGP yb7A5qBQNtHO95zcvnPWr9pj9fcHL91xvtxvOF1ewxVb7AG16leOgwodQ5gwCok9 KmHdjGeVky8NyPz2uY+kG+zIUVMCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBTBbgIz 0g2sdjptawWoOyjl4Zs/3jAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTMzMy5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qnswDQYJKoZIhvcNAQELBQADggEBAC/v3LcD5aGYUEsSNuKM9I+Ng7qzx6jebqKC is9+uSKM76/3gTNTgtbn1i3YJRtrx0VFzo/ujjDSmWHRraD4xa8KbgSZj4HZgB4z JEvqWgSLFluSR7SC93BaSbnNmdGswbpX+DI4MpgNBeC5kwgDjtE06rxW/1TLCo3S KNK6Oad0lF1+Qr9dw+hEmj9lI1Su5SAV2m/vuG71RBdiaBCg12Uf4viEsKRU/nS6 1jyJQyoGx2EKfj9EY/VL+Gzcuf0Vz03dJPvfU/Qv3LkOZ903spUXMJ9Xxwl/VgPI d+j3viQi89J5M1prGM0kZPagwoshxjOqtfc4jrG00jn0QKLeuYA= -----END CERTIFICATE-----Generated at Sat Mar 28 11:41:21 2026 by rpki-client