$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145347.roa File: AS145347.roa (raw, json) Hash identifier: QRmAcoIl9s//3ybMYSTEPSZIivzT4hQmxNTTuJRcd9Y= Subject key identifier: 6F:A7:76:E5:5A:03:AF:B1:30:61:CA:25:8C:F1:42:9C:64:14:42:BB Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 15D29E75216C2F6EE98EBCB48C83EB0795784852 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145347.roa Signing time: Wed 04 Mar 2026 06:21:41 +0000 ROA not before: Wed 04 Mar 2026 06:16:41 +0000 ROA not after: Wed 03 Mar 2027 06:21:41 +0000 asID: 145347 IP address blocks: 240a:aa89::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:d2:9e:75:21:6c:2f:6e:e9:8e:bc:b4:8c:83:eb:07:95:78:48:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:16:41 2026 GMT Not After : Mar 3 06:21:41 2027 GMT Subject: CN=6FA776E55A03AFB13061CA258CF1429C641442BB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:5e:2a:e9:a9:9e:cf:7e:fb:98:23:86:23:c3: f3:49:90:23:fe:29:1f:0a:49:71:52:df:b8:d7:90: 78:4e:e7:00:81:91:06:24:53:08:29:20:57:95:f1: fc:68:c3:6e:24:35:9f:7f:31:56:96:99:32:a9:5b: 77:85:34:1b:52:49:53:7e:cc:67:66:a9:9f:e7:e9: 4f:e4:61:5b:4a:41:a6:40:f4:ed:19:4f:91:5c:7c: 17:06:82:45:11:10:4b:a5:f2:ee:66:f5:0d:53:06: 69:62:bc:05:89:66:b5:33:3d:34:8a:dd:0e:db:37: 07:b6:e0:ae:cb:d7:08:54:38:d1:af:82:56:0a:92: 67:76:7c:a5:f1:d7:ce:bc:74:50:f6:68:4d:7b:79: 92:f1:36:b3:46:e8:44:81:9b:7e:05:fd:b8:f0:98: 99:f9:89:94:65:f3:bc:06:01:d5:da:e8:25:95:28: 6c:c5:27:95:23:ea:f3:d9:2d:64:56:d9:78:62:a6: e7:cd:dc:3c:81:52:9b:fd:d6:8a:e1:0f:28:b6:ad: 1d:79:37:58:6a:08:50:30:72:f8:3d:9a:2e:97:5b: a4:50:50:dc:22:0e:8a:f9:6c:47:70:70:c1:64:35: ce:dd:3c:5f:f8:ac:76:fd:31:69:bd:e0:96:9b:42: cf:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:A7:76:E5:5A:03:AF:B1:30:61:CA:25:8C:F1:42:9C:64:14:42:BB X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145347.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:aa89::/32 Signature Algorithm: sha256WithRSAEncryption 29:44:65:44:77:6f:c6:af:8c:6c:03:d1:09:3b:62:3b:e7:21: 47:e0:9d:d4:02:52:44:95:bd:83:61:79:b6:cb:23:bb:01:da: 51:9b:2a:da:a2:28:d8:6b:01:66:f8:f3:29:b8:42:30:95:52: 7c:7c:38:e4:cd:2d:09:dc:84:cf:11:a9:d0:d6:62:ed:a2:45: 6f:d3:cb:de:6e:c4:52:5d:a7:cf:69:a6:a0:81:bb:0a:60:78: 57:1b:7d:29:d7:ae:87:f9:46:43:8b:09:4a:60:f1:50:5e:b6: 0e:28:82:3e:a6:1b:72:04:bf:3a:28:80:c3:f9:0f:ed:36:51: 20:44:ab:70:5e:dc:27:70:95:ba:91:d1:8f:2e:6a:d4:c7:76: a9:7b:b5:70:f2:e9:3a:8b:67:de:25:69:7d:81:6d:28:fb:c7: ab:4f:9b:46:55:4f:22:f8:48:6f:10:e3:81:58:6d:db:8a:76: ad:16:ce:ca:f4:8b:ec:63:64:6b:76:c8:5a:84:67:bc:e6:75: e4:52:a8:3e:17:41:39:ef:8c:f9:69:c1:31:2f:8c:1e:d1:ea: 3f:59:48:03:d6:9d:95:b5:e8:9c:c6:2a:86:87:c9:74:b6:5e: 92:44:0d:93:dc:2b:94:27:13:b8:02:50:25:96:09:f7:e4:c4: 2a:80:e1:5e -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUFdKedSFsL27pjry0jIPrB5V4SFIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTY0MVoX DTI3MDMwMzA2MjE0MVowMzExMC8GA1UEAxMoNkZBNzc2RTU1QTAzQUZCMTMwNjFD QTI1OENGMTQyOUM2NDE0NDJCQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMteKumpns9++5gjhiPD80mQI/4pHwpJcVLfuNeQeE7nAIGRBiRTCCkgV5Xx /GjDbiQ1n38xVpaZMqlbd4U0G1JJU37MZ2apn+fpT+RhW0pBpkD07RlPkVx8FwaC RREQS6Xy7mb1DVMGaWK8BYlmtTM9NIrdDts3B7bgrsvXCFQ40a+CVgqSZ3Z8pfHX zrx0UPZoTXt5kvE2s0boRIGbfgX9uPCYmfmJlGXzvAYB1droJZUobMUnlSPq89kt ZFbZeGKm583cPIFSm/3WiuEPKLatHXk3WGoIUDBy+D2aLpdbpFBQ3CIOivlsR3Bw wWQ1zt08X/isdv0xab3glptCzyMCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRvp3bl WgOvsTBhyiWM8UKcZBRCuzAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTM0Ny5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qokwDQYJKoZIhvcNAQELBQADggEBAClEZUR3b8avjGwD0Qk7YjvnIUfgndQCUkSV vYNhebbLI7sB2lGbKtqiKNhrAWb48ym4QjCVUnx8OOTNLQnchM8RqdDWYu2iRW/T y95uxFJdp89ppqCBuwpgeFcbfSnXrof5RkOLCUpg8VBetg4ogj6mG3IEvzoogMP5 D+02USBEq3Be3CdwlbqR0Y8uatTHdql7tXDy6TqLZ94laX2BbSj7x6tPm0ZVTyL4 SG8Q44FYbduKdq0Wzsr0i+xjZGt2yFqEZ7zmdeRSqD4XQTnvjPlpwTEvjB7R6j9Z SAPWnZW16JzGKoaHyXS2XpJEDZPcK5QnE7gCUCWWCffkxCqA4V4= -----END CERTIFICATE-----Generated at Sat Mar 28 13:15:13 2026 by rpki-client