$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145366.roa File: AS145366.roa (raw, json) Hash identifier: HIQmbtfq8TK0if9CGjeQlukGX6nuFybFCpCjkkam5jU= Subject key identifier: BF:C7:ED:1E:A5:1C:FD:3A:B1:B2:21:2B:64:CA:23:09:79:A2:C3:86 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 711C7188B18B63657E60B29CBC9CB2F7FF309480 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145366.roa Signing time: Wed 04 Mar 2026 06:20:53 +0000 ROA not before: Wed 04 Mar 2026 06:15:53 +0000 ROA not after: Wed 03 Mar 2027 06:20:53 +0000 asID: 145366 IP address blocks: 240a:aa9c::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:1c:71:88:b1:8b:63:65:7e:60:b2:9c:bc:9c:b2:f7:ff:30:94:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:15:53 2026 GMT Not After : Mar 3 06:20:53 2027 GMT Subject: CN=BFC7ED1EA51CFD3AB1B2212B64CA230979A2C386 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:29:ff:bc:48:37:a5:9c:8b:b2:47:64:ab:c3: 5e:e6:43:5a:dd:8b:83:03:7f:5e:80:5f:3e:e7:72: a2:41:ce:e2:56:88:c2:43:18:aa:49:12:62:45:2b: c2:f2:0c:b0:fe:14:f6:07:84:85:67:8e:8a:8d:d5: 0d:6d:e4:6b:6a:59:2e:4f:b6:69:25:20:47:46:88: cd:5c:ac:13:f2:9f:63:a2:ba:ba:3f:65:23:b9:cb: e1:34:6b:9c:a6:a2:b7:30:d0:ca:97:1e:bb:d4:07: 58:da:5f:93:a0:8d:38:17:66:4d:5f:79:f2:ef:e0: 33:81:1a:0d:d7:68:75:70:37:be:b6:76:6d:8c:56: 52:61:df:97:52:e5:af:75:1e:43:f1:04:4c:7d:a1: e2:3e:f3:ea:a3:ee:8b:74:95:40:a1:f9:58:d6:aa: c5:ff:be:29:3f:d6:20:07:7a:c6:f9:c9:a5:f2:ac: 09:84:aa:0a:93:79:53:56:3f:26:c5:bf:48:d2:a6: 27:5f:13:41:38:c0:88:01:6b:a7:2f:53:28:01:e8: c7:b5:bd:bd:50:40:e5:df:d1:a5:23:a9:f0:74:ae: 78:73:80:f2:66:7c:c4:84:21:e1:56:a1:4c:af:59: 96:6b:f7:ed:9d:e7:f2:59:3e:e4:88:82:e6:47:f1: 18:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:C7:ED:1E:A5:1C:FD:3A:B1:B2:21:2B:64:CA:23:09:79:A2:C3:86 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145366.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:aa9c::/32 Signature Algorithm: sha256WithRSAEncryption 00:6d:6e:36:1c:c4:05:8f:62:77:b5:3e:a9:50:20:02:5d:5b: 15:3c:f5:92:c6:17:c8:22:f5:d0:86:3c:67:eb:77:a8:e6:8c: 95:1b:26:57:71:ff:4a:40:a6:4f:14:cd:2b:9d:80:10:86:d4: 34:60:80:72:65:9c:a2:90:25:78:75:72:2d:83:c0:ae:77:32: 5e:c6:6a:d1:cf:47:11:0e:98:f1:52:b9:bb:db:b6:35:39:4f: e0:6b:8e:3b:69:93:b6:6e:53:85:14:71:05:59:cb:2a:22:a2: 92:f0:d8:52:97:28:bb:fc:5f:45:69:79:cf:66:7d:78:65:8d: d7:ae:a3:99:41:23:c1:41:a8:97:d4:7b:67:76:04:30:29:46: 7b:b5:29:cf:ae:13:80:23:91:01:6f:9a:27:4c:ee:8c:d4:90: 4f:1b:26:f2:c0:60:d2:08:03:63:f6:59:5b:e9:9c:19:2b:0b: f3:cf:05:ba:fa:35:77:eb:db:0f:77:e8:89:81:3c:4f:b7:c5: 93:f6:b5:40:7c:17:03:32:14:af:c1:d5:15:e2:44:4c:64:f3: 39:d7:53:89:9f:19:18:cf:8d:f9:50:f2:82:b9:c0:47:f1:cd: 72:40:df:54:87:7d:fe:65:23:77:d1:79:05:39:0a:95:ff:16: 2f:7f:05:eb -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUcRxxiLGLY2V+YLKcvJyy9/8wlIAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTU1M1oX DTI3MDMwMzA2MjA1M1owMzExMC8GA1UEAxMoQkZDN0VEMUVBNTFDRkQzQUIxQjIy MTJCNjRDQTIzMDk3OUEyQzM4NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMEp/7xIN6Wci7JHZKvDXuZDWt2LgwN/XoBfPudyokHO4laIwkMYqkkSYkUr wvIMsP4U9geEhWeOio3VDW3ka2pZLk+2aSUgR0aIzVysE/KfY6K6uj9lI7nL4TRr nKaitzDQypceu9QHWNpfk6CNOBdmTV958u/gM4EaDddodXA3vrZ2bYxWUmHfl1Ll r3UeQ/EETH2h4j7z6qPui3SVQKH5WNaqxf++KT/WIAd6xvnJpfKsCYSqCpN5U1Y/ JsW/SNKmJ18TQTjAiAFrpy9TKAHox7W9vVBA5d/RpSOp8HSueHOA8mZ8xIQh4Vah TK9Zlmv37Z3n8lk+5IiC5kfxGKsCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBS/x+0e pRz9OrGyIStkyiMJeaLDhjAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTM2Ni5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qpwwDQYJKoZIhvcNAQELBQADggEBAABtbjYcxAWPYne1PqlQIAJdWxU89ZLGF8gi 9dCGPGfrd6jmjJUbJldx/0pApk8UzSudgBCG1DRggHJlnKKQJXh1ci2DwK53Ml7G atHPRxEOmPFSubvbtjU5T+Brjjtpk7ZuU4UUcQVZyyoiopLw2FKXKLv8X0Vpec9m fXhljdeuo5lBI8FBqJfUe2d2BDApRnu1Kc+uE4AjkQFvmidM7ozUkE8bJvLAYNII A2P2WVvpnBkrC/PPBbr6NXfr2w936ImBPE+3xZP2tUB8FwMyFK/B1RXiRExk8znX U4mfGRjPjflQ8oK5wEfxzXJA31SHff5lI3fReQU5CpX/Fi9/Bes= -----END CERTIFICATE-----Generated at Sat Mar 28 13:18:10 2026 by rpki-client