$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145377.roa File: AS145377.roa (raw, json) Hash identifier: 4Ax/CWpPFwV6Eoi1D4aIGEjdHyfghy7yWIn0f1qPOuM= Subject key identifier: 70:27:4F:17:C4:D5:77:9D:EC:FF:76:BD:59:EA:10:67:DC:A5:47:85 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 1C8AD4D6C93750B2F8F03AB84ED22CB55976493C Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145377.roa Signing time: Wed 04 Mar 2026 06:22:15 +0000 ROA not before: Wed 04 Mar 2026 06:17:15 +0000 ROA not after: Wed 03 Mar 2027 06:22:15 +0000 asID: 145377 IP address blocks: 240a:aaa7::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:8a:d4:d6:c9:37:50:b2:f8:f0:3a:b8:4e:d2:2c:b5:59:76:49:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:17:15 2026 GMT Not After : Mar 3 06:22:15 2027 GMT Subject: CN=70274F17C4D5779DECFF76BD59EA1067DCA54785 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:5b:f2:dd:9e:92:b6:9c:37:b1:45:36:a8:69: 8a:3f:7e:3c:89:5f:20:97:10:c6:c5:ff:aa:77:a5: a3:de:29:70:7c:64:9e:73:c4:ca:64:9f:14:b1:70: ea:f6:be:20:65:a0:24:fc:ca:71:06:82:85:c9:4a: 79:a7:41:2d:19:4f:ff:46:28:f3:36:f6:f8:df:7a: 36:5d:06:04:fa:fb:d6:6a:3a:5d:82:28:2a:d2:b8: 26:c3:88:2e:42:84:60:38:2d:9e:c4:b2:03:9f:06: b4:cd:a5:71:5c:c0:a9:5d:a1:0e:b8:06:a9:21:38: b7:bc:17:08:25:12:cd:27:8e:14:79:d9:53:bb:87: 36:b1:1c:c1:e0:71:b7:29:42:59:a2:23:bf:3f:6b: a1:63:3b:54:03:c3:99:27:63:3b:67:0c:a7:26:85: d1:85:50:07:f7:cb:30:39:10:9c:4f:77:4f:be:d5: 2f:4e:00:02:8a:0f:53:91:ac:36:7f:93:af:ec:0d: ee:62:79:24:82:b2:8c:c7:fa:f3:5d:a0:3b:52:a3: 6e:b3:7b:2d:0f:c2:9a:83:df:aa:5f:76:46:41:06: a8:b9:58:76:12:51:ae:7c:94:d5:86:4b:b2:81:43: 88:20:b4:32:3c:12:2a:88:4f:f7:7e:40:6b:5a:04: fa:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:27:4F:17:C4:D5:77:9D:EC:FF:76:BD:59:EA:10:67:DC:A5:47:85 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145377.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:aaa7::/32 Signature Algorithm: sha256WithRSAEncryption 79:f5:d6:84:4e:82:ea:9c:8f:a3:2f:53:c0:39:68:d8:6c:d5: c1:d3:e0:77:e3:34:9b:0b:19:8f:af:f1:68:32:47:66:87:3d: 07:9a:3a:64:72:1b:da:63:93:97:33:d8:93:11:46:27:95:07: d6:3d:7d:e4:1e:88:72:d2:96:8b:82:13:06:9a:b8:df:9b:a8: 43:d9:78:9f:48:5d:d8:91:03:4e:b9:2f:7e:ea:08:f4:e4:a2: 5b:0d:c5:c5:78:12:36:8e:71:09:33:72:9d:84:06:38:c7:b4: f8:c5:48:84:84:2b:aa:04:41:e2:fb:3c:76:5f:b0:e6:99:7e: 4a:63:b5:49:9a:5a:94:12:2b:9c:04:51:ac:56:09:f3:d5:51: 3c:44:0b:fd:94:69:75:0c:45:89:26:e7:90:ff:e0:40:28:0c: 8c:3d:27:22:22:e4:72:e0:e3:17:67:fc:e6:cb:75:48:70:ea: f9:01:5b:77:aa:4a:1a:24:75:d6:45:8e:af:69:72:e1:54:9a: 75:94:35:74:95:e1:1d:73:be:4d:70:62:62:f7:ce:6e:7f:7b: 63:9e:25:4a:35:72:76:74:d9:4e:1e:fd:26:0b:9d:ad:a7:51: 63:f2:48:b3:a1:a9:d0:41:3e:17:d4:67:fb:17:7a:0e:08:42: 8f:28:43:07 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUHIrU1sk3ULL48Dq4TtIstVl2STwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTcxNVoX DTI3MDMwMzA2MjIxNVowMzExMC8GA1UEAxMoNzAyNzRGMTdDNEQ1Nzc5REVDRkY3 NkJENTlFQTEwNjdEQ0E1NDc4NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMFb8t2ekracN7FFNqhpij9+PIlfIJcQxsX/qnelo94pcHxknnPEymSfFLFw 6va+IGWgJPzKcQaChclKeadBLRlP/0Yo8zb2+N96Nl0GBPr71mo6XYIoKtK4JsOI LkKEYDgtnsSyA58GtM2lcVzAqV2hDrgGqSE4t7wXCCUSzSeOFHnZU7uHNrEcweBx tylCWaIjvz9roWM7VAPDmSdjO2cMpyaF0YVQB/fLMDkQnE93T77VL04AAooPU5Gs Nn+Tr+wN7mJ5JIKyjMf6812gO1KjbrN7LQ/CmoPfql92RkEGqLlYdhJRrnyU1YZL soFDiCC0MjwSKohP935Aa1oE+pECAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRwJ08X xNV3nez/dr1Z6hBn3KVHhTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTM3Ny5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qqcwDQYJKoZIhvcNAQELBQADggEBAHn11oROguqcj6MvU8A5aNhs1cHT4HfjNJsL GY+v8WgyR2aHPQeaOmRyG9pjk5cz2JMRRieVB9Y9feQeiHLSlouCEwaauN+bqEPZ eJ9IXdiRA065L37qCPTkolsNxcV4EjaOcQkzcp2EBjjHtPjFSISEK6oEQeL7PHZf sOaZfkpjtUmaWpQSK5wEUaxWCfPVUTxEC/2UaXUMRYkm55D/4EAoDIw9JyIi5HLg 4xdn/ObLdUhw6vkBW3eqShokddZFjq9pcuFUmnWUNXSV4R1zvk1wYmL3zm5/e2Oe JUo1cnZ02U4e/SYLna2nUWPySLOhqdBBPhfUZ/sXeg4IQo8oQwc= -----END CERTIFICATE-----Generated at Sat Mar 28 11:41:27 2026 by rpki-client