$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145399.roa File: AS145399.roa (raw, json) Hash identifier: fBpqtdciq0vTg2S5c4GxDNN71XVmRL1O2ArYhzSGIiw= Subject key identifier: 5C:97:DB:49:6C:44:12:DB:3F:01:58:DB:4A:B1:2E:99:CF:66:B2:18 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 1D77D5E2312B8BFEBDAFC4DB8FC71EDA1611485C Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145399.roa Signing time: Wed 04 Mar 2026 06:21:35 +0000 ROA not before: Wed 04 Mar 2026 06:16:35 +0000 ROA not after: Wed 03 Mar 2027 06:21:35 +0000 asID: 145399 IP address blocks: 240a:aabd::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:77:d5:e2:31:2b:8b:fe:bd:af:c4:db:8f:c7:1e:da:16:11:48:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:16:35 2026 GMT Not After : Mar 3 06:21:35 2027 GMT Subject: CN=5C97DB496C4412DB3F0158DB4AB12E99CF66B218 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:dc:24:5a:0e:17:48:34:dc:84:6b:f5:28:46: 59:e9:fa:20:35:31:5e:5c:8f:5d:84:2a:63:df:84: a6:45:40:1a:dc:a9:9f:57:40:e7:73:fb:d4:56:a4: f3:b9:d1:90:84:9d:90:51:64:0f:c0:ec:e0:d4:9d: 58:d3:3e:39:66:e1:ba:b4:b6:98:ef:98:a0:00:89: 55:c7:68:c5:13:8b:f1:50:66:87:f4:07:97:71:c2: 90:ac:5f:f5:d2:3a:b8:8d:17:91:7e:60:46:56:07: c4:cb:77:1e:26:b3:60:c8:ea:c7:60:7b:38:ab:cb: 81:cc:eb:fc:5a:ba:ff:30:01:06:b5:d6:27:98:70: a2:9a:fe:c0:6f:81:e8:ea:c3:d3:47:71:04:68:2f: c4:d6:67:e1:ec:02:50:80:67:c0:4a:a9:93:6e:6e: f8:e6:c5:e3:1f:81:a4:33:b4:b7:c7:6c:2e:97:42: 5e:f6:5d:44:2e:65:a9:65:0f:49:a5:6c:f6:53:f1: d1:6b:f5:6e:aa:8e:b4:7e:f6:6c:f5:ef:45:1b:e6: b3:09:3a:4c:78:ea:b2:8e:9c:ac:b8:1b:32:2d:4f: 5e:9e:9a:60:b5:d1:8b:76:8f:e3:56:ce:d1:dc:c8: 0e:30:4e:13:09:ba:e4:e3:7c:0c:1e:ef:ad:41:5b: f3:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:97:DB:49:6C:44:12:DB:3F:01:58:DB:4A:B1:2E:99:CF:66:B2:18 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145399.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:aabd::/32 Signature Algorithm: sha256WithRSAEncryption 4c:51:47:61:cf:f1:fa:90:35:8a:1d:95:bb:06:1b:c3:28:e9: eb:5b:31:a8:da:9d:69:46:82:d3:e1:f6:ba:2f:3f:b9:d0:3d: fa:5e:d7:bf:dc:ad:f3:5d:94:e3:83:ed:aa:42:eb:57:17:96: e0:98:79:29:92:fe:ac:92:bf:95:0b:31:75:c2:2a:a6:e7:2a: 43:2d:47:da:85:20:86:88:a7:c4:ab:e4:10:11:8f:f3:55:81: 5b:c2:e8:c9:09:e4:25:75:fa:50:c5:e4:a5:be:b0:95:df:a6: cc:fc:eb:af:d6:7f:08:c2:8e:6a:23:ba:65:6c:1d:96:36:f4: ce:a8:b2:5a:eb:a7:41:08:a5:1e:96:19:cc:13:3a:64:1a:ec: 07:c6:0d:cf:89:10:7c:8a:e8:58:88:30:b7:2c:09:25:dd:10: ac:96:f1:74:49:58:c9:8a:15:81:ea:ab:00:83:a3:d5:b4:6c: ca:e6:e0:a3:d5:be:1e:80:32:ab:0b:3a:c8:71:f1:e1:90:a2: b1:ac:6b:5b:ef:03:ed:12:41:0c:ed:2a:71:14:38:71:62:4d: 55:5c:48:72:0b:4a:21:cb:42:44:8f:5c:cf:c6:1d:45:6c:4f: 96:95:53:a8:c3:3b:05:a9:1e:a0:4f:92:b4:1e:50:b2:09:7f: 75:25:54:fd -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUHXfV4jEri/69r8Tbj8ce2hYRSFwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTYzNVoX DTI3MDMwMzA2MjEzNVowMzExMC8GA1UEAxMoNUM5N0RCNDk2QzQ0MTJEQjNGMDE1 OERCNEFCMTJFOTlDRjY2QjIxODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOLcJFoOF0g03IRr9ShGWen6IDUxXlyPXYQqY9+EpkVAGtypn1dA53P71Fak 87nRkISdkFFkD8Ds4NSdWNM+OWbhurS2mO+YoACJVcdoxROL8VBmh/QHl3HCkKxf 9dI6uI0XkX5gRlYHxMt3HiazYMjqx2B7OKvLgczr/Fq6/zABBrXWJ5hwopr+wG+B 6OrD00dxBGgvxNZn4ewCUIBnwEqpk25u+ObF4x+BpDO0t8dsLpdCXvZdRC5lqWUP SaVs9lPx0Wv1bqqOtH72bPXvRRvmswk6THjqso6crLgbMi1PXp6aYLXRi3aP41bO 0dzIDjBOEwm65ON8DB7vrUFb81kCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRcl9tJ bEQS2z8BWNtKsS6Zz2ayGDAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTM5OS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qr0wDQYJKoZIhvcNAQELBQADggEBAExRR2HP8fqQNYodlbsGG8Mo6etbMajanWlG gtPh9rovP7nQPfpe17/crfNdlOOD7apC61cXluCYeSmS/qySv5ULMXXCKqbnKkMt R9qFIIaIp8Sr5BARj/NVgVvC6MkJ5CV1+lDF5KW+sJXfpsz866/WfwjCjmojumVs HZY29M6oslrrp0EIpR6WGcwTOmQa7AfGDc+JEHyK6FiIMLcsCSXdEKyW8XRJWMmK FYHqqwCDo9W0bMrm4KPVvh6AMqsLOshx8eGQorGsa1vvA+0SQQztKnEUOHFiTVVc SHILSiHLQkSPXM/GHUVsT5aVU6jDOwWpHqBPkrQeULIJf3UlVP0= -----END CERTIFICATE-----Generated at Sat Mar 28 13:10:36 2026 by rpki-client