$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145405.roa File: AS145405.roa (raw, json) Hash identifier: e37WK/MXq2KefCZxCsULclR3GHpycw7+UZi5J5oF/TU= Subject key identifier: 29:D8:BE:FB:E7:AC:2E:2C:40:46:35:45:FB:B8:B3:55:AE:A1:3A:33 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 7066D7651E2E15824A0FB4285918BC02F185A3C0 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145405.roa Signing time: Wed 04 Mar 2026 06:20:31 +0000 ROA not before: Wed 04 Mar 2026 06:15:31 +0000 ROA not after: Wed 03 Mar 2027 06:20:31 +0000 asID: 145405 IP address blocks: 240a:aac3::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:66:d7:65:1e:2e:15:82:4a:0f:b4:28:59:18:bc:02:f1:85:a3:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:15:31 2026 GMT Not After : Mar 3 06:20:31 2027 GMT Subject: CN=29D8BEFBE7AC2E2C40463545FBB8B355AEA13A33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:d6:93:3e:56:7e:fc:65:c4:a9:c1:9c:33:05: 7d:b3:d9:db:4e:84:52:e8:27:76:46:df:dd:ea:f3: 37:e5:72:d0:42:c7:df:6c:f4:34:da:d2:ae:2b:59: 98:42:8b:aa:24:ef:f0:a0:99:72:ff:1f:01:a5:66: dd:ae:e1:f2:2c:eb:a7:1b:ec:63:d6:a6:22:0a:f4: 7e:ac:c3:74:60:c6:e0:13:89:7e:70:4f:1f:a0:c9: d0:08:6f:51:fb:d2:be:53:4a:ca:5f:ee:3b:6c:d4: d0:b0:5f:38:b6:49:08:bd:a3:4f:34:c7:ac:65:3a: 63:11:f4:15:37:18:3f:8e:be:ce:3f:80:a8:bc:2a: 76:fc:b5:8f:a5:27:ca:56:39:e9:bc:55:5d:2f:bf: 0a:0e:04:28:0b:f9:50:03:95:91:c7:87:54:67:68: 59:c1:91:31:5f:26:53:aa:86:da:aa:0e:12:91:48: 46:a7:35:89:37:51:a3:9c:96:4f:e7:96:32:47:0f: 5d:29:f1:4e:c5:bf:6f:09:b0:d2:dc:f0:57:a5:8a: b3:35:c5:74:7e:38:f6:7d:f6:d9:3b:4d:61:cd:d0: d6:0c:af:38:1e:44:58:a8:bf:ff:37:92:e4:aa:45: 77:8c:e9:0e:a2:e1:d1:57:7c:03:a7:2e:ff:df:fd: c8:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:D8:BE:FB:E7:AC:2E:2C:40:46:35:45:FB:B8:B3:55:AE:A1:3A:33 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145405.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:aac3::/32 Signature Algorithm: sha256WithRSAEncryption 89:e5:19:f9:99:7c:ce:83:9c:5b:84:a8:ce:ae:65:a4:a7:aa: 9a:02:35:83:f9:28:72:0e:68:e2:2a:f5:43:bb:77:9b:e4:37: 39:74:0a:84:b9:d7:c5:d4:f0:2e:70:6f:8b:45:0f:da:c1:08: 9f:cf:0d:38:bb:a3:12:74:6e:8d:1b:37:eb:ad:1b:c0:4f:1a: 33:68:ae:9b:db:01:38:49:5b:2e:f5:45:a2:e7:0e:9e:5b:04: d8:32:fe:50:c4:ef:87:ef:00:8a:30:c5:e7:ee:9c:e3:08:d1: 9d:4c:d1:74:d9:27:9d:ee:1c:36:8b:4b:fb:dc:f0:ea:81:5d: 95:2a:89:de:51:28:d1:fe:f6:76:97:4d:ce:18:7f:d2:97:8f: f4:9a:9d:58:a7:d1:8d:4a:31:68:2d:37:36:af:48:a9:3f:3a: 80:38:3e:95:8d:1f:db:50:11:6c:d3:cf:4a:eb:d7:d7:43:18: 5e:27:7d:e3:dc:29:a4:e5:30:3c:eb:1a:a7:1f:16:da:e5:6d: 76:0a:88:3d:90:0e:38:7d:f7:c8:78:07:a5:f0:2e:26:4a:e8: fd:a1:01:ef:1e:85:de:50:44:45:0a:0a:55:8c:6b:4e:21:dc: c3:9f:b0:2b:b9:ff:37:2f:db:48:3b:b1:73:21:ed:10:58:9c: 2f:39:ba:01 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUcGbXZR4uFYJKD7QoWRi8AvGFo8AwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTUzMVoX DTI3MDMwMzA2MjAzMVowMzExMC8GA1UEAxMoMjlEOEJFRkJFN0FDMkUyQzQwNDYz NTQ1RkJCOEIzNTVBRUExM0EzMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALvWkz5WfvxlxKnBnDMFfbPZ206EUugndkbf3erzN+Vy0ELH32z0NNrSritZ mEKLqiTv8KCZcv8fAaVm3a7h8izrpxvsY9amIgr0fqzDdGDG4BOJfnBPH6DJ0Ahv UfvSvlNKyl/uO2zU0LBfOLZJCL2jTzTHrGU6YxH0FTcYP46+zj+AqLwqdvy1j6Un ylY56bxVXS+/Cg4EKAv5UAOVkceHVGdoWcGRMV8mU6qG2qoOEpFIRqc1iTdRo5yW T+eWMkcPXSnxTsW/bwmw0tzwV6WKszXFdH449n322TtNYc3Q1gyvOB5EWKi//zeS 5KpFd4zpDqLh0Vd8A6cu/9/9yCMCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQp2L77 56wuLEBGNUX7uLNVrqE6MzAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTQwNS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qsMwDQYJKoZIhvcNAQELBQADggEBAInlGfmZfM6DnFuEqM6uZaSnqpoCNYP5KHIO aOIq9UO7d5vkNzl0CoS518XU8C5wb4tFD9rBCJ/PDTi7oxJ0bo0bN+utG8BPGjNo rpvbAThJWy71RaLnDp5bBNgy/lDE74fvAIowxefunOMI0Z1M0XTZJ53uHDaLS/vc 8OqBXZUqid5RKNH+9naXTc4Yf9KXj/SanVin0Y1KMWgtNzavSKk/OoA4PpWNH9tQ EWzTz0rr19dDGF4nfePcKaTlMDzrGqcfFtrlbXYKiD2QDjh998h4B6XwLiZK6P2h Ae8ehd5QREUKClWMa04h3MOfsCu5/zcv20g7sXMh7RBYnC85ugE= -----END CERTIFICATE-----Generated at Sat Mar 28 15:53:31 2026 by rpki-client