$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145417.roa File: AS145417.roa (raw, json) Hash identifier: lYxCF4TnUmiN48wkFXxv+LWJ/j2fzN2Up0fEdAsEcVc= Subject key identifier: 5F:4A:E7:4A:3E:CF:12:14:EE:D6:BB:EE:43:0C:7E:4C:0A:F0:10:C9 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 3906B70A3C666CC5BF5604EF42B8637F9D8D4268 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145417.roa Signing time: Wed 04 Mar 2026 06:19:37 +0000 ROA not before: Wed 04 Mar 2026 06:14:37 +0000 ROA not after: Wed 03 Mar 2027 06:19:37 +0000 asID: 145417 IP address blocks: 240a:aacf::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:06:b7:0a:3c:66:6c:c5:bf:56:04:ef:42:b8:63:7f:9d:8d:42:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:14:37 2026 GMT Not After : Mar 3 06:19:37 2027 GMT Subject: CN=5F4AE74A3ECF1214EED6BBEE430C7E4C0AF010C9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:26:01:2d:a7:c5:41:64:e7:78:6f:dc:35:48: 71:49:24:02:b0:af:17:d7:8a:4a:65:0e:89:af:9d: e8:d1:23:59:bb:d6:b1:e9:c1:50:6f:75:42:d0:d1: f5:32:a1:90:67:15:f3:30:c2:82:e1:fc:7f:0b:8b: cb:db:c3:86:b8:07:87:75:37:71:be:3a:81:f3:05: a8:9f:39:18:1b:37:9c:d6:01:15:b3:d4:97:84:07: 08:c4:48:e2:5d:71:5d:3a:c5:a4:71:89:dc:7f:48: 44:f1:b8:2f:ba:f7:87:94:a0:cf:b8:8c:7f:d9:9e: 05:99:ed:b1:ba:16:60:7e:00:24:14:98:66:5f:1a: 60:94:33:b4:58:aa:a9:0f:df:11:2d:d9:13:da:3f: 43:14:41:40:9e:53:c5:47:5b:c6:98:33:4d:63:c0: 0a:10:d9:5e:86:1e:28:f2:68:d5:fa:5b:07:69:b2: 72:cd:f0:0c:a7:4c:bb:b7:57:0b:42:69:ea:3f:b2: 7c:8e:a7:66:67:9f:20:0c:0f:05:45:be:3f:7f:2d: b1:13:6a:ae:50:a0:7b:77:62:0c:ab:7c:3a:a3:49: 97:40:20:92:e7:c4:7e:2e:f6:4c:77:c0:71:0a:57: 75:b6:db:cc:18:73:1c:cd:67:29:33:d7:07:e5:8a: 4d:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:4A:E7:4A:3E:CF:12:14:EE:D6:BB:EE:43:0C:7E:4C:0A:F0:10:C9 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145417.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:aacf::/32 Signature Algorithm: sha256WithRSAEncryption ad:e4:47:02:98:da:88:bb:9d:f2:4d:7d:8e:7c:2a:f0:e6:9e: 95:68:9f:ba:0d:75:0c:65:a1:c4:bc:10:c6:ed:d6:0e:b3:88: e4:2e:2c:23:e2:f7:ea:77:01:d0:3a:93:2a:10:e9:0d:d0:4e: 62:49:18:12:81:b7:3a:0a:69:c9:d8:32:42:f3:1a:31:5f:bb: 89:0a:74:96:bd:ee:1a:a1:3b:ae:23:6d:0e:e9:c1:37:3b:d5: 05:44:d1:3f:64:18:b1:8a:5e:74:da:ee:6d:17:d9:d5:ec:44: 40:c8:dc:3f:18:e6:ff:43:72:08:89:8d:ba:ee:b4:df:9c:7b: 47:18:1c:3e:5e:2c:eb:28:c0:6a:82:b8:ce:a8:ef:a9:75:60: 00:71:48:b0:fd:10:6b:3b:eb:f7:14:83:aa:07:f3:28:46:80: 64:6e:d8:39:e2:3b:5a:e3:d3:35:cd:5d:23:da:73:f4:47:a5: 1e:d3:7d:43:5e:d9:93:69:f4:6c:63:85:f6:4f:09:f6:47:63: ec:0d:67:c0:f1:35:f1:bb:b8:b4:b8:a9:97:60:4b:11:cd:bc: b9:16:ba:58:4f:c9:ab:94:0d:3c:36:0b:a0:b5:29:22:f4:ac: c1:10:32:84:b7:cd:6c:06:09:d8:ea:b9:73:15:8e:34:5e:19: a4:7b:34:85 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUOQa3CjxmbMW/VgTvQrhjf52NQmgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTQzN1oX DTI3MDMwMzA2MTkzN1owMzExMC8GA1UEAxMoNUY0QUU3NEEzRUNGMTIxNEVFRDZC QkVFNDMwQzdFNEMwQUYwMTBDOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK0mAS2nxUFk53hv3DVIcUkkArCvF9eKSmUOia+d6NEjWbvWsenBUG91QtDR 9TKhkGcV8zDCguH8fwuLy9vDhrgHh3U3cb46gfMFqJ85GBs3nNYBFbPUl4QHCMRI 4l1xXTrFpHGJ3H9IRPG4L7r3h5Sgz7iMf9meBZntsboWYH4AJBSYZl8aYJQztFiq qQ/fES3ZE9o/QxRBQJ5TxUdbxpgzTWPAChDZXoYeKPJo1fpbB2mycs3wDKdMu7dX C0Jp6j+yfI6nZmefIAwPBUW+P38tsRNqrlCge3diDKt8OqNJl0AgkufEfi72THfA cQpXdbbbzBhzHM1nKTPXB+WKTSMCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRfSudK Ps8SFO7Wu+5DDH5MCvAQyTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTQxNy5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qs8wDQYJKoZIhvcNAQELBQADggEBAK3kRwKY2oi7nfJNfY58KvDmnpVon7oNdQxl ocS8EMbt1g6ziOQuLCPi9+p3AdA6kyoQ6Q3QTmJJGBKBtzoKacnYMkLzGjFfu4kK dJa97hqhO64jbQ7pwTc71QVE0T9kGLGKXnTa7m0X2dXsREDI3D8Y5v9DcgiJjbru tN+ce0cYHD5eLOsowGqCuM6o76l1YABxSLD9EGs76/cUg6oH8yhGgGRu2DniO1rj 0zXNXSPac/RHpR7TfUNe2ZNp9GxjhfZPCfZHY+wNZ8DxNfG7uLS4qZdgSxHNvLkW ulhPyauUDTw2C6C1KSL0rMEQMoS3zWwGCdjquXMVjjReGaR7NIU= -----END CERTIFICATE-----Generated at Sat Mar 28 13:10:25 2026 by rpki-client