$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145476.roa File: AS145476.roa (raw, json) Hash identifier: ZksYtQGARVMgEcMnQVgfHm17cI84Jws8KuLHIUI9KTc= Subject key identifier: 73:56:A9:11:38:4A:E5:28:96:52:D4:FA:89:0C:A0:FC:32:C6:BB:30 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 04602818C88142A2E02860487232C99EE4238781 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145476.roa Signing time: Wed 04 Mar 2026 06:19:57 +0000 ROA not before: Wed 04 Mar 2026 06:14:57 +0000 ROA not after: Wed 03 Mar 2027 06:19:57 +0000 asID: 145476 IP address blocks: 240a:ab0a::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:60:28:18:c8:81:42:a2:e0:28:60:48:72:32:c9:9e:e4:23:87:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:14:57 2026 GMT Not After : Mar 3 06:19:57 2027 GMT Subject: CN=7356A911384AE5289652D4FA890CA0FC32C6BB30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:7b:e9:6c:4f:dc:4d:dc:12:d3:cd:6d:19:ea: 0e:93:6d:19:70:fe:dc:e9:d9:ec:74:03:99:01:81: dd:86:aa:ca:2f:16:39:84:55:7a:4b:39:dc:43:7e: 19:75:2e:06:fe:f3:11:56:a0:e3:d1:4f:f2:ef:17: 33:5c:c8:2c:45:53:96:25:51:3d:90:4c:9e:49:51: 65:d8:da:87:ef:c6:90:ec:18:da:c9:53:f6:5a:c2: 6b:c8:39:78:b1:d4:23:c0:43:a2:f0:96:10:74:b8: 95:4b:d7:99:01:2b:20:33:93:10:1e:59:7e:e8:b4: bf:28:09:43:09:b9:19:a1:51:6c:66:50:69:c5:d5: 39:b0:be:4f:8d:0a:95:48:39:d0:fd:9f:1a:1a:e2: 6d:ae:50:1f:71:d3:01:d2:fa:ad:bf:d5:15:49:d2: cf:0f:a5:f6:7b:6d:60:37:78:3d:2b:c4:6d:25:8f: 68:e1:c0:9a:c1:96:63:77:08:35:ec:b2:5f:5f:b3: b4:53:d3:67:cb:33:86:00:c9:9d:d8:1a:8a:8e:5e: 25:56:98:33:f8:5e:82:1e:45:5c:eb:9f:0e:a8:8a: 73:9d:4a:6f:ad:97:a6:91:39:7c:0b:12:c1:b7:f4: cf:97:c8:f4:77:3e:5d:0e:b3:97:cc:03:0c:a0:20: 66:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:56:A9:11:38:4A:E5:28:96:52:D4:FA:89:0C:A0:FC:32:C6:BB:30 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145476.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:ab0a::/32 Signature Algorithm: sha256WithRSAEncryption 99:65:bb:c6:24:5e:68:c3:2d:2c:04:98:d1:1b:1c:64:6f:25: 97:9f:50:d2:dd:7a:df:9e:b6:85:d0:40:b7:dd:2c:3a:4c:c9: df:2f:08:84:2d:ce:83:b3:b8:db:22:84:7f:35:23:d2:30:5e: 63:2d:03:28:81:5c:ff:53:e9:16:a4:b6:3a:19:7f:0d:21:fc: 5e:79:ef:e7:29:49:87:9f:f7:32:e6:af:99:a6:5a:39:39:7e: c6:dd:82:0c:76:64:fc:25:c5:cc:f7:20:73:ed:e5:46:b3:bd: e0:d5:cc:ee:a3:b9:a0:86:6a:5b:33:cd:dd:fe:56:32:0c:2b: 4b:9a:91:e5:db:e2:2a:39:0b:9f:14:46:c0:c3:f0:2e:b8:d4: b6:68:e9:94:93:05:10:4f:be:9a:e2:ca:f3:03:97:36:c4:59: 83:a7:a4:04:07:b1:2a:37:52:e6:5a:2c:f8:95:91:3e:04:fb: ca:e1:8b:bb:b1:1a:15:db:72:27:7f:19:ac:2f:80:f3:53:e6: 6c:54:e5:db:6c:06:e8:d8:f9:68:f0:97:a5:30:b6:c6:1a:c5: 7d:09:44:55:71:e2:60:9e:1d:70:29:13:57:9c:54:0e:70:b1: 3d:8a:6a:40:32:ad:27:15:a4:50:65:29:ec:4f:af:35:bb:0c: 43:0f:88:89 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUBGAoGMiBQqLgKGBIcjLJnuQjh4EwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTQ1N1oX DTI3MDMwMzA2MTk1N1owMzExMC8GA1UEAxMoNzM1NkE5MTEzODRBRTUyODk2NTJE NEZBODkwQ0EwRkMzMkM2QkIzMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKt76WxP3E3cEtPNbRnqDpNtGXD+3OnZ7HQDmQGB3Yaqyi8WOYRVeks53EN+ GXUuBv7zEVag49FP8u8XM1zILEVTliVRPZBMnklRZdjah+/GkOwY2slT9lrCa8g5 eLHUI8BDovCWEHS4lUvXmQErIDOTEB5Zfui0vygJQwm5GaFRbGZQacXVObC+T40K lUg50P2fGhriba5QH3HTAdL6rb/VFUnSzw+l9nttYDd4PSvEbSWPaOHAmsGWY3cI NeyyX1+ztFPTZ8szhgDJndgaio5eJVaYM/hegh5FXOufDqiKc51Kb62XppE5fAsS wbf0z5fI9Hc+XQ6zl8wDDKAgZg8CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRzVqkR OErlKJZS1PqJDKD8Msa7MDAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTQ3Ni5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qwowDQYJKoZIhvcNAQELBQADggEBAJllu8YkXmjDLSwEmNEbHGRvJZefUNLdet+e toXQQLfdLDpMyd8vCIQtzoOzuNsihH81I9IwXmMtAyiBXP9T6RaktjoZfw0h/F55 7+cpSYef9zLmr5mmWjk5fsbdggx2ZPwlxcz3IHPt5UazveDVzO6juaCGalszzd3+ VjIMK0uakeXb4io5C58URsDD8C641LZo6ZSTBRBPvpriyvMDlzbEWYOnpAQHsSo3 UuZaLPiVkT4E+8rhi7uxGhXbcid/GawvgPNT5mxU5dtsBujY+Wjwl6UwtsYaxX0J RFVx4mCeHXApE1ecVA5wsT2KakAyrScVpFBlKexPrzW7DEMPiIk= -----END CERTIFICATE-----Generated at Sat Mar 28 11:42:17 2026 by rpki-client