$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145477.roa File: AS145477.roa (raw, json) Hash identifier: j2piSxF4Qs7eJJLUcsR0XN0XLx6H+FZ4AYubeFpdbCo= Subject key identifier: A6:4B:E6:0F:16:D9:12:8C:06:65:9F:E1:DC:01:DC:B4:BE:90:AF:B0 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 5F544F18B9F24847C625ADCDF5292AF401FBA58D Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145477.roa Signing time: Wed 04 Mar 2026 06:22:06 +0000 ROA not before: Wed 04 Mar 2026 06:17:06 +0000 ROA not after: Wed 03 Mar 2027 06:22:06 +0000 asID: 145477 IP address blocks: 240a:ab0b::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:54:4f:18:b9:f2:48:47:c6:25:ad:cd:f5:29:2a:f4:01:fb:a5:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:17:06 2026 GMT Not After : Mar 3 06:22:06 2027 GMT Subject: CN=A64BE60F16D9128C06659FE1DC01DCB4BE90AFB0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:d2:28:9b:79:6e:c2:c2:de:09:d0:c9:a2:01: 7f:41:50:5e:a9:7b:aa:f4:f5:0d:27:87:e3:bb:a2: d4:c5:08:0b:f8:39:6d:78:80:81:a3:4f:a3:3a:e4: 0d:f9:34:5c:ab:fa:c4:8c:81:f2:95:ae:4a:29:8f: f0:a5:0c:36:3e:40:ae:be:13:ba:60:b8:86:9c:5a: 29:ff:8f:5f:78:9a:e6:de:6f:21:41:71:62:39:ec: 53:08:d9:19:b3:e8:85:e3:6d:d2:fe:4e:3f:ee:4f: f8:e2:9b:b5:1c:af:5b:14:fa:25:79:6a:84:e5:af: 74:31:73:f8:f7:e5:8d:85:1a:fa:db:05:ab:6f:ba: b6:41:70:1a:28:af:34:31:83:18:4e:cb:0c:0f:7b: 69:58:1a:93:f2:eb:bb:3f:88:78:59:d7:1d:15:44: 4a:0f:4d:e4:0d:e9:a7:b0:6d:da:24:81:b4:ba:46: a5:6c:8c:3f:26:0a:95:4e:9a:0a:ac:2a:42:00:d1: f5:fa:b8:73:f8:3f:e8:9e:d7:ee:c0:43:c8:8c:f2: 20:2d:fa:02:63:39:72:54:d3:98:7f:f4:19:e0:92: 19:b6:a5:54:05:84:75:39:07:78:f2:1e:11:5e:85: 8a:ff:6c:f1:5e:4e:39:79:a8:b3:a6:1c:be:74:df: 9a:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:4B:E6:0F:16:D9:12:8C:06:65:9F:E1:DC:01:DC:B4:BE:90:AF:B0 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145477.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:ab0b::/32 Signature Algorithm: sha256WithRSAEncryption db:be:2c:85:9d:6c:a5:be:70:80:02:39:1e:e2:75:60:7a:e2: 63:67:1f:ed:01:21:6a:75:93:bd:27:f6:67:54:0c:a3:33:f6: 70:22:d7:d7:47:df:ef:d8:60:70:e2:98:52:72:7a:58:5d:03: 6d:9b:5b:4c:60:6d:ce:50:67:6c:09:b4:fb:a1:ae:eb:d6:12: e9:22:da:9e:ba:d9:94:f1:2e:6f:b6:a7:66:29:e7:76:df:0b: 56:bf:95:54:06:63:0c:ee:03:a5:05:23:cf:bc:40:23:6b:bc: 41:51:b6:b1:6a:d2:f1:8f:62:72:b5:66:63:b7:87:ea:1f:bf: d5:de:f5:a6:3a:05:c7:78:79:0c:f5:5f:e2:dd:fb:cb:05:74: af:da:16:a3:6f:49:e7:a5:30:a4:2d:fe:a9:b3:29:58:2e:ef: e3:f0:5d:bc:6f:fc:8b:96:ac:a9:a0:c3:6c:ff:8e:a2:4c:41: 6a:8a:d2:ad:8f:76:97:ef:d4:ea:2c:ba:bf:76:58:61:c6:7d: 3b:dc:28:21:ec:24:cc:d8:65:01:51:8c:93:78:5f:93:4d:ca: 26:d3:40:d4:38:0d:31:3e:ef:6e:56:e7:48:57:31:96:84:72: 63:48:37:ab:c9:ad:c8:e2:7c:f1:6c:87:5f:c4:55:20:6e:bd: 0b:e1:b9:5a -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUX1RPGLnySEfGJa3N9Skq9AH7pY0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTcwNloX DTI3MDMwMzA2MjIwNlowMzExMC8GA1UEAxMoQTY0QkU2MEYxNkQ5MTI4QzA2NjU5 RkUxREMwMURDQjRCRTkwQUZCMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJLSKJt5bsLC3gnQyaIBf0FQXql7qvT1DSeH47ui1MUIC/g5bXiAgaNPozrk Dfk0XKv6xIyB8pWuSimP8KUMNj5Arr4TumC4hpxaKf+PX3ia5t5vIUFxYjnsUwjZ GbPoheNt0v5OP+5P+OKbtRyvWxT6JXlqhOWvdDFz+PfljYUa+tsFq2+6tkFwGiiv NDGDGE7LDA97aVgak/Lruz+IeFnXHRVESg9N5A3pp7Bt2iSBtLpGpWyMPyYKlU6a CqwqQgDR9fq4c/g/6J7X7sBDyIzyIC36AmM5clTTmH/0GeCSGbalVAWEdTkHePIe EV6Fiv9s8V5OOXmos6YcvnTfmkcCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSmS+YP FtkSjAZln+HcAdy0vpCvsDAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTQ3Ny5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qwswDQYJKoZIhvcNAQELBQADggEBANu+LIWdbKW+cIACOR7idWB64mNnH+0BIWp1 k70n9mdUDKMz9nAi19dH3+/YYHDimFJyelhdA22bW0xgbc5QZ2wJtPuhruvWEuki 2p662ZTxLm+2p2Yp53bfC1a/lVQGYwzuA6UFI8+8QCNrvEFRtrFq0vGPYnK1ZmO3 h+ofv9Xe9aY6Bcd4eQz1X+Ld+8sFdK/aFqNvSeelMKQt/qmzKVgu7+PwXbxv/IuW rKmgw2z/jqJMQWqK0q2Pdpfv1Oosur92WGHGfTvcKCHsJMzYZQFRjJN4X5NNyibT QNQ4DTE+725W50hXMZaEcmNIN6vJrcjifPFsh1/EVSBuvQvhuVo= -----END CERTIFICATE-----Generated at Sat Mar 28 13:16:42 2026 by rpki-client