$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145497.roa File: AS145497.roa (raw, json) Hash identifier: 6QmOtAYvaudPO+DPKiWcsPG2siDyJVodfluk7w6FAq4= Subject key identifier: 95:A8:77:D0:D0:AE:A5:E8:16:BD:9E:A9:E9:76:6B:50:07:9D:AD:F2 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 7E1210DD8CDF7006F7653655B6E391844AEFDE84 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145497.roa Signing time: Wed 04 Mar 2026 06:21:49 +0000 ROA not before: Wed 04 Mar 2026 06:16:49 +0000 ROA not after: Wed 03 Mar 2027 06:21:49 +0000 asID: 145497 IP address blocks: 240a:ab1f::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:12:10:dd:8c:df:70:06:f7:65:36:55:b6:e3:91:84:4a:ef:de:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:16:49 2026 GMT Not After : Mar 3 06:21:49 2027 GMT Subject: CN=95A877D0D0AEA5E816BD9EA9E9766B50079DADF2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:3e:08:a7:46:fd:62:12:b8:1b:95:83:63:7d: 1a:58:f2:68:23:e2:d3:8d:01:34:a4:e8:63:dd:37: 54:55:27:06:4b:ce:2e:92:d6:27:83:8b:30:b3:b4: 3c:29:88:48:81:73:aa:f3:26:6b:bc:24:54:80:7d: c5:57:9c:cc:e1:09:d0:9e:99:88:ff:8a:f8:68:5a: 1a:09:b8:d9:a6:d9:65:61:53:ab:71:06:92:de:16: 41:1c:8e:19:ef:84:c6:62:30:d8:26:ab:4d:3b:34: 70:7f:7c:ab:e9:46:84:58:a4:60:ad:9d:39:2f:09: cd:47:5d:0a:45:f4:13:1c:df:03:ac:c2:d0:10:5e: 37:f5:03:15:76:c7:4f:09:6d:cd:b1:20:78:30:8b: 31:df:a3:54:76:aa:1d:81:00:e6:13:72:c1:e3:a9: 9e:64:6b:d8:ea:ea:96:0e:f6:4d:4f:8f:24:a0:6d: 93:81:13:11:a3:ee:99:a3:c9:63:b8:a9:c0:78:b1: c6:8a:72:28:4c:57:0a:da:bb:0f:a2:6b:3f:68:c5: 1c:92:3b:77:18:a3:45:ef:76:e3:8d:04:33:62:be: 2c:22:74:27:41:b9:8a:75:a0:bd:d9:83:d1:91:c3: 7b:d0:dd:1e:f7:1b:5b:c4:f9:e8:2a:89:b5:40:0e: ba:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:A8:77:D0:D0:AE:A5:E8:16:BD:9E:A9:E9:76:6B:50:07:9D:AD:F2 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145497.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:ab1f::/32 Signature Algorithm: sha256WithRSAEncryption d6:f1:5b:e0:3c:59:10:ec:82:ca:bc:6b:de:02:02:18:97:93: 4f:9f:f0:49:13:68:51:85:5d:89:d0:81:a5:a5:3f:c3:c6:bd: 55:fe:07:39:e2:d2:fe:df:e6:dc:a1:5a:bb:38:34:2a:46:3d: f3:a2:5e:45:a3:5d:50:85:ba:3e:9b:32:d6:18:ac:f9:ee:f9: 5f:0b:76:58:95:bb:20:ab:08:7d:df:cf:94:9f:18:70:ee:41: 71:46:0d:60:e5:b0:ce:49:8a:44:dc:5a:87:c5:2a:a3:9c:96: d7:0f:6b:d6:2b:e4:33:90:fc:fd:0a:90:f7:ef:f8:e6:87:bf: c1:52:a3:5e:57:1c:6b:63:81:78:a6:38:08:22:8b:58:7d:a9: eb:72:79:07:c4:8e:d9:d4:c2:75:8d:81:c3:78:06:a1:bf:ef: e4:9a:61:0f:95:26:06:83:97:17:69:85:0d:a6:0a:84:c8:88: 4e:9f:09:3a:c6:50:01:6a:b0:23:e3:1b:7f:44:c8:71:2f:4e: 17:89:90:06:d5:ed:eb:e4:8c:cf:9f:b3:a0:8f:bf:7a:b1:1b: d2:a5:8d:7e:b4:80:92:0d:2b:34:bd:a0:11:19:aa:1b:1f:77: 3e:d6:95:ad:a4:04:f7:e6:45:7d:63:b4:b8:cf:e6:75:91:b4: 75:2a:d1:a2 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUfhIQ3YzfcAb3ZTZVtuORhErv3oQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTY0OVoX DTI3MDMwMzA2MjE0OVowMzExMC8GA1UEAxMoOTVBODc3RDBEMEFFQTVFODE2QkQ5 RUE5RTk3NjZCNTAwNzlEQURGMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALE+CKdG/WISuBuVg2N9GljyaCPi040BNKToY903VFUnBkvOLpLWJ4OLMLO0 PCmISIFzqvMma7wkVIB9xVeczOEJ0J6ZiP+K+GhaGgm42abZZWFTq3EGkt4WQRyO Ge+ExmIw2CarTTs0cH98q+lGhFikYK2dOS8JzUddCkX0ExzfA6zC0BBeN/UDFXbH TwltzbEgeDCLMd+jVHaqHYEA5hNyweOpnmRr2Orqlg72TU+PJKBtk4ETEaPumaPJ Y7ipwHixxopyKExXCtq7D6JrP2jFHJI7dxijRe92440EM2K+LCJ0J0G5inWgvdmD 0ZHDe9DdHvcbW8T56CqJtUAOut0CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSVqHfQ 0K6l6Ba9nqnpdmtQB52t8jAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTQ5Ny5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qx8wDQYJKoZIhvcNAQELBQADggEBANbxW+A8WRDsgsq8a94CAhiXk0+f8EkTaFGF XYnQgaWlP8PGvVX+Bzni0v7f5tyhWrs4NCpGPfOiXkWjXVCFuj6bMtYYrPnu+V8L dliVuyCrCH3fz5SfGHDuQXFGDWDlsM5JikTcWofFKqOcltcPa9Yr5DOQ/P0KkPfv +OaHv8FSo15XHGtjgXimOAgii1h9qetyeQfEjtnUwnWNgcN4BqG/7+SaYQ+VJgaD lxdphQ2mCoTIiE6fCTrGUAFqsCPjG39EyHEvTheJkAbV7evkjM+fs6CPv3qxG9Kl jX60gJINKzS9oBEZqhsfdz7Wla2kBPfmRX1jtLjP5nWRtHUq0aI= -----END CERTIFICATE-----Generated at Sat Mar 28 11:42:06 2026 by rpki-client