$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145506.roa File: AS145506.roa (raw, json) Hash identifier: 1u6txE5+zxMNvXlQReamsiwP5WE3XUqYjIIox1b14ZM= Subject key identifier: B4:CE:27:EF:7E:22:A2:DF:12:7E:D2:92:54:AB:58:71:BC:8E:32:6A Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 1949E472DE916ADABCBC183DFA02D4E7E28E1F73 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145506.roa Signing time: Wed 04 Mar 2026 06:19:28 +0000 ROA not before: Wed 04 Mar 2026 06:14:28 +0000 ROA not after: Wed 03 Mar 2027 06:19:28 +0000 asID: 145506 IP address blocks: 240a:ab28::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:49:e4:72:de:91:6a:da:bc:bc:18:3d:fa:02:d4:e7:e2:8e:1f:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:14:28 2026 GMT Not After : Mar 3 06:19:28 2027 GMT Subject: CN=B4CE27EF7E22A2DF127ED29254AB5871BC8E326A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:5d:3d:d6:e5:e1:0c:6e:1e:a3:8a:66:28:a4: 47:c1:a4:94:30:2a:4c:46:cc:0c:21:ab:f8:8c:5a: cf:de:cb:97:8e:94:dd:0c:1f:7b:02:4c:d9:fe:d7: d5:d3:0c:fc:e3:fa:a3:a6:85:d2:b4:2a:d5:57:7e: eb:08:ac:02:c5:82:a4:70:7a:b5:58:6e:af:88:4a: 82:db:a4:a4:e4:4e:13:d2:ff:94:4d:52:9c:ff:af: 38:bb:58:4b:5c:5c:7c:cf:40:8f:71:c9:64:da:2d: f7:72:f8:a2:2f:99:44:13:7d:c0:0c:97:cc:77:c3: 06:3e:57:6b:02:fb:5b:ee:9f:8e:3a:ae:68:a6:92: 35:b7:4e:e3:bc:51:a2:0c:ff:65:dc:a6:fa:b2:b5: 90:cd:3b:37:9d:91:c2:6a:08:c5:99:ef:56:48:d6: ff:9b:70:81:2a:60:30:56:83:64:6b:db:3b:65:b0: b6:0c:ec:8f:f9:1d:07:c9:0c:fd:7d:81:bc:43:78: 4e:06:83:06:4e:8a:29:d7:12:f8:d6:e1:2b:f7:b9: db:f3:02:23:27:63:fb:89:d6:43:d9:d1:29:d5:f4: 6a:7b:ef:da:51:7f:c0:22:57:eb:1b:c2:75:9e:64: 18:f3:ad:8e:02:97:b4:f2:bb:33:bc:c3:a5:4d:15: 6e:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:CE:27:EF:7E:22:A2:DF:12:7E:D2:92:54:AB:58:71:BC:8E:32:6A X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145506.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:ab28::/32 Signature Algorithm: sha256WithRSAEncryption 71:89:70:1b:6b:a2:a9:fa:a6:01:f7:ad:2a:66:47:5d:fc:fa: 87:42:06:64:32:77:5c:8a:d3:56:dc:86:c5:89:69:e6:80:fb: 1b:ea:2d:f1:82:7b:3e:f7:00:58:32:c8:a7:33:7b:19:bc:d8: 58:aa:d9:e9:c7:1f:24:3c:59:82:67:cd:87:4b:8b:b0:9d:35: 44:1b:ab:35:cb:40:e2:3b:8e:64:5f:ef:11:73:49:82:82:81: ac:94:f2:37:63:1d:da:77:37:53:e9:42:dc:6e:d0:b4:8f:42: a1:eb:00:1d:2e:9b:5b:cf:07:fe:d4:00:bb:fa:b0:b6:e6:e2: 63:8e:5d:69:2d:d0:6d:26:e5:62:db:44:56:19:9e:fe:53:42: 56:6b:1a:65:b4:f2:27:60:dd:88:a7:a8:bc:87:ed:60:1b:cc: 29:61:aa:3f:15:23:e4:c8:fa:61:ba:b8:55:c1:98:7e:5b:c5: 81:5f:11:24:32:4c:2b:ac:84:c9:0b:d3:3e:e7:c0:b6:c5:0c: e1:ae:2b:70:4b:18:56:e0:8c:8b:91:be:2f:ea:7e:91:04:aa: 99:77:55:eb:4f:bd:a3:c8:92:d8:40:fd:20:e1:f7:08:f1:c2: e0:b2:bc:73:1c:dc:7f:e1:a5:5a:79:d5:79:fe:75:a1:63:b6: 47:29:d3:32 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUGUnkct6Ratq8vBg9+gLU5+KOH3MwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTQyOFoX DTI3MDMwMzA2MTkyOFowMzExMC8GA1UEAxMoQjRDRTI3RUY3RTIyQTJERjEyN0VE MjkyNTRBQjU4NzFCQzhFMzI2QTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJhdPdbl4QxuHqOKZiikR8GklDAqTEbMDCGr+Ixaz97Ll46U3QwfewJM2f7X 1dMM/OP6o6aF0rQq1Vd+6wisAsWCpHB6tVhur4hKgtukpOROE9L/lE1SnP+vOLtY S1xcfM9Aj3HJZNot93L4oi+ZRBN9wAyXzHfDBj5XawL7W+6fjjquaKaSNbdO47xR ogz/Zdym+rK1kM07N52RwmoIxZnvVkjW/5twgSpgMFaDZGvbO2Wwtgzsj/kdB8kM /X2BvEN4TgaDBk6KKdcS+NbhK/e52/MCIydj+4nWQ9nRKdX0anvv2lF/wCJX6xvC dZ5kGPOtjgKXtPK7M7zDpU0VbhECAwEAAaOCAcUwggHBMB0GA1UdDgQWBBS0zifv fiKi3xJ+0pJUq1hxvI4yajAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTUwNi5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qygwDQYJKoZIhvcNAQELBQADggEBAHGJcBtroqn6pgH3rSpmR138+odCBmQyd1yK 01bchsWJaeaA+xvqLfGCez73AFgyyKczexm82Fiq2enHHyQ8WYJnzYdLi7CdNUQb qzXLQOI7jmRf7xFzSYKCgayU8jdjHdp3N1PpQtxu0LSPQqHrAB0um1vPB/7UALv6 sLbm4mOOXWkt0G0m5WLbRFYZnv5TQlZrGmW08idg3YinqLyH7WAbzClhqj8VI+TI +mG6uFXBmH5bxYFfESQyTCushMkL0z7nwLbFDOGuK3BLGFbgjIuRvi/qfpEEqpl3 VetPvaPIkthA/SDh9wjxwuCyvHMc3H/hpVp51Xn+daFjtkcp0zI= -----END CERTIFICATE-----Generated at Sat Mar 28 11:41:59 2026 by rpki-client