$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145507.roa File: AS145507.roa (raw, json) Hash identifier: eb4JIlxZK2+LyY3wS5HIcbmPg3WDLq5ZTuSQq/hOFiw= Subject key identifier: 85:D8:55:01:5D:63:DD:F6:66:74:23:36:4A:11:17:ED:38:70:51:F9 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 719DCA8D9E16E7D45DDABF6134B55B7CA6D203C3 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145507.roa Signing time: Wed 04 Mar 2026 06:22:36 +0000 ROA not before: Wed 04 Mar 2026 06:17:36 +0000 ROA not after: Wed 03 Mar 2027 06:22:36 +0000 asID: 145507 IP address blocks: 240a:ab29::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:9d:ca:8d:9e:16:e7:d4:5d:da:bf:61:34:b5:5b:7c:a6:d2:03:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:17:36 2026 GMT Not After : Mar 3 06:22:36 2027 GMT Subject: CN=85D855015D63DDF6667423364A1117ED387051F9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:35:ff:07:cc:c5:52:f4:5a:c0:01:59:92:da: 1f:64:a2:f0:22:d2:c4:4f:a1:9e:2f:5d:35:8c:82: 1f:82:0c:66:1d:25:06:ba:9f:92:b9:a5:8d:5f:e9: c3:97:e1:58:53:7f:e2:62:1e:0f:bf:5f:b3:c6:40: 37:95:e9:f2:35:d7:5f:fc:6d:f6:9c:18:2e:17:32: 0b:14:82:f8:cd:a5:a7:4e:21:6c:45:d5:46:cf:13: c8:cc:87:e1:6b:9b:fe:cb:f4:3b:c0:b8:9a:f9:76: a4:3a:71:a1:96:5a:e9:5f:c6:ce:f7:64:9d:08:d8: dc:96:5b:8b:b2:d8:6c:5b:3f:4d:73:27:28:b6:27: a6:3e:51:ff:b2:20:7b:53:d9:6e:a1:3f:68:df:63: d8:20:e4:fb:a4:df:bf:e5:03:ad:a5:5a:70:44:7e: 8f:8c:d4:22:fd:dc:ae:c0:12:0d:4f:a7:42:12:2a: 02:6f:df:25:28:30:c3:a8:bc:f4:60:a5:6d:e5:16: 57:5c:d9:18:d7:dc:e1:a3:4c:7e:9d:43:2a:09:56: 72:e6:f0:b0:db:ef:56:ab:22:33:68:ca:56:bb:71: a8:f1:b8:e0:ba:c3:2c:2b:9a:a8:d9:12:ad:7e:8a: 8b:83:23:13:bf:6a:0c:f1:28:ab:6a:10:6c:d9:54: 31:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:D8:55:01:5D:63:DD:F6:66:74:23:36:4A:11:17:ED:38:70:51:F9 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145507.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:ab29::/32 Signature Algorithm: sha256WithRSAEncryption 23:a5:b6:1f:7c:aa:f5:34:7b:81:1b:b3:5f:17:bf:0b:60:93: 84:47:a9:0b:28:64:58:cd:23:e1:b2:cf:b8:24:7c:b8:50:d2: 3e:83:05:02:20:e4:f4:79:15:1d:ea:88:8b:fe:00:a6:4d:a3: a8:19:59:de:68:8f:3b:1d:b7:ec:56:af:11:9d:46:c6:ec:d2: 10:3b:63:ec:96:c5:4f:95:8a:30:8c:85:3b:af:db:7d:0b:07: a8:3c:21:e1:2c:46:16:25:46:fd:a4:c2:99:8a:39:d0:26:96: 82:10:23:e7:b3:34:fb:a7:06:1c:b5:43:43:4f:e8:7b:fe:b0: ed:c4:2d:b3:cd:9c:ac:b4:9c:bf:77:71:47:7d:ce:81:f5:d0: 14:42:31:b5:8e:07:68:96:00:42:fb:22:1c:59:4c:e5:73:df: af:14:7b:3b:5e:60:86:5d:45:0c:60:22:16:18:cd:f4:b0:e6: 19:9b:7a:12:a2:c7:d1:27:e9:98:7f:fa:e0:0c:a6:db:99:70: 1e:b5:5a:4d:10:0c:e6:5e:4e:6a:bc:e2:f4:22:14:8e:98:04: f2:1c:66:a9:ad:6e:12:87:67:54:09:6b:11:e9:c4:02:9c:52: 68:ae:a0:29:33:89:ad:12:7b:d6:d4:db:62:07:14:6e:5a:d8: 09:e1:c0:73 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUcZ3KjZ4W59Rd2r9hNLVbfKbSA8MwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTczNloX DTI3MDMwMzA2MjIzNlowMzExMC8GA1UEAxMoODVEODU1MDE1RDYzRERGNjY2NzQy MzM2NEExMTE3RUQzODcwNTFGOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAPQ1/wfMxVL0WsABWZLaH2Si8CLSxE+hni9dNYyCH4IMZh0lBrqfkrmljV/p w5fhWFN/4mIeD79fs8ZAN5Xp8jXXX/xt9pwYLhcyCxSC+M2lp04hbEXVRs8TyMyH 4Wub/sv0O8C4mvl2pDpxoZZa6V/GzvdknQjY3JZbi7LYbFs/TXMnKLYnpj5R/7Ig e1PZbqE/aN9j2CDk+6Tfv+UDraVacER+j4zUIv3crsASDU+nQhIqAm/fJSgww6i8 9GClbeUWV1zZGNfc4aNMfp1DKglWcubwsNvvVqsiM2jKVrtxqPG44LrDLCuaqNkS rX6Ki4MjE79qDPEoq2oQbNlUMRsCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSF2FUB XWPd9mZ0IzZKERftOHBR+TAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTUwNy5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qykwDQYJKoZIhvcNAQELBQADggEBACOlth98qvU0e4Ebs18Xvwtgk4RHqQsoZFjN I+Gyz7gkfLhQ0j6DBQIg5PR5FR3qiIv+AKZNo6gZWd5ojzsdt+xWrxGdRsbs0hA7 Y+yWxU+VijCMhTuv230LB6g8IeEsRhYlRv2kwpmKOdAmloIQI+ezNPunBhy1Q0NP 6Hv+sO3ELbPNnKy0nL93cUd9zoH10BRCMbWOB2iWAEL7IhxZTOVz368UezteYIZd RQxgIhYYzfSw5hmbehKix9En6Zh/+uAMptuZcB61Wk0QDOZeTmq84vQiFI6YBPIc ZqmtbhKHZ1QJaxHpxAKcUmiuoCkzia0Se9bU22IHFG5a2AnhwHM= -----END CERTIFICATE-----Generated at Sat Mar 28 11:41:19 2026 by rpki-client