$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145524.roa File: AS145524.roa (raw, json) Hash identifier: qIkHZpCuCGGz4Z79NjugmATVvSevpLQBhDuNzCbBt1Q= Subject key identifier: EB:3A:0D:C2:86:5C:1A:11:63:B5:DB:6C:E1:E0:D1:1C:F8:82:CF:ED Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 693F91F9B2DE2F7307C03CE3AB8B359D4DAA4A5D Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145524.roa Signing time: Wed 04 Mar 2026 06:30:38 +0000 ROA not before: Wed 04 Mar 2026 06:25:38 +0000 ROA not after: Wed 03 Mar 2027 06:30:38 +0000 asID: 145524 IP address blocks: 240a:ab3a::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:3f:91:f9:b2:de:2f:73:07:c0:3c:e3:ab:8b:35:9d:4d:aa:4a:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:25:38 2026 GMT Not After : Mar 3 06:30:38 2027 GMT Subject: CN=EB3A0DC2865C1A1163B5DB6CE1E0D11CF882CFED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:44:6d:71:91:b6:22:68:41:a7:bd:2e:7f:5c: 2c:0f:ee:a7:c4:7f:cb:da:fb:02:a8:e6:56:cd:b0: 8e:97:bd:e8:de:70:37:7f:f9:c2:c0:fc:c7:0c:1a: 28:a4:0d:1c:ca:68:06:fb:05:fa:f6:7a:2d:77:d2: ff:e5:50:6c:f9:b2:03:76:63:20:24:6a:5b:54:89: 3b:50:e3:0a:4e:70:b8:73:e2:65:93:e2:92:3b:ce: 3b:0c:97:cd:54:5e:d9:5b:f8:1e:25:f7:e7:0c:9e: 52:09:70:68:73:69:12:26:9f:88:c7:47:62:f2:16: 47:9e:70:0a:ba:9b:ef:3d:07:6c:2c:2c:32:a1:f6: d7:9a:06:0e:24:67:f5:b4:f3:08:99:35:46:ab:33: aa:80:ab:37:ea:e5:7d:ba:c7:ae:51:ee:c5:c4:7b: 22:a0:80:09:84:48:88:98:79:e6:5e:3c:6a:78:81: 75:1e:bc:3c:ec:77:4c:7e:bc:54:c6:3e:db:07:a6: c1:34:b5:77:d1:0b:e7:b2:2c:0e:97:d1:be:e8:fc: ba:ac:0e:6c:4c:98:d0:8f:1f:22:a2:ee:a5:76:0c: 2d:73:8b:36:8f:05:3c:3a:6e:2e:55:26:1f:8c:74: a4:a8:3a:90:ba:bf:27:a7:aa:81:d6:a1:a0:54:b9: e6:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:3A:0D:C2:86:5C:1A:11:63:B5:DB:6C:E1:E0:D1:1C:F8:82:CF:ED X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145524.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:ab3a::/32 Signature Algorithm: sha256WithRSAEncryption 1b:5b:06:84:81:3f:c5:af:bf:ad:fe:4c:e6:97:86:e9:af:ae: 1c:30:9a:ad:07:74:da:11:bd:92:ff:79:92:94:15:d2:bd:ad: 98:e1:9f:e5:31:bb:a6:c7:5d:03:11:24:4f:fc:4c:9a:03:34: aa:51:49:d7:92:1c:fb:cb:32:43:48:35:13:c8:3e:e7:f4:3a: bf:58:c5:cc:22:2d:e0:e1:7e:55:4b:e7:24:5a:30:44:8d:e6: fe:e1:51:c6:3d:4f:26:ec:d3:27:74:f5:ec:75:74:fe:1a:d6: 2f:0f:08:7c:38:f5:17:ed:34:92:47:31:c0:25:23:66:e2:59: c7:3a:fd:3f:18:bd:ff:ce:36:b5:79:67:28:f5:dd:27:f4:16: 66:1b:20:93:75:a2:be:04:1c:89:5a:16:78:66:2f:2a:0c:49: 06:80:5f:76:a4:7b:94:8a:f4:c3:58:a3:5c:d1:3d:17:bf:9e: 20:bf:59:1a:a6:73:2f:43:a5:31:37:5f:77:54:4a:62:e6:78: 02:db:d0:32:51:82:ef:7b:28:f8:57:a6:4d:a2:cc:9d:f8:36: 51:76:5b:91:12:de:4a:e1:6a:91:4c:73:aa:b7:dc:44:75:6d: b3:e9:b1:d3:bc:67:fa:33:e8:75:d2:f2:25:0e:52:ba:25:d6: 58:50:4c:04 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUaT+R+bLeL3MHwDzjq4s1nU2qSl0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MjUzOFoX DTI3MDMwMzA2MzAzOFowMzExMC8GA1UEAxMoRUIzQTBEQzI4NjVDMUExMTYzQjVE QjZDRTFFMEQxMUNGODgyQ0ZFRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJxEbXGRtiJoQae9Ln9cLA/up8R/y9r7AqjmVs2wjpe96N5wN3/5wsD8xwwa KKQNHMpoBvsF+vZ6LXfS/+VQbPmyA3ZjICRqW1SJO1DjCk5wuHPiZZPikjvOOwyX zVRe2Vv4HiX35wyeUglwaHNpEiafiMdHYvIWR55wCrqb7z0HbCwsMqH215oGDiRn 9bTzCJk1RqszqoCrN+rlfbrHrlHuxcR7IqCACYRIiJh55l48aniBdR68POx3TH68 VMY+2wemwTS1d9EL57IsDpfRvuj8uqwObEyY0I8fIqLupXYMLXOLNo8FPDpuLlUm H4x0pKg6kLq/J6eqgdahoFS55qECAwEAAaOCAcUwggHBMB0GA1UdDgQWBBTrOg3C hlwaEWO122zh4NEc+ILP7TAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTUyNC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qzowDQYJKoZIhvcNAQELBQADggEBABtbBoSBP8Wvv63+TOaXhumvrhwwmq0HdNoR vZL/eZKUFdK9rZjhn+Uxu6bHXQMRJE/8TJoDNKpRSdeSHPvLMkNINRPIPuf0Or9Y xcwiLeDhflVL5yRaMESN5v7hUcY9Tybs0yd09ex1dP4a1i8PCHw49RftNJJHMcAl I2biWcc6/T8Yvf/ONrV5Zyj13Sf0FmYbIJN1or4EHIlaFnhmLyoMSQaAX3ake5SK 9MNYo1zRPRe/niC/WRqmcy9DpTE3X3dUSmLmeALb0DJRgu97KPhXpk2izJ34NlF2 W5ES3krhapFMc6q33ER1bbPpsdO8Z/oz6HXS8iUOUrol1lhQTAQ= -----END CERTIFICATE-----Generated at Sat Mar 28 11:44:20 2026 by rpki-client