$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145526.roa File: AS145526.roa (raw, json) Hash identifier: QmofaDxkJ0Ng3wN/iW0k9Dyw4+7xkRxsD++19wkJb1g= Subject key identifier: 9A:D8:92:7A:C5:7B:4D:AC:0B:3C:64:B1:38:55:2E:49:F8:8B:46:59 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 0356AD04C9C90B5847E9975C48BC78DF3FFC796B Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145526.roa Signing time: Wed 04 Mar 2026 06:30:53 +0000 ROA not before: Wed 04 Mar 2026 06:25:53 +0000 ROA not after: Wed 03 Mar 2027 06:30:53 +0000 asID: 145526 IP address blocks: 240a:ab3c::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:56:ad:04:c9:c9:0b:58:47:e9:97:5c:48:bc:78:df:3f:fc:79:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:25:53 2026 GMT Not After : Mar 3 06:30:53 2027 GMT Subject: CN=9AD8927AC57B4DAC0B3C64B138552E49F88B4659 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:7c:71:7f:cd:d1:80:84:2b:a3:02:17:80:de: f8:c1:de:f4:0e:04:b5:1e:69:f3:68:b2:5a:ca:f3: 78:cd:80:96:57:28:7c:58:fd:11:88:3f:03:0f:2c: 3c:80:6f:60:7e:0d:92:43:b8:39:6b:09:33:c0:57: 9a:9a:3b:ab:ff:96:e6:66:d8:45:bf:93:3c:9c:d1: c9:9c:25:87:65:bd:fd:c5:5a:3f:69:25:a4:cb:c3: 80:af:b2:3b:cc:0f:9c:b5:23:99:22:6f:2d:7f:cf: 01:09:a5:a1:4f:c2:0d:42:b5:74:3b:28:b4:6d:b0: 7c:c8:58:85:14:da:64:6e:fa:99:0a:3a:80:84:42: eb:2e:c5:13:fc:40:39:84:f9:e2:4f:57:0b:5c:ad: a7:5b:6d:46:28:49:c2:30:16:67:21:d5:3e:d1:52: 5e:4d:47:ef:6a:da:17:47:30:aa:f9:07:4b:48:9a: 88:b2:6c:61:79:9b:c9:22:0b:11:4c:c9:c1:62:4f: c4:c5:07:fa:2e:fc:8d:38:1c:97:55:75:fc:fd:c3: e5:19:05:89:4a:a8:a9:c9:0c:15:5c:1f:a9:d9:b9: c3:8a:6c:04:a4:48:78:00:75:d8:5d:26:e5:ab:86: a8:b0:2d:0d:bc:a3:46:c0:d9:e4:01:ef:fe:48:e3: 61:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:D8:92:7A:C5:7B:4D:AC:0B:3C:64:B1:38:55:2E:49:F8:8B:46:59 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145526.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:ab3c::/32 Signature Algorithm: sha256WithRSAEncryption 3d:2f:b1:40:14:14:8e:70:d0:c4:13:e3:8c:66:22:ae:bd:34: 92:c8:4f:ed:08:7a:08:e0:ca:e9:dd:33:ad:fa:3f:15:f8:68: a4:14:43:e2:f0:2f:de:99:d8:7d:ae:58:13:e1:2f:1e:62:33: 9c:e6:d5:f7:b9:c9:7c:ad:63:41:2a:17:9c:8b:fd:8c:30:2d: b6:b3:23:8c:87:3a:91:5b:92:38:91:a4:0c:47:2f:3c:82:09: 98:8d:6b:85:02:fc:ad:ad:08:ef:88:2f:c0:8b:a9:21:fb:cb: 43:b6:53:9c:c2:62:bf:bc:89:3b:6d:ba:10:2a:7f:ea:2a:be: 20:55:2c:68:b0:a5:05:69:9b:60:e1:63:04:43:28:31:af:0b: b6:65:36:c9:39:e5:f7:1c:78:e1:45:e3:2e:0b:8d:b4:b6:da: a6:ba:85:08:16:0b:04:fa:12:23:bf:36:2e:28:82:02:05:bd: ec:55:43:06:f8:a0:4c:a5:73:b1:55:c7:fc:f7:7a:04:8e:24: 12:e5:d2:b4:49:a6:79:93:30:24:71:14:d0:b8:a0:e3:49:32: e0:14:20:1d:4e:2d:8b:04:9a:f6:d1:36:8e:ba:d8:80:33:12: 15:0f:22:50:ed:54:1c:33:74:20:22:3b:ef:d8:c7:a1:a4:a3: dc:e6:f9:59 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUA1atBMnJC1hH6ZdcSLx43z/8eWswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MjU1M1oX DTI3MDMwMzA2MzA1M1owMzExMC8GA1UEAxMoOUFEODkyN0FDNTdCNERBQzBCM0M2 NEIxMzg1NTJFNDlGODhCNDY1OTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMd8cX/N0YCEK6MCF4De+MHe9A4EtR5p82iyWsrzeM2AllcofFj9EYg/Aw8s PIBvYH4NkkO4OWsJM8BXmpo7q/+W5mbYRb+TPJzRyZwlh2W9/cVaP2klpMvDgK+y O8wPnLUjmSJvLX/PAQmloU/CDUK1dDsotG2wfMhYhRTaZG76mQo6gIRC6y7FE/xA OYT54k9XC1ytp1ttRihJwjAWZyHVPtFSXk1H72raF0cwqvkHS0iaiLJsYXmbySIL EUzJwWJPxMUH+i78jTgcl1V1/P3D5RkFiUqoqckMFVwfqdm5w4psBKRIeAB12F0m 5auGqLAtDbyjRsDZ5AHv/kjjYQ0CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSa2JJ6 xXtNrAs8ZLE4VS5J+ItGWTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTUyNi5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qzwwDQYJKoZIhvcNAQELBQADggEBAD0vsUAUFI5w0MQT44xmIq69NJLIT+0Iegjg yundM636PxX4aKQUQ+LwL96Z2H2uWBPhLx5iM5zm1fe5yXytY0EqF5yL/YwwLbaz I4yHOpFbkjiRpAxHLzyCCZiNa4UC/K2tCO+IL8CLqSH7y0O2U5zCYr+8iTttuhAq f+oqviBVLGiwpQVpm2DhYwRDKDGvC7ZlNsk55fcceOFF4y4LjbS22qa6hQgWCwT6 EiO/Ni4oggIFvexVQwb4oEylc7FVx/z3egSOJBLl0rRJpnmTMCRxFNC4oONJMuAU IB1OLYsEmvbRNo662IAzEhUPIlDtVBwzdCAiO+/Yx6Gko9zm+Vk= -----END CERTIFICATE-----Generated at Sat Mar 28 11:44:19 2026 by rpki-client