$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145541.roa File: AS145541.roa (raw, json) Hash identifier: vGADnfW5tHJ9a3isMY73FFZ721XB8Fe9ThHaKMamf2s= Subject key identifier: CB:37:97:79:FE:F7:E1:E1:F6:5B:19:BA:A5:BC:FC:00:F7:0B:C2:7F Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 45CBC4A9156C637FB16FF84FF1CC6EBD24812B39 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145541.roa Signing time: Wed 04 Mar 2026 06:29:45 +0000 ROA not before: Wed 04 Mar 2026 06:24:45 +0000 ROA not after: Wed 03 Mar 2027 06:29:45 +0000 asID: 145541 IP address blocks: 240a:ab4b::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:cb:c4:a9:15:6c:63:7f:b1:6f:f8:4f:f1:cc:6e:bd:24:81:2b:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:24:45 2026 GMT Not After : Mar 3 06:29:45 2027 GMT Subject: CN=CB379779FEF7E1E1F65B19BAA5BCFC00F70BC27F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:4c:72:06:6f:a8:d3:1c:5f:cd:b0:f9:06:3e: c2:cb:2d:bf:c6:60:9f:05:dc:d3:bc:a5:95:93:58: 30:85:7c:5d:88:36:39:ae:71:d4:da:c5:f8:c9:f5: d0:c7:1b:4a:e4:72:05:af:9d:df:aa:e8:d2:ce:9d: 0c:35:5f:0b:2f:bb:e8:7e:34:bb:50:4a:0f:3d:b8: d3:f8:bd:54:92:53:2c:c5:4a:06:58:2e:75:12:a2: 0c:2f:57:ec:9f:fc:f8:3b:ec:5b:8f:98:82:5a:c9: 0d:dc:c6:a3:77:88:e1:58:e2:6b:85:7f:0f:fc:98: 59:b0:b7:7b:5a:99:62:b8:bb:a9:f2:c4:c2:9e:01: aa:82:10:36:e8:00:1d:67:1f:61:79:14:41:a3:05: 37:0f:a5:94:da:f8:19:eb:ec:d8:08:1f:24:84:c6: c5:e1:a8:5b:9c:d1:f3:57:e2:7f:58:57:5b:e0:21: 21:c7:4a:c9:bc:6c:fb:ae:e0:9f:0f:df:f7:f4:ce: 08:48:7f:cf:42:cf:67:fd:52:79:c1:63:ac:33:8b: 5e:d2:68:fd:b6:17:fb:66:5e:5b:b6:5f:64:2f:0d: 2a:82:61:34:19:a0:7b:24:82:da:7f:14:c8:6d:b9: 96:00:a3:18:5b:b9:a8:99:e9:95:f9:e0:78:ae:49: 0e:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:37:97:79:FE:F7:E1:E1:F6:5B:19:BA:A5:BC:FC:00:F7:0B:C2:7F X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145541.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:ab4b::/32 Signature Algorithm: sha256WithRSAEncryption b7:e7:77:42:17:f7:93:ec:c6:33:61:8a:2d:c5:c9:e3:1f:14: 46:62:93:83:12:35:94:45:75:da:8c:e3:fc:16:c2:4a:02:96: 65:f0:2b:85:4a:ae:81:11:d8:e2:f7:3c:4c:4c:76:e8:09:90: 91:13:8a:84:09:b9:24:0a:28:4c:9c:b1:9d:a0:51:4c:ba:e6: b6:69:d9:fc:f5:63:d2:6a:19:af:3b:c1:7b:c9:2e:62:52:a4: 18:ca:1a:9a:e3:cc:6a:36:6c:79:08:2c:bf:21:67:ee:fc:f9: 69:6b:c8:a4:83:29:94:e4:f7:a1:f8:c4:52:07:3b:60:bc:46: 06:24:ab:d5:c7:0a:d1:8d:bf:64:46:7c:50:42:08:29:04:46: fb:4e:51:9f:ce:d0:05:88:07:f0:1b:4d:d1:ba:c3:ad:2c:f1: 34:4e:a4:2d:72:47:77:3a:f7:29:58:0a:50:0d:91:35:91:eb: 83:0d:72:b5:04:19:79:b4:dd:04:1c:39:cf:ad:30:aa:11:02: f2:99:9d:3e:1f:eb:52:b7:88:c2:24:52:49:c8:b9:fe:e5:2e: d7:ef:db:74:8b:f3:39:47:1a:15:dc:95:1a:16:f8:8a:4c:19: 86:2b:11:3e:61:51:c6:1b:17:37:2f:7c:0f:a7:2b:2f:84:8a: 90:43:48:3f -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIURcvEqRVsY3+xb/hP8cxuvSSBKzkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MjQ0NVoX DTI3MDMwMzA2Mjk0NVowMzExMC8GA1UEAxMoQ0IzNzk3NzlGRUY3RTFFMUY2NUIx OUJBQTVCQ0ZDMDBGNzBCQzI3RjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK1McgZvqNMcX82w+QY+wsstv8ZgnwXc07yllZNYMIV8XYg2Oa5x1NrF+Mn1 0McbSuRyBa+d36ro0s6dDDVfCy+76H40u1BKDz240/i9VJJTLMVKBlgudRKiDC9X 7J/8+DvsW4+YglrJDdzGo3eI4Vjia4V/D/yYWbC3e1qZYri7qfLEwp4BqoIQNugA HWcfYXkUQaMFNw+llNr4Gevs2AgfJITGxeGoW5zR81fif1hXW+AhIcdKybxs+67g nw/f9/TOCEh/z0LPZ/1SecFjrDOLXtJo/bYX+2ZeW7ZfZC8NKoJhNBmgeySC2n8U yG25lgCjGFu5qJnplfngeK5JDpsCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBTLN5d5 /vfh4fZbGbqlvPwA9wvCfzAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTU0MS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK q0swDQYJKoZIhvcNAQELBQADggEBALfnd0IX95PsxjNhii3FyeMfFEZik4MSNZRF ddqM4/wWwkoClmXwK4VKroER2OL3PExMdugJkJETioQJuSQKKEycsZ2gUUy65rZp 2fz1Y9JqGa87wXvJLmJSpBjKGprjzGo2bHkILL8hZ+78+WlryKSDKZTk96H4xFIH O2C8RgYkq9XHCtGNv2RGfFBCCCkERvtOUZ/O0AWIB/AbTdG6w60s8TROpC1yR3c6 9ylYClANkTWR64MNcrUEGXm03QQcOc+tMKoRAvKZnT4f61K3iMIkUknIuf7lLtfv 23SL8zlHGhXclRoW+IpMGYYrET5hUcYbFzcvfA+nKy+EipBDSD8= -----END CERTIFICATE-----Generated at Sat Mar 28 11:41:54 2026 by rpki-client