$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145547.roa File: AS145547.roa (raw, json) Hash identifier: 8juOqZp9mMkEQ76ht1oi5wIS4hgq3BVaevEQ34d5NYU= Subject key identifier: F6:21:1D:A2:0F:AC:C6:B2:39:79:FB:A1:A1:FA:67:C6:EC:39:30:F1 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 245C9AC3C88589095F5E00D0606B339841DF8AFC Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145547.roa Signing time: Wed 04 Mar 2026 06:31:13 +0000 ROA not before: Wed 04 Mar 2026 06:26:13 +0000 ROA not after: Wed 03 Mar 2027 06:31:13 +0000 asID: 145547 IP address blocks: 240a:ab51::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:5c:9a:c3:c8:85:89:09:5f:5e:00:d0:60:6b:33:98:41:df:8a:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:26:13 2026 GMT Not After : Mar 3 06:31:13 2027 GMT Subject: CN=F6211DA20FACC6B23979FBA1A1FA67C6EC3930F1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:71:77:7f:de:c6:8b:76:2f:d1:be:b6:c8:25: 11:8d:3f:b6:51:11:4c:df:46:42:5a:97:81:03:bc: 31:e8:ff:f2:18:1c:2c:df:50:20:d7:9a:f7:22:7d: 98:59:5e:85:73:2c:a9:af:25:c8:03:ff:99:41:4f: 33:82:37:fa:f2:aa:0a:ac:85:7d:c3:79:7a:d2:14: 39:80:c1:78:bb:16:52:0f:10:b2:5b:f1:5d:79:8e: 73:ce:41:24:a9:db:17:66:d1:40:13:7e:6b:d3:dd: 3d:35:f5:08:5a:3e:b2:86:5d:29:d0:52:80:e9:7a: 94:3d:2e:06:a2:88:7e:54:d8:5a:a4:61:43:c8:46: 0e:a2:0f:dd:a2:63:10:ab:ed:05:a2:51:d0:b6:99: ee:b7:d2:93:79:43:84:ca:80:51:d8:3d:a4:d2:77: ca:81:d3:de:79:06:bc:68:2e:a8:64:1a:04:a1:4c: 8f:dc:c4:4e:95:54:6c:e0:32:17:86:e9:95:c8:0a: 65:18:73:c6:d5:19:16:4e:7a:2a:59:30:c9:1b:4a: 53:6a:4a:1b:b8:fd:67:9e:f9:29:d1:fd:69:cf:24: 86:64:a0:8d:9f:38:ad:40:8c:34:f5:a2:ca:af:c7: a7:28:54:98:d0:95:0b:20:55:49:2a:72:3c:1d:25: 77:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:21:1D:A2:0F:AC:C6:B2:39:79:FB:A1:A1:FA:67:C6:EC:39:30:F1 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145547.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:ab51::/32 Signature Algorithm: sha256WithRSAEncryption 44:47:3d:5c:a8:41:b8:fe:2e:0d:fd:ee:3a:03:aa:ee:23:bb: f4:ed:4a:85:1d:d5:82:b9:48:6e:2d:8f:63:39:16:85:67:6a: 1f:2c:0b:9d:b5:35:7a:d3:3d:c4:f1:01:89:58:04:dc:02:4d: 29:1a:58:1b:70:94:7f:dc:31:50:8e:77:59:de:f6:25:42:1d: e3:60:3e:7c:5a:fd:6f:7d:c5:40:dc:9d:ff:64:96:b4:e8:e3: b7:9b:4c:bb:cb:da:e8:fe:da:68:d6:ca:2e:8d:23:ab:49:67: e9:8d:a5:73:3a:7a:7a:82:c4:46:b0:30:3c:72:e0:67:10:e4: 7a:dd:fe:68:ec:1e:01:24:59:2f:5b:52:f5:ff:e3:9c:70:73: 6b:8d:ae:36:ee:aa:26:e4:89:af:c1:66:d3:e5:7e:f2:bd:d0: 2d:b9:11:a5:e7:52:0a:01:4f:35:eb:05:bd:a9:27:5d:cb:6e: aa:3e:7f:44:5b:1d:f6:69:71:d6:9b:7d:40:9c:64:b1:37:da: 28:69:31:6f:53:d2:7d:a0:c5:09:8c:99:f6:11:b9:51:ea:3f: 10:38:bb:99:05:e5:36:69:b9:c4:f7:eb:40:3d:dc:07:b4:b9: 8b:01:15:2a:c8:da:b0:b5:3e:20:c4:fe:3a:ad:55:74:be:4e: 94:76:16:67 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUJFyaw8iFiQlfXgDQYGszmEHfivwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MjYxM1oX DTI3MDMwMzA2MzExM1owMzExMC8GA1UEAxMoRjYyMTFEQTIwRkFDQzZCMjM5NzlG QkExQTFGQTY3QzZFQzM5MzBGMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANNxd3/exot2L9G+tsglEY0/tlERTN9GQlqXgQO8Mej/8hgcLN9QINea9yJ9 mFlehXMsqa8lyAP/mUFPM4I3+vKqCqyFfcN5etIUOYDBeLsWUg8QslvxXXmOc85B JKnbF2bRQBN+a9PdPTX1CFo+soZdKdBSgOl6lD0uBqKIflTYWqRhQ8hGDqIP3aJj EKvtBaJR0LaZ7rfSk3lDhMqAUdg9pNJ3yoHT3nkGvGguqGQaBKFMj9zETpVUbOAy F4bplcgKZRhzxtUZFk56KlkwyRtKU2pKG7j9Z575KdH9ac8khmSgjZ84rUCMNPWi yq/HpyhUmNCVCyBVSSpyPB0ld9ECAwEAAaOCAcUwggHBMB0GA1UdDgQWBBT2IR2i D6zGsjl5+6Gh+mfG7Dkw8TAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTU0Ny5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK q1EwDQYJKoZIhvcNAQELBQADggEBAERHPVyoQbj+Lg397joDqu4ju/TtSoUd1YK5 SG4tj2M5FoVnah8sC521NXrTPcTxAYlYBNwCTSkaWBtwlH/cMVCOd1ne9iVCHeNg Pnxa/W99xUDcnf9klrTo47ebTLvL2uj+2mjWyi6NI6tJZ+mNpXM6enqCxEawMDxy 4GcQ5Hrd/mjsHgEkWS9bUvX/45xwc2uNrjbuqibkia/BZtPlfvK90C25EaXnUgoB TzXrBb2pJ13Lbqo+f0RbHfZpcdabfUCcZLE32ihpMW9T0n2gxQmMmfYRuVHqPxA4 u5kF5TZpucT360A93Ae0uYsBFSrI2rC1PiDE/jqtVXS+TpR2Fmc= -----END CERTIFICATE-----Generated at Sat Mar 28 13:14:06 2026 by rpki-client