$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145566.roa File: AS145566.roa (raw, json) Hash identifier: Rh2DWAuhdVrRK0j9f56XVtrzAPnoekNhKhc3YaXfkxM= Subject key identifier: AC:A8:02:C8:42:CA:49:E8:D1:AE:47:34:5D:2B:5D:C3:C8:C0:47:06 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 5DE97C833FA917C80F0C06C6FBEE53931EF1DDF0 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145566.roa Signing time: Wed 04 Mar 2026 06:30:15 +0000 ROA not before: Wed 04 Mar 2026 06:25:15 +0000 ROA not after: Wed 03 Mar 2027 06:30:15 +0000 asID: 145566 IP address blocks: 240a:ab64::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:e9:7c:83:3f:a9:17:c8:0f:0c:06:c6:fb:ee:53:93:1e:f1:dd:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:25:15 2026 GMT Not After : Mar 3 06:30:15 2027 GMT Subject: CN=ACA802C842CA49E8D1AE47345D2B5DC3C8C04706 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:94:77:f9:77:ad:73:81:ea:24:a9:15:0e:8e: e8:19:7b:fa:f7:d6:76:e3:0c:97:54:fe:75:68:aa: d6:88:68:87:a5:13:b2:07:e9:1f:a3:6b:f1:a0:73: f2:1e:40:bf:37:dd:bb:d8:dd:eb:40:9d:48:b9:34: 84:34:a6:01:78:fa:a7:82:b7:45:f3:9d:08:6f:16: c5:3b:28:13:9d:04:aa:b2:45:2b:a4:86:23:46:01: 2b:ac:d0:78:62:b9:19:6c:93:fa:a1:8d:d7:6c:12: d1:f2:4e:b5:14:bf:e1:62:56:1c:d0:46:b3:9e:02: 4e:5a:99:0c:7e:7d:62:d9:b5:94:25:25:78:cc:a7: 90:2d:1c:14:7f:a7:bd:d9:73:45:59:60:f6:58:59: a7:20:ca:7d:a9:e8:1e:8c:4f:4a:9b:32:77:b7:d5: 31:0d:08:0c:d4:5b:b7:34:e2:3c:e2:7c:bc:96:06: d1:ce:c1:58:61:a4:4d:86:76:38:89:34:9c:a3:c9: 5b:d1:6f:f6:b0:ec:14:e2:d1:e4:8e:68:0b:76:8e: 90:bf:f6:0c:99:1d:5f:8b:0f:44:de:da:3f:d1:0c: 0a:09:44:35:47:51:65:d2:f6:b8:3a:9e:6a:fe:3a: 64:b2:4a:22:56:7c:a3:6b:98:9c:c1:f3:b5:de:82: ab:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:A8:02:C8:42:CA:49:E8:D1:AE:47:34:5D:2B:5D:C3:C8:C0:47:06 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145566.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:ab64::/32 Signature Algorithm: sha256WithRSAEncryption 69:07:51:dc:d3:03:a5:81:40:7e:67:3b:18:3a:de:04:01:28: 9f:39:e8:e8:97:22:77:24:46:94:78:85:67:ff:13:af:bb:8e: 9d:11:20:5a:8d:d6:b7:ea:8c:d0:40:0d:da:0c:60:3e:d0:ff: ff:40:40:b5:c5:bb:b1:ac:21:a4:c3:bb:80:bb:09:a1:74:47: 82:a2:f8:d3:13:7e:2f:d8:e1:ef:5d:58:1a:9e:5e:5a:a7:a7: f0:29:1f:00:0a:94:fc:f2:dd:2c:57:24:8b:7d:c5:0f:f7:92: 4e:a8:4d:ab:24:eb:63:89:a2:20:91:53:ce:13:40:ee:ad:08: 3f:59:ba:76:60:dd:78:35:df:d6:80:7d:b1:6b:6b:f0:36:de: 74:c3:ef:80:73:1f:db:42:4c:ed:87:f4:ce:70:bd:0d:b5:69: ab:9d:fc:ba:27:91:ae:0f:d0:7d:8d:63:39:1a:9f:c6:5e:13: 55:19:fb:1a:70:d1:d0:99:6b:5a:a3:03:d4:71:a9:5d:d2:f0: 99:d1:50:c2:d6:f1:ba:46:30:66:c9:dd:88:ec:10:27:0f:b0: 3c:58:3f:07:17:80:c1:8b:30:de:6c:98:14:38:78:4d:12:f3: 13:34:de:67:4a:71:e5:26:e4:5f:33:75:36:6b:4b:e7:1c:f7: 7a:7c:f4:fa -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUXel8gz+pF8gPDAbG++5Tkx7x3fAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MjUxNVoX DTI3MDMwMzA2MzAxNVowMzExMC8GA1UEAxMoQUNBODAyQzg0MkNBNDlFOEQxQUU0 NzM0NUQyQjVEQzNDOEMwNDcwNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANiUd/l3rXOB6iSpFQ6O6Bl7+vfWduMMl1T+dWiq1ohoh6UTsgfpH6Nr8aBz 8h5Avzfdu9jd60CdSLk0hDSmAXj6p4K3RfOdCG8WxTsoE50EqrJFK6SGI0YBK6zQ eGK5GWyT+qGN12wS0fJOtRS/4WJWHNBGs54CTlqZDH59Ytm1lCUleMynkC0cFH+n vdlzRVlg9lhZpyDKfanoHoxPSpsyd7fVMQ0IDNRbtzTiPOJ8vJYG0c7BWGGkTYZ2 OIk0nKPJW9Fv9rDsFOLR5I5oC3aOkL/2DJkdX4sPRN7aP9EMCglENUdRZdL2uDqe av46ZLJKIlZ8o2uYnMHztd6Cq3kCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSsqALI QspJ6NGuRzRdK13DyMBHBjAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTU2Ni5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK q2QwDQYJKoZIhvcNAQELBQADggEBAGkHUdzTA6WBQH5nOxg63gQBKJ856OiXInck RpR4hWf/E6+7jp0RIFqN1rfqjNBADdoMYD7Q//9AQLXFu7GsIaTDu4C7CaF0R4Ki +NMTfi/Y4e9dWBqeXlqnp/ApHwAKlPzy3SxXJIt9xQ/3kk6oTask62OJoiCRU84T QO6tCD9ZunZg3Xg139aAfbFra/A23nTD74BzH9tCTO2H9M5wvQ21aaud/Lonka4P 0H2NYzkan8ZeE1UZ+xpw0dCZa1qjA9RxqV3S8JnRUMLW8bpGMGbJ3YjsECcPsDxY PwcXgMGLMN5smBQ4eE0S8xM03mdKceUm5F8zdTZrS+cc93p89Po= -----END CERTIFICATE-----Generated at Sat Mar 28 11:46:19 2026 by rpki-client