$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145601.roa File: AS145601.roa (raw, json) Hash identifier: ofEd0PAZW30995s3heDb9X9FLRqArFbG+w9l7+4dEgk= Subject key identifier: 1C:0E:84:E7:46:58:95:DA:D8:16:52:3F:4D:34:B7:F1:A9:71:ED:A9 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 19533040E74A1B3103872BF3F6EDE98C179BDE44 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145601.roa Signing time: Wed 04 Mar 2026 06:31:05 +0000 ROA not before: Wed 04 Mar 2026 06:26:05 +0000 ROA not after: Wed 03 Mar 2027 06:31:05 +0000 asID: 145601 IP address blocks: 240a:ab87::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:53:30:40:e7:4a:1b:31:03:87:2b:f3:f6:ed:e9:8c:17:9b:de:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:26:05 2026 GMT Not After : Mar 3 06:31:05 2027 GMT Subject: CN=1C0E84E7465895DAD816523F4D34B7F1A971EDA9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:75:ed:e9:f7:eb:55:34:f9:71:7d:77:f2:70: 7e:5a:f3:7b:6f:e6:da:20:29:9b:9a:af:9d:c0:7f: ed:58:ce:5a:21:c4:f2:bc:85:32:89:b1:3b:3a:fc: 5e:59:2e:e1:22:82:32:fc:50:d1:ff:8c:60:be:f2: 42:f2:5f:d9:83:38:27:3e:d3:11:c8:93:6a:ec:d8: 50:00:55:bc:76:f0:63:14:ee:ad:a5:85:da:c5:f6: c7:46:f3:06:98:63:d9:f3:97:b6:f4:0b:00:33:69: 46:45:7e:90:e3:ee:00:64:a0:e2:7d:51:7b:a0:c4: 7a:25:49:e7:0b:89:b8:83:ec:8f:e3:76:61:f9:d8: 5d:f8:23:5c:a5:c6:a4:58:de:2e:1e:17:f3:89:5c: 2b:25:4e:c4:bb:7b:cc:4e:a8:44:30:a6:f3:e3:d1: 38:98:d8:a6:38:0b:cc:cf:37:7a:49:54:86:00:79: 63:f1:38:1d:09:b5:72:11:cc:1d:37:5b:0c:cf:77: 74:58:25:39:2d:8d:66:c7:e9:94:0e:56:5e:da:7f: 5c:df:14:91:df:0c:4b:76:ac:a4:50:0d:0d:1c:34: 69:f9:8f:ab:21:0a:c0:58:5f:bc:a3:6d:ba:8d:6a: 52:c3:c3:84:a3:6e:c8:27:04:9c:d4:ea:b1:07:01: 88:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:0E:84:E7:46:58:95:DA:D8:16:52:3F:4D:34:B7:F1:A9:71:ED:A9 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145601.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:ab87::/32 Signature Algorithm: sha256WithRSAEncryption 98:e0:00:7f:38:48:d0:a9:c2:a3:8b:2c:19:c9:6d:1a:4d:86: b9:e5:9e:21:72:a9:40:42:a9:c2:18:fd:ce:38:ff:03:d8:27: be:47:d1:dc:7d:a1:37:79:d7:b2:f1:58:e0:25:61:ec:b7:bf: 4d:b5:b2:13:bf:a9:87:84:6d:25:3d:88:9e:56:7d:af:c9:9d: c5:26:63:ca:ed:73:bc:76:cb:4b:c2:8e:e7:0d:af:ab:6f:ea: 14:8a:cc:bd:47:2c:15:64:a7:52:97:4d:2a:3b:05:b9:f9:94: a4:dc:0e:1a:ab:a3:d1:b9:32:ca:c3:61:df:8b:0c:72:aa:9e: 1b:4f:bf:ee:b5:77:0b:d2:3d:b9:27:43:af:cf:64:33:97:19: 9e:c0:0e:a7:af:20:58:c3:21:3b:3a:a9:7e:c2:54:5f:61:d2: d7:5f:3d:b3:5e:fc:f4:8d:03:4d:da:b3:a9:a1:ee:c0:27:ae: 56:d9:ee:13:8e:05:ae:7d:c3:69:5b:a5:a0:e2:83:7e:fc:5d: cf:ea:6f:1a:b2:96:38:fe:09:71:3b:94:74:46:21:c6:40:92: a3:6d:b5:e3:c1:fc:c4:f5:ae:b3:ff:bf:46:ee:f0:ba:20:d7: 92:e0:ed:b9:e8:d9:66:78:e5:57:4d:14:3b:84:1e:d8:2d:49: 5b:da:f8:4f -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUGVMwQOdKGzEDhyvz9u3pjBeb3kQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MjYwNVoX DTI3MDMwMzA2MzEwNVowMzExMC8GA1UEAxMoMUMwRTg0RTc0NjU4OTVEQUQ4MTY1 MjNGNEQzNEI3RjFBOTcxRURBOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMB17en361U0+XF9d/Jwflrze2/m2iApm5qvncB/7VjOWiHE8ryFMomxOzr8 Xlku4SKCMvxQ0f+MYL7yQvJf2YM4Jz7TEciTauzYUABVvHbwYxTuraWF2sX2x0bz Bphj2fOXtvQLADNpRkV+kOPuAGSg4n1Re6DEeiVJ5wuJuIPsj+N2YfnYXfgjXKXG pFjeLh4X84lcKyVOxLt7zE6oRDCm8+PROJjYpjgLzM83eklUhgB5Y/E4HQm1chHM HTdbDM93dFglOS2NZsfplA5WXtp/XN8Ukd8MS3aspFANDRw0afmPqyEKwFhfvKNt uo1qUsPDhKNuyCcEnNTqsQcBiJUCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQcDoTn RliV2tgWUj9NNLfxqXHtqTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTYwMS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK q4cwDQYJKoZIhvcNAQELBQADggEBAJjgAH84SNCpwqOLLBnJbRpNhrnlniFyqUBC qcIY/c44/wPYJ75H0dx9oTd517LxWOAlYey3v021shO/qYeEbSU9iJ5Wfa/JncUm Y8rtc7x2y0vCjucNr6tv6hSKzL1HLBVkp1KXTSo7Bbn5lKTcDhqro9G5MsrDYd+L DHKqnhtPv+61dwvSPbknQ6/PZDOXGZ7ADqevIFjDITs6qX7CVF9h0tdfPbNe/PSN A03as6mh7sAnrlbZ7hOOBa59w2lbpaDig378Xc/qbxqyljj+CXE7lHRGIcZAkqNt tePB/MT1rrP/v0bu8Log15Lg7bno2WZ45VdNFDuEHtgtSVva+E8= -----END CERTIFICATE-----Generated at Sat Mar 28 13:14:06 2026 by rpki-client