$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145603.roa File: AS145603.roa (raw, json) Hash identifier: of+lv2efTNDq7Vi+ZBy8sgFHG9JUlndMxhpNVPv8l8Y= Subject key identifier: 5F:F1:CE:0B:BF:80:34:42:E9:92:7F:3D:3B:25:3C:11:7E:7F:0F:2E Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 64F2567750E5B6B2FCF6DF7A34249A4FA2D66E8B Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145603.roa Signing time: Wed 04 Mar 2026 06:29:56 +0000 ROA not before: Wed 04 Mar 2026 06:24:56 +0000 ROA not after: Wed 03 Mar 2027 06:29:56 +0000 asID: 145603 IP address blocks: 240a:ab89::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:f2:56:77:50:e5:b6:b2:fc:f6:df:7a:34:24:9a:4f:a2:d6:6e:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:24:56 2026 GMT Not After : Mar 3 06:29:56 2027 GMT Subject: CN=5FF1CE0BBF803442E9927F3D3B253C117E7F0F2E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:aa:03:b3:6d:81:e2:5f:5f:ff:95:ea:f8:d0: da:60:ba:de:ed:9f:33:68:f9:45:2b:14:12:c9:1d: 24:56:74:5d:87:33:c5:c6:27:6b:2d:b1:59:4f:d7: 32:4b:6f:84:5d:a6:12:60:cc:04:0d:f0:48:4f:84: ec:9f:72:8d:27:ab:e2:e2:a4:13:34:da:00:5e:46: 27:21:39:4c:74:55:72:bf:a6:74:fa:6b:a4:08:f5: 6e:3b:c4:d3:03:71:af:5a:70:82:38:f7:1d:e4:82: aa:eb:bd:da:d4:22:3e:30:de:a7:3f:85:d9:78:8b: ef:59:9d:af:4e:e2:ae:48:90:7e:63:dd:4c:72:c3: 0a:c0:78:27:3f:93:32:6a:e7:73:41:7d:53:7d:98: c6:6a:36:92:d2:d9:53:78:49:36:26:e8:7e:0c:5b: b7:15:97:13:7d:6e:72:c2:0f:3b:8a:21:f7:4e:23: e8:76:0a:59:b3:32:93:7f:aa:8f:61:cd:ba:a0:0b: d9:f4:ed:c4:c1:51:73:6d:e2:50:ff:d2:58:5b:4f: d6:1d:d1:15:a3:14:f7:62:df:fb:e5:4c:d4:25:b8: ab:f9:6f:56:66:f1:f5:d4:5b:e9:76:31:fa:7e:a7: 24:d5:10:71:d5:ac:b0:1f:dd:44:e6:e1:1a:17:e4: 0e:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:F1:CE:0B:BF:80:34:42:E9:92:7F:3D:3B:25:3C:11:7E:7F:0F:2E X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145603.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:ab89::/32 Signature Algorithm: sha256WithRSAEncryption bd:98:d2:7f:d3:95:79:86:ec:38:7b:d9:16:6c:7e:79:42:1f: 73:40:33:84:65:d3:93:2f:90:b1:3f:6e:68:5c:aa:5e:29:47: 04:38:53:d5:cb:38:d8:e2:66:39:e7:63:c4:2e:8a:2c:22:aa: 43:fe:54:65:0a:f4:8e:69:83:e2:99:e9:0e:a0:be:91:fd:fb: d2:bf:55:5d:0d:a9:ce:fd:50:fe:19:19:30:c8:28:25:8d:31: 86:9d:eb:de:f5:21:09:2f:fb:63:62:ee:93:17:87:ca:6a:09: 2e:68:4c:f3:db:69:74:bd:e3:02:e7:f3:2b:5a:4a:a6:69:f5: dd:1e:ab:87:29:62:7f:66:9c:e2:4c:e6:9a:94:14:40:2a:a7: 78:e0:53:ab:df:51:9d:7c:f8:26:c3:d2:72:76:55:ba:13:e3: c6:13:6c:6b:13:8a:4d:fa:f8:43:90:3b:ed:24:69:ed:7f:55: 30:17:0e:78:9f:fc:b2:2d:d2:5f:c1:2c:01:c9:d4:a4:87:33: 6b:92:31:a4:14:df:1b:59:2b:03:c3:8a:fc:7d:f3:e1:c6:c9: 7f:3d:30:9e:04:2f:6c:43:5c:3c:75:30:ba:05:68:92:6f:7a: f2:69:0f:f9:9c:e5:da:c0:cd:c8:4d:8a:87:52:90:40:43:f2: f9:57:c5:9d -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUZPJWd1DltrL89t96NCSaT6LWboswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MjQ1NloX DTI3MDMwMzA2Mjk1NlowMzExMC8GA1UEAxMoNUZGMUNFMEJCRjgwMzQ0MkU5OTI3 RjNEM0IyNTNDMTE3RTdGMEYyRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOqqA7NtgeJfX/+V6vjQ2mC63u2fM2j5RSsUEskdJFZ0XYczxcYnay2xWU/X MktvhF2mEmDMBA3wSE+E7J9yjSer4uKkEzTaAF5GJyE5THRVcr+mdPprpAj1bjvE 0wNxr1pwgjj3HeSCquu92tQiPjDepz+F2XiL71mdr07irkiQfmPdTHLDCsB4Jz+T Mmrnc0F9U32Yxmo2ktLZU3hJNibofgxbtxWXE31ucsIPO4oh904j6HYKWbMyk3+q j2HNuqAL2fTtxMFRc23iUP/SWFtP1h3RFaMU92Lf++VM1CW4q/lvVmbx9dRb6XYx +n6nJNUQcdWssB/dRObhGhfkDr8CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRf8c4L v4A0QumSfz07JTwRfn8PLjAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTYwMy5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK q4kwDQYJKoZIhvcNAQELBQADggEBAL2Y0n/TlXmG7Dh72RZsfnlCH3NAM4Rl05Mv kLE/bmhcql4pRwQ4U9XLONjiZjnnY8QuiiwiqkP+VGUK9I5pg+KZ6Q6gvpH9+9K/ VV0Nqc79UP4ZGTDIKCWNMYad6971IQkv+2Ni7pMXh8pqCS5oTPPbaXS94wLn8yta SqZp9d0eq4cpYn9mnOJM5pqUFEAqp3jgU6vfUZ18+CbD0nJ2VboT48YTbGsTik36 +EOQO+0kae1/VTAXDnif/LIt0l/BLAHJ1KSHM2uSMaQU3xtZKwPDivx98+HGyX89 MJ4EL2xDXDx1MLoFaJJvevJpD/mc5drAzchNiodSkEBD8vlXxZ0= -----END CERTIFICATE-----Generated at Sat Mar 28 13:18:20 2026 by rpki-client