$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145626.roa File: AS145626.roa (raw, json) Hash identifier: uYq/KVlK2hE+bfGY9GC3d1I/8nSO6lhQtqp7/UVfa0k= Subject key identifier: 0E:2D:58:55:29:88:05:0F:0D:CE:C7:8D:70:7D:59:DD:05:25:94:57 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 05A4845BB6914BACB222922AC4C1FF1ACFAC8B89 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145626.roa Signing time: Wed 04 Mar 2026 06:29:47 +0000 ROA not before: Wed 04 Mar 2026 06:24:47 +0000 ROA not after: Wed 03 Mar 2027 06:29:47 +0000 asID: 145626 IP address blocks: 240a:aba0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:a4:84:5b:b6:91:4b:ac:b2:22:92:2a:c4:c1:ff:1a:cf:ac:8b:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:24:47 2026 GMT Not After : Mar 3 06:29:47 2027 GMT Subject: CN=0E2D58552988050F0DCEC78D707D59DD05259457 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:cd:3f:a8:e7:05:09:c5:2b:ab:8e:ad:39:f6: e9:5a:d6:65:3c:24:ff:40:6c:5d:b6:80:bc:1f:d8: 6f:d6:88:70:1e:e8:ce:65:ee:d4:9f:1c:2a:8c:65: c1:a5:71:3d:e0:10:e6:93:cf:c7:80:1f:f8:2a:72: 25:8b:ee:20:0f:5e:a3:9d:98:d8:54:0c:27:de:51: f9:6e:fa:f9:d9:4f:d9:df:f4:80:56:df:a2:c4:b9: fc:22:a8:de:1b:46:e1:ab:0a:f6:0b:40:1b:28:63: 5c:40:3e:67:64:29:a7:70:ba:98:58:38:74:f5:9a: 07:f2:cc:88:2f:ba:2f:97:09:14:88:25:86:50:2b: 1f:3b:74:02:70:a5:9d:9f:83:31:d8:81:a6:3a:ed: b9:1e:18:3f:09:23:b1:c3:33:90:af:49:8c:9a:79: 8b:3b:17:8c:cf:fb:b3:3b:ee:00:51:cd:e9:5b:50: 56:a8:62:dd:a4:43:4e:ad:81:50:b8:b9:e5:00:ce: cc:32:8c:4a:b4:e5:d8:be:42:db:8c:7e:73:b6:f0: eb:a6:2a:c2:48:21:0a:eb:96:06:45:9a:a1:67:68: 03:21:7d:3e:5e:07:c5:8a:59:f7:0c:8f:08:6f:7c: b7:7b:79:33:7a:07:61:89:bb:6e:26:f2:1b:36:1a: f7:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:2D:58:55:29:88:05:0F:0D:CE:C7:8D:70:7D:59:DD:05:25:94:57 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145626.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:aba0::/32 Signature Algorithm: sha256WithRSAEncryption 98:fb:60:54:fa:9f:ee:2a:f2:6b:f1:8a:32:f3:b7:6a:aa:bd: 45:91:ff:96:6d:e1:b1:99:01:e1:92:8d:17:fe:9c:14:29:d6: 6e:4b:2b:b8:fe:6b:87:3b:79:48:15:c6:80:ad:03:0a:b3:eb: 8a:a2:1f:23:82:f6:d1:35:f4:80:99:89:f0:ee:61:e1:1f:63: 2d:68:c2:f1:43:95:61:e8:a4:24:c5:ad:0e:96:8c:58:17:b4: 95:d5:54:9a:ec:62:2f:0c:62:9d:f0:36:6a:d7:f7:0e:fe:1c: d8:68:4d:de:1d:21:28:7a:48:0e:37:97:3f:fe:bf:c3:d7:ab: 6b:87:38:75:3a:7e:2d:0e:b9:1d:84:34:87:7d:5f:7a:05:96: 4e:aa:c8:73:56:2c:4e:bd:ec:64:32:b7:ec:d8:26:f0:de:c0: 96:43:6d:65:04:c0:2b:17:b4:4e:4a:97:05:72:bb:e0:11:38: d8:37:4e:1a:01:4d:2b:0b:2c:0a:1b:0d:f8:3a:79:8f:8b:ea: c5:93:8b:2c:65:68:8d:32:d1:24:c3:b9:ac:ed:c7:1f:36:e0: 08:43:ea:16:08:76:ad:17:98:24:94:58:f1:57:ef:16:07:a2: 02:d9:2f:fa:24:a9:74:4b:c7:d0:f7:34:bd:7d:67:f1:c7:03: c2:76:89:5c -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUBaSEW7aRS6yyIpIqxMH/Gs+si4kwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MjQ0N1oX DTI3MDMwMzA2Mjk0N1owMzExMC8GA1UEAxMoMEUyRDU4NTUyOTg4MDUwRjBEQ0VD NzhENzA3RDU5REQwNTI1OTQ1NzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANXNP6jnBQnFK6uOrTn26VrWZTwk/0BsXbaAvB/Yb9aIcB7ozmXu1J8cKoxl waVxPeAQ5pPPx4Af+CpyJYvuIA9eo52Y2FQMJ95R+W76+dlP2d/0gFbfosS5/CKo 3htG4asK9gtAGyhjXEA+Z2Qpp3C6mFg4dPWaB/LMiC+6L5cJFIglhlArHzt0AnCl nZ+DMdiBpjrtuR4YPwkjscMzkK9JjJp5izsXjM/7szvuAFHN6VtQVqhi3aRDTq2B ULi55QDOzDKMSrTl2L5C24x+c7bw66YqwkghCuuWBkWaoWdoAyF9Pl4HxYpZ9wyP CG98t3t5M3oHYYm7bibyGzYa9wkCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQOLVhV KYgFDw3Ox41wfVndBSWUVzAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTYyNi5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK q6AwDQYJKoZIhvcNAQELBQADggEBAJj7YFT6n+4q8mvxijLzt2qqvUWR/5Zt4bGZ AeGSjRf+nBQp1m5LK7j+a4c7eUgVxoCtAwqz64qiHyOC9tE19ICZifDuYeEfYy1o wvFDlWHopCTFrQ6WjFgXtJXVVJrsYi8MYp3wNmrX9w7+HNhoTd4dISh6SA43lz/+ v8PXq2uHOHU6fi0OuR2ENId9X3oFlk6qyHNWLE697GQyt+zYJvDewJZDbWUEwCsX tE5KlwVyu+ARONg3ThoBTSsLLAobDfg6eY+L6sWTiyxlaI0y0STDuaztxx824AhD 6hYIdq0XmCSUWPFX7xYHogLZL/okqXRLx9D3NL19Z/HHA8J2iVw= -----END CERTIFICATE-----Generated at Sat Mar 28 11:45:59 2026 by rpki-client