$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145667.roa File: AS145667.roa (raw, json) Hash identifier: pN4Iwzs2HxLXihj+rVTFS+KebA4uA3w4AAxXUvKA8mA= Subject key identifier: EA:83:3F:0D:DF:95:0E:B3:BE:7D:90:7A:D6:8C:61:CF:70:00:61:3E Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 5AF253E888C378135BAE1E3F7CF1D8A86D2FDCFF Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145667.roa Signing time: Wed 04 Mar 2026 06:29:59 +0000 ROA not before: Wed 04 Mar 2026 06:24:59 +0000 ROA not after: Wed 03 Mar 2027 06:29:59 +0000 asID: 145667 IP address blocks: 240a:abc9::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:f2:53:e8:88:c3:78:13:5b:ae:1e:3f:7c:f1:d8:a8:6d:2f:dc:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:24:59 2026 GMT Not After : Mar 3 06:29:59 2027 GMT Subject: CN=EA833F0DDF950EB3BE7D907AD68C61CF7000613E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:07:c7:2a:7b:74:99:5b:8d:ce:c0:0a:8a:83: 9a:b4:f8:84:3b:d7:f2:0c:f0:37:bb:50:2b:74:f6: 3c:ea:5c:fa:fa:84:9e:f3:9e:0b:d0:a0:7b:cf:b9: 97:02:a8:8e:a0:64:0a:dc:83:ae:0b:75:6e:3f:29: 3c:4c:2c:65:2f:6f:07:0c:c5:5d:1c:a9:cf:7d:4e: ac:d4:50:d9:93:d9:d5:d5:ac:be:3a:30:32:94:85: f3:78:de:62:b7:eb:d7:4e:90:fb:ab:19:e3:78:11: 6f:5a:91:2f:f1:ce:23:1b:27:28:48:37:a2:25:3c: 37:fd:46:2c:d8:06:ce:0e:6f:2b:86:6b:fd:f3:9c: 8e:9b:2a:dc:de:c4:75:da:4a:d7:01:3e:8d:2b:87: 1a:08:86:e8:9b:53:95:e1:ac:44:6f:10:59:32:e2: 10:da:5d:0b:f2:f6:09:68:0f:d3:31:d2:7e:66:d6: 33:62:13:3a:35:0c:a2:51:cb:39:a8:ee:08:b4:cd: d9:ba:86:ae:47:7d:d8:7a:10:a0:30:cf:ad:65:b3: 17:00:3c:95:5a:b2:04:9a:46:d3:92:6b:41:f0:ad: 2c:16:73:06:7e:5d:93:db:ce:d1:e6:3c:e5:71:b6: aa:ae:45:ec:32:d0:5f:b0:69:3d:e4:68:a7:07:f0: a2:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:83:3F:0D:DF:95:0E:B3:BE:7D:90:7A:D6:8C:61:CF:70:00:61:3E X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145667.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:abc9::/32 Signature Algorithm: sha256WithRSAEncryption 24:a6:24:89:e8:bf:ea:2e:b4:7b:50:68:63:b7:6f:02:d9:23: 98:48:0d:c1:e9:e1:dd:8d:f4:09:cc:9c:c4:69:e7:b2:6c:14: 94:b3:3f:41:4d:b0:8b:c6:02:9c:63:6c:50:01:ca:bc:cb:c7: d2:96:14:62:b7:99:8f:03:9f:97:1f:eb:72:e6:da:81:e6:02: 67:55:fd:99:4e:1c:8e:25:71:56:f5:de:7f:36:7a:ff:e0:03: 36:83:dd:07:ba:7d:ad:e9:80:80:37:b0:f6:0b:9d:b7:0a:fd: 9d:75:54:02:21:52:fb:ef:f7:91:f8:37:71:4a:e0:b9:df:49: 67:74:1f:3b:be:57:a1:cb:fe:85:d4:60:53:d8:25:41:78:d3: 24:e5:10:e7:4c:01:dc:6b:15:27:c0:cf:51:58:cb:a7:78:1f: ef:bb:4e:55:ef:a9:2f:00:89:a8:80:a7:04:c2:5f:8f:e2:b3: 6b:21:ef:cf:3a:19:f0:0c:43:d7:d9:a6:66:1d:f8:93:e8:23: f9:95:df:74:91:8d:fd:b8:d7:86:6b:6d:26:68:46:cd:04:40: 99:be:31:b8:52:18:94:ea:10:c7:7d:5e:f1:b7:24:d3:41:2f: 7d:e6:dd:b5:cf:23:ca:82:dc:88:82:c1:5e:a8:88:12:0d:26: 3e:71:2c:6d -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUWvJT6IjDeBNbrh4/fPHYqG0v3P8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MjQ1OVoX DTI3MDMwMzA2Mjk1OVowMzExMC8GA1UEAxMoRUE4MzNGMERERjk1MEVCM0JFN0Q5 MDdBRDY4QzYxQ0Y3MDAwNjEzRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMkHxyp7dJlbjc7ACoqDmrT4hDvX8gzwN7tQK3T2POpc+vqEnvOeC9Cge8+5 lwKojqBkCtyDrgt1bj8pPEwsZS9vBwzFXRypz31OrNRQ2ZPZ1dWsvjowMpSF83je Yrfr106Q+6sZ43gRb1qRL/HOIxsnKEg3oiU8N/1GLNgGzg5vK4Zr/fOcjpsq3N7E ddpK1wE+jSuHGgiG6JtTleGsRG8QWTLiENpdC/L2CWgP0zHSfmbWM2ITOjUMolHL OajuCLTN2bqGrkd92HoQoDDPrWWzFwA8lVqyBJpG05JrQfCtLBZzBn5dk9vO0eY8 5XG2qq5F7DLQX7BpPeRopwfwoh0CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBTqgz8N 35UOs759kHrWjGHPcABhPjAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTY2Ny5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK q8kwDQYJKoZIhvcNAQELBQADggEBACSmJInov+outHtQaGO3bwLZI5hIDcHp4d2N 9AnMnMRp57JsFJSzP0FNsIvGApxjbFAByrzLx9KWFGK3mY8Dn5cf63Lm2oHmAmdV /ZlOHI4lcVb13n82ev/gAzaD3Qe6fa3pgIA3sPYLnbcK/Z11VAIhUvvv95H4N3FK 4LnfSWd0Hzu+V6HL/oXUYFPYJUF40yTlEOdMAdxrFSfAz1FYy6d4H++7TlXvqS8A iaiApwTCX4/is2sh7886GfAMQ9fZpmYd+JPoI/mV33SRjf2414ZrbSZoRs0EQJm+ MbhSGJTqEMd9XvG3JNNBL33m3bXPI8qC3IiCwV6oiBINJj5xLG0= -----END CERTIFICATE-----Generated at Sat Mar 28 11:42:21 2026 by rpki-client