$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145711.roa File: AS145711.roa (raw, json) Hash identifier: xx7tXnZ5ga6Zyxrv9Q6mhWw2Xn9HV6Pg2vVykvvRFB0= Subject key identifier: C1:9C:BD:EA:D1:32:3F:AD:3B:84:97:2E:2C:AD:4D:79:3C:9B:23:B7 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 6D9AE941D29F05B1D67A7FF0B2AB8394ED0CC163 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145711.roa Signing time: Wed 04 Mar 2026 06:29:36 +0000 ROA not before: Wed 04 Mar 2026 06:24:36 +0000 ROA not after: Wed 03 Mar 2027 06:29:36 +0000 asID: 145711 IP address blocks: 240a:abf5::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:9a:e9:41:d2:9f:05:b1:d6:7a:7f:f0:b2:ab:83:94:ed:0c:c1:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:24:36 2026 GMT Not After : Mar 3 06:29:36 2027 GMT Subject: CN=C19CBDEAD1323FAD3B84972E2CAD4D793C9B23B7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:9d:bb:c8:05:9b:94:91:1e:47:38:a4:95:29: c6:dd:b5:46:51:f1:0a:bc:30:ea:3a:62:81:b5:25: 9b:11:be:b5:71:b7:fc:0b:5b:e9:c9:76:c7:34:c4: 39:30:4f:0d:e4:69:99:da:f7:69:a0:a4:a6:be:e5: 06:b2:5c:60:86:76:08:3a:89:b0:71:e8:ab:e7:5a: 06:08:e6:0d:cb:df:d4:0b:67:35:74:b9:50:7d:63: e9:6e:4e:40:57:71:83:20:e4:57:9f:a8:d5:b3:42: a9:8d:bc:db:3f:74:6d:ab:3f:81:ce:16:7b:84:91: c4:f0:9a:52:69:36:25:ec:72:33:1b:8f:b8:10:b6: d9:c4:7b:f7:33:6e:bf:3a:40:58:09:c1:f4:69:ae: 92:37:59:8b:04:2b:f4:40:bf:62:85:63:d4:39:9a: aa:b4:20:dc:3c:a1:a3:a0:bb:42:ee:6d:70:1c:b2: 0b:10:7c:e5:50:ef:d0:51:f8:ae:d1:aa:33:7d:e5: 6a:93:07:b2:87:76:64:4a:40:35:82:a2:65:db:25: 26:eb:c6:15:6c:0a:66:ef:01:91:15:ac:3c:d8:ab: 9f:46:e4:b9:49:d1:5e:59:3c:71:e9:b4:e3:90:18: e2:0b:67:cf:2c:37:24:0c:6b:90:68:ad:e6:7f:dd: 53:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:9C:BD:EA:D1:32:3F:AD:3B:84:97:2E:2C:AD:4D:79:3C:9B:23:B7 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145711.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:abf5::/32 Signature Algorithm: sha256WithRSAEncryption 9a:61:ee:85:ed:1e:40:77:4f:c5:36:0f:d5:b4:51:9a:e5:1f: b9:d9:7b:f9:f0:f2:c1:b1:b8:a8:6d:0b:d5:7b:9f:d0:96:2c: a1:f3:08:5d:92:65:df:f2:48:d2:0e:6a:ec:0c:49:b6:7b:52: ff:d5:55:a1:cb:92:0e:bf:cb:a3:8e:fb:23:64:10:ce:02:a7: e4:5a:68:e0:82:77:70:e1:f4:b4:e3:0b:8a:85:2f:09:e0:fa: 79:a6:f6:c5:a1:5f:a2:8a:b3:44:a0:7f:3f:3f:f7:7b:2c:ec: 70:f0:1a:c6:d7:a9:cd:12:eb:28:88:67:76:e2:0d:c1:62:f0: 96:64:f1:14:1a:ed:66:69:6f:fe:79:fc:f0:63:54:cb:59:a0: 83:23:1d:ca:72:75:66:7c:81:c3:60:be:fd:d9:72:c7:ba:3c: fd:26:f5:bc:9a:1a:37:b1:c2:80:2f:64:c3:09:87:3b:39:a0: da:92:47:61:ae:02:96:c0:7c:b2:1b:a9:1b:1c:8f:b5:1d:35: 6f:93:87:6b:00:64:c7:4e:e7:61:d8:49:21:42:8d:3a:de:9c: 29:6c:92:f1:54:c0:22:98:75:0d:99:13:31:20:d3:32:d0:c9: 89:35:8c:23:7e:c2:1e:81:00:f3:eb:bb:fd:57:6a:d9:a6:0f: cf:21:e0:2d -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUbZrpQdKfBbHWen/wsquDlO0MwWMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MjQzNloX DTI3MDMwMzA2MjkzNlowMzExMC8GA1UEAxMoQzE5Q0JERUFEMTMyM0ZBRDNCODQ5 NzJFMkNBRDRENzkzQzlCMjNCNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJadu8gFm5SRHkc4pJUpxt21RlHxCrww6jpigbUlmxG+tXG3/Atb6cl2xzTE OTBPDeRpmdr3aaCkpr7lBrJcYIZ2CDqJsHHoq+daBgjmDcvf1AtnNXS5UH1j6W5O QFdxgyDkV5+o1bNCqY282z90bas/gc4We4SRxPCaUmk2JexyMxuPuBC22cR79zNu vzpAWAnB9GmukjdZiwQr9EC/YoVj1DmaqrQg3Dyho6C7Qu5tcByyCxB85VDv0FH4 rtGqM33lapMHsod2ZEpANYKiZdslJuvGFWwKZu8BkRWsPNirn0bkuUnRXlk8cem0 45AY4gtnzyw3JAxrkGit5n/dU/UCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBTBnL3q 0TI/rTuEly4srU15PJsjtzAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTcxMS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK q/UwDQYJKoZIhvcNAQELBQADggEBAJph7oXtHkB3T8U2D9W0UZrlH7nZe/nw8sGx uKhtC9V7n9CWLKHzCF2SZd/ySNIOauwMSbZ7Uv/VVaHLkg6/y6OO+yNkEM4Cp+Ra aOCCd3Dh9LTjC4qFLwng+nmm9sWhX6KKs0Sgfz8/93ss7HDwGsbXqc0S6yiIZ3bi DcFi8JZk8RQa7WZpb/55/PBjVMtZoIMjHcpydWZ8gcNgvv3Zcse6PP0m9byaGjex woAvZMMJhzs5oNqSR2GuApbAfLIbqRscj7UdNW+Th2sAZMdO52HYSSFCjTrenCls kvFUwCKYdQ2ZEzEg0zLQyYk1jCN+wh6BAPPru/1XatmmD88h4C0= -----END CERTIFICATE-----Generated at Sat Mar 28 11:44:37 2026 by rpki-client