$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145716.roa File: AS145716.roa (raw, json) Hash identifier: SNllfPSMZiYCQVrw5bVdlowHtCZ4Bw58NRdoxWrnLeY= Subject key identifier: 4D:C1:D0:18:E2:E4:B8:41:FD:5E:E6:F1:2C:E9:9E:29:11:A9:B8:01 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 52B87EDB4111441729696746E724DBBDF3A922AA Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145716.roa Signing time: Wed 04 Mar 2026 06:30:33 +0000 ROA not before: Wed 04 Mar 2026 06:25:33 +0000 ROA not after: Wed 03 Mar 2027 06:30:33 +0000 asID: 145716 IP address blocks: 240a:abfa::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:b8:7e:db:41:11:44:17:29:69:67:46:e7:24:db:bd:f3:a9:22:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:25:33 2026 GMT Not After : Mar 3 06:30:33 2027 GMT Subject: CN=4DC1D018E2E4B841FD5EE6F12CE99E2911A9B801 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:2e:c0:10:c1:f2:c1:c6:5e:92:68:17:55:24: 18:d1:4e:db:b8:51:7f:32:fe:1c:e2:d7:fc:65:d3: 43:66:f0:48:20:f5:d5:bc:8e:00:c1:f6:53:eb:8d: bc:e6:f3:fd:27:55:e7:08:34:89:fd:7f:09:6d:c0: 61:35:01:4a:7b:27:4e:ec:a4:4e:39:2f:5e:7a:1b: d3:49:02:c9:25:c8:33:5d:76:e1:56:33:28:be:09: 38:ec:44:7f:72:0f:6a:be:bc:1f:cb:26:7d:bd:b0: 4a:83:9c:23:f3:49:71:eb:b0:ca:d4:29:ba:72:ab: 61:fd:c0:8d:9a:76:64:6f:55:e9:c3:6a:03:51:90: 35:34:f3:01:11:cb:fc:a3:c4:b5:55:cd:6a:ee:c4: bb:9b:42:f4:23:0e:f3:3b:06:8e:d3:00:98:7b:18: 53:4b:6f:37:4c:12:77:f6:be:be:5c:be:84:22:ef: c6:fa:bf:93:6e:a5:82:c2:56:61:fc:ea:d7:86:bc: f0:fe:8e:e6:f9:53:df:93:15:2f:9e:02:cd:3f:9e: fc:de:c4:97:f5:a1:1b:42:14:a6:cb:a2:d7:3d:ec: 63:33:10:bf:e3:a1:7d:16:b1:20:41:72:57:fd:f3: ef:08:69:0d:ca:1b:10:da:52:e6:bb:29:b9:97:dc: ce:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:C1:D0:18:E2:E4:B8:41:FD:5E:E6:F1:2C:E9:9E:29:11:A9:B8:01 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145716.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:abfa::/32 Signature Algorithm: sha256WithRSAEncryption 44:ab:5e:1e:67:34:1a:d3:d8:72:b7:37:d6:fa:7c:64:34:89: df:a0:e2:e5:08:cc:8b:d6:b4:e0:52:a0:ff:81:d5:da:84:da: bc:e5:ea:80:63:e2:8a:8b:c4:16:ed:07:d0:c6:38:36:bd:c1: e7:06:4b:88:f6:44:bb:10:80:e0:81:c2:2f:cf:57:3f:a8:71: f4:dc:84:43:05:bf:11:a4:b2:7c:a9:b5:f5:d3:d4:7e:80:76: d0:7f:61:6a:0c:7c:92:e4:a4:6a:bb:04:72:e8:54:37:39:49: 78:0c:9e:da:2b:7a:ee:73:3f:56:05:9f:57:29:63:16:77:38: 4f:70:09:02:e8:91:79:c3:5d:c5:62:a7:f0:28:64:7a:13:ab: 51:dc:51:64:f6:49:b9:13:64:27:07:41:50:1f:77:d2:15:b2: f6:a4:5f:f3:2b:33:17:ee:5f:f8:6f:b9:43:a2:17:d5:83:c8: 02:24:8f:a5:ab:2f:87:4d:68:1a:b9:aa:aa:b9:5c:85:56:24: b3:c1:ab:c1:b7:f5:2e:00:5c:c0:01:0e:e8:b8:cf:2e:fd:6e: ea:af:6f:97:7b:21:fc:38:74:0b:f4:64:ec:2a:17:79:8b:5a: f9:38:31:b8:c4:d5:23:1c:e4:36:ca:14:da:2c:29:c9:74:65: 41:0a:e5:3e -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUUrh+20ERRBcpaWdG5yTbvfOpIqowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MjUzM1oX DTI3MDMwMzA2MzAzM1owMzExMC8GA1UEAxMoNERDMUQwMThFMkU0Qjg0MUZENUVF NkYxMkNFOTlFMjkxMUE5QjgwMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOAuwBDB8sHGXpJoF1UkGNFO27hRfzL+HOLX/GXTQ2bwSCD11byOAMH2U+uN vObz/SdV5wg0if1/CW3AYTUBSnsnTuykTjkvXnob00kCySXIM1124VYzKL4JOOxE f3IPar68H8smfb2wSoOcI/NJceuwytQpunKrYf3AjZp2ZG9V6cNqA1GQNTTzARHL /KPEtVXNau7Eu5tC9CMO8zsGjtMAmHsYU0tvN0wSd/a+vly+hCLvxvq/k26lgsJW Yfzq14a88P6O5vlT35MVL54CzT+e/N7El/WhG0IUpsui1z3sYzMQv+OhfRaxIEFy V/3z7whpDcobENpS5rspuZfczv8CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRNwdAY 4uS4Qf1e5vEs6Z4pEam4ATAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTcxNi5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK q/owDQYJKoZIhvcNAQELBQADggEBAESrXh5nNBrT2HK3N9b6fGQ0id+g4uUIzIvW tOBSoP+B1dqE2rzl6oBj4oqLxBbtB9DGODa9wecGS4j2RLsQgOCBwi/PVz+ocfTc hEMFvxGksnyptfXT1H6AdtB/YWoMfJLkpGq7BHLoVDc5SXgMntoreu5zP1YFn1cp YxZ3OE9wCQLokXnDXcVip/AoZHoTq1HcUWT2SbkTZCcHQVAfd9IVsvakX/MrMxfu X/hvuUOiF9WDyAIkj6WrL4dNaBq5qqq5XIVWJLPBq8G39S4AXMABDui4zy79buqv b5d7Ifw4dAv0ZOwqF3mLWvk4MbjE1SMc5DbKFNosKcl0ZUEK5T4= -----END CERTIFICATE-----Generated at Sat Mar 28 11:50:06 2026 by rpki-client