$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145722.roa File: AS145722.roa (raw, json) Hash identifier: E9WrNIwvK4Wt09YS/sCP1KKrrq6Dz7uAr84DAvs7gMw= Subject key identifier: 04:53:A5:D5:9D:34:AE:2E:E5:20:67:2E:55:51:96:BB:8C:C2:37:B0 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 5A4F9668B093ACE5A1715E7618DED183ECD01B97 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145722.roa Signing time: Wed 04 Mar 2026 06:30:58 +0000 ROA not before: Wed 04 Mar 2026 06:25:58 +0000 ROA not after: Wed 03 Mar 2027 06:30:58 +0000 asID: 145722 IP address blocks: 240a:ac00::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:4f:96:68:b0:93:ac:e5:a1:71:5e:76:18:de:d1:83:ec:d0:1b:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:25:58 2026 GMT Not After : Mar 3 06:30:58 2027 GMT Subject: CN=0453A5D59D34AE2EE520672E555196BB8CC237B0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:e1:8c:cc:69:01:74:78:f2:05:43:e7:c9:eb: c6:46:57:50:98:fe:e7:50:65:86:b0:23:81:cc:5d: 25:a5:e2:d4:a5:26:f9:00:ef:03:b7:e0:12:45:a0: c5:e8:74:5c:58:25:f9:5a:b8:b9:ff:38:5b:2b:4c: 2c:68:c0:32:6a:ac:7b:c1:72:ec:b0:53:d5:a7:39: 6d:d1:49:29:3e:4e:76:2a:ea:0d:0c:f1:07:c1:f9: 36:05:82:68:96:3d:da:87:65:9b:bc:3f:cd:8a:a8: 92:78:10:3f:26:00:5a:c6:07:37:5f:5e:e1:fa:c5: 9b:4d:2b:a9:1b:01:2e:14:75:a0:81:6e:d8:86:ed: 06:7f:7e:7f:0b:62:69:83:5b:db:f4:8e:66:9e:41: 07:3a:7a:78:12:59:07:8c:04:cb:29:10:0f:89:a5: a4:39:e4:55:09:d3:7c:5f:b5:52:96:93:e3:3a:c2: 8c:f1:80:1e:17:27:1f:c0:d9:bc:1c:3b:8c:26:64: c2:ef:a5:63:4f:82:19:19:b8:6f:c5:30:67:28:bc: 29:bd:1e:f0:dd:fe:ee:c5:bc:54:ab:58:42:70:fc: 12:8d:1d:17:25:ed:fe:02:e2:3f:82:77:70:9d:1a: 0b:4c:80:54:01:97:61:dd:ad:54:60:40:5b:35:a2: b1:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:53:A5:D5:9D:34:AE:2E:E5:20:67:2E:55:51:96:BB:8C:C2:37:B0 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145722.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:ac00::/32 Signature Algorithm: sha256WithRSAEncryption 76:29:db:b8:d5:5a:58:5b:98:62:9e:29:33:ea:57:11:df:7e: fb:33:7e:5a:2d:d4:39:bd:c4:8e:a6:dc:72:da:a7:62:0c:4a: b4:1f:61:0e:7a:6d:da:52:47:40:99:86:18:34:ef:7c:c3:00: 83:b8:ad:8e:1c:69:f0:ff:f4:f5:7b:8e:a0:b9:2d:4d:6c:43: 70:dd:8e:e8:57:d6:32:6a:72:a0:ad:45:04:e7:eb:c0:fb:bc: f1:2c:86:e7:ed:d8:9f:98:c4:70:fa:7d:65:8e:fb:69:99:d2: 70:36:cc:b1:78:07:19:f3:e2:1d:4e:d4:17:1b:03:fc:7f:ed: 2a:35:0b:8c:2c:71:4a:82:56:8f:ac:96:a7:b6:6a:6c:a6:14: 32:79:f4:3b:78:19:de:0b:7e:9c:d2:54:bd:72:ec:27:1e:2c: c9:e0:15:ab:18:03:8a:63:47:0f:35:01:34:8b:c0:21:ad:74: 68:d7:21:12:44:f5:b7:67:20:65:60:d1:db:f0:b3:2d:1d:a9: c0:7b:e1:f7:fd:4f:3c:1c:c5:05:d8:0c:15:4e:d9:16:4f:e3: e8:10:98:dd:62:37:77:06:12:41:36:ce:db:ce:d3:e0:3d:4f: e2:2a:82:82:21:d6:62:45:1c:18:3d:28:19:2a:33:93:33:5d: 6c:17:8d:e3 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUWk+WaLCTrOWhcV52GN7Rg+zQG5cwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MjU1OFoX DTI3MDMwMzA2MzA1OFowMzExMC8GA1UEAxMoMDQ1M0E1RDU5RDM0QUUyRUU1MjA2 NzJFNTU1MTk2QkI4Q0MyMzdCMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALDhjMxpAXR48gVD58nrxkZXUJj+51BlhrAjgcxdJaXi1KUm+QDvA7fgEkWg xeh0XFgl+Vq4uf84WytMLGjAMmqse8Fy7LBT1ac5bdFJKT5OdirqDQzxB8H5NgWC aJY92odlm7w/zYqokngQPyYAWsYHN19e4frFm00rqRsBLhR1oIFu2IbtBn9+fwti aYNb2/SOZp5BBzp6eBJZB4wEyykQD4mlpDnkVQnTfF+1UpaT4zrCjPGAHhcnH8DZ vBw7jCZkwu+lY0+CGRm4b8UwZyi8Kb0e8N3+7sW8VKtYQnD8Eo0dFyXt/gLiP4J3 cJ0aC0yAVAGXYd2tVGBAWzWisSMCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQEU6XV nTSuLuUgZy5VUZa7jMI3sDAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTcyMi5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rAAwDQYJKoZIhvcNAQELBQADggEBAHYp27jVWlhbmGKeKTPqVxHffvszflot1Dm9 xI6m3HLap2IMSrQfYQ56bdpSR0CZhhg073zDAIO4rY4cafD/9PV7jqC5LU1sQ3Dd juhX1jJqcqCtRQTn68D7vPEshuft2J+YxHD6fWWO+2mZ0nA2zLF4Bxnz4h1O1Bcb A/x/7So1C4wscUqCVo+slqe2amymFDJ59Dt4Gd4LfpzSVL1y7CceLMngFasYA4pj Rw81ATSLwCGtdGjXIRJE9bdnIGVg0dvwsy0dqcB74ff9TzwcxQXYDBVO2RZP4+gQ mN1iN3cGEkE2ztvO0+A9T+IqgoIh1mJFHBg9KBkqM5MzXWwXjeM= -----END CERTIFICATE-----Generated at Sat Mar 28 11:45:01 2026 by rpki-client