$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145728.roa File: AS145728.roa (raw, json) Hash identifier: 0RDBN6J7JxSL/Geo8ee4IbxOIvQNsE5fRbeycIzlVko= Subject key identifier: 98:51:EA:2F:EA:A7:0A:99:04:21:6D:D4:79:31:0A:38:20:F8:8B:DF Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 5119BF996211EB970927AA75CF28E8A2AE077EF7 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145728.roa Signing time: Wed 04 Mar 2026 06:30:59 +0000 ROA not before: Wed 04 Mar 2026 06:25:59 +0000 ROA not after: Wed 03 Mar 2027 06:30:59 +0000 asID: 145728 IP address blocks: 240a:ac06::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:19:bf:99:62:11:eb:97:09:27:aa:75:cf:28:e8:a2:ae:07:7e:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:25:59 2026 GMT Not After : Mar 3 06:30:59 2027 GMT Subject: CN=9851EA2FEAA70A9904216DD479310A3820F88BDF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:d1:09:a5:ec:d3:66:17:7d:aa:9b:44:ac:32: 10:ab:66:62:7d:72:97:71:a8:35:d8:4e:c8:9e:dc: a9:db:21:83:bf:72:e5:79:68:74:49:7b:e9:a0:6d: a9:9a:d9:f2:88:7e:a9:23:87:76:43:b3:d1:e8:ba: 89:7d:b4:5a:ed:dd:d6:36:70:18:76:7a:d5:17:7a: a8:c6:a4:a0:af:d7:1d:0f:fc:37:09:9e:dd:8e:5b: cf:9b:42:bd:dc:04:ee:d2:df:08:af:ff:e2:71:9d: e1:31:02:86:85:68:4f:ca:94:60:31:d5:82:57:58: b6:76:b3:e0:f1:ae:9b:45:2b:b5:5f:e0:18:1c:c0: f6:f3:89:8a:62:90:98:74:91:f0:87:6c:a5:62:b7: c0:a1:30:a6:ee:38:ed:2f:ac:90:cd:84:dd:a1:e3: 62:af:7b:ff:b8:4f:7c:44:13:53:af:60:a5:f4:12: fe:85:11:f9:f4:de:cd:fc:02:e7:14:e6:e3:d0:3b: 46:f4:f8:0f:38:f7:80:5c:07:cc:6b:4d:00:1b:7e: 84:df:ac:89:78:98:c3:ef:8c:12:2e:ac:36:7b:55: 4b:28:a5:c6:31:25:c9:0d:db:12:49:2e:8a:e5:ba: d7:e7:5a:c8:d7:97:89:e3:fd:78:fa:7b:db:96:79: 1a:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:51:EA:2F:EA:A7:0A:99:04:21:6D:D4:79:31:0A:38:20:F8:8B:DF X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145728.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:ac06::/32 Signature Algorithm: sha256WithRSAEncryption 6b:44:f6:62:5f:eb:e5:db:57:26:04:94:12:80:0c:12:cb:d0: c4:a6:e3:50:69:e9:65:59:62:41:16:1e:85:31:9b:94:4e:41: e2:7d:cd:22:99:f2:c1:97:b7:41:16:10:eb:60:e4:50:2e:2f: 83:82:dc:f2:76:bb:12:64:ec:81:e1:1c:af:72:68:4c:08:d4: 1b:74:83:9a:98:55:84:c1:8f:6a:0f:dc:7f:d7:32:6a:b1:14: 76:79:0a:10:b8:b8:56:d6:e5:8a:62:44:63:ee:33:6d:69:fe: 46:2f:bb:24:c1:27:9f:8f:39:03:c4:54:c9:34:b0:e6:50:a4: 0a:7d:69:56:49:ae:74:07:04:7b:85:62:01:c3:71:a3:89:c2: 92:bf:a3:df:55:01:51:ca:87:ee:09:74:7d:f7:01:c8:e8:22: 85:27:26:3e:e2:d1:f7:a8:c1:7b:62:4c:3d:0d:54:59:94:13: 3e:aa:39:3e:36:25:30:64:64:fc:ca:f4:29:93:d1:b4:d1:55: bf:5f:21:c3:a2:ff:c0:f1:96:0b:0c:f8:5a:2d:42:d1:25:61: 79:9c:d2:5b:47:fc:09:59:14:11:52:db:1c:a2:99:00:49:0d: f3:0b:ef:cd:5c:b1:7f:cd:37:8e:85:76:f0:0c:91:c1:e5:09: b4:01:8c:1a -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUURm/mWIR65cJJ6p1zyjooq4HfvcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MjU1OVoX DTI3MDMwMzA2MzA1OVowMzExMC8GA1UEAxMoOTg1MUVBMkZFQUE3MEE5OTA0MjE2 REQ0NzkzMTBBMzgyMEY4OEJERjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK/RCaXs02YXfaqbRKwyEKtmYn1yl3GoNdhOyJ7cqdshg79y5XlodEl76aBt qZrZ8oh+qSOHdkOz0ei6iX20Wu3d1jZwGHZ61Rd6qMakoK/XHQ/8Nwme3Y5bz5tC vdwE7tLfCK//4nGd4TEChoVoT8qUYDHVgldYtnaz4PGum0UrtV/gGBzA9vOJimKQ mHSR8IdspWK3wKEwpu447S+skM2E3aHjYq97/7hPfEQTU69gpfQS/oUR+fTezfwC 5xTm49A7RvT4Dzj3gFwHzGtNABt+hN+siXiYw++MEi6sNntVSyilxjElyQ3bEkku iuW61+dayNeXieP9ePp725Z5Gl0CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSYUeov 6qcKmQQhbdR5MQo4IPiL3zAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTcyOC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rAYwDQYJKoZIhvcNAQELBQADggEBAGtE9mJf6+XbVyYElBKADBLL0MSm41Bp6WVZ YkEWHoUxm5ROQeJ9zSKZ8sGXt0EWEOtg5FAuL4OC3PJ2uxJk7IHhHK9yaEwI1Bt0 g5qYVYTBj2oP3H/XMmqxFHZ5ChC4uFbW5YpiRGPuM21p/kYvuyTBJ5+POQPEVMk0 sOZQpAp9aVZJrnQHBHuFYgHDcaOJwpK/o99VAVHKh+4JdH33AcjoIoUnJj7i0feo wXtiTD0NVFmUEz6qOT42JTBkZPzK9CmT0bTRVb9fIcOi/8DxlgsM+FotQtElYXmc 0ltH/AlZFBFS2xyimQBJDfML781csX/NN46FdvAMkcHlCbQBjBo= -----END CERTIFICATE-----Generated at Sat Mar 28 11:44:54 2026 by rpki-client