$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145735.roa File: AS145735.roa (raw, json) Hash identifier: 16Lq/oR8ffyZqZLMaaIE1Qq34PjCaSQv57/VtBUA2dY= Subject key identifier: 9B:3C:AE:83:5A:67:07:CF:4B:75:E1:37:AC:CF:D1:F9:4A:9C:51:49 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 11E6EC4D3ECB512FF6BE54BA452FEEC6F689D6FC Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145735.roa Signing time: Wed 04 Mar 2026 06:30:16 +0000 ROA not before: Wed 04 Mar 2026 06:25:16 +0000 ROA not after: Wed 03 Mar 2027 06:30:16 +0000 asID: 145735 IP address blocks: 240a:ac0d::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:e6:ec:4d:3e:cb:51:2f:f6:be:54:ba:45:2f:ee:c6:f6:89:d6:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:25:16 2026 GMT Not After : Mar 3 06:30:16 2027 GMT Subject: CN=9B3CAE835A6707CF4B75E137ACCFD1F94A9C5149 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:83:35:88:4e:28:15:94:b8:df:f0:af:91:3d: 8a:2e:c1:06:1e:82:6d:b6:d2:c3:57:53:e8:2c:ba: ac:ae:6f:a2:89:69:e6:e3:a3:4e:06:20:3b:a0:d1: b7:b6:ac:99:a5:04:4c:ee:bf:67:79:df:58:54:52: 70:fa:37:de:7a:d7:65:b6:43:48:aa:6e:6e:3e:16: 5d:c1:e9:d3:4f:80:a9:08:75:65:19:5e:0f:83:75: f5:1e:3c:ee:13:3e:66:72:ab:89:ff:7e:94:2d:1b: ad:f6:47:ac:aa:86:5d:81:92:90:8d:d6:d8:94:7a: 51:1d:51:c3:e9:47:64:0e:ca:07:39:72:e7:33:9a: 23:72:73:8a:3d:8a:a9:bc:c1:35:96:be:5e:32:c7: b1:4e:95:2b:19:30:dc:2e:04:7a:d7:d2:6e:2e:79: 98:b2:f6:87:df:12:3a:f4:e8:14:d1:e4:e6:9e:35: d4:0a:1c:65:d9:95:91:0e:13:7d:a2:6c:0d:97:18: 72:bb:99:1f:88:c6:0e:fd:eb:6c:18:02:4b:8c:64: 72:b0:93:40:ba:dc:ca:df:43:a7:59:67:03:5b:d1: 5d:de:c2:a4:5a:d9:9e:28:f0:1e:02:dc:9e:fb:c6: e8:7e:e2:f6:b3:54:2a:69:ce:f4:ca:35:2a:82:a3: 43:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:3C:AE:83:5A:67:07:CF:4B:75:E1:37:AC:CF:D1:F9:4A:9C:51:49 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145735.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:ac0d::/32 Signature Algorithm: sha256WithRSAEncryption 35:59:14:59:0f:16:45:a2:53:b5:b1:7d:a5:c9:8f:06:c9:4d: f5:d3:50:8f:ca:ba:8e:9e:e6:fa:c8:fa:a5:4b:85:3e:fd:cd: 83:8d:74:a9:7e:70:4c:73:cc:ad:35:b4:4b:7a:b1:a6:cd:77: ee:91:5b:a2:87:24:bf:5e:3d:59:53:6a:b6:91:0e:38:2b:c7: 86:2f:0d:5f:24:74:d1:de:ad:72:3a:28:02:89:eb:56:f0:ed: 5a:51:36:6e:97:bb:bd:50:61:aa:e9:fb:08:43:65:4b:fa:0a: 7a:80:3d:bf:e1:b6:0f:0b:e8:f2:ea:24:08:cd:b7:96:09:e7: 06:2d:8a:1e:1a:81:49:49:11:1b:4e:21:2c:a0:22:62:39:d5: cf:b6:2c:20:49:61:16:28:9c:5b:97:ac:d4:31:02:1b:6a:f2: ec:5f:82:c5:69:7f:24:13:91:bc:c6:95:07:f6:6c:6e:37:51: 52:c4:db:14:42:f7:ac:87:a6:8e:7c:4f:4c:b5:0f:02:d9:d8: 78:e3:56:cb:5f:fe:ca:65:79:eb:0f:09:3b:d5:0a:fd:48:88: 73:ba:be:f2:a2:e7:20:cd:14:1d:ee:ca:37:73:21:fe:9d:ab: a7:d1:b6:da:83:78:f8:bc:f7:84:e6:ec:e7:3a:99:10:28:ec: e8:46:d8:fa -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUEebsTT7LUS/2vlS6RS/uxvaJ1vwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MjUxNloX DTI3MDMwMzA2MzAxNlowMzExMC8GA1UEAxMoOUIzQ0FFODM1QTY3MDdDRjRCNzVF MTM3QUNDRkQxRjk0QTlDNTE0OTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK+DNYhOKBWUuN/wr5E9ii7BBh6CbbbSw1dT6Cy6rK5voolp5uOjTgYgO6DR t7asmaUETO6/Z3nfWFRScPo33nrXZbZDSKpubj4WXcHp00+AqQh1ZRleD4N19R48 7hM+ZnKrif9+lC0brfZHrKqGXYGSkI3W2JR6UR1Rw+lHZA7KBzly5zOaI3Jzij2K qbzBNZa+XjLHsU6VKxkw3C4EetfSbi55mLL2h98SOvToFNHk5p411AocZdmVkQ4T faJsDZcYcruZH4jGDv3rbBgCS4xkcrCTQLrcyt9Dp1lnA1vRXd7CpFrZnijwHgLc nvvG6H7i9rNUKmnO9Mo1KoKjQ4UCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSbPK6D WmcHz0t14Tesz9H5SpxRSTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTczNS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rA0wDQYJKoZIhvcNAQELBQADggEBADVZFFkPFkWiU7WxfaXJjwbJTfXTUI/Kuo6e 5vrI+qVLhT79zYONdKl+cExzzK01tEt6sabNd+6RW6KHJL9ePVlTaraRDjgrx4Yv DV8kdNHerXI6KAKJ61bw7VpRNm6Xu71QYarp+whDZUv6CnqAPb/htg8L6PLqJAjN t5YJ5wYtih4agUlJERtOISygImI51c+2LCBJYRYonFuXrNQxAhtq8uxfgsVpfyQT kbzGlQf2bG43UVLE2xRC96yHpo58T0y1DwLZ2HjjVstf/spleesPCTvVCv1IiHO6 vvKi5yDNFB3uyjdzIf6dq6fRttqDePi894Tm7Oc6mRAo7OhG2Po= -----END CERTIFICATE-----Generated at Sat Mar 28 11:43:38 2026 by rpki-client