$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145748.roa File: AS145748.roa (raw, json) Hash identifier: /d2qY8eDKaexAihQh8+e3Xl1ki/Vr31EOKjpreV7rTg= Subject key identifier: 4D:75:20:F3:65:B0:1F:8A:5F:4C:C4:83:5F:3D:8E:D8:AA:97:8B:62 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 0D1643A15DA22353C68D7D368AB5FEFD7D76D3FA Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145748.roa Signing time: Wed 04 Mar 2026 06:29:42 +0000 ROA not before: Wed 04 Mar 2026 06:24:42 +0000 ROA not after: Wed 03 Mar 2027 06:29:42 +0000 asID: 145748 IP address blocks: 240a:ac1a::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:16:43:a1:5d:a2:23:53:c6:8d:7d:36:8a:b5:fe:fd:7d:76:d3:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:24:42 2026 GMT Not After : Mar 3 06:29:42 2027 GMT Subject: CN=4D7520F365B01F8A5F4CC4835F3D8ED8AA978B62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:a6:91:43:bb:79:f7:a2:e5:e9:52:e5:cc:20: c8:80:29:7d:07:80:ea:b7:1f:6a:80:a0:c7:29:7d: ad:66:fb:41:53:19:d5:fd:e9:81:f8:8f:87:23:85: 4c:24:14:31:d5:4a:7e:2c:b5:43:69:e9:49:b1:d2: bd:21:9a:6f:07:fa:f0:c2:8d:f2:79:0f:bf:b4:72: 37:a4:36:b9:d2:67:66:63:5b:dc:8f:d3:72:d2:37: 6a:73:06:d1:4e:b1:73:3a:bf:8b:0f:3b:38:ac:3a: 75:cd:5a:98:f0:a8:5e:b5:21:4e:81:f1:44:96:ac: 21:db:f8:d4:c2:63:09:76:28:54:33:6a:73:6c:fe: 1f:6e:55:c0:27:16:db:db:e3:cc:ec:2f:36:e3:bd: a8:40:5c:09:d6:0b:11:8c:b6:92:52:71:93:15:35: a9:db:5a:cf:a5:53:f6:31:5d:dc:0f:a8:89:8d:89: 49:d9:df:9a:54:29:e2:af:bf:4e:01:3a:43:91:b3: 5a:1d:5d:cc:47:b6:9d:9a:2f:42:51:7d:e5:9b:04: f3:37:34:95:49:16:44:61:05:ad:cd:fd:80:de:fe: 90:82:2e:fb:8c:16:66:cf:b2:53:00:2f:f7:49:94: 1e:e3:d6:ea:d9:58:b6:5c:c9:59:34:53:98:27:6a: bb:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:75:20:F3:65:B0:1F:8A:5F:4C:C4:83:5F:3D:8E:D8:AA:97:8B:62 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145748.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:ac1a::/32 Signature Algorithm: sha256WithRSAEncryption 27:8e:1a:d0:a3:5f:c1:a4:2b:10:e0:d6:92:81:1d:2c:f3:43: c3:4d:45:61:ee:a7:c0:99:92:d8:3a:c1:7b:8f:6a:59:75:ba: 9b:07:7e:89:ef:35:61:03:1a:3a:a4:b2:bd:6a:15:17:08:df: 2c:7e:0f:ec:a9:f4:f1:35:12:3f:c6:34:e6:91:dc:f9:02:cb: c6:6e:51:27:2a:70:2d:79:7d:7e:b9:77:44:9c:79:8b:5b:87: e3:fd:f6:d2:7b:7c:ea:bf:1c:1e:44:61:47:2f:89:17:80:66: c5:41:e1:4d:76:de:68:1b:5d:da:6e:e6:e7:ed:b9:c4:93:af: 63:97:27:b9:8c:6a:c8:12:9a:0d:70:fd:fb:cd:d2:27:3d:09: bf:38:90:62:6f:57:2f:0f:3c:1e:fa:38:97:45:a7:e8:aa:ed: ea:ec:69:0e:e8:6a:e1:f9:54:90:64:c5:31:5f:cd:2a:31:55: 67:c5:3a:da:3e:64:a9:1e:f7:c6:db:92:d9:e3:ed:e2:cb:38: ef:8a:ff:d4:34:5e:aa:be:7d:cb:a7:0e:46:55:67:39:30:a7: c5:1d:34:dd:a7:fb:a9:d9:9a:9e:30:9e:cc:d1:dd:80:97:fd: 17:bc:b0:93:36:c6:51:8f:1a:9c:c4:07:22:f3:2e:97:65:91: 0b:af:aa:bb -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUDRZDoV2iI1PGjX02irX+/X120/owDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MjQ0MloX DTI3MDMwMzA2Mjk0MlowMzExMC8GA1UEAxMoNEQ3NTIwRjM2NUIwMUY4QTVGNEND NDgzNUYzRDhFRDhBQTk3OEI2MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMimkUO7efei5elS5cwgyIApfQeA6rcfaoCgxyl9rWb7QVMZ1f3pgfiPhyOF TCQUMdVKfiy1Q2npSbHSvSGabwf68MKN8nkPv7RyN6Q2udJnZmNb3I/TctI3anMG 0U6xczq/iw87OKw6dc1amPCoXrUhToHxRJasIdv41MJjCXYoVDNqc2z+H25VwCcW 29vjzOwvNuO9qEBcCdYLEYy2klJxkxU1qdtaz6VT9jFd3A+oiY2JSdnfmlQp4q+/ TgE6Q5GzWh1dzEe2nZovQlF95ZsE8zc0lUkWRGEFrc39gN7+kIIu+4wWZs+yUwAv 90mUHuPW6tlYtlzJWTRTmCdqu/MCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRNdSDz ZbAfil9MxINfPY7YqpeLYjAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTc0OC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rBowDQYJKoZIhvcNAQELBQADggEBACeOGtCjX8GkKxDg1pKBHSzzQ8NNRWHup8CZ ktg6wXuPall1upsHfonvNWEDGjqksr1qFRcI3yx+D+yp9PE1Ej/GNOaR3PkCy8Zu UScqcC15fX65d0SceYtbh+P99tJ7fOq/HB5EYUcviReAZsVB4U123mgbXdpu5uft ucSTr2OXJ7mMasgSmg1w/fvN0ic9Cb84kGJvVy8PPB76OJdFp+iq7ersaQ7oauH5 VJBkxTFfzSoxVWfFOto+ZKke98bbktnj7eLLOO+K/9Q0Xqq+fcunDkZVZzkwp8Ud NN2n+6nZmp4wnszR3YCX/Re8sJM2xlGPGpzEByLzLpdlkQuvqrs= -----END CERTIFICATE-----Generated at Sat Mar 28 11:44:45 2026 by rpki-client