$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145777.roa File: AS145777.roa (raw, json) Hash identifier: qFjNS0oL8v2gcpiNXF5Xt/E9SnlWB5eX6cl6Uw7qQaw= Subject key identifier: F4:49:58:7D:F6:ED:72:33:6C:74:80:DD:90:B2:F1:55:58:39:AF:7B Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 56F56F2F03BAC59D39BE05C593BCC8699E4B4FBF Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145777.roa Signing time: Wed 04 Mar 2026 06:29:52 +0000 ROA not before: Wed 04 Mar 2026 06:24:52 +0000 ROA not after: Wed 03 Mar 2027 06:29:52 +0000 asID: 145777 IP address blocks: 240a:ac37::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:f5:6f:2f:03:ba:c5:9d:39:be:05:c5:93:bc:c8:69:9e:4b:4f:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:24:52 2026 GMT Not After : Mar 3 06:29:52 2027 GMT Subject: CN=F449587DF6ED72336C7480DD90B2F1555839AF7B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:5e:49:9a:2c:46:1a:c2:fc:e4:30:3d:74:78: 83:32:7d:05:ab:b7:9a:6a:a1:50:6c:a4:19:b7:c1: 55:b0:6e:6b:41:0b:f8:40:ef:ed:9e:44:cf:bc:35: 4c:2b:7d:94:e3:01:82:7f:ab:21:9c:dc:86:de:a0: 98:ad:c4:4c:c8:39:cd:f6:81:7b:8a:72:a8:c6:56: a5:47:96:2e:78:26:46:18:43:f0:dc:28:28:c2:a8: 9f:9d:7a:f4:b5:30:1d:2b:00:b1:52:57:11:63:9a: 07:f4:e6:6a:29:72:6b:20:70:1c:1d:e8:e2:a9:0c: 77:0c:e4:32:84:ed:d3:71:10:0a:63:92:cf:4d:0e: 33:07:bd:77:d0:20:84:3d:a8:da:f4:68:fa:c9:63: 1c:3d:06:23:9b:aa:9c:0e:b6:47:1e:12:96:71:46: 1a:a2:41:79:95:53:70:2c:22:c8:da:9c:28:de:78: 28:bb:a0:f9:11:24:66:96:2c:e8:4e:63:a9:5b:a9: 35:6a:16:4c:70:00:f7:13:73:f0:02:e9:61:42:ae: 95:09:1b:17:22:35:60:ea:14:ba:77:c6:68:00:8e: 56:ac:54:ee:63:07:77:84:66:32:04:b5:c9:01:2d: 7b:5b:c0:8d:e2:45:cb:19:e1:45:af:98:b7:87:24: 46:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:49:58:7D:F6:ED:72:33:6C:74:80:DD:90:B2:F1:55:58:39:AF:7B X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145777.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:ac37::/32 Signature Algorithm: sha256WithRSAEncryption a3:3d:d9:70:b1:5f:de:4e:ad:53:85:b0:e7:e6:83:2d:7c:f3: d4:82:05:38:97:18:1e:a7:d2:fd:ee:8a:a1:6e:39:23:56:03: dd:95:90:7d:63:97:ec:48:f4:f7:01:43:3a:fe:38:e4:3e:93: 26:83:97:25:a6:7c:bb:9f:ea:96:f4:fe:e6:61:bb:37:ef:f2: a9:25:d5:74:a7:d1:3f:b6:40:14:ac:2f:1f:a2:71:cf:c6:63: 29:53:f0:1f:a8:57:8b:52:b8:77:08:48:32:7e:00:57:59:3c: d3:e7:7b:ef:5d:74:b5:67:ea:8a:b6:ee:68:42:74:14:c2:c7: 2c:c4:cb:62:35:d1:ef:7a:45:d5:70:54:aa:02:7c:61:7f:1a: 97:7e:85:35:0c:44:01:1b:44:14:d5:d0:76:62:68:3d:eb:61: 46:05:e0:66:ac:3b:e0:9c:ab:5f:97:04:0b:c7:7f:9d:0d:36: 33:84:11:a5:7c:df:78:13:3c:3a:ac:c2:35:e6:a3:1f:6d:e6: 62:7d:25:f5:f5:d7:e8:1c:45:f2:08:75:af:89:c0:c1:28:fc: a1:fc:ff:d6:38:71:f0:82:1e:2f:17:e4:06:a0:cc:1e:da:97: 5a:c5:10:9c:f9:fd:ff:d0:19:37:87:6f:47:70:c8:0a:65:24: 8a:b8:3c:1e -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUVvVvLwO6xZ05vgXFk7zIaZ5LT78wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MjQ1MloX DTI3MDMwMzA2Mjk1MlowMzExMC8GA1UEAxMoRjQ0OTU4N0RGNkVENzIzMzZDNzQ4 MEREOTBCMkYxNTU1ODM5QUY3QjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALVeSZosRhrC/OQwPXR4gzJ9Bau3mmqhUGykGbfBVbBua0EL+EDv7Z5Ez7w1 TCt9lOMBgn+rIZzcht6gmK3ETMg5zfaBe4pyqMZWpUeWLngmRhhD8NwoKMKon516 9LUwHSsAsVJXEWOaB/TmailyayBwHB3o4qkMdwzkMoTt03EQCmOSz00OMwe9d9Ag hD2o2vRo+sljHD0GI5uqnA62Rx4SlnFGGqJBeZVTcCwiyNqcKN54KLug+REkZpYs 6E5jqVupNWoWTHAA9xNz8ALpYUKulQkbFyI1YOoUunfGaACOVqxU7mMHd4RmMgS1 yQEte1vAjeJFyxnhRa+Yt4ckRhECAwEAAaOCAcUwggHBMB0GA1UdDgQWBBT0SVh9 9u1yM2x0gN2QsvFVWDmvezAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTc3Ny5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rDcwDQYJKoZIhvcNAQELBQADggEBAKM92XCxX95OrVOFsOfmgy1889SCBTiXGB6n 0v3uiqFuOSNWA92VkH1jl+xI9PcBQzr+OOQ+kyaDlyWmfLuf6pb0/uZhuzfv8qkl 1XSn0T+2QBSsLx+icc/GYylT8B+oV4tSuHcISDJ+AFdZPNPne+9ddLVn6oq27mhC dBTCxyzEy2I10e96RdVwVKoCfGF/Gpd+hTUMRAEbRBTV0HZiaD3rYUYF4GasO+Cc q1+XBAvHf50NNjOEEaV833gTPDqswjXmox9t5mJ9JfX11+gcRfIIda+JwMEo/KH8 /9Y4cfCCHi8X5AagzB7al1rFEJz5/f/QGTeHb0dwyAplJIq4PB4= -----END CERTIFICATE-----Generated at Sat Mar 28 14:31:39 2026 by rpki-client