$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145781.roa File: AS145781.roa (raw, json) Hash identifier: 5BNydFbqDyrdQTZpNI98+dqVNStpwpwyRRBK7xEoL7o= Subject key identifier: B8:6F:0C:33:DF:7C:C6:51:04:2C:46:E2:32:48:65:FD:61:EC:E4:C0 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 03FCECE1A95A0763851B9C1AD1A70CA3E54A398E Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145781.roa Signing time: Wed 04 Mar 2026 06:29:54 +0000 ROA not before: Wed 04 Mar 2026 06:24:54 +0000 ROA not after: Wed 03 Mar 2027 06:29:54 +0000 asID: 145781 IP address blocks: 240a:ac3b::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:fc:ec:e1:a9:5a:07:63:85:1b:9c:1a:d1:a7:0c:a3:e5:4a:39:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:24:54 2026 GMT Not After : Mar 3 06:29:54 2027 GMT Subject: CN=B86F0C33DF7CC651042C46E2324865FD61ECE4C0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:b3:a8:8a:0d:dd:03:22:6c:27:61:a0:45:a4: 5e:e9:c2:a2:98:40:3c:ba:7d:00:3e:49:61:a3:4e: d5:60:0c:1e:59:c3:90:60:37:90:7c:5f:ba:52:4a: 99:e7:74:33:72:e7:03:97:0a:2d:1c:3a:8e:5c:b9: e0:26:26:40:e5:fa:d9:ec:0f:03:7b:03:cd:f0:1d: cf:e0:4f:96:9f:eb:50:9e:d9:8f:f2:13:5e:9f:a3: 2c:a8:85:b2:4d:42:6e:96:f7:88:51:a3:26:45:f8: ba:b1:b8:55:1b:1e:4b:03:55:69:65:3f:ac:e8:24: e8:7e:b9:be:8b:17:43:91:67:d4:aa:4f:60:3d:99: 43:47:24:93:d2:d0:43:ca:e2:f7:4b:42:94:6f:58: e4:c9:57:db:ca:99:6a:ad:60:c6:26:61:da:10:6a: d8:a8:a0:04:63:33:37:8c:9b:99:4a:8a:18:53:c5: a8:9f:79:f2:36:22:e0:87:d3:e5:fe:8d:e0:69:b0: ed:1d:1b:ac:a3:69:04:52:e4:08:de:9d:d3:2b:11: 91:72:b6:c3:a9:8b:31:87:8c:a3:2d:cc:a1:d2:d4: dd:c4:ac:d8:c0:fa:49:1b:21:5c:8b:b6:6a:77:53: 5c:e9:7e:c1:eb:87:22:51:f3:73:02:b7:7b:21:dc: 47:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:6F:0C:33:DF:7C:C6:51:04:2C:46:E2:32:48:65:FD:61:EC:E4:C0 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145781.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:ac3b::/32 Signature Algorithm: sha256WithRSAEncryption a3:63:59:8d:f7:a1:cd:dc:62:a5:1d:1a:4f:7c:94:82:f9:a3: 4d:c9:14:99:d9:8f:db:97:fd:c2:12:cb:96:3c:e8:0a:aa:e1: 5a:09:57:d5:bc:ec:51:7d:4f:42:11:cd:39:17:a6:ad:aa:a2: f8:60:66:52:9f:44:35:fe:a5:6a:fb:92:79:fb:de:08:1f:f4: 8a:2b:84:88:a8:d8:59:ac:dd:01:b6:08:5e:55:1f:af:b5:51: ea:92:28:c3:77:77:cc:89:f7:fc:0e:d9:8c:ed:35:eb:0b:f0: af:39:53:4b:cd:b5:24:30:ee:21:7b:d6:9e:2e:4c:a5:99:d0: 36:6d:8f:09:ea:8a:ee:9b:f6:a0:99:06:ec:a5:9c:9d:60:4c: 26:37:6c:28:f2:40:5e:e2:86:35:8a:c3:27:67:9d:88:3c:74: ea:1e:fc:60:b6:07:f3:4d:4f:f9:42:3f:c0:dc:43:55:00:a9: 4a:b8:03:57:c0:e4:4b:9c:49:35:06:9b:44:6e:09:f1:43:c4: 31:86:cf:c1:02:72:2c:3e:9c:f1:6a:3a:3c:c6:50:bc:14:23: 7e:14:bb:4f:a6:6c:06:22:64:78:b0:4a:48:73:e7:cd:93:40: 3c:18:8f:97:29:e2:d2:48:84:5f:d7:fc:74:b2:34:1d:74:d1: 29:83:81:4f -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUA/zs4alaB2OFG5wa0acMo+VKOY4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MjQ1NFoX DTI3MDMwMzA2Mjk1NFowMzExMC8GA1UEAxMoQjg2RjBDMzNERjdDQzY1MTA0MkM0 NkUyMzI0ODY1RkQ2MUVDRTRDMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALWzqIoN3QMibCdhoEWkXunCophAPLp9AD5JYaNO1WAMHlnDkGA3kHxfulJK med0M3LnA5cKLRw6jly54CYmQOX62ewPA3sDzfAdz+BPlp/rUJ7Zj/ITXp+jLKiF sk1Cbpb3iFGjJkX4urG4VRseSwNVaWU/rOgk6H65vosXQ5Fn1KpPYD2ZQ0ckk9LQ Q8ri90tClG9Y5MlX28qZaq1gxiZh2hBq2KigBGMzN4ybmUqKGFPFqJ958jYi4IfT 5f6N4Gmw7R0brKNpBFLkCN6d0ysRkXK2w6mLMYeMoy3ModLU3cSs2MD6SRshXIu2 andTXOl+weuHIlHzcwK3eyHcR/UCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBS4bwwz 33zGUQQsRuIySGX9YezkwDAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTc4MS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rDswDQYJKoZIhvcNAQELBQADggEBAKNjWY33oc3cYqUdGk98lIL5o03JFJnZj9uX /cISy5Y86Aqq4VoJV9W87FF9T0IRzTkXpq2qovhgZlKfRDX+pWr7knn73ggf9Ior hIio2Fms3QG2CF5VH6+1UeqSKMN3d8yJ9/wO2YztNesL8K85U0vNtSQw7iF71p4u TKWZ0DZtjwnqiu6b9qCZBuylnJ1gTCY3bCjyQF7ihjWKwydnnYg8dOoe/GC2B/NN T/lCP8DcQ1UAqUq4A1fA5EucSTUGm0RuCfFDxDGGz8ECciw+nPFqOjzGULwUI34U u0+mbAYiZHiwSkhz582TQDwYj5cp4tJIhF/X/HSyNB100SmDgU8= -----END CERTIFICATE-----Generated at Sat Mar 28 11:44:29 2026 by rpki-client