$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145787.roa File: AS145787.roa (raw, json) Hash identifier: LZYm1lkKNjHRiepJ7CIwhZCwjz3NrHFm+xJ9nV/1XUw= Subject key identifier: C5:18:F4:F4:B6:17:8B:4C:E7:0A:3A:70:67:64:DE:1E:96:74:4F:56 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 6B56F1A8EA9042A140124A080FADAD53F6DBEE51 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145787.roa Signing time: Wed 04 Mar 2026 06:30:17 +0000 ROA not before: Wed 04 Mar 2026 06:25:17 +0000 ROA not after: Wed 03 Mar 2027 06:30:17 +0000 asID: 145787 IP address blocks: 240a:ac41::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:56:f1:a8:ea:90:42:a1:40:12:4a:08:0f:ad:ad:53:f6:db:ee:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:25:17 2026 GMT Not After : Mar 3 06:30:17 2027 GMT Subject: CN=C518F4F4B6178B4CE70A3A706764DE1E96744F56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:b3:7b:f4:a7:ba:31:51:64:db:a5:46:aa:2b: 26:d6:68:2f:83:91:0d:fc:b9:07:88:a5:cb:7c:dc: 08:84:ef:82:a0:8b:da:72:f8:c0:fd:34:8f:40:5c: ec:95:db:33:83:be:bb:a2:f5:82:de:8a:8b:27:17: 90:ff:54:3b:0a:14:dc:8a:4e:09:b1:59:da:50:f0: 26:67:09:5e:85:ad:01:93:52:42:1d:aa:40:92:bf: 7a:d7:3d:d0:f1:99:cf:28:31:7b:b7:5c:d7:a4:27: 88:b3:72:f0:e3:9f:a6:ad:a1:55:41:c3:c4:ea:3e: 71:b1:4a:d8:44:3f:e5:da:7b:fa:9c:3f:ba:2a:0a: 63:30:d9:ba:46:97:b2:3b:4a:bf:cc:25:ba:c9:21: 9e:96:b9:07:b8:f5:67:eb:31:9c:6e:f1:a9:92:81: a3:f8:25:bd:67:f4:49:ad:b6:6f:f8:6d:dd:f3:2a: 29:02:ab:4b:4b:fd:3f:50:bd:4f:03:8c:99:50:08: 23:1b:d9:c8:18:00:9c:fc:83:3c:e0:fd:0c:02:da: 8a:24:69:b8:a8:ec:b8:59:a8:da:c1:5c:15:0b:9e: 9d:8a:9b:c1:ec:20:84:d0:d1:6f:90:7b:9f:50:36: 4b:f1:52:df:00:04:ad:e8:07:a6:9a:ed:b4:70:25: 69:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:18:F4:F4:B6:17:8B:4C:E7:0A:3A:70:67:64:DE:1E:96:74:4F:56 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145787.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:ac41::/32 Signature Algorithm: sha256WithRSAEncryption 02:74:ef:02:34:52:30:33:5e:8e:36:da:31:6e:3a:89:f6:3d: a8:01:46:1c:2f:c8:c7:06:f5:57:0c:c6:ed:e4:ad:e9:93:94: 1f:36:91:13:ef:c5:2b:7f:d0:83:1b:3a:de:7b:30:b8:b3:6a: a2:a2:3b:c2:22:7b:e6:b0:9c:38:9f:c3:d4:e1:cd:4c:53:6d: 1d:6a:8b:86:2e:29:2b:74:6f:b7:37:1b:f0:fe:28:af:85:93: 73:a7:c5:6e:f4:f9:84:70:bc:f3:02:cb:6b:35:36:15:d7:22: 41:2b:7e:2f:6f:21:99:20:62:97:ce:75:25:73:b5:cf:a7:18: c5:c8:e5:a4:7b:8c:ad:19:ad:21:d3:eb:cd:f7:39:0f:ad:ce: 12:a8:19:57:81:3e:97:2a:04:42:17:ec:ef:3f:9f:fe:84:ee: 6a:9d:3d:79:c7:12:6f:4f:f2:54:42:ca:7b:0a:d5:7f:be:1f: fd:a1:17:48:93:2c:4e:da:cc:23:4b:27:a9:d1:60:ff:23:72: a2:d8:f8:94:bc:77:61:8c:85:4f:9e:d2:83:5c:0a:4b:72:d3: 53:bc:11:15:fb:cf:c4:5b:32:74:24:c2:db:b3:2c:a7:b3:d8: 30:e5:e2:ea:71:01:22:5a:c6:64:e8:98:78:dc:32:29:14:48: a8:46:b7:a2 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUa1bxqOqQQqFAEkoID62tU/bb7lEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MjUxN1oX DTI3MDMwMzA2MzAxN1owMzExMC8GA1UEAxMoQzUxOEY0RjRCNjE3OEI0Q0U3MEEz QTcwNjc2NERFMUU5Njc0NEY1NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAIeze/SnujFRZNulRqorJtZoL4ORDfy5B4ily3zcCITvgqCL2nL4wP00j0Bc 7JXbM4O+u6L1gt6KiycXkP9UOwoU3IpOCbFZ2lDwJmcJXoWtAZNSQh2qQJK/etc9 0PGZzygxe7dc16QniLNy8OOfpq2hVUHDxOo+cbFK2EQ/5dp7+pw/uioKYzDZukaX sjtKv8wluskhnpa5B7j1Z+sxnG7xqZKBo/glvWf0Sa22b/ht3fMqKQKrS0v9P1C9 TwOMmVAIIxvZyBgAnPyDPOD9DALaiiRpuKjsuFmo2sFcFQuenYqbwewghNDRb5B7 n1A2S/FS3wAEregHpprttHAlaRcCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBTFGPT0 theLTOcKOnBnZN4elnRPVjAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTc4Ny5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rEEwDQYJKoZIhvcNAQELBQADggEBAAJ07wI0UjAzXo422jFuOon2PagBRhwvyMcG 9VcMxu3kremTlB82kRPvxSt/0IMbOt57MLizaqKiO8Iie+awnDifw9ThzUxTbR1q i4YuKSt0b7c3G/D+KK+Fk3OnxW70+YRwvPMCy2s1NhXXIkErfi9vIZkgYpfOdSVz tc+nGMXI5aR7jK0ZrSHT6833OQ+tzhKoGVeBPpcqBEIX7O8/n/6E7mqdPXnHEm9P 8lRCynsK1X++H/2hF0iTLE7azCNLJ6nRYP8jcqLY+JS8d2GMhU+e0oNcCkty01O8 ERX7z8RbMnQkwtuzLKez2DDl4upxASJaxmTomHjcMikUSKhGt6I= -----END CERTIFICATE-----Generated at Sat Mar 28 11:45:09 2026 by rpki-client