$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145788.roa File: AS145788.roa (raw, json) Hash identifier: ppQEnIxGyFmsEUC3GRo0ElgTvjzRbyMydZ/lXw3e01Y= Subject key identifier: 77:EC:CF:E3:B5:71:64:2A:B9:25:37:F5:10:60:E3:97:86:3D:46:B2 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 10A05AC45979241E50EC2DB2F0031CE0D9B97CB1 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145788.roa Signing time: Wed 04 Mar 2026 06:31:07 +0000 ROA not before: Wed 04 Mar 2026 06:26:07 +0000 ROA not after: Wed 03 Mar 2027 06:31:07 +0000 asID: 145788 IP address blocks: 240a:ac42::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:a0:5a:c4:59:79:24:1e:50:ec:2d:b2:f0:03:1c:e0:d9:b9:7c:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:26:07 2026 GMT Not After : Mar 3 06:31:07 2027 GMT Subject: CN=77ECCFE3B571642AB92537F51060E397863D46B2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:e0:a7:e7:9c:6c:92:b0:08:07:fe:b1:9a:54: 13:67:8f:a0:f8:b2:16:c8:4d:1f:19:ee:64:0c:e6: 83:3e:0d:b3:63:18:7b:4b:4c:a4:9b:2a:d8:d1:ac: 26:4b:13:3f:e2:fe:ac:74:97:63:f5:02:18:e9:ab: 4c:b7:0c:aa:f5:19:03:d6:1d:c3:9f:0a:f9:99:b6: a8:41:c2:d1:8e:3f:11:82:7c:ad:28:23:d1:8d:06: 27:10:a2:93:82:e8:6d:c4:5a:d7:ef:1a:3e:2c:4e: 08:6c:ea:0c:46:15:4e:a6:06:c1:ce:46:9f:ad:6c: 66:86:e9:3d:b1:ec:1b:a3:8b:fe:8b:72:12:2e:47: 85:56:90:f1:11:7d:1f:f9:0c:ec:d2:e2:d9:c9:7a: 5d:d4:fa:77:dc:0c:a5:b8:ab:e3:35:1f:9e:2e:6b: de:8e:2c:b4:b1:cf:5e:f5:ab:4a:67:63:8b:20:5f: e9:a5:03:00:01:cf:b3:f7:da:f0:92:22:70:f7:65: c8:92:7a:8b:c6:e7:eb:63:a1:b5:17:57:e3:f2:21: 75:07:7b:1b:bd:6a:1d:b5:63:82:dd:42:b6:04:1b: 8d:20:e7:de:fd:b5:02:f1:19:0f:a1:69:fb:b1:5d: 99:df:33:34:66:db:c1:f5:b4:8d:cb:13:06:14:6d: 07:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:EC:CF:E3:B5:71:64:2A:B9:25:37:F5:10:60:E3:97:86:3D:46:B2 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145788.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:ac42::/32 Signature Algorithm: sha256WithRSAEncryption 54:13:3d:bb:c2:4a:6e:96:ff:a8:60:a7:58:d7:0f:af:98:fe: 3d:b4:9f:58:88:8f:c2:b8:c5:a0:16:b2:e4:fc:e9:9b:fa:0d: 01:1a:38:ed:48:42:2e:1b:c2:e9:4b:9f:d3:6c:b0:f6:0d:d9: 47:7c:56:f1:46:45:28:95:ab:1d:13:c7:e1:67:81:e6:66:1b: d8:4d:8a:e5:95:66:1a:98:8a:29:5c:b7:77:3a:42:5a:14:8b: 48:f8:05:f9:66:5a:e7:97:43:1c:25:e2:4a:d8:3e:19:d4:69: f7:6c:f1:c2:94:66:b6:fa:dc:71:be:18:f5:6e:00:f2:bd:b5: ba:75:80:77:50:6e:b7:b3:71:a5:c4:80:01:18:b2:d5:3b:a3: 86:da:47:b5:22:2b:4e:79:d7:0c:ce:30:9e:d7:37:bb:2c:c6: 52:0b:53:a4:6d:c3:ed:e5:d2:e5:c7:73:84:6f:e2:94:65:82: cb:bc:56:a8:8d:01:b5:3f:2e:6e:6b:11:37:6c:8c:1e:34:6a: bf:7e:3e:d8:7c:57:e5:ad:35:72:a2:88:4e:22:84:06:6f:e7: 27:e1:c6:25:94:2a:4f:7a:ec:8b:92:b6:4e:19:06:d0:91:24: a7:c3:4b:88:19:7e:fc:43:94:44:f7:9d:c2:07:4e:97:5c:f8: d6:bc:e3:42 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUEKBaxFl5JB5Q7C2y8AMc4Nm5fLEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MjYwN1oX DTI3MDMwMzA2MzEwN1owMzExMC8GA1UEAxMoNzdFQ0NGRTNCNTcxNjQyQUI5MjUz N0Y1MTA2MEUzOTc4NjNENDZCMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMHgp+ecbJKwCAf+sZpUE2ePoPiyFshNHxnuZAzmgz4Ns2MYe0tMpJsq2NGs JksTP+L+rHSXY/UCGOmrTLcMqvUZA9Ydw58K+Zm2qEHC0Y4/EYJ8rSgj0Y0GJxCi k4LobcRa1+8aPixOCGzqDEYVTqYGwc5Gn61sZobpPbHsG6OL/otyEi5HhVaQ8RF9 H/kM7NLi2cl6XdT6d9wMpbir4zUfni5r3o4stLHPXvWrSmdjiyBf6aUDAAHPs/fa 8JIicPdlyJJ6i8bn62OhtRdX4/IhdQd7G71qHbVjgt1CtgQbjSDn3v21AvEZD6Fp +7Fdmd8zNGbbwfW0jcsTBhRtB48CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBR37M/j tXFkKrklN/UQYOOXhj1GsjAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTc4OC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rEIwDQYJKoZIhvcNAQELBQADggEBAFQTPbvCSm6W/6hgp1jXD6+Y/j20n1iIj8K4 xaAWsuT86Zv6DQEaOO1IQi4bwulLn9NssPYN2Ud8VvFGRSiVqx0Tx+FngeZmG9hN iuWVZhqYiilct3c6QloUi0j4BflmWueXQxwl4krYPhnUafds8cKUZrb63HG+GPVu APK9tbp1gHdQbrezcaXEgAEYstU7o4baR7UiK0551wzOMJ7XN7ssxlILU6Rtw+3l 0uXHc4Rv4pRlgsu8VqiNAbU/Lm5rETdsjB40ar9+Pth8V+WtNXKiiE4ihAZv5yfh xiWUKk967IuStk4ZBtCRJKfDS4gZfvxDlET3ncIHTpdc+Na840I= -----END CERTIFICATE-----Generated at Sat Mar 28 11:45:37 2026 by rpki-client