$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145816.roa File: AS145816.roa (raw, json) Hash identifier: inl+NJmpyVHKvUkBvTXq4EIIfz9dAOOBPZFBj3dUYLY= Subject key identifier: 8A:19:09:E2:7C:FE:DC:97:65:B6:9E:29:C9:EF:13:76:A6:DE:C7:4A Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 1FA238CD3D6864BBB6DC427F3916A5898AEF34A2 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145816.roa Signing time: Wed 04 Mar 2026 06:29:57 +0000 ROA not before: Wed 04 Mar 2026 06:24:57 +0000 ROA not after: Wed 03 Mar 2027 06:29:57 +0000 asID: 145816 IP address blocks: 240a:ac5e::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:a2:38:cd:3d:68:64:bb:b6:dc:42:7f:39:16:a5:89:8a:ef:34:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:24:57 2026 GMT Not After : Mar 3 06:29:57 2027 GMT Subject: CN=8A1909E27CFEDC9765B69E29C9EF1376A6DEC74A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:22:98:ac:61:76:f8:93:d1:c5:51:86:83:9a: 98:60:33:02:7c:ea:61:9e:9b:c5:f9:3f:33:91:de: 35:3b:33:3d:6c:e2:f8:fd:26:96:f6:fd:3c:83:9c: c2:61:33:57:86:71:a5:a8:b2:e0:69:d3:aa:86:22: e4:6e:a1:21:58:8f:c7:4c:bc:f0:12:a5:a1:34:c7: cf:44:7b:20:1a:08:e6:f1:72:c0:bf:eb:72:44:3f: de:87:eb:94:db:97:ed:23:92:67:d3:80:e7:eb:0c: 1b:c8:4e:ba:40:8c:e3:fb:4c:6d:01:d8:f8:b0:69: d2:52:2b:64:ee:52:c3:75:15:6c:29:1a:43:bb:e9: 0f:a8:df:b2:9e:ca:fe:c1:5d:82:96:7a:07:9f:37: 2f:2d:2b:ef:58:4b:ba:f8:39:54:3e:65:ad:77:0b: 5e:a7:0b:b5:7c:01:db:c4:76:e7:8e:ff:34:d0:35: 05:d6:0c:17:d3:1f:cc:54:ed:e2:07:33:58:fc:b5: 6e:d2:5a:56:83:2f:a1:60:ca:8c:64:a1:2a:73:64: f2:ca:55:9f:11:61:a0:e4:fa:7f:e1:fd:32:18:72: a4:7a:04:2f:f3:5d:21:cd:1a:6d:dc:f6:7d:89:a9: fa:29:ea:1d:59:77:c3:74:a2:52:c5:ea:40:9d:8e: 3c:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:19:09:E2:7C:FE:DC:97:65:B6:9E:29:C9:EF:13:76:A6:DE:C7:4A X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145816.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:ac5e::/32 Signature Algorithm: sha256WithRSAEncryption bf:00:7c:4a:6c:16:b5:c5:08:8a:be:45:19:7b:23:e5:d7:7d: a9:b1:39:44:0e:b1:2c:93:22:c2:36:8a:f7:8a:ad:32:d2:d0: bb:5b:9e:a1:28:dc:2a:e6:ee:a1:93:b2:90:b4:d0:2f:f2:9d: 89:fe:e0:72:fc:b9:8a:52:24:4f:1e:4b:c9:61:f5:bb:62:8c: f2:68:9c:91:87:cd:3a:5c:39:00:88:3f:39:99:cf:45:57:07: 9c:75:f3:c4:04:9a:e9:2c:a9:19:9a:38:92:63:be:8d:fb:ad: 4e:af:eb:2f:15:45:7f:3d:a0:be:69:c6:88:1d:83:77:fe:7e: c4:35:da:2a:06:40:7e:94:83:07:82:58:c6:f4:a7:83:aa:4b: 0c:18:28:15:90:95:11:fd:99:d6:95:7c:c7:80:5b:7c:96:1b: a2:a0:ac:c6:be:c0:94:3b:19:31:08:04:0c:9a:a8:f9:46:ed: 31:ee:d9:15:2c:68:d6:21:6c:26:e3:c9:bc:2f:fe:46:4e:81: 3d:7d:41:b9:5c:aa:f5:42:e7:df:2e:4a:c9:70:95:11:09:18: d7:81:d1:ff:34:65:ce:87:e9:b4:a6:78:c9:d3:26:c1:5c:d9: c1:a5:9e:e7:31:38:a8:86:2c:e6:d3:3c:9c:31:e4:14:43:8f: 70:3d:1c:5e -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUH6I4zT1oZLu23EJ/ORaliYrvNKIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MjQ1N1oX DTI3MDMwMzA2Mjk1N1owMzExMC8GA1UEAxMoOEExOTA5RTI3Q0ZFREM5NzY1QjY5 RTI5QzlFRjEzNzZBNkRFQzc0QTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMsimKxhdviT0cVRhoOamGAzAnzqYZ6bxfk/M5HeNTszPWzi+P0mlvb9PIOc wmEzV4Zxpaiy4GnTqoYi5G6hIViPx0y88BKloTTHz0R7IBoI5vFywL/rckQ/3ofr lNuX7SOSZ9OA5+sMG8hOukCM4/tMbQHY+LBp0lIrZO5Sw3UVbCkaQ7vpD6jfsp7K /sFdgpZ6B583Ly0r71hLuvg5VD5lrXcLXqcLtXwB28R2547/NNA1BdYMF9MfzFTt 4gczWPy1btJaVoMvoWDKjGShKnNk8spVnxFhoOT6f+H9MhhypHoEL/NdIc0abdz2 fYmp+inqHVl3w3SiUsXqQJ2OPAkCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSKGQni fP7cl2W2ninJ7xN2pt7HSjAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTgxNi5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rF4wDQYJKoZIhvcNAQELBQADggEBAL8AfEpsFrXFCIq+RRl7I+XXfamxOUQOsSyT IsI2iveKrTLS0LtbnqEo3Crm7qGTspC00C/ynYn+4HL8uYpSJE8eS8lh9btijPJo nJGHzTpcOQCIPzmZz0VXB5x188QEmuksqRmaOJJjvo37rU6v6y8VRX89oL5pxogd g3f+fsQ12ioGQH6UgweCWMb0p4OqSwwYKBWQlRH9mdaVfMeAW3yWG6KgrMa+wJQ7 GTEIBAyaqPlG7THu2RUsaNYhbCbjybwv/kZOgT19QblcqvVC598uSslwlREJGNeB 0f80Zc6H6bSmeMnTJsFc2cGlnucxOKiGLObTPJwx5BRDj3A9HF4= -----END CERTIFICATE-----Generated at Sat Mar 28 11:45:43 2026 by rpki-client