$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145829.roa File: AS145829.roa (raw, json) Hash identifier: Oldf+mfe3XQlhRAT/nUIUMulxzm0ZZlkbkRpQ5hjENU= Subject key identifier: 05:FA:01:57:06:BF:D9:74:AB:14:5F:EB:6F:EC:78:8B:5B:9A:79:B4 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 3BC3F6BC17A59FB63C6E9785083E89B16B5AA6A0 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145829.roa Signing time: Wed 04 Mar 2026 06:31:04 +0000 ROA not before: Wed 04 Mar 2026 06:26:04 +0000 ROA not after: Wed 03 Mar 2027 06:31:04 +0000 asID: 145829 IP address blocks: 240a:ac6b::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:c3:f6:bc:17:a5:9f:b6:3c:6e:97:85:08:3e:89:b1:6b:5a:a6:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:26:04 2026 GMT Not After : Mar 3 06:31:04 2027 GMT Subject: CN=05FA015706BFD974AB145FEB6FEC788B5B9A79B4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:b0:8b:67:69:d6:5d:55:e3:8c:58:1c:1a:5f: 2e:97:c6:3b:5b:9f:d4:8b:4f:bb:32:4a:c7:12:ec: 5e:17:97:30:44:d4:21:05:10:4e:9a:1a:4e:cf:e1: 71:94:73:d6:84:19:03:55:4f:4d:34:ee:39:a0:19: 12:0b:cf:37:cc:93:28:04:a2:1d:94:57:d4:1c:d1: ac:56:ae:68:be:62:a3:95:e5:c9:eb:ec:41:d0:79: 3e:c4:4d:80:53:55:f8:01:d2:7c:f0:3f:f0:91:9c: 99:78:38:d4:10:f9:b4:e7:5d:28:af:45:5f:5f:5c: 04:46:99:63:39:5d:98:f9:46:63:b7:5f:21:5b:c4: 49:f1:1f:5d:32:d6:ae:cf:b4:b2:2e:62:ea:4f:70: 11:bb:66:b1:21:e9:6a:f5:af:01:a5:3d:7e:f8:35: a7:a6:d2:03:96:4c:8a:bb:00:12:99:db:09:8c:39: 1e:b2:3c:3d:23:26:c9:db:28:e3:a4:b5:7b:d3:68: 83:68:1e:a1:72:e6:7b:e4:2a:67:1b:30:3c:74:fc: fc:c0:b2:8b:84:3c:f3:a1:29:cb:c2:48:55:e9:16: 98:0f:29:61:da:6c:f7:79:da:1f:9e:d8:b6:c4:3e: 6a:1e:6e:46:c7:be:00:d2:73:f4:30:bb:9e:85:ec: c2:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:FA:01:57:06:BF:D9:74:AB:14:5F:EB:6F:EC:78:8B:5B:9A:79:B4 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145829.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:ac6b::/32 Signature Algorithm: sha256WithRSAEncryption 75:ff:74:47:37:b7:b7:4d:6d:e5:09:2a:3e:a1:6a:1b:7e:d2: 24:b6:ef:e2:72:a4:a5:54:c6:7c:d8:7b:01:b6:90:e2:5d:30: f6:a7:0a:b8:18:ee:8d:25:b8:ac:f5:8d:dc:6c:8d:29:d0:a3: 82:b7:f4:d1:51:c2:e4:9a:58:64:fa:09:a3:7f:68:cb:97:e2: bc:b4:25:5d:7f:5f:54:7a:4b:64:f1:af:3e:0e:8d:c3:cc:56: bb:6c:a3:c7:dd:35:ac:5c:34:cc:ae:e6:28:11:e9:b1:65:96: 8e:5c:be:fd:a2:96:0d:1c:f5:e1:e1:5b:52:23:41:9c:26:c1: b3:c7:fd:ad:bd:12:6a:cf:92:33:ed:bd:da:6a:ef:48:84:ba: 61:ea:32:d5:0a:aa:10:85:ce:a8:3e:e0:40:23:e0:c1:4f:76: 25:b4:17:be:64:4e:f7:6e:e8:d8:17:c2:df:0c:ca:ba:e1:f6: 58:d0:fc:5c:83:89:30:25:fc:58:55:01:dc:d7:7d:0a:54:f8: a6:12:e3:7a:87:67:b6:8c:6b:fe:dd:ea:fb:ce:9a:cd:50:69: 35:4d:5e:63:52:21:76:bc:50:b5:32:ce:34:95:73:4d:da:47: 7e:bb:9a:50:28:e8:8b:93:62:1c:db:53:38:71:b0:15:e1:d9: 7f:d2:88:0d -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUO8P2vBeln7Y8bpeFCD6JsWtapqAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MjYwNFoX DTI3MDMwMzA2MzEwNFowMzExMC8GA1UEAxMoMDVGQTAxNTcwNkJGRDk3NEFCMTQ1 RkVCNkZFQzc4OEI1QjlBNzlCNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALiwi2dp1l1V44xYHBpfLpfGO1uf1ItPuzJKxxLsXheXMETUIQUQTpoaTs/h cZRz1oQZA1VPTTTuOaAZEgvPN8yTKASiHZRX1BzRrFauaL5io5XlyevsQdB5PsRN gFNV+AHSfPA/8JGcmXg41BD5tOddKK9FX19cBEaZYzldmPlGY7dfIVvESfEfXTLW rs+0si5i6k9wEbtmsSHpavWvAaU9fvg1p6bSA5ZMirsAEpnbCYw5HrI8PSMmydso 46S1e9Nog2geoXLme+QqZxswPHT8/MCyi4Q886Epy8JIVekWmA8pYdps93naH57Y tsQ+ah5uRse+ANJz9DC7noXswosCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQF+gFX Br/ZdKsUX+tv7HiLW5p5tDAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTgyOS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rGswDQYJKoZIhvcNAQELBQADggEBAHX/dEc3t7dNbeUJKj6haht+0iS27+JypKVU xnzYewG2kOJdMPanCrgY7o0luKz1jdxsjSnQo4K39NFRwuSaWGT6CaN/aMuX4ry0 JV1/X1R6S2Txrz4OjcPMVrtso8fdNaxcNMyu5igR6bFllo5cvv2ilg0c9eHhW1Ij QZwmwbPH/a29EmrPkjPtvdpq70iEumHqMtUKqhCFzqg+4EAj4MFPdiW0F75kTvdu 6NgXwt8Myrrh9ljQ/FyDiTAl/FhVAdzXfQpU+KYS43qHZ7aMa/7d6vvOms1QaTVN XmNSIXa8ULUyzjSVc03aR367mlAo6IuTYhzbUzhxsBXh2X/SiA0= -----END CERTIFICATE-----Generated at Sat Mar 28 11:43:45 2026 by rpki-client