$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145831.roa File: AS145831.roa (raw, json) Hash identifier: XZeUJRTgqkZS9ZhH1leWZMCZJmcl53yOv9/dtpYXP90= Subject key identifier: 75:DC:AE:CB:CB:14:49:EB:E7:D6:2A:97:9E:2B:B7:FA:E7:C3:E3:0A Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 436DA8041C6E574EAB94292E2A2025BDC605C28E Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145831.roa Signing time: Wed 04 Mar 2026 06:29:50 +0000 ROA not before: Wed 04 Mar 2026 06:24:50 +0000 ROA not after: Wed 03 Mar 2027 06:29:50 +0000 asID: 145831 IP address blocks: 240a:ac6d::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:6d:a8:04:1c:6e:57:4e:ab:94:29:2e:2a:20:25:bd:c6:05:c2:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:24:50 2026 GMT Not After : Mar 3 06:29:50 2027 GMT Subject: CN=75DCAECBCB1449EBE7D62A979E2BB7FAE7C3E30A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:c3:e3:b1:e3:b4:ca:ad:dc:44:19:db:f7:1e: 5c:95:5c:af:83:6e:31:01:8d:b8:b2:65:1b:06:db: f7:24:74:3c:be:1f:b9:4c:70:3d:da:20:f3:d4:fa: 2f:19:d7:6f:03:a4:f3:90:46:62:16:b5:6c:32:24: 1b:d1:e3:38:95:9d:47:50:fa:05:3d:a4:d1:dc:09: 91:92:8b:3e:66:91:27:64:e6:0d:8b:d9:f1:a4:be: 7c:b9:8a:13:a2:5d:a8:16:5c:30:ec:f1:81:0f:7e: f4:55:e1:bb:5f:2f:42:a8:f3:f1:9a:8c:8d:52:cc: c9:b6:b0:cb:07:28:99:cf:25:e4:ae:53:40:51:fa: a0:e3:0f:93:f2:7b:71:05:9c:f1:87:89:f0:bf:a3: 7f:0f:62:17:82:dc:bb:5e:81:e2:e4:7d:9b:42:4d: 6a:89:ee:de:85:02:a9:d8:72:51:86:e5:81:80:5c: 4f:bd:37:3a:87:ad:4e:e1:c4:67:57:ad:b2:02:10: a2:2b:f1:0c:b8:17:fe:52:b9:27:87:f5:4c:62:ad: 07:00:6d:fa:5f:22:ea:22:6c:5a:44:19:8f:53:7d: 8b:0f:0e:7b:19:b2:8e:82:c8:3f:88:64:70:40:d6: 7b:6d:e1:96:c5:c8:0a:9d:ca:2f:a9:48:a1:7a:f6: 03:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:DC:AE:CB:CB:14:49:EB:E7:D6:2A:97:9E:2B:B7:FA:E7:C3:E3:0A X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145831.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:ac6d::/32 Signature Algorithm: sha256WithRSAEncryption d7:cf:94:42:5a:27:df:83:30:3f:a5:21:45:7e:30:09:19:f0: 93:49:4c:ac:1e:a5:64:a4:44:d7:17:1f:fa:19:64:06:e7:1d: b8:58:62:bf:1e:13:dd:2d:cd:7e:84:e2:3e:64:cb:5d:72:f4: 3d:2c:ac:b3:24:18:85:b1:a3:a1:6e:ae:58:fa:eb:98:ad:71: 2f:df:2b:14:8e:6d:bd:55:ae:fe:bb:06:be:00:9b:75:bc:9a: 83:37:65:09:90:28:23:ba:3f:92:41:82:75:6b:79:28:89:e1: d0:f4:a5:e5:ad:8c:27:93:f2:ff:7c:23:46:80:3c:83:96:e8: af:2e:7b:52:90:97:a0:b9:32:85:6b:89:96:8b:ed:0c:17:e2: 98:0d:c3:76:7b:f4:a2:08:c4:92:1b:34:c1:6a:9a:43:54:ca: f5:58:7e:7b:a1:0a:aa:1d:2c:bb:8a:46:fa:45:58:7f:10:c7: aa:6f:24:83:e3:b2:ad:9c:d8:07:2d:3d:f6:ed:16:2e:b3:16: ac:47:73:c1:45:b2:d4:b7:f8:5c:72:2b:7b:b0:a9:e2:91:ee: 0c:6a:4d:25:8f:30:c9:c1:b0:54:06:fa:f4:68:57:70:f0:1f: bc:16:ca:a3:26:be:8d:b5:c5:03:59:ed:e5:a6:a1:72:9f:11: c6:81:15:75 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUQ22oBBxuV06rlCkuKiAlvcYFwo4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MjQ1MFoX DTI3MDMwMzA2Mjk1MFowMzExMC8GA1UEAxMoNzVEQ0FFQ0JDQjE0NDlFQkU3RDYy QTk3OUUyQkI3RkFFN0MzRTMwQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALDD47HjtMqt3EQZ2/ceXJVcr4NuMQGNuLJlGwbb9yR0PL4fuUxwPdog89T6 LxnXbwOk85BGYha1bDIkG9HjOJWdR1D6BT2k0dwJkZKLPmaRJ2TmDYvZ8aS+fLmK E6JdqBZcMOzxgQ9+9FXhu18vQqjz8ZqMjVLMybawywcomc8l5K5TQFH6oOMPk/J7 cQWc8YeJ8L+jfw9iF4Lcu16B4uR9m0JNaonu3oUCqdhyUYblgYBcT703OoetTuHE Z1etsgIQoivxDLgX/lK5J4f1TGKtBwBt+l8i6iJsWkQZj1N9iw8OexmyjoLIP4hk cEDWe23hlsXICp3KL6lIoXr2A+cCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBR13K7L yxRJ6+fWKpeeK7f658PjCjAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTgzMS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rG0wDQYJKoZIhvcNAQELBQADggEBANfPlEJaJ9+DMD+lIUV+MAkZ8JNJTKwepWSk RNcXH/oZZAbnHbhYYr8eE90tzX6E4j5ky11y9D0srLMkGIWxo6Furlj665itcS/f KxSObb1Vrv67Br4Am3W8moM3ZQmQKCO6P5JBgnVreSiJ4dD0peWtjCeT8v98I0aA PIOW6K8ue1KQl6C5MoVriZaL7QwX4pgNw3Z79KIIxJIbNMFqmkNUyvVYfnuhCqod LLuKRvpFWH8Qx6pvJIPjsq2c2ActPfbtFi6zFqxHc8FFstS3+FxyK3uwqeKR7gxq TSWPMMnBsFQG+vRoV3DwH7wWyqMmvo21xQNZ7eWmoXKfEcaBFXU= -----END CERTIFICATE-----Generated at Sat Mar 28 11:50:01 2026 by rpki-client