$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145841.roa File: AS145841.roa (raw, json) Hash identifier: RGdczoeSzk5FLSeX7eCY0L+TVkOmit4q2QtfrfvxE/g= Subject key identifier: EA:CC:F3:8D:F9:DC:0C:87:FB:08:98:76:F0:E0:52:88:2C:E6:2F:50 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 44234629928F9119C8B46C57EACF19A03314A059 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145841.roa Signing time: Wed 04 Mar 2026 06:30:31 +0000 ROA not before: Wed 04 Mar 2026 06:25:31 +0000 ROA not after: Wed 03 Mar 2027 06:30:31 +0000 asID: 145841 IP address blocks: 240a:ac77::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:23:46:29:92:8f:91:19:c8:b4:6c:57:ea:cf:19:a0:33:14:a0:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:25:31 2026 GMT Not After : Mar 3 06:30:31 2027 GMT Subject: CN=EACCF38DF9DC0C87FB089876F0E052882CE62F50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:2d:e3:6e:c7:a4:fe:9c:3b:85:67:9f:e6:a4: 1d:47:07:06:85:97:43:56:36:e4:ae:bf:3c:03:c4: e5:24:d4:00:1f:f0:54:97:f4:db:4d:00:80:1c:25: 61:93:40:13:58:cd:1a:28:c3:8b:76:46:92:ea:71: 02:2c:91:64:2d:fc:1b:84:7a:72:88:0a:e3:f3:40: 04:99:0c:d9:93:86:8a:23:0d:ab:c5:1f:b5:27:73: 5b:62:6a:43:91:44:92:91:87:1e:62:5a:10:23:93: b3:e8:d3:03:3f:e8:3d:ca:09:c5:04:e6:5e:1f:3e: 5e:47:f9:e5:cb:03:20:96:7c:f8:31:e3:dc:13:02: 3b:59:45:1e:81:4d:ac:6b:e4:60:3a:69:9d:ef:4d: f4:58:ab:54:71:49:0d:bf:47:80:24:46:5b:27:8d: b8:f6:e4:94:c8:44:22:9f:76:97:d4:81:88:fc:4a: 85:a6:26:c1:40:29:df:f4:85:56:5c:96:b5:a9:b6: db:ad:c5:e7:9f:fc:e7:56:16:85:0b:37:db:38:fb: 9a:aa:c5:ce:25:e1:ff:9c:1e:64:50:9c:11:ed:f8: 1c:62:b2:2c:59:fd:91:19:b6:21:5f:7c:88:f6:d7: 2b:25:d7:b9:94:e9:15:a2:ad:10:b4:1c:80:31:93: 30:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:CC:F3:8D:F9:DC:0C:87:FB:08:98:76:F0:E0:52:88:2C:E6:2F:50 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145841.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:ac77::/32 Signature Algorithm: sha256WithRSAEncryption 22:8a:c6:57:8c:a5:53:a4:73:b5:71:c2:5a:bb:b8:db:60:b6: 55:15:90:29:82:1e:78:42:62:a4:94:ec:91:f0:39:05:9c:09: bf:2c:92:b3:d1:ff:dd:1b:54:4f:24:8d:0f:a8:79:38:6f:92: 1d:cc:a8:c6:32:f1:ef:52:11:a7:9a:40:6b:1b:81:ff:a6:12: 22:3d:7b:24:fc:97:e4:3e:9a:41:3c:e3:56:aa:ff:09:94:eb: a6:37:ab:3b:4f:7d:38:7d:c5:20:80:b5:09:57:68:9f:44:4d: b2:b5:7e:d8:60:6a:1c:b6:4d:4e:1e:93:5e:60:33:b7:ba:f2: 3d:79:fb:30:0d:83:98:70:2b:1e:c1:25:60:82:cb:90:58:96: 6f:f4:4c:62:a1:39:73:7e:8c:0c:cc:b3:9d:bb:10:d7:f7:1b: 45:c8:83:f6:1d:38:0c:aa:c8:15:73:76:e9:33:f8:ab:1a:e1: 1a:09:e9:b9:cb:84:f2:93:09:e1:8f:04:50:50:89:cf:57:a0: c6:3e:22:3a:3b:35:1c:84:c0:6f:f0:cd:b1:a8:a0:2e:0b:07: e3:9e:30:73:58:b8:4e:bb:5d:ae:64:e6:d7:f6:fa:39:d8:d1: 11:7d:07:80:71:17:76:cc:2d:4e:97:ad:0b:45:02:88:e1:28: 89:d7:e8:f6 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIURCNGKZKPkRnItGxX6s8ZoDMUoFkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MjUzMVoX DTI3MDMwMzA2MzAzMVowMzExMC8GA1UEAxMoRUFDQ0YzOERGOURDMEM4N0ZCMDg5 ODc2RjBFMDUyODgyQ0U2MkY1MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAN0t427HpP6cO4Vnn+akHUcHBoWXQ1Y25K6/PAPE5STUAB/wVJf0200AgBwl YZNAE1jNGijDi3ZGkupxAiyRZC38G4R6cogK4/NABJkM2ZOGiiMNq8UftSdzW2Jq Q5FEkpGHHmJaECOTs+jTAz/oPcoJxQTmXh8+Xkf55csDIJZ8+DHj3BMCO1lFHoFN rGvkYDppne9N9FirVHFJDb9HgCRGWyeNuPbklMhEIp92l9SBiPxKhaYmwUAp3/SF VlyWtam2263F55/851YWhQs32zj7mqrFziXh/5weZFCcEe34HGKyLFn9kRm2IV98 iPbXKyXXuZTpFaKtELQcgDGTMOkCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBTqzPON +dwMh/sImHbw4FKILOYvUDAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTg0MS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rHcwDQYJKoZIhvcNAQELBQADggEBACKKxleMpVOkc7Vxwlq7uNtgtlUVkCmCHnhC YqSU7JHwOQWcCb8skrPR/90bVE8kjQ+oeThvkh3MqMYy8e9SEaeaQGsbgf+mEiI9 eyT8l+Q+mkE841aq/wmU66Y3qztPfTh9xSCAtQlXaJ9ETbK1fthgahy2TU4ek15g M7e68j15+zANg5hwKx7BJWCCy5BYlm/0TGKhOXN+jAzMs527ENf3G0XIg/YdOAyq yBVzdukz+Ksa4RoJ6bnLhPKTCeGPBFBQic9XoMY+Ijo7NRyEwG/wzbGooC4LB+Oe MHNYuE67Xa5k5tf2+jnY0RF9B4BxF3bMLU6XrQtFAojhKInX6PY= -----END CERTIFICATE-----Generated at Sat Mar 28 11:42:46 2026 by rpki-client