$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145848.roa File: AS145848.roa (raw, json) Hash identifier: MyHOei5+6It3PHu6a5uZmSIsI4PH4FoAXyRH4jTy38c= Subject key identifier: 9B:85:20:62:A3:7E:F4:FB:A2:38:F6:D0:8F:79:63:75:C8:EA:8F:E4 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 0BC75C52942D97ECE998398A1546DF1F7AEA0920 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145848.roa Signing time: Wed 04 Mar 2026 06:30:35 +0000 ROA not before: Wed 04 Mar 2026 06:25:35 +0000 ROA not after: Wed 03 Mar 2027 06:30:35 +0000 asID: 145848 IP address blocks: 240a:ac7e::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:c7:5c:52:94:2d:97:ec:e9:98:39:8a:15:46:df:1f:7a:ea:09:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:25:35 2026 GMT Not After : Mar 3 06:30:35 2027 GMT Subject: CN=9B852062A37EF4FBA238F6D08F796375C8EA8FE4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:84:c1:cb:48:47:db:4d:36:05:97:b8:ef:c9: 08:3c:ac:b5:7d:0c:12:74:ff:4c:41:17:74:ac:31: 81:38:41:d2:7c:7c:43:d5:b7:ec:8d:bf:39:7c:15: 18:68:b3:49:a5:e3:b1:91:cb:6c:14:5b:97:c3:23: fd:c7:91:b8:08:87:f5:3c:4e:3f:11:65:4b:6f:3d: 18:e0:a4:50:08:53:2c:aa:70:c3:da:f3:a9:6c:ad: 30:16:7b:d8:a4:ae:9d:03:54:ab:e4:b0:d2:f0:3f: 20:c4:3c:e9:62:29:9f:13:ae:6e:a1:18:88:c1:73: e0:3d:1e:48:6d:f0:c0:80:36:ba:cc:94:39:2f:97: e1:95:98:c1:73:35:81:8a:81:9d:68:a6:82:3b:2f: c8:50:16:a2:b5:d5:89:9e:89:e0:ee:b3:ed:86:b6: 39:1c:fb:cc:d5:90:3a:c8:ad:ae:05:51:18:e3:07: 6c:fc:fa:cf:34:2f:3e:c9:73:6f:44:c8:03:07:b2: ab:61:84:cf:03:d7:46:63:6b:97:e3:f3:11:c2:59: 9a:66:a9:7b:5b:2d:02:d2:00:fa:56:a5:96:32:f5: 67:ce:64:2d:7d:bf:d9:8e:0b:f1:e8:0f:6a:d3:a5: 7d:d2:85:7d:5b:2d:40:03:35:8d:10:02:19:74:93: a4:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:85:20:62:A3:7E:F4:FB:A2:38:F6:D0:8F:79:63:75:C8:EA:8F:E4 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145848.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:ac7e::/32 Signature Algorithm: sha256WithRSAEncryption af:93:d1:2c:bf:18:17:1b:58:18:58:3d:4d:4e:3c:73:7e:8e: 32:2c:cf:99:94:01:9a:e0:62:47:26:93:f5:c7:21:f7:3b:b6: 7d:f8:ff:97:7c:61:af:99:7c:d1:80:c1:c2:f9:f9:f3:d8:70: fa:36:e5:f6:eb:06:71:06:a4:f5:71:d9:b0:63:56:a8:d4:44: 40:07:7b:6d:50:af:6c:72:3d:55:40:ec:43:39:90:9e:3e:07: f6:a3:54:31:cd:01:57:81:6f:6d:62:f2:14:7b:7d:39:0e:79: 8e:fa:5c:a6:c7:95:3e:8d:3a:cb:81:31:e1:5f:f7:a7:b9:b7: e1:4b:24:f0:c7:1c:56:a8:0f:99:5e:ff:a8:26:e5:01:a5:45: 42:a6:e0:88:2d:4e:e1:7e:d6:6f:ee:04:34:a8:7b:54:fe:6d: 20:84:df:ae:09:01:17:a8:b6:e3:37:a5:4c:d3:9c:a3:9e:21: 58:d1:f7:7d:aa:27:20:b2:20:b1:8f:38:39:51:83:30:8f:85: b5:1e:8b:0a:24:a6:c9:91:04:01:d5:b1:cf:e8:8f:bd:4a:a0: aa:d0:4a:51:90:d6:9a:c3:c5:39:1f:9f:98:c9:9c:6d:5b:07: a4:d9:b1:4d:96:a3:bc:81:81:34:fd:be:ca:4a:41:5f:fb:21: 3a:8e:28:f4 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUC8dcUpQtl+zpmDmKFUbfH3rqCSAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MjUzNVoX DTI3MDMwMzA2MzAzNVowMzExMC8GA1UEAxMoOUI4NTIwNjJBMzdFRjRGQkEyMzhG NkQwOEY3OTYzNzVDOEVBOEZFNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK2EwctIR9tNNgWXuO/JCDystX0MEnT/TEEXdKwxgThB0nx8Q9W37I2/OXwV GGizSaXjsZHLbBRbl8Mj/ceRuAiH9TxOPxFlS289GOCkUAhTLKpww9rzqWytMBZ7 2KSunQNUq+Sw0vA/IMQ86WIpnxOubqEYiMFz4D0eSG3wwIA2usyUOS+X4ZWYwXM1 gYqBnWimgjsvyFAWorXViZ6J4O6z7Ya2ORz7zNWQOsitrgVRGOMHbPz6zzQvPslz b0TIAweyq2GEzwPXRmNrl+PzEcJZmmape1stAtIA+lalljL1Z85kLX2/2Y4L8egP atOlfdKFfVstQAM1jRACGXSTpFUCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSbhSBi o370+6I49tCPeWN1yOqP5DAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTg0OC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rH4wDQYJKoZIhvcNAQELBQADggEBAK+T0Sy/GBcbWBhYPU1OPHN+jjIsz5mUAZrg Ykcmk/XHIfc7tn34/5d8Ya+ZfNGAwcL5+fPYcPo25fbrBnEGpPVx2bBjVqjUREAH e21Qr2xyPVVA7EM5kJ4+B/ajVDHNAVeBb21i8hR7fTkOeY76XKbHlT6NOsuBMeFf 96e5t+FLJPDHHFaoD5le/6gm5QGlRUKm4IgtTuF+1m/uBDSoe1T+bSCE364JAReo tuM3pUzTnKOeIVjR932qJyCyILGPODlRgzCPhbUeiwokpsmRBAHVsc/oj71KoKrQ SlGQ1prDxTkfn5jJnG1bB6TZsU2Wo7yBgTT9vspKQV/7ITqOKPQ= -----END CERTIFICATE-----Generated at Sat Mar 28 11:43:51 2026 by rpki-client