$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145862.roa File: AS145862.roa (raw, json) Hash identifier: 9/JiXeT1m4+DgXpMf9eCClPoxK+BLOnF+00eSGGHEPU= Subject key identifier: BE:40:A1:9C:8A:6A:3D:4D:DA:DF:6A:9D:74:0B:B9:3B:55:C7:91:CF Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 05D3FA41D712888EE00EFA9362623F950A7D43E4 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145862.roa Signing time: Wed 04 Mar 2026 06:30:39 +0000 ROA not before: Wed 04 Mar 2026 06:25:39 +0000 ROA not after: Wed 03 Mar 2027 06:30:39 +0000 asID: 145862 IP address blocks: 240a:ac8c::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:d3:fa:41:d7:12:88:8e:e0:0e:fa:93:62:62:3f:95:0a:7d:43:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:25:39 2026 GMT Not After : Mar 3 06:30:39 2027 GMT Subject: CN=BE40A19C8A6A3D4DDADF6A9D740BB93B55C791CF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:20:b4:28:29:87:a5:be:ee:96:f5:6f:ea:a3: e9:f1:74:31:fb:51:b5:c2:6f:ed:bd:97:03:82:15: 05:d0:d2:87:9f:17:48:d1:3b:e8:32:dc:78:d5:88: 9c:10:90:fa:3c:54:6d:ac:d9:53:f6:fb:56:b9:60: de:b1:6b:01:e6:38:77:d9:76:13:f7:4c:c8:9a:0d: bf:f5:3d:4a:69:d4:4e:9f:05:25:e4:4d:be:bf:38: 6a:92:89:c2:7c:fa:98:b7:0d:f0:ca:92:4c:58:86: 67:59:9e:a1:70:81:f3:00:53:67:72:9c:ff:c8:5d: 9e:7f:b0:b5:b9:2f:df:24:8c:ac:3b:4d:00:cb:b1: 10:c0:1d:96:10:78:bd:54:2f:61:f5:b7:27:57:92: 08:a7:c9:97:22:82:49:0d:ec:87:ab:f5:b6:37:e2: e5:23:bb:ec:ad:f1:94:f8:35:84:1b:75:d4:87:97: cc:88:9f:21:05:3c:06:bb:13:93:84:f4:87:2a:f4: 73:41:75:2b:f2:62:a4:f6:04:fe:09:03:7d:0f:20: 13:a8:8a:fe:f8:14:59:a0:8c:5e:24:db:ea:11:54: f1:dd:9d:33:e9:bc:fa:43:56:c8:34:50:8e:86:3d: fe:4e:06:94:d6:71:66:a6:53:9f:53:17:f4:8f:e3: 79:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:40:A1:9C:8A:6A:3D:4D:DA:DF:6A:9D:74:0B:B9:3B:55:C7:91:CF X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145862.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:ac8c::/32 Signature Algorithm: sha256WithRSAEncryption 30:3f:b4:c6:4d:1d:66:7d:53:0c:f4:6f:fe:54:dd:60:2d:15: ad:b4:18:c7:94:b4:7b:2b:7b:9f:52:b1:99:95:e2:2e:f1:e1: 06:ff:04:72:bb:f1:28:1e:65:49:c9:c8:14:64:80:21:bf:29: b6:ab:29:df:21:12:d4:d4:a4:57:8b:1a:28:e5:39:60:89:fd: 03:2c:54:75:54:cd:bc:9d:4a:43:a7:39:0c:88:c9:ff:4d:05: 66:cc:32:63:fb:1a:dc:d8:05:d3:5d:9f:b4:8f:87:29:1d:d0: ff:1a:17:49:b7:7e:6a:ef:86:c5:b0:4d:11:ce:a6:fd:b7:0d: 21:ee:98:d3:ee:b4:ec:0e:df:65:b5:89:3c:1a:9e:0e:1f:5d: 16:40:29:51:8d:db:df:a8:77:69:2f:9a:a4:8f:a7:e6:44:04: 81:a2:f5:26:73:89:d3:cc:27:a7:bb:f0:84:dd:97:b4:06:8c: 1e:b8:4d:a6:18:f8:80:29:96:02:48:ce:78:87:6e:5a:35:43: bf:a1:25:d3:1a:24:26:d3:1a:ed:d3:7e:75:e1:a3:85:22:3f: 1e:2c:cb:d1:c9:13:43:2a:75:aa:a5:2d:97:66:d3:73:9f:5b: cc:ce:50:7f:fe:f5:54:0a:d8:d0:f3:6f:61:f4:af:75:0e:8e: ac:c2:5f:0f -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUBdP6QdcSiI7gDvqTYmI/lQp9Q+QwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MjUzOVoX DTI3MDMwMzA2MzAzOVowMzExMC8GA1UEAxMoQkU0MEExOUM4QTZBM0Q0RERBREY2 QTlENzQwQkI5M0I1NUM3OTFDRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKkgtCgph6W+7pb1b+qj6fF0MftRtcJv7b2XA4IVBdDSh58XSNE76DLceNWI nBCQ+jxUbazZU/b7Vrlg3rFrAeY4d9l2E/dMyJoNv/U9SmnUTp8FJeRNvr84apKJ wnz6mLcN8MqSTFiGZ1meoXCB8wBTZ3Kc/8hdnn+wtbkv3ySMrDtNAMuxEMAdlhB4 vVQvYfW3J1eSCKfJlyKCSQ3sh6v1tjfi5SO77K3xlPg1hBt11IeXzIifIQU8BrsT k4T0hyr0c0F1K/JipPYE/gkDfQ8gE6iK/vgUWaCMXiTb6hFU8d2dM+m8+kNWyDRQ joY9/k4GlNZxZqZTn1MX9I/jeS8CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBS+QKGc imo9Tdrfap10C7k7VceRzzAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTg2Mi5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rIwwDQYJKoZIhvcNAQELBQADggEBADA/tMZNHWZ9Uwz0b/5U3WAtFa20GMeUtHsr e59SsZmV4i7x4Qb/BHK78SgeZUnJyBRkgCG/KbarKd8hEtTUpFeLGijlOWCJ/QMs VHVUzbydSkOnOQyIyf9NBWbMMmP7GtzYBdNdn7SPhykd0P8aF0m3fmrvhsWwTRHO pv23DSHumNPutOwO32W1iTwang4fXRZAKVGN29+od2kvmqSPp+ZEBIGi9SZzidPM J6e78ITdl7QGjB64TaYY+IAplgJIzniHblo1Q7+hJdMaJCbTGu3TfnXho4UiPx4s y9HJE0MqdaqlLZdm03OfW8zOUH/+9VQK2NDzb2H0r3UOjqzCXw8= -----END CERTIFICATE-----Generated at Sat Mar 28 11:44:32 2026 by rpki-client