$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145881.roa File: AS145881.roa (raw, json) Hash identifier: VzrOTzmWamyq8A74bfJ7JicHTsUHL6KeAlbVAqz0Vsg= Subject key identifier: B7:E0:1C:F1:37:90:10:BB:DD:90:B2:B5:DA:44:DD:5D:BA:8E:0D:F9 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 567BCA2DBF571D86A9962EB67858AF3D65599C69 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145881.roa Signing time: Wed 04 Mar 2026 06:29:55 +0000 ROA not before: Wed 04 Mar 2026 06:24:55 +0000 ROA not after: Wed 03 Mar 2027 06:29:55 +0000 asID: 145881 IP address blocks: 240a:ac9f::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:7b:ca:2d:bf:57:1d:86:a9:96:2e:b6:78:58:af:3d:65:59:9c:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:24:55 2026 GMT Not After : Mar 3 06:29:55 2027 GMT Subject: CN=B7E01CF1379010BBDD90B2B5DA44DD5DBA8E0DF9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:f5:71:de:84:5e:c7:6b:2d:fd:3f:a6:3e:93: c4:34:da:3a:98:f2:66:62:a1:93:ec:13:69:41:c9: 84:a6:61:f0:21:6d:1d:ad:ff:6c:a9:b2:5a:4a:66: 5f:42:4e:59:9d:83:c1:63:e8:ff:2e:8d:24:88:90: 85:e8:27:37:7b:46:6c:a6:2b:c4:fc:bb:fa:bd:3d: 5f:5c:07:41:19:51:f4:8a:bf:ea:54:60:ca:7b:da: 58:cf:f0:52:00:1a:4c:c8:00:a5:08:06:2e:c6:d3: 4a:be:ac:44:e0:00:1d:69:3b:6f:8c:4f:ae:25:a0: 8e:b0:6d:61:72:ac:c0:c3:fc:22:92:d4:c5:78:0b: a0:b3:27:a3:ba:cc:76:50:ef:d1:49:9b:65:ef:65: 8e:8d:7d:bf:b5:5a:b7:9b:25:60:7d:b3:64:f0:00: 45:fc:fe:d1:3c:f4:c3:6e:5a:ff:bb:10:4b:a5:21: 55:ee:af:74:34:8f:c1:11:b7:1f:67:22:3b:49:9f: a7:c1:4c:9f:79:20:a8:39:32:a8:fa:62:d7:81:74: 55:2a:ba:67:e3:8d:6c:2b:b8:ea:27:f0:2a:7c:93: bb:3a:8f:50:69:53:0d:d9:16:cf:62:80:3e:a3:68: a5:5c:18:57:53:8f:b1:2e:ad:ee:30:fe:7a:2c:f0: 47:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:E0:1C:F1:37:90:10:BB:DD:90:B2:B5:DA:44:DD:5D:BA:8E:0D:F9 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145881.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:ac9f::/32 Signature Algorithm: sha256WithRSAEncryption 42:9e:2b:b6:6d:e1:42:e1:0c:d3:a7:c3:ba:0f:a8:9d:a1:06: 2c:83:d0:67:2e:02:cb:f5:68:b7:a5:04:cd:07:6d:01:e0:1a: cf:38:be:b5:0a:15:e7:5a:f8:6d:91:97:d1:16:fe:6f:a0:04: 0a:00:b9:78:83:b3:c0:35:49:90:a7:82:f3:4f:68:38:3e:c2: 9c:ef:27:3e:70:f9:3f:d1:23:a5:2f:7e:bd:4b:8a:11:35:c1: a8:8b:bd:fd:4e:fd:35:94:43:43:2d:be:73:ee:64:be:32:5a: 83:27:bd:0a:bb:a8:08:7a:54:c0:e4:52:f1:90:94:bd:37:ff: 78:e5:7e:04:86:33:75:a6:06:48:9b:54:09:53:ac:0f:74:21: ad:71:f2:05:95:b2:bc:8d:f8:73:ef:c1:e8:33:2f:20:3a:80: 8c:42:4d:49:34:77:18:97:06:1b:05:0b:48:a4:69:3c:8a:97: 6e:3f:51:8b:f8:91:07:b5:fc:93:fa:d4:8b:45:f9:0e:4d:78: 62:1d:fc:85:86:00:6e:37:6e:b5:91:50:ba:f5:96:55:19:ec: 6f:a6:48:80:f1:01:b8:84:6f:5e:6e:67:df:a3:e7:48:6d:06: 8c:59:66:5f:76:cf:b9:5b:32:76:5c:31:88:32:88:f6:6e:c1: 52:e1:df:09 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUVnvKLb9XHYapli62eFivPWVZnGkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MjQ1NVoX DTI3MDMwMzA2Mjk1NVowMzExMC8GA1UEAxMoQjdFMDFDRjEzNzkwMTBCQkREOTBC MkI1REE0NERENURCQThFMERGOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALn1cd6EXsdrLf0/pj6TxDTaOpjyZmKhk+wTaUHJhKZh8CFtHa3/bKmyWkpm X0JOWZ2DwWPo/y6NJIiQhegnN3tGbKYrxPy7+r09X1wHQRlR9Iq/6lRgynvaWM/w UgAaTMgApQgGLsbTSr6sROAAHWk7b4xPriWgjrBtYXKswMP8IpLUxXgLoLMno7rM dlDv0UmbZe9ljo19v7Vat5slYH2zZPAARfz+0Tz0w25a/7sQS6UhVe6vdDSPwRG3 H2ciO0mfp8FMn3kgqDkyqPpi14F0VSq6Z+ONbCu46ifwKnyTuzqPUGlTDdkWz2KA PqNopVwYV1OPsS6t7jD+eizwRykCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBS34Bzx N5AQu92QsrXaRN1duo4N+TAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTg4MS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rJ8wDQYJKoZIhvcNAQELBQADggEBAEKeK7Zt4ULhDNOnw7oPqJ2hBiyD0GcuAsv1 aLelBM0HbQHgGs84vrUKFeda+G2Rl9EW/m+gBAoAuXiDs8A1SZCngvNPaDg+wpzv Jz5w+T/RI6Uvfr1LihE1waiLvf1O/TWUQ0MtvnPuZL4yWoMnvQq7qAh6VMDkUvGQ lL03/3jlfgSGM3WmBkibVAlTrA90Ia1x8gWVsryN+HPvwegzLyA6gIxCTUk0dxiX BhsFC0ikaTyKl24/UYv4kQe1/JP61ItF+Q5NeGId/IWGAG43brWRULr1llUZ7G+m SIDxAbiEb15uZ9+j50htBoxZZl92z7lbMnZcMYgyiPZuwVLh3wk= -----END CERTIFICATE-----Generated at Sat Mar 28 11:44:31 2026 by rpki-client