$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145882.roa File: AS145882.roa (raw, json) Hash identifier: xlh8W83zqsJvjvwLrZ+0/gDEPD29za8ItXmgFC4iaGY= Subject key identifier: 42:1F:E1:8E:78:B7:AB:E5:90:52:66:EF:0F:B3:AF:85:D5:CB:4B:9A Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 51090B1B76E29567E832223765033C29005E04E2 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145882.roa Signing time: Wed 04 Mar 2026 06:29:52 +0000 ROA not before: Wed 04 Mar 2026 06:24:52 +0000 ROA not after: Wed 03 Mar 2027 06:29:52 +0000 asID: 145882 IP address blocks: 240a:aca0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:09:0b:1b:76:e2:95:67:e8:32:22:37:65:03:3c:29:00:5e:04:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:24:52 2026 GMT Not After : Mar 3 06:29:52 2027 GMT Subject: CN=421FE18E78B7ABE5905266EF0FB3AF85D5CB4B9A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:1b:a4:f0:c0:5d:90:b0:28:c5:ee:3c:26:50: c5:eb:78:2b:14:bf:8c:bd:b1:13:43:b2:22:6f:91: b8:0d:fe:33:81:ed:65:28:92:d1:0a:4b:b3:4f:9c: 7e:8d:68:81:36:bd:fe:12:53:57:c1:fb:9d:5e:27: bb:f8:af:fc:7e:38:11:f0:89:c8:f9:43:8d:f9:0e: 53:86:b0:b8:e9:5c:e5:57:24:4f:c0:46:08:8d:11: b2:02:18:e3:b1:6d:53:9e:1c:4b:2f:76:69:1d:00: 6d:f7:5f:35:1d:33:d8:fd:80:99:27:51:7d:70:0b: b7:06:e2:25:68:29:0c:22:ed:d1:d5:c3:9b:69:3e: ce:97:81:7d:3c:e3:86:2a:b1:07:ca:d8:07:03:3a: 91:69:2e:da:ec:3b:63:70:d8:8e:2d:74:3b:32:5e: 46:aa:84:72:62:d9:94:e1:1d:93:3e:e9:4b:d6:57: 0e:15:e4:ff:3d:4f:f1:18:18:9a:51:7d:e3:91:14: 4f:ec:cd:99:8b:f8:71:82:81:34:bd:7b:37:4e:1b: 89:ff:31:9c:72:41:ce:09:a8:36:cc:75:58:a8:86: 03:91:4e:47:71:51:ed:8c:36:9f:48:ca:5e:e3:f9: 0c:f9:54:a3:4f:de:d9:dc:04:52:d7:bc:8f:e0:8b: 74:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:1F:E1:8E:78:B7:AB:E5:90:52:66:EF:0F:B3:AF:85:D5:CB:4B:9A X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145882.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:aca0::/32 Signature Algorithm: sha256WithRSAEncryption 80:26:4a:b2:38:e8:65:57:c5:75:8f:29:3c:42:64:7f:9a:91: 7f:e8:4e:94:8e:1c:5e:65:e4:02:61:6a:4d:f0:25:b2:1c:69: 06:ec:2a:cc:1c:05:5a:a2:4e:89:37:6c:64:cf:01:9a:bc:a8: 71:17:34:c4:a9:c4:92:4d:24:94:3f:07:d0:5c:3e:37:5a:fe: 96:23:eb:4f:7d:59:e2:07:92:e1:af:e9:f0:26:f9:89:aa:9a: 84:54:ef:c0:2a:55:29:83:e9:4f:d8:65:ec:41:9a:e7:9a:e2: bd:ee:9d:30:21:a1:a5:17:7c:97:41:9f:39:52:a2:3e:67:0d: ae:e6:7b:c2:e6:41:90:41:48:39:62:18:bc:15:4d:65:c0:b8: 66:b7:df:76:b8:ed:79:67:1a:ba:13:91:95:b1:0f:03:c4:19: 31:f2:e4:33:5f:7d:ea:ca:02:db:38:64:6c:8c:3c:30:65:ca: c3:ed:65:23:88:53:87:12:14:af:8e:e1:00:2b:ea:7e:d0:fb: c0:56:a9:37:b9:d5:35:39:cc:51:9a:65:4e:27:0b:04:b1:c8: f8:6d:22:91:31:36:1c:89:9d:d8:98:71:bc:26:a2:ce:15:0e: 7e:22:61:f1:ce:af:31:26:03:bf:80:93:19:08:8a:02:eb:6b: fb:43:40:7d -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUUQkLG3bilWfoMiI3ZQM8KQBeBOIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MjQ1MloX DTI3MDMwMzA2Mjk1MlowMzExMC8GA1UEAxMoNDIxRkUxOEU3OEI3QUJFNTkwNTI2 NkVGMEZCM0FGODVENUNCNEI5QTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANMbpPDAXZCwKMXuPCZQxet4KxS/jL2xE0OyIm+RuA3+M4HtZSiS0QpLs0+c fo1ogTa9/hJTV8H7nV4nu/iv/H44EfCJyPlDjfkOU4awuOlc5VckT8BGCI0RsgIY 47FtU54cSy92aR0AbfdfNR0z2P2AmSdRfXALtwbiJWgpDCLt0dXDm2k+zpeBfTzj hiqxB8rYBwM6kWku2uw7Y3DYji10OzJeRqqEcmLZlOEdkz7pS9ZXDhXk/z1P8RgY mlF945EUT+zNmYv4cYKBNL17N04bif8xnHJBzgmoNsx1WKiGA5FOR3FR7Yw2n0jK XuP5DPlUo0/e2dwEUte8j+CLdEsCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRCH+GO eLer5ZBSZu8Ps6+F1ctLmjAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTg4Mi5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rKAwDQYJKoZIhvcNAQELBQADggEBAIAmSrI46GVXxXWPKTxCZH+akX/oTpSOHF5l 5AJhak3wJbIcaQbsKswcBVqiTok3bGTPAZq8qHEXNMSpxJJNJJQ/B9BcPjda/pYj 6099WeIHkuGv6fAm+YmqmoRU78AqVSmD6U/YZexBmuea4r3unTAhoaUXfJdBnzlS oj5nDa7me8LmQZBBSDliGLwVTWXAuGa333a47XlnGroTkZWxDwPEGTHy5DNfferK Ats4ZGyMPDBlysPtZSOIU4cSFK+O4QAr6n7Q+8BWqTe51TU5zFGaZU4nCwSxyPht IpExNhyJndiYcbwmos4VDn4iYfHOrzEmA7+AkxkIigLra/tDQH0= -----END CERTIFICATE-----Generated at Sat Mar 28 11:45:29 2026 by rpki-client