$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145898.roa File: AS145898.roa (raw, json) Hash identifier: +Hk3nkKKVn1+ckbYILtBm8eNtxvnIyAvzgUMpC5p6Dk= Subject key identifier: A2:54:E1:20:73:42:02:F2:46:1D:C8:36:AF:DF:DE:1E:AA:D3:AB:67 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 4D3AF9952B429D1D4641AAFE32B05D1F4E8201A1 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145898.roa Signing time: Wed 04 Mar 2026 06:30:26 +0000 ROA not before: Wed 04 Mar 2026 06:25:26 +0000 ROA not after: Wed 03 Mar 2027 06:30:26 +0000 asID: 145898 IP address blocks: 240a:acb0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:3a:f9:95:2b:42:9d:1d:46:41:aa:fe:32:b0:5d:1f:4e:82:01:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:25:26 2026 GMT Not After : Mar 3 06:30:26 2027 GMT Subject: CN=A254E120734202F2461DC836AFDFDE1EAAD3AB67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:c6:8d:87:bd:dd:62:ff:5e:9c:0f:3d:7c:95: 71:6e:fc:65:c0:67:78:6e:26:2b:3f:c6:44:eb:5a: a2:5c:dd:46:18:da:13:bb:1e:a6:f4:e0:a5:03:64: 74:38:f0:50:c2:af:73:64:d1:f6:26:8d:6c:de:1c: 23:a2:27:29:42:b6:4e:60:c6:c8:0f:eb:ff:76:1a: 93:be:ba:38:d7:4c:b8:62:38:8b:c7:d8:a0:7c:0d: 2e:4c:b8:7f:c9:6d:25:cc:98:db:7f:b2:c2:30:a2: 7e:51:6f:a1:3b:3d:02:f9:23:1d:f4:4a:d0:66:8e: 88:cb:3d:4a:9b:f0:fc:c0:20:28:ae:23:3a:7f:f0: 3d:9a:9d:f6:5c:f6:85:b6:5e:00:5c:a1:5b:c7:11: 03:01:e9:5f:c9:2d:42:51:6e:dd:a1:04:bd:27:f2: 0c:cb:79:ef:c4:ef:4d:3e:06:59:6a:dc:69:6f:83: f8:ae:49:c7:ca:84:af:fd:55:ae:34:c0:e7:11:5c: d4:32:94:04:f4:46:54:58:f0:d5:f2:30:a0:2e:e7: b8:bf:46:1f:86:27:9d:4b:ed:a2:b8:28:2c:b7:c3: ab:5c:0d:08:49:cf:75:25:97:68:10:41:61:18:92: 6a:96:67:c4:12:61:ad:78:e0:a3:9f:6f:73:ad:9d: f3:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:54:E1:20:73:42:02:F2:46:1D:C8:36:AF:DF:DE:1E:AA:D3:AB:67 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145898.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:acb0::/32 Signature Algorithm: sha256WithRSAEncryption 32:4b:0f:90:80:bb:10:99:fc:b8:46:10:7d:6c:31:4b:c1:e0: 55:05:35:26:f7:1b:b6:ab:43:35:16:6b:b8:47:e7:0d:8f:72: bf:26:25:96:00:fb:d7:2c:14:c8:44:8b:57:95:08:2a:3f:b7: 4c:b6:08:0f:15:a8:52:10:cb:79:89:8a:d7:30:78:59:5b:0d: ce:cf:fb:7d:a3:03:26:7d:48:f2:1a:f3:ce:3b:b5:32:ed:92: f9:34:ea:c2:d6:55:33:ab:50:9b:b2:63:62:5f:d1:cb:1e:0d: 6c:6e:c0:29:0e:4d:f4:5c:73:67:4c:62:77:16:e0:29:07:0e: 53:98:68:2a:5b:4d:e3:c7:6d:73:b7:58:3f:99:85:3a:c7:56: 98:1f:00:48:6f:46:4e:98:2d:98:65:ad:9e:fd:5e:31:c5:22: 80:cd:60:ee:e9:d7:9a:b3:d7:ce:ca:56:1b:94:e5:f5:32:2f: 77:b1:ab:e4:2e:8e:0e:42:7a:f3:53:8d:0a:56:89:8d:4e:8f: 13:8c:a4:9b:09:0c:45:3b:46:dd:7a:42:0c:96:61:60:0e:73: 01:49:0e:a2:5a:1b:e4:e7:06:d9:0f:90:ad:76:2e:ff:bd:dd: 39:31:c8:e9:b2:25:b0:9d:f0:cc:8d:9c:c7:af:5c:de:fd:bb: f4:52:ef:62 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUTTr5lStCnR1GQar+MrBdH06CAaEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MjUyNloX DTI3MDMwMzA2MzAyNlowMzExMC8GA1UEAxMoQTI1NEUxMjA3MzQyMDJGMjQ2MURD ODM2QUZERkRFMUVBQUQzQUI2NzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMDGjYe93WL/XpwPPXyVcW78ZcBneG4mKz/GROtaolzdRhjaE7sepvTgpQNk dDjwUMKvc2TR9iaNbN4cI6InKUK2TmDGyA/r/3Yak766ONdMuGI4i8fYoHwNLky4 f8ltJcyY23+ywjCiflFvoTs9AvkjHfRK0GaOiMs9Spvw/MAgKK4jOn/wPZqd9lz2 hbZeAFyhW8cRAwHpX8ktQlFu3aEEvSfyDMt578TvTT4GWWrcaW+D+K5Jx8qEr/1V rjTA5xFc1DKUBPRGVFjw1fIwoC7nuL9GH4YnnUvtorgoLLfDq1wNCEnPdSWXaBBB YRiSapZnxBJhrXjgo59vc62d81cCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSiVOEg c0IC8kYdyDav394eqtOrZzAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTg5OC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rLAwDQYJKoZIhvcNAQELBQADggEBADJLD5CAuxCZ/LhGEH1sMUvB4FUFNSb3G7ar QzUWa7hH5w2Pcr8mJZYA+9csFMhEi1eVCCo/t0y2CA8VqFIQy3mJitcweFlbDc7P +32jAyZ9SPIa8847tTLtkvk06sLWVTOrUJuyY2Jf0cseDWxuwCkOTfRcc2dMYncW 4CkHDlOYaCpbTePHbXO3WD+ZhTrHVpgfAEhvRk6YLZhlrZ79XjHFIoDNYO7p15qz 187KVhuU5fUyL3exq+Qujg5CevNTjQpWiY1OjxOMpJsJDEU7Rt16QgyWYWAOcwFJ DqJaG+TnBtkPkK12Lv+93TkxyOmyJbCd8MyNnMevXN79u/RS72I= -----END CERTIFICATE-----Generated at Sat Mar 28 11:45:10 2026 by rpki-client