$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145917.roa File: AS145917.roa (raw, json) Hash identifier: cIQ8WCJgUcHdSbM6WIa1p64nLMujW5vZ5vOpoAXRI9c= Subject key identifier: 1D:F5:AC:9F:C5:F8:A3:05:B3:E0:44:65:B7:FC:79:C1:ED:37:AD:B5 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 14E330D61DBC5BEA9F6E3AC54A19416C9FD2D3BB Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145917.roa Signing time: Wed 04 Mar 2026 06:31:07 +0000 ROA not before: Wed 04 Mar 2026 06:26:07 +0000 ROA not after: Wed 03 Mar 2027 06:31:07 +0000 asID: 145917 IP address blocks: 240a:acc3::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:e3:30:d6:1d:bc:5b:ea:9f:6e:3a:c5:4a:19:41:6c:9f:d2:d3:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:26:07 2026 GMT Not After : Mar 3 06:31:07 2027 GMT Subject: CN=1DF5AC9FC5F8A305B3E04465B7FC79C1ED37ADB5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:a2:d7:b8:f0:46:59:c0:d6:a9:4b:f1:cf:f7: f8:bd:d0:a4:9a:ac:e0:68:01:d3:ff:d7:44:59:5b: 95:8c:db:db:2e:52:e1:a6:52:b1:d7:89:89:f9:e6: 3a:a8:85:d5:88:82:40:89:e9:d0:6b:5c:fd:a1:32: 32:e8:3c:2c:15:28:16:2d:43:16:59:d1:e0:a2:68: 89:2a:f9:06:04:c3:f5:ab:66:e7:25:08:4e:1b:67: e1:d1:b4:df:3d:b0:42:13:48:c2:ac:b9:29:52:e4: 37:2e:a9:c6:57:f0:4c:05:09:17:59:e9:ea:f2:bc: 7c:80:7a:2e:6e:f0:77:b4:aa:98:4a:07:b5:85:8e: 10:3e:4b:06:9e:9e:d7:ab:03:e6:c4:ff:d5:e6:d5: 25:88:9f:23:c1:fe:f1:29:2c:f8:3e:05:2e:24:3c: 99:e2:f6:1e:f3:6a:bc:52:ad:0c:d0:4f:3b:3f:d9: 25:b2:74:7a:35:3c:e0:34:e0:eb:f8:5d:bd:65:1f: d2:93:f9:08:9a:74:dc:dc:a6:13:64:cb:8f:28:82: 2f:be:af:8e:70:fd:93:73:9b:a7:b9:71:bf:29:bd: 65:6e:a2:41:c4:78:f2:ca:98:25:4e:c4:55:22:30: d7:9d:e3:e3:5c:32:b6:3f:91:f2:26:6c:35:8c:de: 16:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:F5:AC:9F:C5:F8:A3:05:B3:E0:44:65:B7:FC:79:C1:ED:37:AD:B5 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145917.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:acc3::/32 Signature Algorithm: sha256WithRSAEncryption b4:1d:97:75:cb:0b:dd:f9:25:c8:eb:46:bb:e4:13:06:62:27: bd:2a:7e:b2:fe:ba:53:9c:4f:ef:c1:67:8c:4f:65:7d:80:dc: 3d:0c:90:a7:f6:6a:3f:b0:31:a8:27:c9:59:ed:f2:85:57:67: ba:3e:8a:22:59:ff:5a:d5:36:d1:15:40:4e:29:07:eb:9c:0c: 00:91:78:4e:94:6b:db:14:2f:76:4e:18:08:ca:58:78:f4:e3: 0c:b6:5d:f5:71:84:e8:26:69:db:f9:c2:2c:93:06:e6:49:72: 54:ed:e8:6f:a2:47:a1:93:85:0a:24:30:b1:7b:1c:86:6f:0f: 02:4a:0c:97:30:4f:47:2c:db:b8:64:7f:3f:95:5d:d4:62:5f: d0:bd:fb:da:38:93:ff:1f:3a:b0:61:ea:e6:23:3b:1e:70:a5: 8c:f0:72:18:13:9d:36:f4:35:53:90:55:12:6a:6a:46:0c:87: 18:72:dd:77:20:99:d2:d3:c5:8b:29:d4:3d:00:55:52:5c:22: 29:d6:11:ce:be:c1:fd:06:c7:11:2b:e9:e3:91:c6:c6:15:84: a1:d3:20:70:fc:21:1b:df:d0:5f:e4:23:3a:0f:e8:df:bc:85: d0:3e:b5:43:e5:34:b1:ae:c3:17:af:d8:09:b2:72:4b:2c:69: 6f:0a:0c:1a -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUFOMw1h28W+qfbjrFShlBbJ/S07swDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MjYwN1oX DTI3MDMwMzA2MzEwN1owMzExMC8GA1UEAxMoMURGNUFDOUZDNUY4QTMwNUIzRTA0 NDY1QjdGQzc5QzFFRDM3QURCNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM+i17jwRlnA1qlL8c/3+L3QpJqs4GgB0//XRFlblYzb2y5S4aZSsdeJifnm OqiF1YiCQInp0Gtc/aEyMug8LBUoFi1DFlnR4KJoiSr5BgTD9atm5yUIThtn4dG0 3z2wQhNIwqy5KVLkNy6pxlfwTAUJF1np6vK8fIB6Lm7wd7SqmEoHtYWOED5LBp6e 16sD5sT/1ebVJYifI8H+8Sks+D4FLiQ8meL2HvNqvFKtDNBPOz/ZJbJ0ejU84DTg 6/hdvWUf0pP5CJp03NymE2TLjyiCL76vjnD9k3Obp7lxvym9ZW6iQcR48sqYJU7E VSIw153j41wytj+R8iZsNYzeFl8CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQd9ayf xfijBbPgRGW3/HnB7TettTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTkxNy5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rMMwDQYJKoZIhvcNAQELBQADggEBALQdl3XLC935JcjrRrvkEwZiJ70qfrL+ulOc T+/BZ4xPZX2A3D0MkKf2aj+wMagnyVnt8oVXZ7o+iiJZ/1rVNtEVQE4pB+ucDACR eE6Ua9sUL3ZOGAjKWHj04wy2XfVxhOgmadv5wiyTBuZJclTt6G+iR6GThQokMLF7 HIZvDwJKDJcwT0cs27hkfz+VXdRiX9C9+9o4k/8fOrBh6uYjOx5wpYzwchgTnTb0 NVOQVRJqakYMhxhy3XcgmdLTxYsp1D0AVVJcIinWEc6+wf0GxxEr6eORxsYVhKHT IHD8IRvf0F/kIzoP6N+8hdA+tUPlNLGuwxev2AmyckssaW8KDBo= -----END CERTIFICATE-----Generated at Sat Mar 28 11:44:33 2026 by rpki-client