$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145934.roa File: AS145934.roa (raw, json) Hash identifier: cdwk+sP3AlldNH0MA7z8oAbMWQFjbndKIcXUWBE7WEs= Subject key identifier: 25:BF:1A:7E:32:E9:37:9C:B5:7D:75:52:AA:3F:C0:49:F1:1D:99:AB Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 2E4F8AA29F5267C25A55A009B8E700E22E099AE2 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145934.roa Signing time: Wed 04 Mar 2026 06:29:52 +0000 ROA not before: Wed 04 Mar 2026 06:24:52 +0000 ROA not after: Wed 03 Mar 2027 06:29:52 +0000 asID: 145934 IP address blocks: 240a:acd4::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:4f:8a:a2:9f:52:67:c2:5a:55:a0:09:b8:e7:00:e2:2e:09:9a:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:24:52 2026 GMT Not After : Mar 3 06:29:52 2027 GMT Subject: CN=25BF1A7E32E9379CB57D7552AA3FC049F11D99AB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:0f:0e:77:6b:fc:e0:11:45:a5:f3:8f:8a:3e: 6a:6c:9a:c5:ff:a1:60:3e:ef:c1:06:4f:e9:21:11: e5:53:13:8b:4c:c5:c6:21:79:b9:df:70:79:cf:c1: 68:58:16:ee:37:16:18:37:cf:6d:9b:1e:9e:91:de: bb:3f:02:aa:6f:e0:0e:d0:3f:bc:bd:f3:03:e4:35: af:09:37:ae:9f:90:59:b8:48:5e:f7:ad:17:41:7b: 03:2a:6b:17:7c:42:ee:0d:33:44:52:24:94:7f:a5: 40:d4:68:26:4b:fe:3f:49:de:b2:0a:ac:c7:d9:1f: 19:dd:05:1b:7d:99:ba:00:e4:4f:1e:85:81:a3:da: cd:f0:14:aa:e9:06:68:a8:b5:8e:63:d0:d3:86:62: 2c:80:10:1e:ee:09:84:db:29:44:34:89:3e:22:77: 0f:55:f7:2e:3d:d7:7d:1d:bf:96:8e:20:54:33:8d: 92:69:ff:2b:d3:2d:b5:aa:83:2b:d9:83:97:9b:87: bf:ac:d3:c9:f0:c9:d5:13:f1:d2:5f:bb:77:fe:91: ce:94:a9:2a:86:c7:52:f8:5d:22:a8:9e:4e:d4:e9: 62:61:a6:00:a0:48:f9:2f:02:30:a0:73:df:a8:87: 8d:0e:a8:02:a3:df:ff:b4:44:26:9e:b1:55:7c:ea: ee:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:BF:1A:7E:32:E9:37:9C:B5:7D:75:52:AA:3F:C0:49:F1:1D:99:AB X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145934.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:acd4::/32 Signature Algorithm: sha256WithRSAEncryption 97:44:b1:ec:d4:ae:0c:3c:32:cd:77:60:42:34:fe:28:0f:8d: 2b:7b:4c:6d:30:18:0f:f5:fe:b0:3f:b7:da:49:34:67:57:f6: cd:97:ec:a5:0f:0e:94:a3:cc:01:df:95:0e:86:c9:db:8c:22: 69:4d:37:69:e9:4c:69:72:b8:be:3b:45:a6:a5:53:e9:af:67: ce:35:3c:f4:fb:30:97:56:a7:7a:db:a4:4b:0c:80:70:cd:ac: 1a:1f:45:f4:e7:e0:ae:7e:29:e5:bb:63:2a:97:59:99:29:c8: b2:d9:84:66:20:f8:1f:67:a5:45:1e:d6:55:7f:43:c6:e8:50: 80:a7:99:fe:97:7d:3e:42:3a:15:0b:b7:cf:61:c7:51:83:b5: 1f:0e:29:d4:fe:36:c1:e1:e0:fc:d8:da:83:c8:01:e4:6f:7a: 9f:57:27:8f:17:02:be:f0:43:d7:27:a2:f7:d7:94:86:1f:4d: f5:bf:3e:e5:90:6c:6f:f9:16:21:63:0d:76:5e:1b:25:c3:29: c7:97:a5:e0:c9:7f:7c:c8:d4:2f:12:ff:bc:7f:d9:1a:9d:67: 3c:25:d5:d6:63:b5:0f:85:86:15:15:d1:65:91:3d:0e:e2:22: c3:9a:6a:65:26:a4:51:47:3f:76:4e:87:97:04:7c:1b:b0:c8: b4:1e:6a:3e -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIULk+Kop9SZ8JaVaAJuOcA4i4JmuIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MjQ1MloX DTI3MDMwMzA2Mjk1MlowMzExMC8GA1UEAxMoMjVCRjFBN0UzMkU5Mzc5Q0I1N0Q3 NTUyQUEzRkMwNDlGMTFEOTlBQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK4PDndr/OARRaXzj4o+amyaxf+hYD7vwQZP6SER5VMTi0zFxiF5ud9wec/B aFgW7jcWGDfPbZsenpHeuz8Cqm/gDtA/vL3zA+Q1rwk3rp+QWbhIXvetF0F7Aypr F3xC7g0zRFIklH+lQNRoJkv+P0nesgqsx9kfGd0FG32ZugDkTx6FgaPazfAUqukG aKi1jmPQ04ZiLIAQHu4JhNspRDSJPiJ3D1X3Lj3XfR2/lo4gVDONkmn/K9MttaqD K9mDl5uHv6zTyfDJ1RPx0l+7d/6RzpSpKobHUvhdIqieTtTpYmGmAKBI+S8CMKBz 36iHjQ6oAqPf/7REJp6xVXzq7hUCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQlvxp+ Muk3nLV9dVKqP8BJ8R2ZqzAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTkzNC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rNQwDQYJKoZIhvcNAQELBQADggEBAJdEsezUrgw8Ms13YEI0/igPjSt7TG0wGA/1 /rA/t9pJNGdX9s2X7KUPDpSjzAHflQ6GyduMImlNN2npTGlyuL47RaalU+mvZ841 PPT7MJdWp3rbpEsMgHDNrBofRfTn4K5+KeW7YyqXWZkpyLLZhGYg+B9npUUe1lV/ Q8boUICnmf6XfT5COhULt89hx1GDtR8OKdT+NsHh4PzY2oPIAeRvep9XJ48XAr7w Q9cnovfXlIYfTfW/PuWQbG/5FiFjDXZeGyXDKceXpeDJf3zI1C8S/7x/2RqdZzwl 1dZjtQ+FhhUV0WWRPQ7iIsOaamUmpFFHP3ZOh5cEfBuwyLQeaj4= -----END CERTIFICATE-----Generated at Sat Mar 28 11:45:01 2026 by rpki-client