$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145942.roa File: AS145942.roa (raw, json) Hash identifier: ET5rbRNCgn+4AgIbfsZg8vP6UPF4PUriD1hXEySJgYs= Subject key identifier: B8:3B:EE:C3:96:17:8A:F1:D4:36:71:9A:D9:5C:8E:CC:3F:3B:C2:DC Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 0FE420AAF68861BE0C42ACDA708BB3E16E91CA5E Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145942.roa Signing time: Wed 04 Mar 2026 06:30:29 +0000 ROA not before: Wed 04 Mar 2026 06:25:29 +0000 ROA not after: Wed 03 Mar 2027 06:30:29 +0000 asID: 145942 IP address blocks: 240a:acdc::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:e4:20:aa:f6:88:61:be:0c:42:ac:da:70:8b:b3:e1:6e:91:ca:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:25:29 2026 GMT Not After : Mar 3 06:30:29 2027 GMT Subject: CN=B83BEEC396178AF1D436719AD95C8ECC3F3BC2DC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:7c:82:8d:02:b4:62:b1:34:4d:7d:4e:76:80: f7:fe:ae:c4:7b:d1:87:eb:7e:de:47:98:22:23:fc: 1d:74:77:27:23:f1:1a:d1:f9:95:fc:f4:a4:5e:5c: cd:1d:4a:26:21:de:95:79:f0:82:1d:f7:4e:5c:62: 39:28:bc:28:b0:2c:7c:19:79:94:08:e8:62:68:ba: ee:78:fe:f8:a0:4c:7f:b8:f7:3c:65:22:04:2c:19: f9:a6:05:65:d0:67:ef:09:55:d3:aa:7c:47:57:1c: 7b:2f:91:7b:0a:ba:f1:8d:e0:18:74:57:26:f8:6e: 98:82:b3:e7:4d:b3:28:da:09:15:34:d7:c8:42:b5: 61:0f:c5:68:75:c3:62:4c:b6:f0:1d:a6:a7:c9:cc: d0:dc:ef:9c:73:9d:90:be:d6:51:03:bb:d7:23:92: e4:cf:ce:29:e7:94:87:d9:f0:4f:41:8e:41:66:f2: 23:b3:e0:c5:62:c4:fc:5d:55:c0:32:84:57:8b:c2: 15:06:d3:f0:95:e8:51:e5:d2:03:ec:80:e0:6f:cc: 05:97:16:f0:fa:3b:fc:1b:ec:f8:9d:97:36:8b:b1: 68:a1:7c:48:b8:87:db:8b:81:28:6d:99:83:03:a7: 75:7a:71:d1:30:d1:20:e6:e2:84:4f:20:f6:b7:bd: 82:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:3B:EE:C3:96:17:8A:F1:D4:36:71:9A:D9:5C:8E:CC:3F:3B:C2:DC X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145942.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:acdc::/32 Signature Algorithm: sha256WithRSAEncryption 20:65:7e:26:c0:25:5b:eb:f5:b7:6b:e4:92:73:1c:1d:71:01: 6e:3c:5f:34:76:2f:3e:fa:3c:f5:5e:8a:03:76:43:01:55:8d: 64:93:a9:b6:39:e3:eb:9c:ff:c2:17:be:85:9e:bd:32:cd:61: 4a:d6:b3:1a:3f:c8:b7:a6:fb:61:9b:b5:8d:a3:63:c6:97:15: aa:55:ca:96:fa:e8:d6:29:19:bd:24:ce:88:28:38:f8:77:ca: 9c:67:b8:e4:e0:07:ec:2d:f4:7d:36:c6:6c:de:c1:db:2a:97: e4:f3:8c:2c:9d:03:d0:ba:10:e6:8b:1c:c5:4b:7d:02:ca:b3: 7c:ec:ce:46:7a:a7:81:43:cc:d6:e5:32:be:06:f9:78:40:a9: 62:36:b6:78:79:8d:a9:40:87:8b:5a:33:06:c9:73:ed:63:67: 23:fb:d3:76:f6:98:e9:a8:c1:a2:f3:1a:9f:73:b0:94:a7:1b: b8:2e:1b:45:5a:0e:97:99:bc:9a:5b:d5:62:bd:29:57:5d:d6: 2f:7b:fc:f8:0c:1d:e4:0e:27:be:cf:9d:f7:f0:e2:48:e8:60: 8f:a3:b5:2f:31:65:80:26:49:88:c3:cf:56:1a:78:1c:60:32: 5c:2c:a1:e7:ba:7c:b5:05:80:4f:ae:86:50:c2:44:0d:bc:48: c1:c2:0c:2b -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUD+QgqvaIYb4MQqzacIuz4W6Ryl4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MjUyOVoX DTI3MDMwMzA2MzAyOVowMzExMC8GA1UEAxMoQjgzQkVFQzM5NjE3OEFGMUQ0MzY3 MTlBRDk1QzhFQ0MzRjNCQzJEQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKN8go0CtGKxNE19TnaA9/6uxHvRh+t+3keYIiP8HXR3JyPxGtH5lfz0pF5c zR1KJiHelXnwgh33TlxiOSi8KLAsfBl5lAjoYmi67nj++KBMf7j3PGUiBCwZ+aYF ZdBn7wlV06p8R1ccey+Rewq68Y3gGHRXJvhumIKz502zKNoJFTTXyEK1YQ/FaHXD Yky28B2mp8nM0NzvnHOdkL7WUQO71yOS5M/OKeeUh9nwT0GOQWbyI7PgxWLE/F1V wDKEV4vCFQbT8JXoUeXSA+yA4G/MBZcW8Po7/Bvs+J2XNouxaKF8SLiH24uBKG2Z gwOndXpx0TDRIObihE8g9re9gjsCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBS4O+7D lheK8dQ2cZrZXI7MPzvC3DAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTk0Mi5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rNwwDQYJKoZIhvcNAQELBQADggEBACBlfibAJVvr9bdr5JJzHB1xAW48XzR2Lz76 PPVeigN2QwFVjWSTqbY54+uc/8IXvoWevTLNYUrWsxo/yLem+2GbtY2jY8aXFapV ypb66NYpGb0kzogoOPh3ypxnuOTgB+wt9H02xmzewdsql+TzjCydA9C6EOaLHMVL fQLKs3zszkZ6p4FDzNblMr4G+XhAqWI2tnh5jalAh4taMwbJc+1jZyP703b2mOmo waLzGp9zsJSnG7guG0VaDpeZvJpb1WK9KVdd1i97/PgMHeQOJ77Pnffw4kjoYI+j tS8xZYAmSYjDz1YaeBxgMlwsoee6fLUFgE+uhlDCRA28SMHCDCs= -----END CERTIFICATE-----Generated at Sat Mar 28 13:10:23 2026 by rpki-client