$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145954.roa File: AS145954.roa (raw, json) Hash identifier: 7heDwqNjnBQGddUAW9xwVOqIhZlI+HCZ0vjpYznihdM= Subject key identifier: D4:29:CB:FF:BF:3B:19:E9:6D:C9:E3:AA:4D:F7:3E:EC:9B:50:49:B8 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 47A77796FB3B9C2F0BD9FAF9F0F3667A2C1B80DD Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145954.roa Signing time: Wed 04 Mar 2026 06:31:06 +0000 ROA not before: Wed 04 Mar 2026 06:26:06 +0000 ROA not after: Wed 03 Mar 2027 06:31:06 +0000 asID: 145954 IP address blocks: 240a:ace8::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:a7:77:96:fb:3b:9c:2f:0b:d9:fa:f9:f0:f3:66:7a:2c:1b:80:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:26:06 2026 GMT Not After : Mar 3 06:31:06 2027 GMT Subject: CN=D429CBFFBF3B19E96DC9E3AA4DF73EEC9B5049B8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:b4:05:12:d2:3b:4d:43:9c:f0:51:d9:d3:a5: af:f3:94:1d:2f:7b:da:13:20:f5:52:2e:ad:67:14: cf:6d:62:fc:95:b4:38:6a:eb:a5:5b:93:14:0c:61: f2:f7:0a:e3:ce:de:1d:d4:b4:ee:58:61:71:cf:cb: 02:aa:f4:66:58:61:09:72:32:49:d7:92:37:70:67: 19:5d:6a:f3:69:ad:51:76:7a:49:63:6e:c4:19:fe: f3:e5:34:0d:7b:f4:16:8a:60:7c:1e:57:46:a8:14: 26:26:63:36:09:f5:3c:e5:58:e2:4b:14:a9:80:02: 3b:94:f2:bb:98:df:93:84:4a:ed:98:32:25:a2:4b: 94:ac:57:00:2b:f8:fb:1f:2d:c4:87:c0:6c:fb:10: 27:b7:c7:84:82:ee:18:ad:3b:42:e4:f9:62:34:a8: 83:c6:fb:de:0e:5f:f3:41:a0:9e:18:cf:29:f7:74: 7a:fc:29:9b:2b:88:7f:df:8f:89:ef:08:e0:19:fe: e9:69:eb:6b:29:bf:af:75:75:12:9d:73:d5:f1:ca: 5d:0b:1e:bd:ac:8b:e3:17:d5:19:dd:89:8d:63:be: ce:16:05:38:b3:16:04:1b:a0:a8:33:ce:f2:61:e8: 6a:0d:55:b9:64:c6:f3:b8:fe:af:70:6d:cc:b5:3c: e2:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:29:CB:FF:BF:3B:19:E9:6D:C9:E3:AA:4D:F7:3E:EC:9B:50:49:B8 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145954.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:ace8::/32 Signature Algorithm: sha256WithRSAEncryption d9:d2:bf:9b:db:c1:20:e4:2b:e2:8d:3e:c5:8b:fe:21:6a:b5: ef:ee:2c:a9:f3:8d:f1:87:95:5e:8f:de:54:fd:31:23:af:54: 41:f6:87:2e:07:a3:a6:bc:92:60:be:2b:b9:57:97:e2:cb:1e: aa:2d:3f:90:1c:3a:4b:f5:38:c9:12:ac:40:e5:3c:93:0b:e4: 17:25:01:5d:47:4e:dd:a7:a1:f4:eb:10:75:ab:5e:f3:24:c8: 4c:6c:b5:f6:cf:7e:62:da:b0:1a:85:86:34:50:bd:28:a9:d1: 8b:aa:d8:66:c5:c1:b0:25:d5:c3:e9:42:d6:a5:73:0a:bd:bf: f8:c4:a0:6c:c2:a5:26:28:88:3a:17:cf:93:55:f0:b3:6f:cb: a4:d8:a3:29:5c:76:d8:fa:0e:4a:a2:6d:1a:81:38:fe:cf:70: 6f:0e:85:ef:97:5e:b1:0e:2a:b8:cc:09:17:d2:62:7f:ab:e9: c4:94:cc:a2:52:42:5f:f5:b2:2d:1c:6a:fa:2c:2c:dd:43:6b: 77:6f:61:d8:27:01:62:63:d9:d0:51:01:e7:d3:7e:c2:75:7d: f6:92:0d:28:92:41:6d:06:11:33:e9:30:5e:a3:3b:76:84:e4: 95:48:7f:ca:09:b1:90:d5:09:9d:01:0c:35:75:93:12:65:ec: 1b:c9:3c:5f -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUR6d3lvs7nC8L2fr58PNmeiwbgN0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MjYwNloX DTI3MDMwMzA2MzEwNlowMzExMC8GA1UEAxMoRDQyOUNCRkZCRjNCMTlFOTZEQzlF M0FBNERGNzNFRUM5QjUwNDlCODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMa0BRLSO01DnPBR2dOlr/OUHS972hMg9VIurWcUz21i/JW0OGrrpVuTFAxh 8vcK487eHdS07lhhcc/LAqr0ZlhhCXIySdeSN3BnGV1q82mtUXZ6SWNuxBn+8+U0 DXv0FopgfB5XRqgUJiZjNgn1POVY4ksUqYACO5Tyu5jfk4RK7ZgyJaJLlKxXACv4 +x8txIfAbPsQJ7fHhILuGK07QuT5YjSog8b73g5f80GgnhjPKfd0evwpmyuIf9+P ie8I4Bn+6Wnraym/r3V1Ep1z1fHKXQsevayL4xfVGd2JjWO+zhYFOLMWBBugqDPO 8mHoag1VuWTG87j+r3BtzLU84usCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBTUKcv/ vzsZ6W3J46pN9z7sm1BJuDAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTk1NC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rOgwDQYJKoZIhvcNAQELBQADggEBANnSv5vbwSDkK+KNPsWL/iFqte/uLKnzjfGH lV6P3lT9MSOvVEH2hy4Ho6a8kmC+K7lXl+LLHqotP5AcOkv1OMkSrEDlPJML5Bcl AV1HTt2nofTrEHWrXvMkyExstfbPfmLasBqFhjRQvSip0Yuq2GbFwbAl1cPpQtal cwq9v/jEoGzCpSYoiDoXz5NV8LNvy6TYoylcdtj6DkqibRqBOP7PcG8Ohe+XXrEO KrjMCRfSYn+r6cSUzKJSQl/1si0cavosLN1Da3dvYdgnAWJj2dBRAefTfsJ1ffaS DSiSQW0GETPpMF6jO3aE5JVIf8oJsZDVCZ0BDDV1kxJl7BvJPF8= -----END CERTIFICATE-----Generated at Sat Mar 28 13:11:20 2026 by rpki-client