$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145957.roa File: AS145957.roa (raw, json) Hash identifier: rTZtzGsk9RHzA88nxs39PSmaUnYWuhD8wzxmwSR99rk= Subject key identifier: 4D:64:E0:BD:99:B4:34:47:37:49:8F:EF:42:19:AC:DD:F4:A8:F4:DB Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 441A75E11DDC6E560EC2F59ADC4595D4884CDA59 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145957.roa Signing time: Wed 04 Mar 2026 06:29:56 +0000 ROA not before: Wed 04 Mar 2026 06:24:56 +0000 ROA not after: Wed 03 Mar 2027 06:29:56 +0000 asID: 145957 IP address blocks: 240a:aceb::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:1a:75:e1:1d:dc:6e:56:0e:c2:f5:9a:dc:45:95:d4:88:4c:da:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:24:56 2026 GMT Not After : Mar 3 06:29:56 2027 GMT Subject: CN=4D64E0BD99B4344737498FEF4219ACDDF4A8F4DB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:ca:21:67:a0:b6:c2:dc:6e:d2:f5:92:f7:f5: 7e:f5:d4:8d:d9:d0:99:63:0e:a1:9a:4a:2b:88:db: 7e:52:3f:41:ed:68:65:63:0a:29:53:81:6d:f5:f0: 05:97:50:79:cb:1c:a6:34:b4:c2:f2:40:47:09:8d: 6c:c9:4a:5a:c4:3e:89:67:e0:49:e5:0e:a0:90:56: bc:9a:0e:fd:cd:cb:f2:7e:55:69:50:97:a5:06:53: 88:43:6d:d3:be:28:d3:79:94:4c:77:09:77:84:6e: 1b:6e:16:08:72:11:25:16:e3:fb:c6:74:6e:72:dc: 3a:60:6a:74:77:83:b7:4a:5c:61:13:8a:f6:73:b0: d9:6d:2c:31:26:af:21:54:13:20:92:23:4b:4e:b3: 34:bc:4f:9e:0c:1a:68:a9:7a:60:8c:e1:6d:32:85: 21:0f:99:ad:6e:13:e1:73:6c:b1:51:62:4c:02:e1: 49:6b:1b:5b:47:62:de:31:04:95:44:fc:62:c0:98: 9a:57:56:56:3f:b0:c4:7d:c8:25:b2:de:11:16:25: a2:b9:9b:47:45:f8:bf:63:59:c1:5a:55:79:ac:67: ab:3b:5a:b3:28:07:e8:d2:90:ea:d2:ed:d3:be:ce: d7:02:50:89:0c:89:c0:dc:0a:7c:cb:f2:1b:3e:d1: cc:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:64:E0:BD:99:B4:34:47:37:49:8F:EF:42:19:AC:DD:F4:A8:F4:DB X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145957.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:aceb::/32 Signature Algorithm: sha256WithRSAEncryption 6f:cc:8d:5b:fb:27:bf:81:40:30:93:1b:ed:cc:d8:3f:97:f5: 57:e5:35:79:b1:50:9b:b5:a9:ed:d7:47:57:06:d3:e2:b9:97: 3b:59:d1:cf:c9:4f:60:a2:2c:a4:28:2b:da:75:98:ad:58:4e: a5:cb:f5:86:df:cb:3b:b2:ea:7a:93:4e:a9:e9:fd:d3:93:d3: fc:49:a5:b3:d5:63:79:f9:38:da:6b:e7:d9:6b:0a:fa:ec:e2: 23:6c:16:5d:51:e4:d8:91:a9:28:15:49:c7:56:2f:99:5f:31: 4d:b4:df:14:74:f7:23:e6:2c:d3:a1:d7:72:8a:69:1e:fe:7a: 69:d2:10:3e:a3:40:31:6a:14:62:0f:35:40:bd:df:df:8b:50: c2:5f:56:d3:b0:7d:c5:dc:f5:81:48:3e:c1:b8:9d:fb:7e:ce: 88:59:6b:c6:ff:ca:39:76:2a:b9:b2:2c:db:2d:9d:bb:91:4f: 9a:62:d1:5b:06:42:76:9a:f2:32:63:80:09:0f:6b:c5:89:bb: 5c:d6:fe:3d:24:f4:ed:bf:17:e4:41:52:17:3f:6d:b3:21:bb: 7a:e0:d7:d5:9b:86:52:45:bc:d4:53:cd:71:fa:6d:ae:2b:55: 2f:a3:12:6e:cc:ab:a0:08:93:08:a6:47:f2:63:01:dd:2f:98: 41:98:b1:77 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIURBp14R3cblYOwvWa3EWV1IhM2lkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MjQ1NloX DTI3MDMwMzA2Mjk1NlowMzExMC8GA1UEAxMoNEQ2NEUwQkQ5OUI0MzQ0NzM3NDk4 RkVGNDIxOUFDRERGNEE4RjREQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANPKIWegtsLcbtL1kvf1fvXUjdnQmWMOoZpKK4jbflI/Qe1oZWMKKVOBbfXw BZdQecscpjS0wvJARwmNbMlKWsQ+iWfgSeUOoJBWvJoO/c3L8n5VaVCXpQZTiENt 074o03mUTHcJd4RuG24WCHIRJRbj+8Z0bnLcOmBqdHeDt0pcYROK9nOw2W0sMSav IVQTIJIjS06zNLxPngwaaKl6YIzhbTKFIQ+ZrW4T4XNssVFiTALhSWsbW0di3jEE lUT8YsCYmldWVj+wxH3IJbLeERYlormbR0X4v2NZwVpVeaxnqztasygH6NKQ6tLt 077O1wJQiQyJwNwKfMvyGz7RzLcCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRNZOC9 mbQ0RzdJj+9CGazd9Kj02zAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTk1Ny5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rOswDQYJKoZIhvcNAQELBQADggEBAG/MjVv7J7+BQDCTG+3M2D+X9VflNXmxUJu1 qe3XR1cG0+K5lztZ0c/JT2CiLKQoK9p1mK1YTqXL9Ybfyzuy6nqTTqnp/dOT0/xJ pbPVY3n5ONpr59lrCvrs4iNsFl1R5NiRqSgVScdWL5lfMU203xR09yPmLNOh13KK aR7+emnSED6jQDFqFGIPNUC939+LUMJfVtOwfcXc9YFIPsG4nft+zohZa8b/yjl2 KrmyLNstnbuRT5pi0VsGQnaa8jJjgAkPa8WJu1zW/j0k9O2/F+RBUhc/bbMhu3rg 19WbhlJFvNRTzXH6ba4rVS+jEm7Mq6AIkwimR/JjAd0vmEGYsXc= -----END CERTIFICATE-----Generated at Sat Mar 28 11:50:05 2026 by rpki-client