$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145964.roa File: AS145964.roa (raw, json) Hash identifier: REimgAlhjzooLaDWP4HbOC9lRpvE4hX7QMNe1q0UIrM= Subject key identifier: E9:CB:7A:6B:C6:A6:63:4D:7A:75:7A:D9:CC:8C:82:58:4B:E3:E0:9D Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 12E41EF10275138CE34FEE51E874F8B60DE48F66 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145964.roa Signing time: Wed 04 Mar 2026 06:29:44 +0000 ROA not before: Wed 04 Mar 2026 06:24:44 +0000 ROA not after: Wed 03 Mar 2027 06:29:44 +0000 asID: 145964 IP address blocks: 240a:acf2::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:e4:1e:f1:02:75:13:8c:e3:4f:ee:51:e8:74:f8:b6:0d:e4:8f:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:24:44 2026 GMT Not After : Mar 3 06:29:44 2027 GMT Subject: CN=E9CB7A6BC6A6634D7A757AD9CC8C82584BE3E09D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:82:f2:c0:33:c4:a4:54:39:9e:fa:95:77:00: 62:c0:0d:c6:de:c9:e7:d8:18:8f:53:ff:d0:68:c6: df:42:94:ac:3f:36:ef:ad:db:b8:f9:cd:9b:83:34: 7b:49:48:5c:db:43:ee:25:a0:63:65:a1:36:18:5d: 9c:7a:f0:38:71:d9:3e:6c:fe:eb:7b:9f:d0:03:e1: 91:d4:2d:ee:ac:75:24:00:69:78:5a:57:c3:63:a9: 62:a7:49:2b:b9:8e:8f:d8:49:1c:f2:69:67:16:0c: c1:51:c8:2f:88:9b:b6:51:0d:22:93:9b:e4:6a:a6: 98:e3:4c:bc:46:8a:26:58:4a:2d:23:e1:91:62:8d: b4:db:93:52:bd:da:9d:3d:89:ea:c7:9d:0d:f8:9b: 97:59:bd:4c:2c:eb:1e:60:40:01:f1:64:89:3e:4a: 32:4d:11:f0:03:6b:2e:c1:01:f8:e8:23:49:4f:2f: f3:b6:3e:a4:fb:51:1a:f1:3e:9b:a2:8e:01:9d:a4: b4:f6:5d:d8:a3:66:e3:4d:e4:84:67:02:3e:28:17: 90:0b:02:2c:1a:e0:87:62:86:4b:66:5e:d2:c8:78: c7:da:e8:76:c0:90:a9:d4:ea:f0:62:6f:3b:2c:ed: 16:37:5a:90:ad:0b:b0:0e:46:f0:6b:7f:9c:62:77: 36:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:CB:7A:6B:C6:A6:63:4D:7A:75:7A:D9:CC:8C:82:58:4B:E3:E0:9D X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145964.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:acf2::/32 Signature Algorithm: sha256WithRSAEncryption 91:5d:48:97:bf:56:aa:0a:5f:a9:b1:79:f9:28:88:8c:8a:5c: 72:df:29:89:62:57:1f:83:76:cc:e6:b2:28:be:b4:1a:ad:31: 08:c3:4f:99:5e:3f:88:72:09:e9:bd:6e:2a:53:8d:5a:fd:a8: b6:1d:8d:78:5a:81:05:b0:44:ec:0c:c4:6e:4f:1a:b6:31:99: 40:24:cc:73:a3:5e:4d:6f:2c:8b:fd:2b:66:21:d6:00:30:3b: 3e:12:dc:a0:df:64:0a:09:e0:37:21:a4:42:24:55:c5:74:2d: 3f:1a:6c:29:a5:44:ad:17:c1:02:41:64:44:40:9c:74:73:b5: 0f:c3:1b:83:c8:d9:87:9b:a6:6e:cc:2d:35:fc:61:2f:08:dc: d8:7e:9e:aa:fe:31:0c:8a:9b:6f:12:c4:16:7d:bf:a4:36:a9: 37:ff:18:98:5a:b3:c9:03:db:17:e4:e8:68:86:f3:b0:4d:ad: a5:2b:82:ae:bd:70:ab:63:b3:52:4e:50:ba:4e:33:f7:b7:21: 84:e0:92:06:82:9d:5f:5f:ac:f5:36:64:44:50:e6:fa:44:47: 19:6f:7a:64:f2:57:bd:bc:e9:aa:45:df:9a:e4:60:df:32:e8: 90:ed:7d:c9:2b:a3:29:53:42:d4:07:8d:93:cd:0c:62:03:54: 4b:c4:f1:36 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUEuQe8QJ1E4zjT+5R6HT4tg3kj2YwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MjQ0NFoX DTI3MDMwMzA2Mjk0NFowMzExMC8GA1UEAxMoRTlDQjdBNkJDNkE2NjM0RDdBNzU3 QUQ5Q0M4QzgyNTg0QkUzRTA5RDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANOC8sAzxKRUOZ76lXcAYsANxt7J59gYj1P/0GjG30KUrD82763buPnNm4M0 e0lIXNtD7iWgY2WhNhhdnHrwOHHZPmz+63uf0APhkdQt7qx1JABpeFpXw2OpYqdJ K7mOj9hJHPJpZxYMwVHIL4ibtlENIpOb5GqmmONMvEaKJlhKLSPhkWKNtNuTUr3a nT2J6sedDfibl1m9TCzrHmBAAfFkiT5KMk0R8ANrLsEB+OgjSU8v87Y+pPtRGvE+ m6KOAZ2ktPZd2KNm403khGcCPigXkAsCLBrgh2KGS2Ze0sh4x9rodsCQqdTq8GJv OyztFjdakK0LsA5G8Gt/nGJ3Nh0CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBTpy3pr xqZjTXp1etnMjIJYS+PgnTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTk2NC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rPIwDQYJKoZIhvcNAQELBQADggEBAJFdSJe/VqoKX6mxefkoiIyKXHLfKYliVx+D dszmsii+tBqtMQjDT5leP4hyCem9bipTjVr9qLYdjXhagQWwROwMxG5PGrYxmUAk zHOjXk1vLIv9K2Yh1gAwOz4S3KDfZAoJ4DchpEIkVcV0LT8abCmlRK0XwQJBZERA nHRztQ/DG4PI2Yebpm7MLTX8YS8I3Nh+nqr+MQyKm28SxBZ9v6Q2qTf/GJhas8kD 2xfk6GiG87BNraUrgq69cKtjs1JOULpOM/e3IYTgkgaCnV9frPU2ZERQ5vpERxlv emTyV7286apF35rkYN8y6JDtfckroylTQtQHjZPNDGIDVEvE8TY= -----END CERTIFICATE-----Generated at Sat Mar 28 11:43:14 2026 by rpki-client