$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145971.roa File: AS145971.roa (raw, json) Hash identifier: /3hcfkO6DWJPRhvuChArPoEYhK0/LaFYQ9m5WtSVQEw= Subject key identifier: 42:94:CB:1F:9A:51:4F:14:0A:9F:FB:E1:A0:79:31:83:A6:55:57:F0 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 38BE9352967CD7E7569AC50EA5ED5C79280EC0E6 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145971.roa Signing time: Wed 04 Mar 2026 06:29:38 +0000 ROA not before: Wed 04 Mar 2026 06:24:38 +0000 ROA not after: Wed 03 Mar 2027 06:29:38 +0000 asID: 145971 IP address blocks: 240a:acf9::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:be:93:52:96:7c:d7:e7:56:9a:c5:0e:a5:ed:5c:79:28:0e:c0:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:24:38 2026 GMT Not After : Mar 3 06:29:38 2027 GMT Subject: CN=4294CB1F9A514F140A9FFBE1A0793183A65557F0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:57:d2:b4:fd:ce:4a:8b:b6:21:31:eb:27:29: 56:ef:46:5a:30:53:30:e1:9b:65:ed:21:28:b8:60: 07:d0:7f:f2:7c:81:e2:30:f2:e7:4b:9a:d7:62:1c: ea:c2:5f:b7:06:3d:54:2e:09:e7:57:2e:8e:bb:26: 4d:88:0f:d0:11:54:49:4c:d9:e2:8e:bb:45:74:1c: 1f:33:dd:45:98:78:d0:f2:a6:6f:8b:66:41:5d:db: bd:51:51:7c:7b:78:60:16:a7:00:60:b3:a2:ab:77: 13:1b:7b:55:7f:b0:1d:6e:61:3b:5b:52:13:51:33: 77:b5:9d:21:3f:58:8d:58:66:be:ba:c2:f2:54:80: d5:e7:08:cd:dc:12:0d:79:52:99:e4:53:67:7d:33: 42:25:96:89:1a:2d:4b:de:00:5d:9b:21:0c:25:f3: 93:b0:b3:39:6b:74:69:37:1a:b7:d1:37:78:9c:1c: 82:86:85:7c:c9:28:cf:b5:1c:f4:0d:cb:68:f6:58: 63:59:0d:7c:17:da:e9:86:41:6f:44:d9:6c:39:6c: 24:77:e7:61:7e:13:73:88:70:61:21:84:98:14:92: 4b:44:d2:33:bd:a0:5c:46:94:19:0b:ed:00:a0:aa: bc:13:fe:cf:83:53:11:e8:7d:89:14:1f:41:33:df: 70:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:94:CB:1F:9A:51:4F:14:0A:9F:FB:E1:A0:79:31:83:A6:55:57:F0 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145971.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:acf9::/32 Signature Algorithm: sha256WithRSAEncryption 95:99:67:40:69:e6:76:54:ef:4d:eb:a9:f5:04:a8:21:67:5c: b4:99:2d:47:42:14:a3:e1:8d:8f:04:68:3f:e8:7b:bb:dc:4d: ed:96:21:32:57:e3:71:b3:6a:b4:e5:c9:aa:2a:68:a6:b4:46: 1d:e2:f5:29:9b:c1:8e:ee:20:56:fa:6c:35:27:37:19:c9:82: 03:27:1d:a9:41:c0:94:66:4d:ef:d4:fe:dc:18:35:39:f4:56: a7:e6:1c:b0:0d:bb:4a:f0:40:db:6c:50:14:b3:ce:1c:78:f5: 6c:58:62:df:9a:c1:72:2a:f4:11:e3:c5:84:84:31:d0:c1:45: ca:ae:8f:4b:93:cb:85:39:1b:77:1b:87:84:71:98:ec:bb:69: 30:f7:c5:3b:a3:04:d9:f7:e6:75:c8:dc:c7:c6:64:4b:bf:ad: c4:b9:71:61:42:2f:82:f6:80:77:18:15:75:35:ab:4c:3c:c0: 94:7d:62:c8:67:6b:20:52:06:81:80:28:50:1d:c1:22:1d:e8: 8e:4f:bf:10:88:b0:ba:30:b5:0f:7d:c1:4e:b2:d9:91:77:b3: ff:b7:d9:1f:fc:17:20:fe:0b:cc:17:a7:df:1b:31:5f:a7:2a: 4f:ab:fa:68:eb:8f:55:1a:e4:b5:0e:1d:1d:79:82:fc:b4:7d: c5:6f:7a:76 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUOL6TUpZ81+dWmsUOpe1ceSgOwOYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MjQzOFoX DTI3MDMwMzA2MjkzOFowMzExMC8GA1UEAxMoNDI5NENCMUY5QTUxNEYxNDBBOUZG QkUxQTA3OTMxODNBNjU1NTdGMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKtX0rT9zkqLtiEx6ycpVu9GWjBTMOGbZe0hKLhgB9B/8nyB4jDy50ua12Ic 6sJftwY9VC4J51cujrsmTYgP0BFUSUzZ4o67RXQcHzPdRZh40PKmb4tmQV3bvVFR fHt4YBanAGCzoqt3Ext7VX+wHW5hO1tSE1Ezd7WdIT9YjVhmvrrC8lSA1ecIzdwS DXlSmeRTZ30zQiWWiRotS94AXZshDCXzk7CzOWt0aTcat9E3eJwcgoaFfMkoz7Uc 9A3LaPZYY1kNfBfa6YZBb0TZbDlsJHfnYX4Tc4hwYSGEmBSSS0TSM72gXEaUGQvt AKCqvBP+z4NTEeh9iRQfQTPfcEcCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRClMsf mlFPFAqf++GgeTGDplVX8DAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTk3MS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rPkwDQYJKoZIhvcNAQELBQADggEBAJWZZ0Bp5nZU703rqfUEqCFnXLSZLUdCFKPh jY8EaD/oe7vcTe2WITJX43GzarTlyaoqaKa0Rh3i9SmbwY7uIFb6bDUnNxnJggMn HalBwJRmTe/U/twYNTn0VqfmHLANu0rwQNtsUBSzzhx49WxYYt+awXIq9BHjxYSE MdDBRcquj0uTy4U5G3cbh4RxmOy7aTD3xTujBNn35nXI3MfGZEu/rcS5cWFCL4L2 gHcYFXU1q0w8wJR9YshnayBSBoGAKFAdwSId6I5PvxCIsLowtQ99wU6y2ZF3s/+3 2R/8FyD+C8wXp98bMV+nKk+r+mjrj1Ua5LUOHR15gvy0fcVvenY= -----END CERTIFICATE-----Generated at Sat Mar 28 11:45:32 2026 by rpki-client