$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145972.roa File: AS145972.roa (raw, json) Hash identifier: iJBcois5h4bZVhExOgocM2/K4ZSxb6rzlvwxrfWxjc8= Subject key identifier: 80:5B:D6:82:C8:DA:9A:78:1B:EF:1E:57:47:5F:5C:A4:B9:83:20:E3 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 52B0A25BD5E4EEAEA0DF65BCF0D98B8F61844A68 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145972.roa Signing time: Wed 04 Mar 2026 06:30:37 +0000 ROA not before: Wed 04 Mar 2026 06:25:37 +0000 ROA not after: Wed 03 Mar 2027 06:30:37 +0000 asID: 145972 IP address blocks: 240a:acfa::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:b0:a2:5b:d5:e4:ee:ae:a0:df:65:bc:f0:d9:8b:8f:61:84:4a:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:25:37 2026 GMT Not After : Mar 3 06:30:37 2027 GMT Subject: CN=805BD682C8DA9A781BEF1E57475F5CA4B98320E3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:68:68:a6:75:18:40:ae:2f:83:69:18:0c:3e: a6:23:62:e7:67:67:02:a2:7d:5c:4b:38:63:74:c6: 0c:fb:27:2a:64:3d:ae:0e:ae:7c:88:3d:2d:ee:42: aa:64:ba:19:36:29:9a:39:a4:7c:17:45:2d:8e:d6: 0b:c8:c2:9f:ff:0e:b1:3f:d5:d3:a9:95:dc:bd:8d: b3:8e:96:6d:66:2a:62:b9:0e:5b:7b:82:20:2d:1b: 61:97:0e:19:af:47:2a:0b:71:cd:f2:65:ad:50:df: 66:15:fc:69:69:e0:fc:6f:91:7a:6e:40:4c:64:78: f8:bc:76:4c:06:39:b0:33:da:05:c1:02:c8:29:ac: 0d:64:ca:b3:50:96:55:e6:7c:f7:b1:d8:be:5b:12: 4e:5e:00:37:8f:8a:d9:f8:19:b4:2e:61:f4:42:fa: 0a:d8:f0:f6:65:74:7b:88:c8:1c:76:38:9a:f4:d5: 4d:e1:ed:26:a0:dd:ec:5d:36:b1:9c:9b:79:2b:d7: 06:f1:15:bb:8e:b5:6c:34:13:c5:11:d6:53:b3:01: 6f:ff:08:a9:ef:4a:5c:ee:14:7c:d7:4a:a4:6d:94: 37:17:44:0e:2e:dc:ef:4c:a9:6c:70:f7:d1:d7:8f: 60:df:0a:7d:57:ad:9d:ef:9a:04:b5:4c:fc:36:ee: a1:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:5B:D6:82:C8:DA:9A:78:1B:EF:1E:57:47:5F:5C:A4:B9:83:20:E3 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145972.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:acfa::/32 Signature Algorithm: sha256WithRSAEncryption d7:5a:59:35:23:57:36:d2:42:6b:33:4d:b6:28:7e:10:13:35: 0a:c3:85:6c:b2:19:13:65:26:da:b4:1d:95:ae:df:0a:ee:6f: 17:ac:01:f8:7f:22:36:0a:c8:bb:5c:e2:1f:44:3e:82:6a:4c: c9:aa:bf:8d:9d:09:17:42:a3:d7:c6:e4:19:98:dc:1c:4c:65: 9b:07:19:9f:3b:3e:d0:3a:c5:4c:ea:4d:5e:de:06:5b:f9:b2: 37:b7:8c:4e:93:ac:27:66:7b:88:e1:39:d0:6f:d8:8b:eb:65: 90:fe:9c:b8:ad:d2:5a:ba:1c:65:3c:a5:f2:00:ec:1f:fd:7a: ee:9f:ba:cf:e2:95:f8:79:8e:db:e4:5e:c3:aa:ba:d7:94:70: 37:17:88:f0:04:a3:a8:60:a8:a0:4d:ef:06:f7:6d:21:c1:b3: be:d4:e7:09:6e:e6:3e:02:dd:73:4d:67:5d:2d:65:08:38:ad: ae:37:98:87:3f:e6:61:95:3f:26:8e:54:8b:5c:70:a6:e3:a0: 03:88:41:9e:7f:8a:b3:07:9a:bf:dc:82:19:61:f8:7c:b9:30: b2:9b:18:2a:e7:9b:da:46:96:a4:0f:56:be:bf:76:c2:c2:07: 05:77:f4:92:50:ec:04:28:92:a4:c1:1c:c4:f9:0f:da:90:cb: d3:f3:12:22 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUUrCiW9Xk7q6g32W88NmLj2GESmgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MjUzN1oX DTI3MDMwMzA2MzAzN1owMzExMC8GA1UEAxMoODA1QkQ2ODJDOERBOUE3ODFCRUYx RTU3NDc1RjVDQTRCOTgzMjBFMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANVoaKZ1GECuL4NpGAw+piNi52dnAqJ9XEs4Y3TGDPsnKmQ9rg6ufIg9Le5C qmS6GTYpmjmkfBdFLY7WC8jCn/8OsT/V06mV3L2Ns46WbWYqYrkOW3uCIC0bYZcO Ga9HKgtxzfJlrVDfZhX8aWng/G+Rem5ATGR4+Lx2TAY5sDPaBcECyCmsDWTKs1CW VeZ897HYvlsSTl4AN4+K2fgZtC5h9EL6Ctjw9mV0e4jIHHY4mvTVTeHtJqDd7F02 sZybeSvXBvEVu461bDQTxRHWU7MBb/8Iqe9KXO4UfNdKpG2UNxdEDi7c70ypbHD3 0dePYN8KfVetne+aBLVM/DbuoeMCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSAW9aC yNqaeBvvHldHX1ykuYMg4zAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTk3Mi5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rPowDQYJKoZIhvcNAQELBQADggEBANdaWTUjVzbSQmszTbYofhATNQrDhWyyGRNl Jtq0HZWu3wrubxesAfh/IjYKyLtc4h9EPoJqTMmqv42dCRdCo9fG5BmY3BxMZZsH GZ87PtA6xUzqTV7eBlv5sje3jE6TrCdme4jhOdBv2IvrZZD+nLit0lq6HGU8pfIA 7B/9eu6fus/ilfh5jtvkXsOquteUcDcXiPAEo6hgqKBN7wb3bSHBs77U5wlu5j4C 3XNNZ10tZQg4ra43mIc/5mGVPyaOVItccKbjoAOIQZ5/irMHmr/cghlh+Hy5MLKb GCrnm9pGlqQPVr6/dsLCBwV39JJQ7AQokqTBHMT5D9qQy9PzEiI= -----END CERTIFICATE-----Generated at Sat Mar 28 11:41:44 2026 by rpki-client