$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145983.roa File: AS145983.roa (raw, json) Hash identifier: jsEn8BLtP6ZklQRo/MW2Z6OhiTJbm6+FAvz54IPqcHE= Subject key identifier: 1D:28:A6:5B:85:56:3D:5A:87:B0:9F:F0:03:81:42:86:71:76:63:32 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 7BFA9F042D247854C9F374272DEDA8C97B52FC7E Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145983.roa Signing time: Wed 04 Mar 2026 06:30:07 +0000 ROA not before: Wed 04 Mar 2026 06:25:07 +0000 ROA not after: Wed 03 Mar 2027 06:30:07 +0000 asID: 145983 IP address blocks: 240a:ad05::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:fa:9f:04:2d:24:78:54:c9:f3:74:27:2d:ed:a8:c9:7b:52:fc:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:25:07 2026 GMT Not After : Mar 3 06:30:07 2027 GMT Subject: CN=1D28A65B85563D5A87B09FF00381428671766332 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:3e:af:5b:64:a0:8b:85:7f:1f:c1:d3:3a:3b: 79:74:eb:d2:ba:c1:b7:bd:47:ff:e9:29:13:4c:df: 73:76:c3:0d:dc:bb:8a:a0:ec:c1:05:c6:3f:f2:bd: 46:2e:28:1f:cc:46:0e:8b:f5:fc:b0:c2:6b:57:72: e7:54:89:27:91:16:5a:f3:93:a0:ad:ad:87:c8:a4: b5:c2:c3:e6:a4:05:41:f4:53:64:9d:76:0f:c0:ec: e1:d3:4e:18:b2:3a:cf:0d:3e:95:3e:17:99:db:31: 73:f5:ed:92:fb:c8:54:e1:0b:7e:7b:d5:aa:cd:0b: 84:4d:95:0c:a9:4b:46:79:92:5b:f6:af:2c:49:ad: 8c:fa:a3:4c:8e:3f:dc:c3:44:bc:8f:b9:98:33:c2: 69:e6:53:4a:0c:a9:9d:ad:1d:00:c3:e6:97:50:cb: 64:dc:4b:48:ac:3e:3c:88:6a:28:32:3c:46:e5:65: f1:16:bd:fb:d7:2d:ac:76:9e:4b:44:86:10:5f:e3: f5:78:0c:13:ae:8d:bb:a0:58:61:05:2f:ce:4c:a4: 0a:c7:1f:6c:da:bd:4d:4d:86:40:5d:da:ad:8e:b3: 81:a5:8d:0b:3c:7a:9b:80:5e:98:53:a1:17:42:0e: 5e:c4:6e:fd:dd:39:63:74:95:7c:64:68:76:54:aa: f8:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:28:A6:5B:85:56:3D:5A:87:B0:9F:F0:03:81:42:86:71:76:63:32 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145983.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:ad05::/32 Signature Algorithm: sha256WithRSAEncryption 5a:3d:15:29:f8:21:71:cf:19:62:67:17:71:7e:62:fa:e9:30: 1a:e7:aa:bd:76:d4:c9:66:ed:ce:9a:39:93:a8:6d:a9:8a:35: 6a:1c:a0:c9:c5:9a:53:42:8a:52:46:b0:0d:de:5a:6a:64:60: 1c:70:b2:c9:fb:af:d3:d1:e2:83:a4:8f:2e:38:e8:9b:67:df: 8f:b7:45:f0:5d:b3:9a:13:4d:a7:20:7e:14:f1:0c:f3:67:76: ad:d2:a6:31:ea:a9:bb:f2:18:53:b9:35:9d:09:d2:ad:cf:4d: 3f:d2:44:a4:54:46:77:64:21:92:92:15:7c:07:89:8a:5e:0d: dc:e9:c9:1d:86:5d:fd:7d:35:3b:13:9d:47:2c:71:0b:68:91: c7:25:2e:42:cb:1a:f6:d6:7c:be:b8:49:bf:b2:a4:7b:a1:af: 46:2e:d2:41:af:bd:0c:05:6b:45:d9:02:63:d5:02:ec:40:7c: 57:9e:46:1c:a3:72:78:05:99:32:7a:f6:a9:ce:1b:1c:e9:ae: 38:94:02:79:d4:f3:fc:cc:2a:69:93:34:e8:31:5f:16:5c:33: ff:27:07:51:6c:de:0a:7f:34:cb:86:f2:e3:30:23:4d:ff:87: 6a:2e:2d:a0:af:2f:6b:c7:6e:7b:26:91:0d:19:35:11:54:d7: f6:c6:f3:b5 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUe/qfBC0keFTJ83QnLe2oyXtS/H4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MjUwN1oX DTI3MDMwMzA2MzAwN1owMzExMC8GA1UEAxMoMUQyOEE2NUI4NTU2M0Q1QTg3QjA5 RkYwMDM4MTQyODY3MTc2NjMzMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMU+r1tkoIuFfx/B0zo7eXTr0rrBt71H/+kpE0zfc3bDDdy7iqDswQXGP/K9 Ri4oH8xGDov1/LDCa1dy51SJJ5EWWvOToK2th8iktcLD5qQFQfRTZJ12D8Ds4dNO GLI6zw0+lT4Xmdsxc/XtkvvIVOELfnvVqs0LhE2VDKlLRnmSW/avLEmtjPqjTI4/ 3MNEvI+5mDPCaeZTSgypna0dAMPml1DLZNxLSKw+PIhqKDI8RuVl8Ra9+9ctrHae S0SGEF/j9XgME66Nu6BYYQUvzkykCscfbNq9TU2GQF3arY6zgaWNCzx6m4BemFOh F0IOXsRu/d05Y3SVfGRodlSq+KMCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQdKKZb hVY9Woewn/ADgUKGcXZjMjAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTk4My5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rQUwDQYJKoZIhvcNAQELBQADggEBAFo9FSn4IXHPGWJnF3F+YvrpMBrnqr121Mlm 7c6aOZOobamKNWocoMnFmlNCilJGsA3eWmpkYBxwssn7r9PR4oOkjy446Jtn34+3 RfBds5oTTacgfhTxDPNndq3SpjHqqbvyGFO5NZ0J0q3PTT/SRKRURndkIZKSFXwH iYpeDdzpyR2GXf19NTsTnUcscQtokcclLkLLGvbWfL64Sb+ypHuhr0Yu0kGvvQwF a0XZAmPVAuxAfFeeRhyjcngFmTJ69qnOGxzprjiUAnnU8/zMKmmTNOgxXxZcM/8n B1Fs3gp/NMuG8uMwI03/h2ouLaCvL2vHbnsmkQ0ZNRFU1/bG87U= -----END CERTIFICATE-----Generated at Sat Mar 28 13:15:16 2026 by rpki-client