$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145985.roa File: AS145985.roa (raw, json) Hash identifier: FFafqZbqx9EifrBPRMho9a4Z11UIs2HJArn/Dha5UiY= Subject key identifier: 21:BF:79:4C:EC:62:F7:1B:C2:47:85:C1:09:AE:CA:0C:E6:04:58:10 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 5FE26ECF9674F2EFE3F151070C18847A6FD136BF Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145985.roa Signing time: Wed 04 Mar 2026 06:30:59 +0000 ROA not before: Wed 04 Mar 2026 06:25:59 +0000 ROA not after: Wed 03 Mar 2027 06:30:59 +0000 asID: 145985 IP address blocks: 240a:ad07::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:e2:6e:cf:96:74:f2:ef:e3:f1:51:07:0c:18:84:7a:6f:d1:36:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:25:59 2026 GMT Not After : Mar 3 06:30:59 2027 GMT Subject: CN=21BF794CEC62F71BC24785C109AECA0CE6045810 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:f1:0e:39:a0:67:c7:8f:16:5e:a2:48:41:a1: 22:e9:5c:2a:90:a6:0d:89:83:75:59:5d:c5:b8:86: 74:8e:bd:c6:bb:b3:c8:d2:db:61:61:c1:59:8e:ff: fa:11:ca:65:17:58:c6:5f:dd:3c:b4:66:21:30:9e: 83:dc:2f:71:52:23:41:da:2b:89:64:76:fa:71:57: 08:8f:a8:0f:14:76:cd:0b:d1:da:7f:3c:66:9d:1f: 06:f9:ee:35:f5:a8:a9:72:ad:f2:5e:1c:d4:2a:9f: 75:52:14:76:ea:3d:b2:74:dd:a4:c2:92:80:35:f9: 04:5a:1e:22:86:71:c9:35:63:9a:5b:8c:e7:d9:1f: 5b:c4:75:23:da:a4:b2:47:56:38:04:4b:cf:85:45: 3a:51:02:44:93:4d:49:c1:1c:44:7d:c8:4d:68:72: 51:7b:48:b8:42:57:63:58:1b:d6:3a:62:f3:24:59: 4a:f4:0a:04:fe:24:c8:3b:b6:f0:88:46:ad:ec:33: 24:6b:f7:30:ae:2c:ac:df:8e:81:30:28:6a:8d:7b: c3:4c:ba:6d:15:47:ef:8c:41:31:26:f8:d4:c7:d5: 67:63:f4:14:61:64:4d:f1:b3:48:55:95:ee:28:59: 09:6a:bf:e5:00:b4:b3:47:2d:55:6e:35:6d:73:49: 74:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:BF:79:4C:EC:62:F7:1B:C2:47:85:C1:09:AE:CA:0C:E6:04:58:10 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145985.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:ad07::/32 Signature Algorithm: sha256WithRSAEncryption 41:93:b9:1d:85:93:19:6d:db:7c:a1:86:ac:eb:bc:b0:2d:11: 84:7d:4d:76:16:c1:69:05:0f:f4:ae:61:c8:f7:db:8a:77:b0: d5:c2:c3:e6:95:f0:c0:9e:6c:7e:09:e6:a7:60:1a:1c:3d:81: 42:89:86:b9:59:4d:fd:84:91:60:73:4e:1a:07:cc:69:08:28: 52:22:b9:ef:43:09:97:5f:6b:bb:6d:d0:11:94:1f:37:02:07: 41:5d:10:b3:b9:e8:1c:21:f1:a8:bd:57:c8:46:d2:31:58:c3: 37:07:d9:b8:cc:eb:58:87:68:74:24:5c:74:a2:53:1b:53:50: 42:48:be:8f:ed:31:ae:ff:98:97:3a:5e:ff:7b:e9:93:4c:40: 77:e6:f2:08:42:c7:6e:43:bb:52:5d:11:61:e3:ee:29:53:ad: 09:f7:45:cf:e1:7d:f1:aa:04:00:3d:bb:7e:28:28:12:44:b4: 39:76:98:5d:79:0a:6e:29:63:50:87:a6:44:8c:44:cc:dc:d7: 43:de:60:cb:fb:31:10:08:9f:4a:b4:a4:52:3a:d1:46:22:b6: 9a:99:3f:28:29:40:ca:5b:3f:5c:0e:5d:3d:e2:43:4a:6b:d8: 3c:aa:7e:46:65:80:dc:c5:b9:f8:88:e9:58:06:0b:d8:82:45: 15:a5:c8:af -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUX+Juz5Z08u/j8VEHDBiEem/RNr8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MjU1OVoX DTI3MDMwMzA2MzA1OVowMzExMC8GA1UEAxMoMjFCRjc5NENFQzYyRjcxQkMyNDc4 NUMxMDlBRUNBMENFNjA0NTgxMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKbxDjmgZ8ePFl6iSEGhIulcKpCmDYmDdVldxbiGdI69xruzyNLbYWHBWY7/ +hHKZRdYxl/dPLRmITCeg9wvcVIjQdoriWR2+nFXCI+oDxR2zQvR2n88Zp0fBvnu NfWoqXKt8l4c1CqfdVIUduo9snTdpMKSgDX5BFoeIoZxyTVjmluM59kfW8R1I9qk skdWOARLz4VFOlECRJNNScEcRH3ITWhyUXtIuEJXY1gb1jpi8yRZSvQKBP4kyDu2 8IhGrewzJGv3MK4srN+OgTAoao17w0y6bRVH74xBMSb41MfVZ2P0FGFkTfGzSFWV 7ihZCWq/5QC0s0ctVW41bXNJdL0CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQhv3lM 7GL3G8JHhcEJrsoM5gRYEDAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTk4NS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rQcwDQYJKoZIhvcNAQELBQADggEBAEGTuR2Fkxlt23yhhqzrvLAtEYR9TXYWwWkF D/SuYcj324p3sNXCw+aV8MCebH4J5qdgGhw9gUKJhrlZTf2EkWBzThoHzGkIKFIi ue9DCZdfa7tt0BGUHzcCB0FdELO56Bwh8ai9V8hG0jFYwzcH2bjM61iHaHQkXHSi UxtTUEJIvo/tMa7/mJc6Xv976ZNMQHfm8ghCx25Du1JdEWHj7ilTrQn3Rc/hffGq BAA9u34oKBJEtDl2mF15Cm4pY1CHpkSMRMzc10PeYMv7MRAIn0q0pFI60UYitpqZ PygpQMpbP1wOXT3iQ0pr2DyqfkZlgNzFufiI6VgGC9iCRRWlyK8= -----END CERTIFICATE-----Generated at Sat Mar 28 11:42:33 2026 by rpki-client