$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145987.roa File: AS145987.roa (raw, json) Hash identifier: 7A0k66T+7fBJqsBLadnTfG+5S/FobAmaSBxcs6ylHf8= Subject key identifier: F4:77:49:F2:FC:43:9D:2C:18:59:5C:FD:7C:82:83:96:1A:4D:C6:11 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 7AD61156348AEE67CF39C857CB6A845F711A043E Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145987.roa Signing time: Wed 04 Mar 2026 06:30:04 +0000 ROA not before: Wed 04 Mar 2026 06:25:04 +0000 ROA not after: Wed 03 Mar 2027 06:30:04 +0000 asID: 145987 IP address blocks: 240a:ad09::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:d6:11:56:34:8a:ee:67:cf:39:c8:57:cb:6a:84:5f:71:1a:04:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:25:04 2026 GMT Not After : Mar 3 06:30:04 2027 GMT Subject: CN=F47749F2FC439D2C18595CFD7C8283961A4DC611 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:05:76:aa:61:a2:1f:53:d3:04:63:ff:70:b6: 42:5f:55:fb:e9:7a:27:4d:41:6b:a0:55:95:39:b9: 46:1b:dc:55:10:73:6f:48:b3:6c:2b:8e:83:f1:6f: fa:f8:85:a4:a6:91:e3:11:3a:a2:26:68:f0:9d:57: 81:61:5f:d6:f8:53:9e:ca:6a:5f:49:35:d6:1a:64: 2a:28:cd:45:81:87:56:e7:dd:34:ed:06:92:d2:76: 75:62:23:dc:88:40:8e:c8:5f:98:f6:23:d6:37:d6: 18:6e:85:df:9e:22:87:94:d2:dc:c1:69:17:b1:7f: 8d:f7:6a:43:c3:58:35:ee:b7:ed:af:b1:35:4a:48: 45:da:2b:7d:bd:f4:eb:13:96:11:ca:e6:a0:d4:39: df:e0:00:68:b9:c6:2e:48:f1:d0:19:85:42:b1:cf: b2:6c:ae:df:ef:b5:4d:f5:ea:cc:a9:61:25:12:bc: 04:e2:71:97:a8:4a:ec:b2:75:22:17:92:cf:38:30: 04:4b:f2:93:b8:e4:8f:b3:1e:cb:20:08:f7:7d:1c: 4c:34:be:1d:e0:5a:bf:92:a7:31:b7:ad:cc:89:83: 43:c7:57:ef:ca:4a:e6:f1:2e:60:20:55:84:65:05: da:4a:32:6d:01:dc:4f:cd:b7:82:1e:0b:02:48:20: 19:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:77:49:F2:FC:43:9D:2C:18:59:5C:FD:7C:82:83:96:1A:4D:C6:11 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145987.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:ad09::/32 Signature Algorithm: sha256WithRSAEncryption 22:ad:f7:b1:7f:1e:3b:56:8e:7e:26:62:0e:56:8c:dd:1e:e4: 76:d3:24:f3:42:be:49:be:35:f8:03:e8:43:21:ab:da:0d:54: 53:2f:98:61:9b:88:e6:77:ab:10:06:c7:87:62:ca:dd:81:75: 79:6c:27:f1:8b:d7:ea:f1:65:5e:c1:c1:aa:06:bf:9b:41:32: b5:cf:9b:a2:91:4b:8e:fb:c3:2f:5f:83:ee:cf:48:a6:50:9e: f5:b6:b0:8f:18:1c:f4:54:87:8d:c3:fe:a1:52:33:cb:a1:d2: 98:4e:8f:a9:1d:2e:50:15:df:ca:77:c7:5f:11:f3:25:c8:b6: 04:59:7a:da:5a:48:30:44:63:54:c3:b7:34:d2:4c:c8:93:ac: b2:54:a5:20:24:46:36:a1:f5:c1:28:fc:5e:e3:05:1c:46:6e: a5:fb:33:89:be:dc:97:cb:e7:cf:6e:ad:d5:38:f3:ee:97:93: 8a:bd:a5:e5:4d:25:7a:40:d4:cf:29:74:27:72:5b:80:02:f1: e5:e4:e1:b5:76:73:e3:2f:ea:82:d2:bd:a2:10:16:58:0b:64: 38:24:b4:c5:f2:8f:6c:44:5e:b7:72:77:89:2b:9c:3e:50:09: e4:3c:95:75:ff:76:e6:4b:58:17:2b:dc:58:94:14:26:af:1e: d6:62:36:ce -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUetYRVjSK7mfPOchXy2qEX3EaBD4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MjUwNFoX DTI3MDMwMzA2MzAwNFowMzExMC8GA1UEAxMoRjQ3NzQ5RjJGQzQzOUQyQzE4NTk1 Q0ZEN0M4MjgzOTYxQTREQzYxMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJoFdqphoh9T0wRj/3C2Ql9V++l6J01Ba6BVlTm5RhvcVRBzb0izbCuOg/Fv +viFpKaR4xE6oiZo8J1XgWFf1vhTnspqX0k11hpkKijNRYGHVufdNO0GktJ2dWIj 3IhAjshfmPYj1jfWGG6F354ih5TS3MFpF7F/jfdqQ8NYNe637a+xNUpIRdorfb30 6xOWEcrmoNQ53+AAaLnGLkjx0BmFQrHPsmyu3++1TfXqzKlhJRK8BOJxl6hK7LJ1 IheSzzgwBEvyk7jkj7MeyyAI930cTDS+HeBav5KnMbetzImDQ8dX78pK5vEuYCBV hGUF2koybQHcT823gh4LAkggGUsCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBT0d0ny /EOdLBhZXP18goOWGk3GETAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTk4Ny5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rQkwDQYJKoZIhvcNAQELBQADggEBACKt97F/HjtWjn4mYg5WjN0e5HbTJPNCvkm+ NfgD6EMhq9oNVFMvmGGbiOZ3qxAGx4diyt2BdXlsJ/GL1+rxZV7BwaoGv5tBMrXP m6KRS477wy9fg+7PSKZQnvW2sI8YHPRUh43D/qFSM8uh0phOj6kdLlAV38p3x18R 8yXItgRZetpaSDBEY1TDtzTSTMiTrLJUpSAkRjah9cEo/F7jBRxGbqX7M4m+3JfL 589urdU48+6Xk4q9peVNJXpA1M8pdCdyW4AC8eXk4bV2c+Mv6oLSvaIQFlgLZDgk tMXyj2xEXrdyd4krnD5QCeQ8lXX/duZLWBcr3FiUFCavHtZiNs4= -----END CERTIFICATE-----Generated at Sat Mar 28 13:18:13 2026 by rpki-client