$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145990.roa File: AS145990.roa (raw, json) Hash identifier: As2BaXv5Hi3nKH0mujsmtO9AXMM/y/hsm6l3Yj62yqA= Subject key identifier: 80:49:B0:B4:75:00:45:25:B8:B6:7A:07:CA:6A:0F:A2:92:28:54:02 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 1F0EF1AA15B20C2F7A59E216B0B0E36820DE2709 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145990.roa Signing time: Wed 04 Mar 2026 06:30:47 +0000 ROA not before: Wed 04 Mar 2026 06:25:47 +0000 ROA not after: Wed 03 Mar 2027 06:30:47 +0000 asID: 145990 IP address blocks: 240a:ad0c::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:0e:f1:aa:15:b2:0c:2f:7a:59:e2:16:b0:b0:e3:68:20:de:27:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:25:47 2026 GMT Not After : Mar 3 06:30:47 2027 GMT Subject: CN=8049B0B475004525B8B67A07CA6A0FA292285402 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:d9:d4:8f:8d:53:ab:6a:68:33:59:c2:fe:54: 9a:6e:a2:e8:25:cf:24:0f:63:9a:6f:72:9f:a6:40: 9c:e3:4e:03:9d:35:39:a1:08:09:3e:47:d2:02:db: e8:1e:b6:36:a9:1e:8d:49:c5:69:59:62:f3:d8:75: f6:1c:ca:48:fb:f4:f9:15:b8:cc:40:d2:23:1c:d2: 17:79:22:21:df:e8:7b:c5:32:ee:c2:bb:e2:e3:e1: ab:a1:88:14:36:cd:2c:86:0d:53:52:02:78:5f:41: d5:ca:3a:fa:15:cd:9b:a0:ee:00:e5:a3:79:a9:6b: bf:4e:4d:7c:40:d9:6c:84:30:4f:1e:f4:01:59:8f: ca:58:94:72:d2:a3:67:63:0a:73:cb:69:a0:66:a5: 24:1d:6d:f1:5a:3b:c0:fb:08:5f:17:db:6e:d3:3e: 52:83:d0:12:54:c8:fc:f2:80:86:cb:6d:e5:00:25: b2:a5:f0:18:86:27:a2:09:b0:84:ea:c8:64:2a:b4: 3c:95:fd:17:e4:0b:fb:0e:d9:3a:83:14:9c:e5:ff: ff:f7:37:a3:fa:41:12:d8:fe:7a:13:30:65:19:e6: dc:85:66:7f:9f:6e:4c:bc:5d:58:dd:3a:c9:1f:41: 2b:9d:4c:08:1d:d2:f0:dd:15:61:bd:59:43:7e:32: cc:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:49:B0:B4:75:00:45:25:B8:B6:7A:07:CA:6A:0F:A2:92:28:54:02 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145990.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:ad0c::/32 Signature Algorithm: sha256WithRSAEncryption 64:08:f0:c0:9d:11:3d:04:27:d6:f6:fc:d8:52:e3:5f:ab:71: 39:64:3a:a8:7f:3a:e2:a2:01:d7:f8:2a:50:f0:86:64:38:c0: f2:68:6d:11:4a:46:cf:c3:2a:2b:a6:ec:6d:ac:3d:1a:32:b2: 40:d6:38:66:89:46:41:a0:f7:48:2b:7e:c5:9e:d9:21:de:8d: 0e:32:b1:e1:f4:07:2c:2d:54:d1:1b:43:2e:cd:81:ec:b3:8f: 48:37:05:9b:ee:e5:0f:5b:89:89:9e:b1:77:60:b4:2b:06:76: aa:b7:33:b7:ed:0b:f8:cc:2b:55:00:9e:e8:8c:53:29:d6:9a: 73:56:5e:56:0d:95:f1:70:7c:ee:7c:93:df:0b:9e:de:53:f9: f6:51:b0:0f:2c:5e:8b:b4:5b:ec:ce:2d:c4:2d:b3:28:aa:bf: 5c:a7:4d:e8:3e:8e:90:30:d4:bc:52:97:2a:28:48:b9:9f:5d: 74:29:f4:fc:a2:29:c5:f7:ea:2d:f9:c2:c8:10:39:cb:4e:e2: 4b:78:fc:07:be:b4:02:35:ae:3d:4e:08:0f:02:fc:c8:1b:3d: cf:de:d8:4f:66:c3:f2:48:93:35:b4:16:e2:b7:5f:2f:3a:c8: 4a:82:85:5c:84:fb:17:fe:da:18:33:d1:04:03:2c:1c:4f:dc: 17:c3:89:d7 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUHw7xqhWyDC96WeIWsLDjaCDeJwkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MjU0N1oX DTI3MDMwMzA2MzA0N1owMzExMC8GA1UEAxMoODA0OUIwQjQ3NTAwNDUyNUI4QjY3 QTA3Q0E2QTBGQTI5MjI4NTQwMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL3Z1I+NU6tqaDNZwv5Umm6i6CXPJA9jmm9yn6ZAnONOA501OaEICT5H0gLb 6B62NqkejUnFaVli89h19hzKSPv0+RW4zEDSIxzSF3kiId/oe8Uy7sK74uPhq6GI FDbNLIYNU1ICeF9B1co6+hXNm6DuAOWjealrv05NfEDZbIQwTx70AVmPyliUctKj Z2MKc8tpoGalJB1t8Vo7wPsIXxfbbtM+UoPQElTI/PKAhstt5QAlsqXwGIYnogmw hOrIZCq0PJX9F+QL+w7ZOoMUnOX///c3o/pBEtj+ehMwZRnm3IVmf59uTLxdWN06 yR9BK51MCB3S8N0VYb1ZQ34yzA0CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSASbC0 dQBFJbi2egfKag+ikihUAjAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTk5MC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rQwwDQYJKoZIhvcNAQELBQADggEBAGQI8MCdET0EJ9b2/NhS41+rcTlkOqh/OuKi Adf4KlDwhmQ4wPJobRFKRs/DKium7G2sPRoyskDWOGaJRkGg90grfsWe2SHejQ4y seH0BywtVNEbQy7Ngeyzj0g3BZvu5Q9biYmesXdgtCsGdqq3M7ftC/jMK1UAnuiM UynWmnNWXlYNlfFwfO58k98Lnt5T+fZRsA8sXou0W+zOLcQtsyiqv1ynTeg+jpAw 1LxSlyooSLmfXXQp9PyiKcX36i35wsgQOctO4kt4/Ae+tAI1rj1OCA8C/MgbPc/e 2E9mw/JIkzW0FuK3Xy86yEqChVyE+xf+2hgz0QQDLBxP3BfDidc= -----END CERTIFICATE-----Generated at Sat Mar 28 14:30:41 2026 by rpki-client