$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145996.roa File: AS145996.roa (raw, json) Hash identifier: gxXPAlsUU7s2w3mlGk/ZbEipprjTsEI/cfIvwABUTf0= Subject key identifier: C3:A2:21:F0:56:39:04:38:86:C6:19:49:20:42:76:F6:2C:B4:15:E2 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 6440C6D8247CC33497CC018FD00663E4FBD529F9 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145996.roa Signing time: Wed 04 Mar 2026 06:30:12 +0000 ROA not before: Wed 04 Mar 2026 06:25:12 +0000 ROA not after: Wed 03 Mar 2027 06:30:12 +0000 asID: 145996 IP address blocks: 240a:ad12::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:40:c6:d8:24:7c:c3:34:97:cc:01:8f:d0:06:63:e4:fb:d5:29:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:25:12 2026 GMT Not After : Mar 3 06:30:12 2027 GMT Subject: CN=C3A221F05639043886C61949204276F62CB415E2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:96:de:a4:0c:c9:f4:07:6d:ae:13:9f:5a:dc: d7:69:cf:af:86:ee:74:f7:32:2a:15:bc:7c:e6:7a: 1d:33:24:fa:4a:fa:94:e5:59:5c:03:fa:8d:a1:e0: 18:8e:f9:f1:7b:12:6c:bc:0e:17:d1:d9:e0:6d:89: ea:26:54:6c:d8:55:94:d0:35:55:a1:5c:2d:35:06: ec:94:52:e0:54:f3:d7:1c:34:f3:ef:f7:71:1f:bd: bf:0b:0f:73:bc:ec:32:2b:92:3a:3b:9f:cf:cc:f9: 79:0c:16:cb:d4:db:5c:31:f0:2f:06:b6:5d:6b:de: 12:a0:8a:61:a7:8a:d3:a1:9b:cd:01:75:c8:44:b0: 9f:52:d2:28:e7:b1:01:46:bf:62:21:b8:e9:ee:74: c9:88:8f:4b:24:09:93:a0:d5:9a:52:eb:00:17:84: a9:2e:2d:b1:c9:75:53:2c:98:15:53:bd:6c:92:7e: df:f8:48:77:a4:f5:58:d1:f3:cc:4d:d4:e0:15:63: cf:da:2c:c6:90:63:ff:56:08:ab:c3:94:99:3b:ab: f6:86:8b:6e:4c:eb:54:3a:36:f9:db:00:62:61:b1: 46:b4:e5:dc:12:39:28:29:73:3f:12:fe:90:dd:1b: d4:72:f0:14:d7:6e:89:94:c7:0d:64:ca:3e:d7:76: c0:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:A2:21:F0:56:39:04:38:86:C6:19:49:20:42:76:F6:2C:B4:15:E2 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145996.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:ad12::/32 Signature Algorithm: sha256WithRSAEncryption 52:a5:ee:80:a0:7c:6d:03:5f:4c:cf:d3:e8:01:bd:92:1d:1d: 4d:a6:b7:cf:f3:ed:2d:24:52:5a:20:73:fa:24:77:f0:3e:f8: 32:68:f3:67:36:37:ef:de:e9:da:a3:7d:1b:6a:e0:06:9c:fd: da:b9:72:d3:64:45:ad:e8:f2:97:e1:b3:0a:2b:45:85:ec:4f: 27:52:50:d9:e0:31:c1:f2:d8:81:28:dd:c6:6d:b6:27:49:fc: 9c:64:23:63:98:cf:18:ae:b1:e7:88:d9:59:ae:38:60:59:11: 80:78:ce:66:c5:28:1d:28:80:74:b6:fd:0c:b1:82:a9:b6:73: f5:ff:e3:16:f5:66:77:8a:c6:86:74:f3:62:50:04:51:ae:2e: 20:26:2c:1a:12:ef:61:57:f0:1c:65:47:9f:4f:d5:93:2d:9e: 60:35:0a:0e:08:eb:f3:a8:e5:bf:fb:68:0d:da:da:c9:2c:c2: 4a:c7:d2:c7:b0:b5:93:df:08:77:5a:c2:fc:87:6a:07:c9:ec: e5:e3:18:29:5d:57:06:bc:b2:13:79:3c:dc:6b:b2:7e:b5:8a: 15:85:6b:f8:a1:5f:88:cf:c3:cc:86:2a:a4:d7:ca:72:d5:fd: 12:74:b0:21:2f:ec:85:36:c0:c6:95:13:f4:ca:63:88:af:41: d1:fb:ad:ce -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUZEDG2CR8wzSXzAGP0AZj5PvVKfkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MjUxMloX DTI3MDMwMzA2MzAxMlowMzExMC8GA1UEAxMoQzNBMjIxRjA1NjM5MDQzODg2QzYx OTQ5MjA0Mjc2RjYyQ0I0MTVFMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAO6W3qQMyfQHba4Tn1rc12nPr4budPcyKhW8fOZ6HTMk+kr6lOVZXAP6jaHg GI758XsSbLwOF9HZ4G2J6iZUbNhVlNA1VaFcLTUG7JRS4FTz1xw08+/3cR+9vwsP c7zsMiuSOjufz8z5eQwWy9TbXDHwLwa2XWveEqCKYaeK06GbzQF1yESwn1LSKOex AUa/YiG46e50yYiPSyQJk6DVmlLrABeEqS4tscl1UyyYFVO9bJJ+3/hId6T1WNHz zE3U4BVjz9osxpBj/1YIq8OUmTur9oaLbkzrVDo2+dsAYmGxRrTl3BI5KClzPxL+ kN0b1HLwFNduiZTHDWTKPtd2wMECAwEAAaOCAcUwggHBMB0GA1UdDgQWBBTDoiHw VjkEOIbGGUkgQnb2LLQV4jAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTk5Ni5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rRIwDQYJKoZIhvcNAQELBQADggEBAFKl7oCgfG0DX0zP0+gBvZIdHU2mt8/z7S0k Ulogc/okd/A++DJo82c2N+/e6dqjfRtq4Aac/dq5ctNkRa3o8pfhsworRYXsTydS UNngMcHy2IEo3cZttidJ/JxkI2OYzxiuseeI2VmuOGBZEYB4zmbFKB0ogHS2/Qyx gqm2c/X/4xb1ZneKxoZ082JQBFGuLiAmLBoS72FX8BxlR59P1ZMtnmA1Cg4I6/Oo 5b/7aA3a2skswkrH0sewtZPfCHdawvyHagfJ7OXjGCldVwa8shN5PNxrsn61ihWF a/ihX4jPw8yGKqTXynLV/RJ0sCEv7IU2wMaVE/TKY4ivQdH7rc4= -----END CERTIFICATE-----Generated at Sat Mar 28 15:54:33 2026 by rpki-client