$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145997.roa File: AS145997.roa (raw, json) Hash identifier: QJOh36FudLFb/9RZtOtSKOVbJPT8YDHoSJSADioCdfQ= Subject key identifier: F2:B2:E9:29:9C:1A:F7:B5:B3:D4:97:1D:16:A0:68:18:FE:82:22:C1 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 541882375CFFAFC4CA62184656A72C4D81A45A62 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145997.roa Signing time: Wed 04 Mar 2026 06:30:49 +0000 ROA not before: Wed 04 Mar 2026 06:25:49 +0000 ROA not after: Wed 03 Mar 2027 06:30:49 +0000 asID: 145997 IP address blocks: 240a:ad13::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:18:82:37:5c:ff:af:c4:ca:62:18:46:56:a7:2c:4d:81:a4:5a:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:25:49 2026 GMT Not After : Mar 3 06:30:49 2027 GMT Subject: CN=F2B2E9299C1AF7B5B3D4971D16A06818FE8222C1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:8a:09:61:0b:1d:11:a5:31:67:54:ee:b0:a5: 20:53:df:5e:64:fb:4a:97:de:0e:42:63:03:75:dd: 55:8d:42:23:14:3b:63:19:7f:27:b7:67:d7:12:f0: dd:bd:3d:3c:71:30:79:8c:6c:f5:17:3a:f8:7e:90: 61:df:1b:a7:55:31:34:06:62:73:bf:a4:3a:ff:c0: 19:8a:11:f8:fb:d4:4c:98:24:ed:86:e0:f0:6d:6e: 1f:b9:db:d3:cd:d9:88:69:14:69:d7:cc:b3:30:4b: e8:0d:7f:be:07:5a:83:b4:5e:aa:0d:43:97:5c:42: a8:d4:d4:0a:e1:5c:8d:ab:8d:a9:b1:09:af:25:d5: 68:fd:6b:dd:ca:06:15:c2:d2:2f:b1:95:05:85:2d: 86:54:1d:9a:03:c4:52:e2:10:e2:aa:5b:55:9a:5a: aa:88:ea:56:ef:66:94:37:70:3e:72:5e:aa:e0:b2: 90:ec:bb:31:2b:7a:2f:5e:7e:50:04:37:ae:20:74: 35:23:2b:92:9c:03:1a:57:1f:62:87:9c:b5:78:d6: 40:86:32:90:5b:f6:80:5a:3c:4c:20:80:aa:3f:f5: c1:1a:3b:3a:46:d6:9c:7d:5d:7a:79:11:4d:fe:03: 43:58:d8:71:de:c2:7b:d2:c2:ca:8a:83:6e:20:b0: bc:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:B2:E9:29:9C:1A:F7:B5:B3:D4:97:1D:16:A0:68:18:FE:82:22:C1 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145997.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:ad13::/32 Signature Algorithm: sha256WithRSAEncryption 34:c4:b1:b7:fa:18:d0:aa:2d:a0:d1:60:bf:03:e2:82:c3:24: ab:3a:69:9c:39:6a:7c:b9:e3:b2:3e:7d:5c:d4:9c:b7:d8:17: 4e:1b:99:ce:a7:62:2d:50:56:ef:2d:e6:66:9b:16:76:9a:4a: cd:4a:4a:2c:86:ec:53:7e:3d:bd:f1:c1:b8:12:34:17:f6:b0: 7f:dd:1f:b6:9d:41:8f:e2:d6:88:59:c9:69:d1:46:3d:ed:d5: 28:fe:24:ef:66:ae:6c:7c:be:fa:a0:55:c7:1f:a2:60:db:ba: 48:86:0e:88:ea:6d:01:0a:74:00:4a:58:cc:48:c4:1f:5c:9e: f1:c3:ff:0f:a7:3b:51:69:6b:0e:ed:18:9d:b6:68:3e:fb:72: 3f:93:25:80:3a:89:42:36:ee:09:d6:8c:6b:5c:23:72:ce:43: 82:91:ef:c3:d3:3b:10:48:83:fd:33:d7:0b:ee:25:82:1a:44: 26:5f:1a:20:9c:cb:8f:69:ac:7d:21:47:d2:cf:2d:3f:69:5d: 56:7f:84:1e:71:d0:fc:cf:f2:2b:6e:69:44:3b:a2:58:ee:9b: 98:50:6a:93:4b:bd:7d:f7:98:fc:b2:cd:a0:ff:93:a6:ae:02: 3b:db:98:7e:0e:31:69:a8:60:a9:c8:a0:76:8a:ed:ff:50:78: 9e:58:04:0e -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUVBiCN1z/r8TKYhhGVqcsTYGkWmIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MjU0OVoX DTI3MDMwMzA2MzA0OVowMzExMC8GA1UEAxMoRjJCMkU5Mjk5QzFBRjdCNUIzRDQ5 NzFEMTZBMDY4MThGRTgyMjJDMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJGKCWELHRGlMWdU7rClIFPfXmT7SpfeDkJjA3XdVY1CIxQ7Yxl/J7dn1xLw 3b09PHEweYxs9Rc6+H6QYd8bp1UxNAZic7+kOv/AGYoR+PvUTJgk7Ybg8G1uH7nb 083ZiGkUadfMszBL6A1/vgdag7Reqg1Dl1xCqNTUCuFcjauNqbEJryXVaP1r3coG FcLSL7GVBYUthlQdmgPEUuIQ4qpbVZpaqojqVu9mlDdwPnJequCykOy7MSt6L15+ UAQ3riB0NSMrkpwDGlcfYoectXjWQIYykFv2gFo8TCCAqj/1wRo7OkbWnH1denkR Tf4DQ1jYcd7Ce9LCyoqDbiCwvFECAwEAAaOCAcUwggHBMB0GA1UdDgQWBBTysukp nBr3tbPUlx0WoGgY/oIiwTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTk5Ny5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rRMwDQYJKoZIhvcNAQELBQADggEBADTEsbf6GNCqLaDRYL8D4oLDJKs6aZw5any5 47I+fVzUnLfYF04bmc6nYi1QVu8t5mabFnaaSs1KSiyG7FN+Pb3xwbgSNBf2sH/d H7adQY/i1ohZyWnRRj3t1Sj+JO9mrmx8vvqgVccfomDbukiGDojqbQEKdABKWMxI xB9cnvHD/w+nO1Fpaw7tGJ22aD77cj+TJYA6iUI27gnWjGtcI3LOQ4KR78PTOxBI g/0z1wvuJYIaRCZfGiCcy49prH0hR9LPLT9pXVZ/hB5x0PzP8ituaUQ7oljum5hQ apNLvX33mPyyzaD/k6auAjvbmH4OMWmoYKnIoHaK7f9QeJ5YBA4= -----END CERTIFICATE-----Generated at Sat Mar 28 13:18:05 2026 by rpki-client