$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145999.roa File: AS145999.roa (raw, json) Hash identifier: GaL9N9Q8zETXRqSmvEibjVvEXju/0NH6wrvHqsy9VFQ= Subject key identifier: 70:2B:F7:08:23:5F:90:1B:F4:D7:B5:74:82:FB:02:67:93:17:6E:B4 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 1CBC5EF53D39BCD649601BAE0A80921B088E582F Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145999.roa Signing time: Wed 04 Mar 2026 06:30:24 +0000 ROA not before: Wed 04 Mar 2026 06:25:24 +0000 ROA not after: Wed 03 Mar 2027 06:30:24 +0000 asID: 145999 IP address blocks: 240a:ad15::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:bc:5e:f5:3d:39:bc:d6:49:60:1b:ae:0a:80:92:1b:08:8e:58:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:25:24 2026 GMT Not After : Mar 3 06:30:24 2027 GMT Subject: CN=702BF708235F901BF4D7B57482FB026793176EB4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:d2:60:c1:6b:c2:a5:7a:7f:11:6a:d3:c3:8f: 8d:14:e9:43:48:1f:14:d8:b8:c5:17:25:37:0d:42: 0d:30:19:27:7c:af:c6:e8:c6:97:ae:1c:be:49:50: 4b:56:e4:9e:61:f4:fb:55:71:4f:4b:de:4c:49:07: 20:50:b1:d2:75:88:c5:25:c8:b8:91:bf:f4:5d:f8: 28:69:e0:52:81:8e:5e:2a:d6:cf:ab:6e:f8:38:32: 97:30:4a:8d:3f:c7:5a:2e:13:48:5c:64:72:f4:48: 84:52:60:9c:86:9e:39:e1:7c:a4:ba:44:85:5a:b2: 3d:9f:78:1f:cb:a6:87:86:08:58:9b:3e:1e:76:fd: 4b:0e:2c:8b:cc:e1:cc:30:cf:e9:bf:e2:57:70:af: dc:73:67:a1:7e:a6:42:64:e1:70:dc:5b:e1:7e:dc: fc:81:fe:91:b6:2a:85:61:10:dc:20:57:37:e6:72: 87:55:72:5e:60:a6:16:24:6c:de:16:d6:17:c8:12: 96:f8:90:28:3f:a5:05:87:7d:7a:a8:b6:30:69:e0: 82:da:f9:a8:26:c6:a3:89:5b:a5:09:4c:fd:9d:62: 0e:43:5b:c5:2c:05:7f:e7:af:5a:4f:be:4f:8c:15: 97:0f:8a:f4:82:0c:f0:b2:59:2a:f7:be:1a:19:d4: e2:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:2B:F7:08:23:5F:90:1B:F4:D7:B5:74:82:FB:02:67:93:17:6E:B4 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145999.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:ad15::/32 Signature Algorithm: sha256WithRSAEncryption 0c:56:3c:8b:a4:3c:35:c5:be:e3:00:2e:44:e5:34:0c:5f:24: c1:94:60:c7:1f:7d:ae:b1:b6:dc:68:55:13:b2:11:5c:ec:a4: bc:7f:7a:ee:69:37:c4:d8:64:76:dc:97:bb:aa:47:aa:56:f8: 7c:06:85:6b:9c:9a:11:96:c7:98:07:bd:da:39:aa:d4:96:79: 36:1d:13:ad:85:15:6b:e9:f9:9d:bd:2e:78:7e:45:9f:1d:34: ed:db:00:8f:4e:fe:0b:20:9f:87:15:c0:98:b9:97:1c:6e:55: 9f:64:42:fa:c3:94:de:64:1b:72:57:f3:9e:e1:03:0d:fa:b1: 3d:a4:db:31:6c:d0:b1:65:b9:d4:12:41:91:48:9f:b1:dc:10: d3:8e:c9:b1:db:43:4c:31:f1:8f:b8:5b:05:97:04:e1:65:15: db:fc:60:15:0e:ac:4a:1c:d6:84:60:ad:9d:de:74:ff:7b:d6: 22:2b:ff:18:c9:08:1d:ef:7c:02:53:96:81:1f:0c:b5:b5:1e: 62:c7:ff:2b:99:f8:b4:f6:47:5a:02:b0:82:45:7d:c4:66:bb: 4f:6b:fd:e2:a6:ce:22:cb:d6:f5:85:f4:48:ea:07:0a:df:30: 6e:ac:a4:e8:59:61:f3:b9:a1:91:ad:f6:de:8f:66:5b:c4:40: b6:aa:21:90 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUHLxe9T05vNZJYBuuCoCSGwiOWC8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MjUyNFoX DTI3MDMwMzA2MzAyNFowMzExMC8GA1UEAxMoNzAyQkY3MDgyMzVGOTAxQkY0RDdC NTc0ODJGQjAyNjc5MzE3NkVCNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJ7SYMFrwqV6fxFq08OPjRTpQ0gfFNi4xRclNw1CDTAZJ3yvxujGl64cvklQ S1bknmH0+1VxT0veTEkHIFCx0nWIxSXIuJG/9F34KGngUoGOXirWz6tu+DgylzBK jT/HWi4TSFxkcvRIhFJgnIaeOeF8pLpEhVqyPZ94H8umh4YIWJs+Hnb9Sw4si8zh zDDP6b/iV3Cv3HNnoX6mQmThcNxb4X7c/IH+kbYqhWEQ3CBXN+Zyh1VyXmCmFiRs 3hbWF8gSlviQKD+lBYd9eqi2MGnggtr5qCbGo4lbpQlM/Z1iDkNbxSwFf+evWk++ T4wVlw+K9IIM8LJZKve+GhnU4hECAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRwK/cI I1+QG/TXtXSC+wJnkxdutDAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTk5OS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rRUwDQYJKoZIhvcNAQELBQADggEBAAxWPIukPDXFvuMALkTlNAxfJMGUYMcffa6x ttxoVROyEVzspLx/eu5pN8TYZHbcl7uqR6pW+HwGhWucmhGWx5gHvdo5qtSWeTYd E62FFWvp+Z29Lnh+RZ8dNO3bAI9O/gsgn4cVwJi5lxxuVZ9kQvrDlN5kG3JX857h Aw36sT2k2zFs0LFludQSQZFIn7HcENOOybHbQ0wx8Y+4WwWXBOFlFdv8YBUOrEoc 1oRgrZ3edP971iIr/xjJCB3vfAJTloEfDLW1HmLH/yuZ+LT2R1oCsIJFfcRmu09r /eKmziLL1vWF9EjqBwrfMG6spOhZYfO5oZGt9t6PZlvEQLaqIZA= -----END CERTIFICATE-----Generated at Sat Mar 28 11:45:33 2026 by rpki-client