$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145022.roa File: AS145022.roa (raw, json) Hash identifier: HWjC09ZE7d2edMMSZ6WxgJ0zbpTr5RcTeQnA6rgq9ek= Subject key identifier: 5B:5A:19:54:CB:F0:B2:9F:72:10:BD:3A:E8:E6:C7:CF:62:1B:BC:9C Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 539AB84F50D5A0290B26336D1DE79FF27071CB31 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145022.roa Signing time: Wed 04 Mar 2026 06:21:30 +0000 ROA not before: Wed 04 Mar 2026 06:16:30 +0000 ROA not after: Wed 03 Mar 2027 06:21:30 +0000 asID: 145022 IP address blocks: 240a:a944::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:9a:b8:4f:50:d5:a0:29:0b:26:33:6d:1d:e7:9f:f2:70:71:cb:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:16:30 2026 GMT Not After : Mar 3 06:21:30 2027 GMT Subject: CN=5B5A1954CBF0B29F7210BD3AE8E6C7CF621BBC9C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:14:01:f3:de:97:81:56:2a:52:4e:56:c9:3b: 4d:92:b8:33:28:9d:0c:2f:ff:1d:4d:41:68:f8:52: 04:07:e8:70:d9:e7:83:4c:d1:be:ae:2b:67:d7:2e: 62:a5:20:0e:2e:42:24:1f:0b:d8:b5:b9:78:75:5a: 38:4e:e2:2d:50:c0:07:b7:4e:ed:41:4b:7b:7a:bf: 4b:d8:8c:65:ed:a7:63:57:8d:e5:6a:e3:04:da:24: 0b:f4:58:78:7f:a3:76:b9:66:1d:cd:19:ff:fc:30: 74:64:eb:b0:06:d3:ad:a0:a5:ab:7a:53:76:55:85: ba:8a:19:c5:5c:1f:ad:8f:80:66:60:9e:d2:24:77: d2:f2:32:ab:e6:b4:6d:74:ed:d2:fe:3b:36:80:31: 44:4c:5a:d8:d9:3e:42:56:f9:62:ab:74:30:c5:f3: 3a:a8:8c:d7:ea:63:d0:61:8f:9b:41:6d:67:e6:9d: 2e:d0:76:50:f1:ea:9a:12:c5:6f:7a:c7:f7:85:07: f4:69:af:77:45:64:f1:e5:76:9e:5a:db:c7:fc:2b: a2:46:6e:92:76:ef:63:d4:dc:ed:38:46:e5:e1:3e: 81:80:82:da:e1:b2:a6:18:2f:bd:79:77:a5:c4:de: 70:c7:51:11:58:89:4f:66:ce:e4:75:60:b2:45:69: c9:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:5A:19:54:CB:F0:B2:9F:72:10:BD:3A:E8:E6:C7:CF:62:1B:BC:9C X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145022.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a944::/32 Signature Algorithm: sha256WithRSAEncryption 8f:2c:77:81:1f:a8:7a:d9:7b:03:62:e1:71:31:fd:60:e6:7b: 6f:94:88:bd:26:26:c7:a1:3f:0f:5e:96:5c:50:b2:1b:41:2e: 32:71:77:71:82:5b:89:bd:bb:c6:dd:9c:4b:bc:a0:fd:fb:fd: a8:42:1b:c6:ba:94:05:21:65:75:7c:15:6e:5d:68:09:c5:76: 31:87:5b:76:4f:e7:f7:e3:a6:5f:cf:b9:d6:5e:cf:9f:03:dd: f1:a9:ff:4d:85:92:8f:bc:35:3e:30:41:cb:64:4f:74:e4:c5: 56:c0:9b:41:eb:0f:fc:c9:81:a8:4e:3d:10:dd:e4:d5:f8:e7: 3f:33:80:2d:7a:39:cc:ea:f8:bd:1b:2d:b0:45:f7:29:b8:b2: 0a:c4:f7:b0:f2:f3:7b:76:22:a6:29:12:6d:3b:2e:14:f3:24: 45:94:f5:32:fc:7f:60:fd:0c:91:40:7a:0a:22:78:8f:13:05: 30:79:3b:e9:f7:10:6f:2e:fc:26:ce:16:5b:cc:e9:0c:b5:0d: 3b:af:ca:96:7b:bc:29:b7:e7:e7:2c:e6:66:4e:48:17:ce:c3: ed:04:28:cc:0f:a9:5f:51:70:ef:5c:53:f5:5b:58:6a:d6:b1: 2c:d1:90:cd:8f:e8:18:c5:5b:ec:fc:16:45:a7:85:d3:bd:15: 5a:98:fa:2c -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUU5q4T1DVoCkLJjNtHeef8nBxyzEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTYzMFoX DTI3MDMwMzA2MjEzMFowMzExMC8GA1UEAxMoNUI1QTE5NTRDQkYwQjI5RjcyMTBC RDNBRThFNkM3Q0Y2MjFCQkM5QzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMkUAfPel4FWKlJOVsk7TZK4MyidDC//HU1BaPhSBAfocNnng0zRvq4rZ9cu YqUgDi5CJB8L2LW5eHVaOE7iLVDAB7dO7UFLe3q/S9iMZe2nY1eN5WrjBNokC/RY eH+jdrlmHc0Z//wwdGTrsAbTraClq3pTdlWFuooZxVwfrY+AZmCe0iR30vIyq+a0 bXTt0v47NoAxRExa2Nk+Qlb5Yqt0MMXzOqiM1+pj0GGPm0FtZ+adLtB2UPHqmhLF b3rH94UH9Gmvd0Vk8eV2nlrbx/wrokZuknbvY9Tc7ThG5eE+gYCC2uGyphgvvXl3 pcTecMdREViJT2bO5HVgskVpyUUCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRbWhlU y/Cyn3IQvTro5sfPYhu8nDAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTAyMi5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qUQwDQYJKoZIhvcNAQELBQADggEBAI8sd4EfqHrZewNi4XEx/WDme2+UiL0mJseh Pw9ellxQshtBLjJxd3GCW4m9u8bdnEu8oP37/ahCG8a6lAUhZXV8FW5daAnFdjGH W3ZP5/fjpl/PudZez58D3fGp/02Fko+8NT4wQctkT3TkxVbAm0HrD/zJgahOPRDd 5NX45z8zgC16Oczq+L0bLbBF9ym4sgrE97Dy83t2IqYpEm07LhTzJEWU9TL8f2D9 DJFAegoieI8TBTB5O+n3EG8u/CbOFlvM6Qy1DTuvypZ7vCm35+cs5mZOSBfOw+0E KMwPqV9RcO9cU/VbWGrWsSzRkM2P6BjFW+z8FkWnhdO9FVqY+iw= -----END CERTIFICATE-----Generated at Sat Mar 28 11:42:26 2026 by rpki-client