$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145311.roa File: AS145311.roa (raw, json) Hash identifier: HBGoB2IRwliqrxXf9HeUprXw8j/tcQWQtxP5nlSqaZs= Subject key identifier: 8E:1C:16:BE:CE:97:F5:07:54:E3:45:71:3A:97:6C:45:CF:CA:D0:62 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 615E21402C514C958363764241E84A94C4EDDDCA Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145311.roa Signing time: Wed 04 Mar 2026 06:20:37 +0000 ROA not before: Wed 04 Mar 2026 06:15:37 +0000 ROA not after: Wed 03 Mar 2027 06:20:37 +0000 asID: 145311 IP address blocks: 240a:aa65::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:5e:21:40:2c:51:4c:95:83:63:76:42:41:e8:4a:94:c4:ed:dd:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:15:37 2026 GMT Not After : Mar 3 06:20:37 2027 GMT Subject: CN=8E1C16BECE97F50754E345713A976C45CFCAD062 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:22:88:17:83:be:5f:db:cd:d8:1a:eb:21:5e: 8f:70:51:a1:a1:62:7a:cd:44:8a:fa:2a:70:74:3b: ec:68:85:be:44:3a:db:e0:29:1d:8d:92:18:6e:8f: 8a:d0:a2:df:05:62:9f:07:d7:85:a6:42:2d:5a:85: a3:0e:d6:79:c6:2e:69:05:3d:15:5a:83:87:44:02: 99:cb:b4:ab:48:a1:5a:88:99:85:eb:98:59:35:14: 63:25:8e:32:05:a2:df:7b:32:0d:eb:18:e1:8a:10: 7b:7f:fe:e0:61:f6:c0:10:ef:55:58:50:60:b4:83: 4c:d4:c6:29:73:e5:da:aa:62:b2:e7:a9:b8:98:cf: 40:5a:af:47:07:6a:8f:d4:9a:0a:6c:ba:76:05:8c: 71:c6:cc:a0:65:b8:17:cf:fe:1f:84:03:66:21:62: d3:2f:ed:3c:72:64:87:48:9c:3e:11:bd:b0:1f:a1: f3:88:bd:47:bd:41:e1:ba:10:4c:b3:24:91:fc:54: 9f:47:7f:61:9d:9c:00:53:b5:75:45:9c:35:21:76: d5:b0:b6:7d:d4:4d:5c:7b:7e:71:ca:67:37:3f:b2: a7:6e:d8:18:0f:5e:3d:a9:46:e3:5e:67:4e:91:fc: 18:b0:e4:a2:cd:77:88:6d:72:62:d2:a2:1c:d9:07: 4e:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:1C:16:BE:CE:97:F5:07:54:E3:45:71:3A:97:6C:45:CF:CA:D0:62 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145311.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:aa65::/32 Signature Algorithm: sha256WithRSAEncryption 5d:27:05:95:1e:9c:17:e6:8b:53:ab:b4:ee:fb:c9:2b:21:55: f5:33:9b:e5:eb:cd:bb:bf:f5:57:cb:39:2e:7e:41:c0:db:87: f3:1a:94:a2:a1:3c:2b:da:85:fb:89:8a:b2:79:88:61:20:c7: 54:54:47:f0:a5:d0:33:f6:f6:e4:d1:b4:94:94:91:db:e5:f4: c0:b7:21:29:e6:74:28:2e:93:09:e1:9f:ef:d8:10:22:b3:a9: b3:8a:7a:26:7f:b2:49:c9:1c:ba:6e:58:5d:03:e4:af:ac:b1: 0b:e6:a4:df:91:fc:bf:fa:fc:9f:bf:15:af:12:6d:07:97:96: 14:7d:a2:21:5a:cc:85:df:47:a6:42:5d:85:d1:a0:4f:b5:4a: 4e:16:c1:15:1c:9b:c0:4f:8e:f0:e1:21:0e:f8:8f:cd:84:ef: b5:91:07:ce:f2:f8:94:64:dd:6e:26:34:64:24:fd:60:95:40: a5:49:6f:dd:b0:78:5b:ab:ed:fb:90:30:f5:dc:80:68:2d:af: 7e:e3:3e:31:85:10:ab:eb:20:8e:54:55:5a:b2:70:aa:7e:2b: fd:fe:12:c9:9f:6a:37:dc:7e:80:fb:95:cf:0f:e7:4f:91:9a: f5:19:30:13:ee:67:65:9d:74:32:b6:71:ea:8e:7e:a0:43:a5: 5a:01:9f:63 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUYV4hQCxRTJWDY3ZCQehKlMTt3cowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTUzN1oX DTI3MDMwMzA2MjAzN1owMzExMC8GA1UEAxMoOEUxQzE2QkVDRTk3RjUwNzU0RTM0 NTcxM0E5NzZDNDVDRkNBRDA2MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAIwiiBeDvl/bzdga6yFej3BRoaFies1EivoqcHQ77GiFvkQ62+ApHY2SGG6P itCi3wVinwfXhaZCLVqFow7WecYuaQU9FVqDh0QCmcu0q0ihWoiZheuYWTUUYyWO MgWi33syDesY4YoQe3/+4GH2wBDvVVhQYLSDTNTGKXPl2qpisuepuJjPQFqvRwdq j9SaCmy6dgWMccbMoGW4F8/+H4QDZiFi0y/tPHJkh0icPhG9sB+h84i9R71B4boQ TLMkkfxUn0d/YZ2cAFO1dUWcNSF21bC2fdRNXHt+ccpnNz+yp27YGA9ePalG415n TpH8GLDkos13iG1yYtKiHNkHTocCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSOHBa+ zpf1B1TjRXE6l2xFz8rQYjAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTMxMS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qmUwDQYJKoZIhvcNAQELBQADggEBAF0nBZUenBfmi1OrtO77ySshVfUzm+Xrzbu/ 9VfLOS5+QcDbh/MalKKhPCvahfuJirJ5iGEgx1RUR/Cl0DP29uTRtJSUkdvl9MC3 ISnmdCgukwnhn+/YECKzqbOKeiZ/sknJHLpuWF0D5K+ssQvmpN+R/L/6/J+/Fa8S bQeXlhR9oiFazIXfR6ZCXYXRoE+1Sk4WwRUcm8BPjvDhIQ74j82E77WRB87y+JRk 3W4mNGQk/WCVQKVJb92weFur7fuQMPXcgGgtr37jPjGFEKvrII5UVVqycKp+K/3+ EsmfajfcfoD7lc8P50+RmvUZMBPuZ2WddDK2ceqOfqBDpVoBn2M= -----END CERTIFICATE-----Generated at Sat Mar 28 11:46:08 2026 by rpki-client