$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145346.roa File: AS145346.roa (raw, json) Hash identifier: VIzZoTIeMGpo20aK4vUvPJYQjH3oFtbRT1HDfAC3dwc= Subject key identifier: 24:C5:2E:94:6A:FA:7E:32:35:1D:7F:20:40:1A:AB:3B:5C:70:77:7F Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 55895B79D7A0CFF9F30333C53DEB1B0AB5534C11 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145346.roa Signing time: Wed 04 Mar 2026 06:21:58 +0000 ROA not before: Wed 04 Mar 2026 06:16:58 +0000 ROA not after: Wed 03 Mar 2027 06:21:58 +0000 asID: 145346 IP address blocks: 240a:aa88::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:89:5b:79:d7:a0:cf:f9:f3:03:33:c5:3d:eb:1b:0a:b5:53:4c:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:16:58 2026 GMT Not After : Mar 3 06:21:58 2027 GMT Subject: CN=24C52E946AFA7E32351D7F20401AAB3B5C70777F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:3f:a5:8c:c2:6e:bc:04:75:db:a1:77:13:ea: 81:07:3d:61:f5:9c:69:10:12:f9:f5:51:cc:30:c4: 65:24:c2:b0:34:ca:57:0a:ee:81:06:7c:e6:24:bd: eb:7e:dd:47:b2:38:ae:19:1f:1a:77:10:0f:a6:c9: c5:f2:68:13:ed:5f:a6:1c:8d:ee:3d:1f:d5:5d:e4: 5a:ce:10:b4:8e:66:05:7b:ab:01:36:ff:da:ab:45: 22:93:5e:d0:01:59:e5:84:17:e2:19:45:03:2f:c1: 6f:6a:a5:8c:b5:1c:af:d6:65:6d:67:72:17:55:19: 06:ff:2e:b8:4c:20:58:cb:22:29:d1:7d:03:8d:00: b4:d1:68:92:47:a0:5e:e3:1c:f2:ca:18:0c:6c:4c: d1:14:35:55:e7:bc:70:29:34:35:ba:7a:d4:b5:0e: 1c:c4:23:da:d1:54:c5:59:c6:72:2a:0a:86:e4:5d: 25:50:00:1c:fc:8d:ea:da:3f:68:72:81:b8:b4:d4: 1b:dd:da:04:38:43:cc:df:61:98:1c:0b:8a:fe:63: 25:73:eb:5e:16:d1:04:c2:26:60:b0:cc:9e:ee:5f: b5:59:c8:cc:75:f4:bc:9f:b6:cf:d1:1b:b3:fe:3e: 46:7f:61:75:9c:a3:d4:37:0c:9b:29:14:d3:e5:a7: ae:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:C5:2E:94:6A:FA:7E:32:35:1D:7F:20:40:1A:AB:3B:5C:70:77:7F X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145346.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:aa88::/32 Signature Algorithm: sha256WithRSAEncryption ac:a1:9a:ea:25:a2:a8:2a:a4:b0:ef:83:97:38:d7:c8:3f:5c: 3e:f9:37:bf:20:2d:13:ff:28:5e:58:c2:5b:9d:10:25:30:3f: be:cc:93:8c:8c:0a:e2:c1:a7:f5:40:31:3a:bf:c8:a3:58:75: 6b:dc:95:18:1a:c6:2b:9c:12:12:56:9d:1a:88:04:09:b5:0d: 84:e9:33:d4:f2:56:f5:c1:de:e1:c2:f6:5d:c0:46:37:ae:36: 90:3d:e1:e2:6f:14:23:fe:b2:4a:b9:1b:07:ab:75:ce:96:34: 34:85:f3:d3:58:02:be:5b:cb:4d:ca:af:c6:1d:96:37:74:aa: b2:50:de:ca:98:23:27:e3:9d:1c:94:f1:48:db:76:6e:cd:e9: ff:f6:8a:10:39:fa:bc:12:9f:07:8e:84:86:fd:af:20:55:06: 17:49:a1:8f:17:11:3c:68:b3:50:82:7d:7b:7c:c7:05:4b:a3: 24:4e:81:1e:a3:2c:f9:17:76:ed:2b:63:c3:dc:ea:cd:a9:0c: cd:b4:e4:5f:3b:08:64:b7:25:46:18:9f:00:d9:52:33:d6:e9: e8:2c:5a:d7:fc:02:70:7a:14:4e:89:f4:b2:d8:37:80:69:4a: 11:dd:ea:33:df:87:64:ad:55:f8:e5:ea:61:fc:98:a1:25:a8: 9a:ef:fc:fe -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUVYlbedegz/nzAzPFPesbCrVTTBEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTY1OFoX DTI3MDMwMzA2MjE1OFowMzExMC8GA1UEAxMoMjRDNTJFOTQ2QUZBN0UzMjM1MUQ3 RjIwNDAxQUFCM0I1QzcwNzc3RjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM8/pYzCbrwEdduhdxPqgQc9YfWcaRAS+fVRzDDEZSTCsDTKVwrugQZ85iS9 637dR7I4rhkfGncQD6bJxfJoE+1fphyN7j0f1V3kWs4QtI5mBXurATb/2qtFIpNe 0AFZ5YQX4hlFAy/Bb2qljLUcr9ZlbWdyF1UZBv8uuEwgWMsiKdF9A40AtNFokkeg XuMc8soYDGxM0RQ1Vee8cCk0Nbp61LUOHMQj2tFUxVnGcioKhuRdJVAAHPyN6to/ aHKBuLTUG93aBDhDzN9hmBwLiv5jJXPrXhbRBMImYLDMnu5ftVnIzHX0vJ+2z9Eb s/4+Rn9hdZyj1DcMmykU0+Wnrt0CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQkxS6U avp+MjUdfyBAGqs7XHB3fzAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTM0Ni5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qogwDQYJKoZIhvcNAQELBQADggEBAKyhmuoloqgqpLDvg5c418g/XD75N78gLRP/ KF5YwludECUwP77Mk4yMCuLBp/VAMTq/yKNYdWvclRgaxiucEhJWnRqIBAm1DYTp M9TyVvXB3uHC9l3ARjeuNpA94eJvFCP+skq5Gwerdc6WNDSF89NYAr5by03Kr8Yd ljd0qrJQ3sqYIyfjnRyU8Ujbdm7N6f/2ihA5+rwSnweOhIb9ryBVBhdJoY8XETxo s1CCfXt8xwVLoyROgR6jLPkXdu0rY8Pc6s2pDM205F87CGS3JUYYnwDZUjPW6egs Wtf8AnB6FE6J9LLYN4BpShHd6jPfh2StVfjl6mH8mKElqJrv/P4= -----END CERTIFICATE-----Generated at Sat Mar 28 15:53:29 2026 by rpki-client