$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145351.roa File: AS145351.roa (raw, json) Hash identifier: ekz05bkKAygJ7nKXzWtlfthysGggAMdEaNYMJtAg1Gc= Subject key identifier: 61:D4:66:11:69:11:CF:34:8A:C9:B3:72:94:E9:32:FB:3A:E3:69:1F Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 617E4F7438A8BBAFA746821E15961497E8D5C751 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145351.roa Signing time: Wed 04 Mar 2026 06:20:11 +0000 ROA not before: Wed 04 Mar 2026 06:15:11 +0000 ROA not after: Wed 03 Mar 2027 06:20:11 +0000 asID: 145351 IP address blocks: 240a:aa8d::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:7e:4f:74:38:a8:bb:af:a7:46:82:1e:15:96:14:97:e8:d5:c7:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:15:11 2026 GMT Not After : Mar 3 06:20:11 2027 GMT Subject: CN=61D466116911CF348AC9B37294E932FB3AE3691F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:a6:c7:49:26:7c:65:8a:38:57:10:d3:b0:3a: 53:d8:a2:b6:f0:d1:25:c6:f4:4b:f4:ff:3d:72:cf: b4:83:4b:0e:37:fb:ea:a8:8d:a2:35:4c:5a:d6:12: 4a:d0:25:39:95:c6:67:30:75:6b:47:3f:8e:29:4b: ee:ca:5e:b6:cb:85:2a:52:86:aa:1a:9c:1d:2f:aa: 60:ca:60:b4:ae:79:fd:74:01:4b:bd:fb:18:96:e7: 16:8e:12:7e:29:44:0a:ec:34:b8:e5:e6:55:af:b0: a1:8c:3f:84:78:38:a3:b2:5d:7b:fe:69:e6:51:71: 69:73:c1:13:e7:58:a2:d6:e8:9b:57:74:d6:97:46: 73:de:42:fd:36:f7:81:42:a2:94:ee:9d:07:02:76: 62:be:2f:66:58:db:f8:ef:52:df:83:f0:e2:54:45: ed:2a:4b:06:b7:99:5d:98:e7:68:ad:4e:d3:06:e6: e0:95:3c:5b:d2:c1:97:0a:ee:43:1e:81:79:e6:10: 58:79:46:c1:eb:a8:cb:14:22:11:41:38:9f:ac:32: a9:6c:d5:dd:ea:ae:db:88:70:3b:7b:0e:16:21:e7: 56:92:66:44:f7:54:a5:64:ab:f4:ba:96:2e:54:99: 19:37:fa:58:60:3d:81:d1:08:99:26:3f:fc:66:3d: a1:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:D4:66:11:69:11:CF:34:8A:C9:B3:72:94:E9:32:FB:3A:E3:69:1F X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145351.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:aa8d::/32 Signature Algorithm: sha256WithRSAEncryption a9:57:49:0e:82:a8:a3:8f:21:63:2b:7c:6a:12:d7:1d:42:08: 66:0f:90:8b:6c:a2:53:89:2f:25:c3:c8:a0:a2:e2:45:4c:b9: dd:a9:ee:5b:a2:86:c8:56:0e:40:03:3d:f5:76:29:5f:f1:a5: a1:80:81:0a:26:45:4a:d5:41:84:fc:6b:0c:8d:ae:3b:88:57: 59:6c:86:73:70:ab:e6:7f:90:96:d5:b4:b0:a3:ef:23:c1:e8: 03:6a:ae:52:b9:2d:c3:18:c2:68:d1:51:64:e3:fc:62:51:30: 41:22:61:f0:f3:70:64:13:b1:a6:00:77:40:38:ee:35:5d:34: 60:95:7f:ee:a0:e1:25:2f:3c:01:f8:5e:3f:87:b4:26:d1:e4: 38:07:82:a6:ac:ef:68:9f:aa:13:f5:02:b2:53:40:49:f3:45: 5e:8a:5c:ae:a9:6b:ca:ee:43:95:30:ba:54:55:42:e5:fd:54: f8:36:2a:24:d4:92:7d:63:44:9f:ec:95:45:4e:8b:30:2f:aa: e4:c6:b9:ec:2e:97:8a:f5:ca:fb:67:87:82:37:03:ee:7b:b5: 4d:7a:e3:49:56:c1:10:96:5d:0e:68:14:eb:35:57:66:f8:3f: b3:28:6e:61:40:3b:4e:49:ca:f5:bf:b6:58:0e:31:c8:75:49: 93:f0:e8:19 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUYX5PdDiou6+nRoIeFZYUl+jVx1EwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTUxMVoX DTI3MDMwMzA2MjAxMVowMzExMC8GA1UEAxMoNjFENDY2MTE2OTExQ0YzNDhBQzlC MzcyOTRFOTMyRkIzQUUzNjkxRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKumx0kmfGWKOFcQ07A6U9iitvDRJcb0S/T/PXLPtINLDjf76qiNojVMWtYS StAlOZXGZzB1a0c/jilL7spetsuFKlKGqhqcHS+qYMpgtK55/XQBS737GJbnFo4S filECuw0uOXmVa+woYw/hHg4o7Jde/5p5lFxaXPBE+dYotbom1d01pdGc95C/Tb3 gUKilO6dBwJ2Yr4vZljb+O9S34Pw4lRF7SpLBreZXZjnaK1O0wbm4JU8W9LBlwru Qx6BeeYQWHlGweuoyxQiEUE4n6wyqWzV3equ24hwO3sOFiHnVpJmRPdUpWSr9LqW LlSZGTf6WGA9gdEImSY//GY9oV8CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRh1GYR aRHPNIrJs3KU6TL7OuNpHzAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTM1MS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qo0wDQYJKoZIhvcNAQELBQADggEBAKlXSQ6CqKOPIWMrfGoS1x1CCGYPkItsolOJ LyXDyKCi4kVMud2p7luihshWDkADPfV2KV/xpaGAgQomRUrVQYT8awyNrjuIV1ls hnNwq+Z/kJbVtLCj7yPB6ANqrlK5LcMYwmjRUWTj/GJRMEEiYfDzcGQTsaYAd0A4 7jVdNGCVf+6g4SUvPAH4Xj+HtCbR5DgHgqas72ifqhP1ArJTQEnzRV6KXK6pa8ru Q5UwulRVQuX9VPg2KiTUkn1jRJ/slUVOizAvquTGuewul4r1yvtnh4I3A+57tU16 40lWwRCWXQ5oFOs1V2b4P7MobmFAO05JyvW/tlgOMch1SZPw6Bk= -----END CERTIFICATE-----Generated at Sat Mar 28 11:41:13 2026 by rpki-client