$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145361.roa File: AS145361.roa (raw, json) Hash identifier: 8GpNDbCTfI23Ren8fCMTQvLBj+yeaSbh+mRFNnfxH1g= Subject key identifier: 09:E5:AE:72:70:70:3A:45:3D:06:84:FD:45:32:88:88:FC:3B:56:8B Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 459DB85D73D00790C49CB5ED018C82EF2DB23454 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145361.roa Signing time: Wed 04 Mar 2026 06:22:34 +0000 ROA not before: Wed 04 Mar 2026 06:17:34 +0000 ROA not after: Wed 03 Mar 2027 06:22:34 +0000 asID: 145361 IP address blocks: 240a:aa97::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:9d:b8:5d:73:d0:07:90:c4:9c:b5:ed:01:8c:82:ef:2d:b2:34:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:17:34 2026 GMT Not After : Mar 3 06:22:34 2027 GMT Subject: CN=09E5AE7270703A453D0684FD45328888FC3B568B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:1a:ce:37:62:b2:82:6e:07:5a:cb:8f:39:58: ef:0f:fe:5b:ae:eb:c7:19:68:af:f5:5c:b0:63:ed: 25:3c:37:84:25:75:00:d8:ee:c3:38:79:2f:b1:66: 07:2e:22:0a:75:74:a1:8c:91:19:59:c8:b9:21:34: a4:2e:d9:95:6a:99:93:c2:58:d5:3b:e1:e0:e3:74: fc:3d:31:db:da:75:08:1e:3e:07:b8:f8:19:7d:e6: 5f:9b:09:84:88:98:cb:03:45:4e:9b:be:4c:9e:59: ab:f5:4b:c4:af:fd:b6:f9:b2:eb:64:9a:88:03:3f: f3:cf:6b:66:95:fd:25:f4:3d:9a:1a:58:e6:2e:af: 2e:4c:2f:3e:fc:6a:fe:c4:26:65:54:4f:11:89:18: 8f:64:6e:14:8d:66:6e:fb:a7:7d:2b:55:fa:1f:09: e4:2e:12:fc:86:5b:a6:2d:70:6f:f2:03:5f:31:80: e5:f0:94:4b:b7:1a:c0:83:a3:03:ae:de:50:40:c0: d3:5b:e9:e9:16:06:09:65:79:ea:47:6a:84:59:07: e7:fb:3d:18:50:a2:77:22:0c:d4:87:2e:06:5a:ad: 36:34:9e:df:c2:b2:e8:b9:ba:b0:fe:dc:a3:2c:11: 4e:9c:75:c9:9a:8e:b1:bf:bd:33:a6:d6:38:b9:15: 29:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:E5:AE:72:70:70:3A:45:3D:06:84:FD:45:32:88:88:FC:3B:56:8B X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145361.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:aa97::/32 Signature Algorithm: sha256WithRSAEncryption 23:5f:69:80:c8:5c:4d:5c:04:b9:df:a5:e1:d8:2e:2f:a7:aa: 38:37:05:e5:c8:42:45:1e:1d:fd:59:4c:98:cc:e3:a5:62:fe: e9:10:b9:c0:21:19:e1:ad:c9:15:41:d3:ac:32:b9:6a:2c:7c: 5c:83:33:8c:c7:89:9d:b9:7c:d5:e6:0c:90:89:da:55:66:ff: 1c:77:fa:e1:89:d4:0b:2e:41:69:dc:9a:91:73:7b:be:7c:d8: 27:7c:fd:9c:38:89:04:04:3b:75:63:7d:39:18:0a:56:df:92: e8:71:c5:1c:6c:75:bc:e5:b3:95:2a:12:c7:e5:be:9c:05:05: 03:28:81:1b:76:4d:c1:f9:03:fe:a5:10:ec:0c:37:14:de:7d: ca:1c:f9:fd:d9:01:27:01:f4:e8:32:06:cf:3c:83:3d:5c:e7: 6c:b1:80:97:51:9c:9a:74:65:06:d4:16:6b:8e:b1:1d:c6:10: 98:b8:e0:ea:48:b4:fe:4b:5f:5b:e1:1a:dc:d2:6f:8e:1e:94: 8f:bd:71:8f:b5:c1:93:2e:ec:7e:c6:4f:2e:7b:de:78:44:94: a8:3d:69:a0:11:16:27:a4:07:ec:33:6d:67:cf:88:58:a1:36: c6:be:e8:00:b1:14:04:9b:a7:43:e2:6a:c1:e6:ff:31:b4:6d: 59:bd:9f:dd -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIURZ24XXPQB5DEnLXtAYyC7y2yNFQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTczNFoX DTI3MDMwMzA2MjIzNFowMzExMC8GA1UEAxMoMDlFNUFFNzI3MDcwM0E0NTNEMDY4 NEZENDUzMjg4ODhGQzNCNTY4QjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJIazjdisoJuB1rLjzlY7w/+W67rxxlor/VcsGPtJTw3hCV1ANjuwzh5L7Fm By4iCnV0oYyRGVnIuSE0pC7ZlWqZk8JY1Tvh4ON0/D0x29p1CB4+B7j4GX3mX5sJ hIiYywNFTpu+TJ5Zq/VLxK/9tvmy62SaiAM/889rZpX9JfQ9mhpY5i6vLkwvPvxq /sQmZVRPEYkYj2RuFI1mbvunfStV+h8J5C4S/IZbpi1wb/IDXzGA5fCUS7cawIOj A67eUEDA01vp6RYGCWV56kdqhFkH5/s9GFCidyIM1IcuBlqtNjSe38Ky6Lm6sP7c oywRTpx1yZqOsb+9M6bWOLkVKYkCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQJ5a5y cHA6RT0GhP1FMoiI/DtWizAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTM2MS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qpcwDQYJKoZIhvcNAQELBQADggEBACNfaYDIXE1cBLnfpeHYLi+nqjg3BeXIQkUe Hf1ZTJjM46Vi/ukQucAhGeGtyRVB06wyuWosfFyDM4zHiZ25fNXmDJCJ2lVm/xx3 +uGJ1AsuQWncmpFze7582Cd8/Zw4iQQEO3VjfTkYClbfkuhxxRxsdbzls5UqEsfl vpwFBQMogRt2TcH5A/6lEOwMNxTefcoc+f3ZAScB9OgyBs88gz1c52yxgJdRnJp0 ZQbUFmuOsR3GEJi44OpItP5LX1vhGtzSb44elI+9cY+1wZMu7H7GTy573nhElKg9 aaARFiekB+wzbWfPiFihNsa+6ACxFASbp0PiasHm/zG0bVm9n90= -----END CERTIFICATE-----Generated at Sat Mar 28 11:42:09 2026 by rpki-client