$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145380.roa File: AS145380.roa (raw, json) Hash identifier: 56YF8nTLLa6L7ByTW48PcI5fNGhPvwBjnt+q9EWIwTE= Subject key identifier: DB:33:64:2E:C5:3F:75:47:A1:B9:6F:0E:5C:BC:A0:73:1D:2B:97:D5 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 5F83749E9A9FD2794D6E2830D5AFA29D9246AF3A Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145380.roa Signing time: Wed 04 Mar 2026 06:21:09 +0000 ROA not before: Wed 04 Mar 2026 06:16:09 +0000 ROA not after: Wed 03 Mar 2027 06:21:09 +0000 asID: 145380 IP address blocks: 240a:aaaa::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:83:74:9e:9a:9f:d2:79:4d:6e:28:30:d5:af:a2:9d:92:46:af:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:16:09 2026 GMT Not After : Mar 3 06:21:09 2027 GMT Subject: CN=DB33642EC53F7547A1B96F0E5CBCA0731D2B97D5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:bb:40:3e:2b:cb:63:94:5f:f5:d3:e8:32:78: b3:27:e3:e2:37:9a:1d:33:28:92:44:78:60:07:ae: 03:5c:42:08:4c:10:98:86:d9:41:89:18:4d:2e:bd: 9c:2d:45:17:52:4b:02:83:ae:2c:6a:86:d4:e1:fd: 4e:76:55:de:f9:5c:8d:31:23:08:40:83:5f:21:bf: 38:39:be:82:79:68:4d:6b:60:bb:fd:07:5a:48:9f: e2:1b:ba:27:5d:77:69:83:62:53:86:6f:51:c8:1d: 7e:4a:34:69:18:45:56:27:9e:bb:79:48:cd:e8:93: 1c:d3:47:0f:34:80:09:96:93:ee:9d:c1:df:e9:b5: 36:39:16:14:e0:14:41:68:b2:bb:a2:ef:be:55:4e: a3:59:60:b0:8a:c9:d7:e9:57:65:95:4f:02:ae:6b: 6f:73:1d:c6:a1:7a:99:78:2b:9f:ad:f2:61:7f:2e: cf:c3:96:08:87:d3:c6:c4:ff:72:16:9e:6a:9f:af: 68:a5:c4:0d:1c:b3:5c:d5:e5:cd:75:b6:77:bd:bc: 5c:6b:66:f6:57:b6:99:51:04:18:43:e6:6f:03:5a: b8:1f:51:ce:d1:39:e7:a3:b9:86:df:5c:1e:38:f8: ab:01:65:6f:1f:ed:33:80:5a:50:48:21:f4:a4:61: de:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:33:64:2E:C5:3F:75:47:A1:B9:6F:0E:5C:BC:A0:73:1D:2B:97:D5 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145380.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:aaaa::/32 Signature Algorithm: sha256WithRSAEncryption b0:8d:79:e4:cb:63:e3:6f:db:81:02:15:35:08:3b:c1:c6:a2: cd:d4:80:f8:51:0e:76:36:7a:9b:19:45:c7:56:8e:67:ee:4c: 37:38:b4:11:48:04:d8:30:1f:aa:6a:bd:85:11:68:3e:13:21: ab:a1:a9:3c:bd:2f:30:f4:a2:2a:66:87:66:af:10:60:fe:2e: 30:19:09:f3:41:5b:e0:79:04:eb:7a:3f:75:bd:37:65:cd:a7: 44:0c:34:35:7f:62:b6:27:82:5a:ba:3e:3a:fc:ab:f3:40:3a: 34:60:b3:95:41:9f:d2:1f:2f:f9:92:d9:43:9f:e0:e4:68:5a: f6:12:56:e0:19:4f:13:94:13:71:f3:fb:14:10:cd:0f:92:5e: 1a:0c:d7:2b:62:21:74:4c:c2:1c:84:c9:fe:4b:84:4f:d8:9e: 95:f8:e7:19:3a:f8:9c:0b:62:95:d7:c3:b0:84:95:ac:16:6b: 4b:87:5e:e2:a8:a9:71:f4:03:7e:0f:b9:53:a3:29:c3:bf:e7: d0:22:ad:9e:44:e7:52:cd:52:f9:cb:20:b9:cc:0f:21:9d:a4: e3:63:1c:1e:25:f9:c8:1e:e4:91:fc:b6:b2:46:61:74:a4:a7: 43:2e:6e:09:c0:bb:10:ff:d2:80:60:83:9d:15:85:c4:9c:17: e4:90:d7:59 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUX4N0npqf0nlNbigw1a+inZJGrzowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTYwOVoX DTI3MDMwMzA2MjEwOVowMzExMC8GA1UEAxMoREIzMzY0MkVDNTNGNzU0N0ExQjk2 RjBFNUNCQ0EwNzMxRDJCOTdENTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKK7QD4ry2OUX/XT6DJ4syfj4jeaHTMokkR4YAeuA1xCCEwQmIbZQYkYTS69 nC1FF1JLAoOuLGqG1OH9TnZV3vlcjTEjCECDXyG/ODm+gnloTWtgu/0HWkif4hu6 J113aYNiU4ZvUcgdfko0aRhFVieeu3lIzeiTHNNHDzSACZaT7p3B3+m1NjkWFOAU QWiyu6LvvlVOo1lgsIrJ1+lXZZVPAq5rb3MdxqF6mXgrn63yYX8uz8OWCIfTxsT/ chaeap+vaKXEDRyzXNXlzXW2d728XGtm9le2mVEEGEPmbwNauB9RztE556O5ht9c Hjj4qwFlbx/tM4BaUEgh9KRh3jcCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBTbM2Qu xT91R6G5bw5cvKBzHSuX1TAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTM4MC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qqowDQYJKoZIhvcNAQELBQADggEBALCNeeTLY+Nv24ECFTUIO8HGos3UgPhRDnY2 epsZRcdWjmfuTDc4tBFIBNgwH6pqvYURaD4TIauhqTy9LzD0oipmh2avEGD+LjAZ CfNBW+B5BOt6P3W9N2XNp0QMNDV/YrYnglq6Pjr8q/NAOjRgs5VBn9IfL/mS2UOf 4ORoWvYSVuAZTxOUE3Hz+xQQzQ+SXhoM1ytiIXRMwhyEyf5LhE/YnpX45xk6+JwL YpXXw7CElawWa0uHXuKoqXH0A34PuVOjKcO/59AirZ5E51LNUvnLILnMDyGdpONj HB4l+cge5JH8trJGYXSkp0MubgnAuxD/0oBgg50VhcScF+SQ11k= -----END CERTIFICATE-----Generated at Sat Mar 28 11:41:25 2026 by rpki-client