$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145384.roa File: AS145384.roa (raw, json) Hash identifier: QpO1Ol7WwkUBMzgOkAbTWJkMhPP0ESz/RUcEjlrSIHg= Subject key identifier: 71:9A:0B:A7:26:41:67:5B:0A:0D:FC:BD:DE:11:C8:98:26:D5:F9:8C Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: E6675768C5164B76F58E7319E61647EA86B6A2 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145384.roa Signing time: Wed 04 Mar 2026 06:20:24 +0000 ROA not before: Wed 04 Mar 2026 06:15:24 +0000 ROA not after: Wed 03 Mar 2027 06:20:24 +0000 asID: 145384 IP address blocks: 240a:aaae::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: e6:67:57:68:c5:16:4b:76:f5:8e:73:19:e6:16:47:ea:86:b6:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:15:24 2026 GMT Not After : Mar 3 06:20:24 2027 GMT Subject: CN=719A0BA72641675B0A0DFCBDDE11C89826D5F98C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:86:ec:3b:a1:38:f8:13:be:a3:6b:0a:1d:aa: 77:e5:98:ca:c7:93:a8:4c:5c:9d:99:6d:18:30:0b: 88:db:f7:d0:75:8e:80:21:e6:f2:e9:c6:28:a8:c7: 8f:80:1e:c8:dd:7b:94:9f:2e:b8:24:87:ea:49:a1: d5:ad:a4:85:3a:00:6f:63:dc:45:9b:e7:45:fd:3e: 11:ae:c8:24:e2:10:a0:13:a6:6f:3a:26:68:3d:08: c0:85:aa:27:1e:88:3b:e0:b4:f2:2f:8a:f3:d9:27: ab:c6:a2:b1:f3:0d:d5:ba:51:ab:9a:f5:59:ca:a6: b1:c6:d2:be:58:a1:34:d4:88:36:0d:50:3a:57:5d: 7d:c1:67:d8:31:d0:a6:43:7c:ab:54:4c:67:28:a8: ab:05:c3:a2:9a:3e:91:75:24:6d:db:43:6c:c2:70: 6c:92:29:6f:c6:12:9c:e9:f6:a7:89:28:58:a4:b0: 5d:5b:7c:7d:24:39:75:e9:27:18:b0:d7:24:4b:4b: 01:21:38:14:24:21:95:e5:f6:d5:fd:a8:dc:d4:3c: 2d:0b:eb:e9:9e:22:40:7a:68:a6:ed:f5:d0:42:0e: cc:87:5a:88:8c:d8:ef:7f:83:d7:cf:5d:63:cd:6c: 3f:31:0b:84:e1:38:34:de:26:3f:47:38:c5:ae:f5: b7:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:9A:0B:A7:26:41:67:5B:0A:0D:FC:BD:DE:11:C8:98:26:D5:F9:8C X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145384.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:aaae::/32 Signature Algorithm: sha256WithRSAEncryption 46:79:f2:52:8f:9f:d8:d2:6a:cf:b8:1b:bb:bd:02:ee:bb:a3: d5:40:67:58:32:96:da:9f:3a:88:c6:69:a1:e0:04:ac:74:25: 28:b3:f9:f4:c1:d0:f8:15:4c:7c:fd:29:92:c0:ca:26:f9:f5: 59:2b:68:57:00:40:04:c2:b6:d7:71:89:63:4a:76:94:a8:38: 08:f9:16:37:a1:90:a4:7a:28:ea:17:21:aa:1e:01:44:2d:7b: 35:ab:7a:6e:3d:1d:77:62:41:ce:b3:32:b7:0b:3c:bf:35:6a: 87:5a:a5:ac:f4:98:dd:23:ae:a6:31:c9:6d:68:b0:ae:45:09: 80:b1:35:53:6e:cb:18:45:63:be:cf:ba:6f:6a:6d:00:62:07: 61:82:91:c4:31:18:be:ec:ce:c0:b4:b0:1f:89:e7:94:7f:da: 93:c2:02:1b:22:80:56:91:79:56:e6:c0:1a:53:86:86:8a:01: 05:d9:7f:de:b2:f7:f4:1f:0a:ba:7a:16:7d:ca:54:ca:18:e2: e4:18:ae:50:76:5b:65:db:36:92:90:fe:27:1a:9f:d9:67:b2: ba:e6:ae:40:d1:13:6a:f4:e8:a4:50:42:2d:47:77:95:81:a9: 65:ff:71:1c:f0:20:7d:e3:66:27:ac:9a:64:c2:1c:4b:ab:5b: 5c:89:33:91 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUAOZnV2jFFkt29Y5zGeYWR+qGtqIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTUyNFoX DTI3MDMwMzA2MjAyNFowMzExMC8GA1UEAxMoNzE5QTBCQTcyNjQxNjc1QjBBMERG Q0JEREUxMUM4OTgyNkQ1Rjk4QzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK2G7DuhOPgTvqNrCh2qd+WYyseTqExcnZltGDALiNv30HWOgCHm8unGKKjH j4AeyN17lJ8uuCSH6kmh1a2khToAb2PcRZvnRf0+Ea7IJOIQoBOmbzomaD0IwIWq Jx6IO+C08i+K89knq8aisfMN1bpRq5r1WcqmscbSvlihNNSINg1QOlddfcFn2DHQ pkN8q1RMZyioqwXDopo+kXUkbdtDbMJwbJIpb8YSnOn2p4koWKSwXVt8fSQ5dekn GLDXJEtLASE4FCQhleX21f2o3NQ8LQvr6Z4iQHpopu310EIOzIdaiIzY73+D189d Y81sPzELhOE4NN4mP0c4xa71t08CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRxmgun JkFnWwoN/L3eEciYJtX5jDAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTM4NC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qq4wDQYJKoZIhvcNAQELBQADggEBAEZ58lKPn9jSas+4G7u9Au67o9VAZ1gyltqf OojGaaHgBKx0JSiz+fTB0PgVTHz9KZLAyib59VkraFcAQATCttdxiWNKdpSoOAj5 FjehkKR6KOoXIaoeAUQtezWrem49HXdiQc6zMrcLPL81aodapaz0mN0jrqYxyW1o sK5FCYCxNVNuyxhFY77Pum9qbQBiB2GCkcQxGL7szsC0sB+J55R/2pPCAhsigFaR eVbmwBpThoaKAQXZf96y9/QfCrp6Fn3KVMoY4uQYrlB2W2XbNpKQ/ican9lnsrrm rkDRE2r06KRQQi1Hd5WBqWX/cRzwIH3jZiesmmTCHEurW1yJM5E= -----END CERTIFICATE-----Generated at Sat Mar 28 13:18:04 2026 by rpki-client