$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145397.roa File: AS145397.roa (raw, json) Hash identifier: m/72qpIWvtclw6M/TMfGXugGbLt6xIZ55jd6+bi63oQ= Subject key identifier: B5:BD:BF:F4:91:E5:5C:3D:FD:68:4E:2D:47:99:57:1A:65:C6:7C:82 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 4A79263534A64F1A029A6590BEF2633329BF3B68 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145397.roa Signing time: Wed 04 Mar 2026 06:22:16 +0000 ROA not before: Wed 04 Mar 2026 06:17:16 +0000 ROA not after: Wed 03 Mar 2027 06:22:16 +0000 asID: 145397 IP address blocks: 240a:aabb::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:79:26:35:34:a6:4f:1a:02:9a:65:90:be:f2:63:33:29:bf:3b:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:17:16 2026 GMT Not After : Mar 3 06:22:16 2027 GMT Subject: CN=B5BDBFF491E55C3DFD684E2D4799571A65C67C82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:03:c2:e0:f9:ed:3b:82:7e:d0:ab:b0:42:99: 68:58:0e:a5:db:5a:59:e6:88:bf:36:a6:c7:4b:94: 15:82:85:95:a8:63:e5:22:76:7d:c9:8b:fe:37:59: fb:71:85:99:8d:e8:ee:48:8f:bb:7e:75:8f:a6:30: b3:77:53:42:3a:c4:27:7a:c9:84:26:fa:ed:7a:f7: ba:39:d5:a1:97:07:0d:a1:eb:7c:83:94:46:bc:eb: 9c:af:c7:62:14:5f:3f:70:2e:5a:97:fd:eb:2e:eb: 28:48:e2:cb:82:46:41:7b:4c:cd:9f:f5:b9:79:21: 26:d3:b8:aa:a1:a2:c5:da:4e:99:46:a4:3a:58:84: 4b:d2:96:b1:4f:4d:45:9c:0f:4d:d9:23:be:41:22: 55:f9:87:1f:73:90:2f:47:a0:82:44:bd:f7:b6:33: d8:9d:f6:49:39:de:70:ac:a6:8a:f9:9b:f1:3f:3e: f3:e5:ae:23:87:39:d6:64:14:b8:b1:21:0b:15:a8: 9b:7b:64:07:25:fc:30:0a:d3:95:24:2c:f6:1a:a0: 71:64:eb:52:f6:41:34:00:20:ab:a6:ea:fb:b5:24: 87:75:11:8c:06:94:37:ac:98:5b:83:52:d8:a7:1e: d4:5d:ec:3c:a3:e0:3a:d1:85:ff:ee:09:fe:ac:75: 08:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:BD:BF:F4:91:E5:5C:3D:FD:68:4E:2D:47:99:57:1A:65:C6:7C:82 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145397.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:aabb::/32 Signature Algorithm: sha256WithRSAEncryption 10:ea:e7:32:f9:54:34:d5:93:c7:35:e3:ce:dc:a5:87:22:3d: cd:e6:e5:97:67:0d:3a:1f:88:e4:57:c3:75:5a:82:bc:09:f8: ab:94:d6:75:93:35:9b:d8:eb:53:bc:2d:14:17:93:fb:14:70: 97:41:da:22:74:92:53:b0:04:53:83:b7:6c:c2:6c:ad:20:31: 6c:fe:19:ed:a1:bc:5e:67:78:13:76:86:cf:b3:3c:28:03:9f: 30:d8:3c:45:ba:87:e2:bd:e9:b0:5b:35:fc:1b:05:ff:e8:a8: 4c:b4:f3:9d:d9:98:92:50:75:e9:12:d9:c4:f0:85:b2:15:89: 7e:2b:90:68:99:8c:5f:5d:2b:a9:e4:4d:6f:cf:85:2e:64:1f: 1b:82:71:49:0d:c8:f5:86:e2:5b:c1:80:d5:01:3e:fa:55:dc: 6c:84:fa:ec:f6:79:be:88:93:83:01:e6:67:f4:da:55:d2:92: 64:39:19:f6:d4:a0:26:69:f4:97:7b:ed:51:71:e2:d2:5f:6a: 04:c8:34:0f:54:5f:7d:98:ec:de:5c:cf:38:4c:dd:84:38:dc: 58:a3:9b:6e:9f:62:63:d4:cb:cb:e2:5b:6e:a1:4a:94:c9:ba: 42:10:5d:16:1b:6c:d9:35:c4:36:d9:0e:2d:8f:0a:f8:df:01: e0:f3:4a:aa -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUSnkmNTSmTxoCmmWQvvJjMym/O2gwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTcxNloX DTI3MDMwMzA2MjIxNlowMzExMC8GA1UEAxMoQjVCREJGRjQ5MUU1NUMzREZENjg0 RTJENDc5OTU3MUE2NUM2N0M4MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMkDwuD57TuCftCrsEKZaFgOpdtaWeaIvzamx0uUFYKFlahj5SJ2fcmL/jdZ +3GFmY3o7kiPu351j6Yws3dTQjrEJ3rJhCb67Xr3ujnVoZcHDaHrfIOURrzrnK/H YhRfP3AuWpf96y7rKEjiy4JGQXtMzZ/1uXkhJtO4qqGixdpOmUakOliES9KWsU9N RZwPTdkjvkEiVfmHH3OQL0eggkS997Yz2J32STnecKymivmb8T8+8+WuI4c51mQU uLEhCxWom3tkByX8MArTlSQs9hqgcWTrUvZBNAAgq6bq+7Ukh3URjAaUN6yYW4NS 2Kce1F3sPKPgOtGF/+4J/qx1CLsCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBS1vb/0 keVcPf1oTi1HmVcaZcZ8gjAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTM5Ny5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qrswDQYJKoZIhvcNAQELBQADggEBABDq5zL5VDTVk8c1487cpYciPc3m5ZdnDTof iORXw3VagrwJ+KuU1nWTNZvY61O8LRQXk/sUcJdB2iJ0klOwBFODt2zCbK0gMWz+ Ge2hvF5neBN2hs+zPCgDnzDYPEW6h+K96bBbNfwbBf/oqEy0853ZmJJQdekS2cTw hbIViX4rkGiZjF9dK6nkTW/PhS5kHxuCcUkNyPWG4lvBgNUBPvpV3GyE+uz2eb6I k4MB5mf02lXSkmQ5GfbUoCZp9Jd77VFx4tJfagTINA9UX32Y7N5czzhM3YQ43Fij m26fYmPUy8viW26hSpTJukIQXRYbbNk1xDbZDi2PCvjfAeDzSqo= -----END CERTIFICATE-----Generated at Sat Mar 28 15:53:35 2026 by rpki-client