$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145411.roa File: AS145411.roa (raw, json) Hash identifier: d9hMvfgcKREqZHQHNUmpjV8lSVJVVzd51fjk2NnUM3I= Subject key identifier: E6:FF:50:A1:8E:2E:9C:D1:4F:E1:C6:77:42:EA:63:09:5F:6F:1E:A4 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 09CCB7912B18E85771A273EF532F497146ADF901 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145411.roa Signing time: Wed 04 Mar 2026 06:21:45 +0000 ROA not before: Wed 04 Mar 2026 06:16:45 +0000 ROA not after: Wed 03 Mar 2027 06:21:45 +0000 asID: 145411 IP address blocks: 240a:aac9::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:cc:b7:91:2b:18:e8:57:71:a2:73:ef:53:2f:49:71:46:ad:f9:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:16:45 2026 GMT Not After : Mar 3 06:21:45 2027 GMT Subject: CN=E6FF50A18E2E9CD14FE1C67742EA63095F6F1EA4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:ea:97:3f:1b:b1:9a:eb:1a:ab:22:bb:67:15: c1:11:18:3a:f5:a4:eb:ba:09:bb:81:d3:60:55:28: bb:3c:7c:0c:99:3d:34:4e:4d:f7:e7:a7:01:80:b8: f9:50:f8:a9:91:59:b7:67:27:61:19:c4:04:5d:fc: 97:98:1f:48:55:c0:8d:90:62:36:13:16:12:b4:68: 64:bf:c4:ea:70:2b:ac:6e:04:6a:22:65:e8:57:38: 95:1a:14:93:c0:e6:a0:68:52:51:10:03:99:6d:11: 04:63:d0:6d:54:79:74:49:a9:e7:57:16:02:e5:a4: 40:ab:0d:df:88:4d:a0:2a:5f:f1:44:95:45:a8:ca: cd:14:35:c7:b8:c5:96:64:7e:c3:cc:54:03:e4:12: 72:c3:05:eb:7b:06:67:1e:8a:7c:48:3c:96:f7:81: 8a:79:0c:69:7a:14:24:c5:42:cb:f8:af:52:8d:0d: ce:09:18:0f:7f:14:ed:21:f8:6f:ad:35:03:1b:02: 96:c8:04:75:68:da:67:a2:60:a0:3e:70:ec:63:5b: e6:b2:94:80:c2:ce:5f:42:de:a8:e5:32:ef:53:17: 53:ea:81:4e:ea:3a:ff:05:ab:c8:ed:fe:6f:43:2b: a7:9d:39:6d:35:77:48:8f:fd:df:b4:f6:ab:57:fa: 5f:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:FF:50:A1:8E:2E:9C:D1:4F:E1:C6:77:42:EA:63:09:5F:6F:1E:A4 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145411.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:aac9::/32 Signature Algorithm: sha256WithRSAEncryption b6:2d:fb:ff:30:12:c4:ad:52:07:a2:22:3a:57:28:c8:8d:28: ec:39:64:0c:b2:97:82:1c:aa:fa:96:42:9a:1b:47:e0:37:0d: c3:b9:b4:14:2c:65:3c:20:d2:15:53:38:69:1b:91:0b:9c:91: 26:d0:05:c5:f2:7e:3f:32:bb:ff:73:39:3e:fa:50:98:22:29: 6f:bb:10:7a:b2:44:ba:75:2b:52:e5:75:9b:1d:b5:89:18:d5: c0:4c:6d:63:ed:84:aa:0b:22:c7:1f:dd:94:b5:58:66:ef:8a: d7:73:e1:35:04:07:1d:fb:be:c2:8f:d9:a5:92:61:a3:e3:16: 9a:51:46:7e:fc:8e:a3:e7:37:63:17:c7:89:7e:7a:30:20:5d: a9:b6:f3:4e:73:2e:fe:fc:98:04:95:93:2c:35:77:0e:98:a6: 15:dd:36:2e:bc:87:02:a5:ba:3d:79:7b:1a:44:ef:c5:62:7b: a2:1d:27:0a:ec:46:33:da:3d:54:ad:fd:24:59:f1:fa:e2:46: e0:f8:48:fd:27:86:bc:8e:48:45:98:d6:4c:90:53:82:c0:cb: 99:ec:94:d5:5a:e0:cb:79:5e:13:64:dd:fa:df:4b:13:6e:a6: 66:f1:69:58:ad:b3:cf:d6:b0:cc:99:9c:b4:2b:f1:fb:27:5a: 11:13:2e:03 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUCcy3kSsY6FdxonPvUy9JcUat+QEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTY0NVoX DTI3MDMwMzA2MjE0NVowMzExMC8GA1UEAxMoRTZGRjUwQTE4RTJFOUNEMTRGRTFD Njc3NDJFQTYzMDk1RjZGMUVBNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKnqlz8bsZrrGqsiu2cVwREYOvWk67oJu4HTYFUouzx8DJk9NE5N9+enAYC4 +VD4qZFZt2cnYRnEBF38l5gfSFXAjZBiNhMWErRoZL/E6nArrG4EaiJl6Fc4lRoU k8DmoGhSURADmW0RBGPQbVR5dEmp51cWAuWkQKsN34hNoCpf8USVRajKzRQ1x7jF lmR+w8xUA+QScsMF63sGZx6KfEg8lveBinkMaXoUJMVCy/ivUo0NzgkYD38U7SH4 b601AxsClsgEdWjaZ6JgoD5w7GNb5rKUgMLOX0LeqOUy71MXU+qBTuo6/wWryO3+ b0Mrp505bTV3SI/937T2q1f6XycCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBTm/1Ch ji6c0U/hxndC6mMJX28epDAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTQxMS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qskwDQYJKoZIhvcNAQELBQADggEBALYt+/8wEsStUgeiIjpXKMiNKOw5ZAyyl4Ic qvqWQpobR+A3DcO5tBQsZTwg0hVTOGkbkQuckSbQBcXyfj8yu/9zOT76UJgiKW+7 EHqyRLp1K1LldZsdtYkY1cBMbWPthKoLIscf3ZS1WGbvitdz4TUEBx37vsKP2aWS YaPjFppRRn78jqPnN2MXx4l+ejAgXam2805zLv78mASVkyw1dw6YphXdNi68hwKl uj15expE78Vie6IdJwrsRjPaPVSt/SRZ8friRuD4SP0nhryOSEWY1kyQU4LAy5ns lNVa4Mt5XhNk3frfSxNupmbxaVits8/WsMyZnLQr8fsnWhETLgM= -----END CERTIFICATE-----Generated at Sat Mar 28 11:44:31 2026 by rpki-client