$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145415.roa File: AS145415.roa (raw, json) Hash identifier: 1ZId0Wx+Hyilw7VQJ9RFYiltWOEqQhPVx4yfdzZmoGM= Subject key identifier: 87:54:B1:8C:14:CF:FF:F1:EF:13:24:19:A6:07:3B:AF:EA:DC:B0:4F Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 1DAEE0B1DAE1E2F540E66B8DD95B867181A39984 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145415.roa Signing time: Wed 04 Mar 2026 06:20:53 +0000 ROA not before: Wed 04 Mar 2026 06:15:53 +0000 ROA not after: Wed 03 Mar 2027 06:20:53 +0000 asID: 145415 IP address blocks: 240a:aacd::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:ae:e0:b1:da:e1:e2:f5:40:e6:6b:8d:d9:5b:86:71:81:a3:99:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:15:53 2026 GMT Not After : Mar 3 06:20:53 2027 GMT Subject: CN=8754B18C14CFFFF1EF132419A6073BAFEADCB04F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:1d:84:2c:b4:91:fc:50:69:06:81:34:4b:26: 4f:cf:b1:84:d8:98:0f:15:50:9e:a2:76:fb:33:bb: 86:f3:d5:ee:78:6d:33:69:c9:0a:13:36:c4:78:6b: 45:09:03:ac:9f:de:56:6d:e1:43:d8:60:24:75:01: ca:96:11:fe:85:dd:33:f7:ef:f8:57:01:9c:51:4a: 28:f4:b3:48:b7:b4:32:13:a0:1d:aa:d5:62:09:f8: cb:99:cf:d3:b5:b8:61:4d:19:cd:16:ce:d5:b9:cd: 54:82:a2:2f:77:1c:98:8f:f6:16:90:9e:a3:e0:c3: c4:c1:02:8d:75:5a:3b:01:d1:19:52:f2:cd:16:f5: 9b:2b:7b:62:c5:62:31:c8:22:0c:87:84:3d:31:01: 09:4b:3d:67:03:89:da:a4:17:54:63:55:29:e8:1b: 36:52:e5:c6:36:1a:00:38:21:ce:cd:d4:6a:c4:b8: 8a:f2:c2:3e:c1:65:f0:7d:5a:a8:67:b3:38:e2:87: 1a:61:11:49:58:70:11:e7:04:8d:0d:1a:75:76:c2: 9d:f4:b7:ff:38:b9:1e:a4:2d:30:99:bd:28:b5:00: 4c:87:94:83:70:d5:dc:b3:20:c4:47:a7:54:98:01: e0:c4:b5:0c:ec:c4:31:29:47:83:7c:dd:8a:f8:cc: 58:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:54:B1:8C:14:CF:FF:F1:EF:13:24:19:A6:07:3B:AF:EA:DC:B0:4F X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145415.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:aacd::/32 Signature Algorithm: sha256WithRSAEncryption 5b:d2:b4:d2:02:f2:5f:3f:4e:7a:c5:95:57:41:24:e3:09:71: c8:74:dc:50:7f:5a:d7:b5:e0:a4:28:52:14:42:cb:15:0e:f6: 00:40:a7:a3:9a:61:57:da:1e:67:df:c1:04:9a:d4:6a:3b:8d: 18:77:1c:f3:75:84:38:4d:cb:8e:ea:78:e1:a6:a8:ee:1c:72: db:c4:5d:fe:0d:ba:b9:36:ab:07:47:df:5c:d0:c1:f9:54:53: b9:a9:fa:7b:38:90:57:aa:d4:05:f6:5b:5a:3c:e0:b9:69:59: c1:20:4a:0d:12:6d:95:25:0f:b1:23:bd:65:9f:18:55:f5:67: c1:83:06:12:dd:c3:25:c2:29:7f:c7:e0:52:bb:44:26:20:73: 31:31:b3:61:51:c7:79:fe:be:f2:e4:6d:d0:a4:c1:dd:b5:79: dd:52:ed:0a:82:3c:2f:e3:1e:d7:54:68:d8:15:0e:f1:b0:bf: 65:b5:23:d5:03:dc:ee:ff:a9:76:ed:e1:00:35:44:87:3c:a6: c0:42:87:23:44:52:bc:3b:e7:c2:fd:84:4f:be:31:97:2a:7f: 2a:48:63:d5:1e:17:47:ee:15:39:57:da:06:f3:c8:eb:a7:fa: 0e:b6:bf:dd:97:d3:36:c2:3b:d9:ab:a6:73:da:9a:2d:b3:bd: d9:a5:39:8a -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUHa7gsdrh4vVA5muN2VuGcYGjmYQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTU1M1oX DTI3MDMwMzA2MjA1M1owMzExMC8GA1UEAxMoODc1NEIxOEMxNENGRkZGMUVGMTMy NDE5QTYwNzNCQUZFQURDQjA0RjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAI8dhCy0kfxQaQaBNEsmT8+xhNiYDxVQnqJ2+zO7hvPV7nhtM2nJChM2xHhr RQkDrJ/eVm3hQ9hgJHUBypYR/oXdM/fv+FcBnFFKKPSzSLe0MhOgHarVYgn4y5nP 07W4YU0ZzRbO1bnNVIKiL3ccmI/2FpCeo+DDxMECjXVaOwHRGVLyzRb1myt7YsVi McgiDIeEPTEBCUs9ZwOJ2qQXVGNVKegbNlLlxjYaADghzs3UasS4ivLCPsFl8H1a qGezOOKHGmERSVhwEecEjQ0adXbCnfS3/zi5HqQtMJm9KLUATIeUg3DV3LMgxEen VJgB4MS1DOzEMSlHg3zdivjMWPkCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSHVLGM FM//8e8TJBmmBzuv6tywTzAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTQxNS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qs0wDQYJKoZIhvcNAQELBQADggEBAFvStNIC8l8/TnrFlVdBJOMJcch03FB/Wte1 4KQoUhRCyxUO9gBAp6OaYVfaHmffwQSa1Go7jRh3HPN1hDhNy47qeOGmqO4cctvE Xf4Nurk2qwdH31zQwflUU7mp+ns4kFeq1AX2W1o84LlpWcEgSg0SbZUlD7EjvWWf GFX1Z8GDBhLdwyXCKX/H4FK7RCYgczExs2FRx3n+vvLkbdCkwd21ed1S7QqCPC/j HtdUaNgVDvGwv2W1I9UD3O7/qXbt4QA1RIc8psBChyNEUrw758L9hE++MZcqfypI Y9UeF0fuFTlX2gbzyOun+g62v92X0zbCO9mrpnPami2zvdmlOYo= -----END CERTIFICATE-----Generated at Sat Mar 28 11:44:38 2026 by rpki-client