$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145416.roa File: AS145416.roa (raw, json) Hash identifier: PjrkhY8PzAz0YjHuK1AfOaNX8gg6GQmSZzjS03XJ7Ng= Subject key identifier: DF:1E:00:8F:1C:AF:37:01:D9:6D:FA:DC:14:F7:FE:FC:14:C4:59:1A Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 2696E6AF7C058F8811F0A91D4DB6301A7756076E Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145416.roa Signing time: Wed 04 Mar 2026 06:22:21 +0000 ROA not before: Wed 04 Mar 2026 06:17:21 +0000 ROA not after: Wed 03 Mar 2027 06:22:21 +0000 asID: 145416 IP address blocks: 240a:aace::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:96:e6:af:7c:05:8f:88:11:f0:a9:1d:4d:b6:30:1a:77:56:07:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:17:21 2026 GMT Not After : Mar 3 06:22:21 2027 GMT Subject: CN=DF1E008F1CAF3701D96DFADC14F7FEFC14C4591A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:ae:6b:68:33:28:82:73:c3:10:49:af:61:27: 2d:10:a4:1a:c3:b7:fd:8c:ae:02:f9:90:6c:03:0e: b5:83:cd:97:35:8a:ad:9e:33:66:bb:f7:54:10:40: 1a:1f:3b:6b:79:d7:26:d5:41:fb:b9:f4:71:26:b8: 07:51:40:46:b5:1f:18:2a:85:5a:d4:0e:c0:0e:b0: 32:af:5e:05:69:83:65:9c:a6:ee:24:c8:18:da:d6: a0:32:40:ca:3e:e6:8e:d0:74:06:cd:2a:fc:6e:e7: fe:35:8f:9c:dc:e1:eb:69:5f:2c:d5:f0:23:65:ef: 7c:17:40:1a:97:2b:fc:b6:72:46:ff:aa:4f:26:ff: db:96:f6:13:92:f5:fa:03:a6:2b:78:a6:b5:08:d5: 34:c9:e1:fd:d0:23:b6:f7:e8:56:d6:6c:41:eb:77: 36:40:2d:8f:8f:bc:d4:df:97:12:3f:fa:1c:92:dc: 2b:bd:b6:b0:de:48:38:25:d3:68:f1:7b:4c:91:4f: 9b:78:11:e7:3c:b7:ca:da:8f:c9:93:87:de:6d:d4: be:4f:c1:7f:22:1c:22:22:96:0a:4d:87:38:70:0a: 40:f5:bf:8d:78:ac:ea:50:16:3f:a4:a0:90:0d:c6: 1c:67:b4:75:d2:1e:7d:bb:3e:4f:2e:fb:65:bf:a8: 2b:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:1E:00:8F:1C:AF:37:01:D9:6D:FA:DC:14:F7:FE:FC:14:C4:59:1A X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145416.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:aace::/32 Signature Algorithm: sha256WithRSAEncryption 37:c8:98:52:a4:9b:44:a2:bc:5d:47:64:07:30:47:07:2e:1a: 96:97:ef:a1:3d:f7:dc:92:2b:e3:a0:eb:6e:86:e6:54:89:f2: 8e:6c:2b:b0:74:63:f6:47:76:4d:fb:c0:f9:e8:23:8f:ba:f5: 2c:45:5c:ac:c9:41:6b:b6:38:9f:49:3b:8c:06:16:d7:27:02: 17:64:70:33:b8:60:c7:8f:1a:92:ee:07:a0:85:b5:e1:23:96: c1:c8:96:8e:f9:54:00:32:23:81:14:ad:40:5b:c5:82:11:9c: c4:62:a5:0c:39:99:c0:00:76:3c:6e:60:be:4b:1b:d8:ac:2b: 0c:0f:98:66:c0:b6:27:cd:1d:23:44:0f:ad:e3:22:6d:21:3f: f3:55:5f:2a:d7:e6:02:e5:2d:ba:4c:67:d3:e0:9b:6a:c7:be: af:0f:82:46:75:bd:03:61:b5:af:b8:e1:86:25:3b:1e:21:e5: e8:b7:52:13:70:c7:a9:db:5e:89:a8:76:25:29:b3:0c:f1:95: 90:94:aa:85:be:f2:f4:3b:60:76:55:48:18:9f:65:90:e3:2a: 22:67:31:ed:3f:7d:d0:f2:47:12:e1:b5:d4:16:96:54:8d:35: ab:84:ad:37:7a:c0:1b:ad:2c:0c:ac:7d:38:02:0e:ca:1e:78: 75:e6:59:9e -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUJpbmr3wFj4gR8KkdTbYwGndWB24wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTcyMVoX DTI3MDMwMzA2MjIyMVowMzExMC8GA1UEAxMoREYxRTAwOEYxQ0FGMzcwMUQ5NkRG QURDMTRGN0ZFRkMxNEM0NTkxQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKCua2gzKIJzwxBJr2EnLRCkGsO3/YyuAvmQbAMOtYPNlzWKrZ4zZrv3VBBA Gh87a3nXJtVB+7n0cSa4B1FARrUfGCqFWtQOwA6wMq9eBWmDZZym7iTIGNrWoDJA yj7mjtB0Bs0q/G7n/jWPnNzh62lfLNXwI2XvfBdAGpcr/LZyRv+qTyb/25b2E5L1 +gOmK3imtQjVNMnh/dAjtvfoVtZsQet3NkAtj4+81N+XEj/6HJLcK722sN5IOCXT aPF7TJFPm3gR5zy3ytqPyZOH3m3Uvk/BfyIcIiKWCk2HOHAKQPW/jXis6lAWP6Sg kA3GHGe0ddIefbs+Ty77Zb+oK78CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBTfHgCP HK83Adlt+twU9/78FMRZGjAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTQxNi5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qs4wDQYJKoZIhvcNAQELBQADggEBADfImFKkm0SivF1HZAcwRwcuGpaX76E999yS K+Og626G5lSJ8o5sK7B0Y/ZHdk37wPnoI4+69SxFXKzJQWu2OJ9JO4wGFtcnAhdk cDO4YMePGpLuB6CFteEjlsHIlo75VAAyI4EUrUBbxYIRnMRipQw5mcAAdjxuYL5L G9isKwwPmGbAtifNHSNED63jIm0hP/NVXyrX5gLlLbpMZ9Pgm2rHvq8PgkZ1vQNh ta+44YYlOx4h5ei3UhNwx6nbXomodiUpswzxlZCUqoW+8vQ7YHZVSBifZZDjKiJn Me0/fdDyRxLhtdQWllSNNauErTd6wButLAysfTgCDsoeeHXmWZ4= -----END CERTIFICATE-----Generated at Sat Mar 28 11:49:51 2026 by rpki-client