$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145435.roa File: AS145435.roa (raw, json) Hash identifier: 2bK+jVQWoXbV8p1GOCwwXZXYVvM9oIQUsRoMKgTQBQA= Subject key identifier: A7:18:BD:9A:E2:C2:30:B6:F4:AC:95:BA:5D:23:9F:B5:22:F7:17:01 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 16633DE3644E513A2B2315063864731814C587D8 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145435.roa Signing time: Wed 04 Mar 2026 06:21:31 +0000 ROA not before: Wed 04 Mar 2026 06:16:31 +0000 ROA not after: Wed 03 Mar 2027 06:21:31 +0000 asID: 145435 IP address blocks: 240a:aae1::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:63:3d:e3:64:4e:51:3a:2b:23:15:06:38:64:73:18:14:c5:87:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:16:31 2026 GMT Not After : Mar 3 06:21:31 2027 GMT Subject: CN=A718BD9AE2C230B6F4AC95BA5D239FB522F71701 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:ac:55:92:b0:de:b6:19:96:8a:ee:7f:61:ed: 24:9e:f8:43:10:52:85:14:a6:99:43:51:a4:b3:b0: 46:3f:4a:16:9d:db:4a:dd:95:a8:66:13:9b:fc:b2: 8a:b4:67:c3:2b:e3:5a:b2:99:b8:62:45:eb:c5:7a: c4:43:e2:04:8c:d8:2a:22:b0:8b:c8:18:a7:69:5d: c9:6d:87:f0:f3:a4:59:12:4a:f4:b7:d7:98:27:ab: d0:ff:0c:f7:20:dc:3f:37:76:82:59:eb:71:01:c3: 3c:58:bd:90:e1:9f:33:c0:84:af:a6:34:c4:8d:9e: a1:07:af:55:25:f8:09:c1:4d:48:cb:f1:56:ab:2d: 74:27:da:fd:f1:10:93:ef:05:96:44:2d:ef:c8:0c: 81:a2:55:f6:ed:a7:1f:b5:f0:4f:7f:a5:98:73:84: 17:df:5f:8c:ab:81:e6:a3:ba:8d:cd:ba:c4:cf:89: 12:1b:2f:95:4f:6a:8e:b1:d1:3d:1d:31:ee:76:8a: 5f:f7:78:5f:9e:f1:4e:18:cc:8a:86:d7:0b:e6:06: fc:a1:4d:70:14:21:94:74:20:d6:84:b5:91:d5:5f: d9:ee:a4:0d:5f:fc:3a:7a:7b:84:52:96:0d:95:07: 06:f5:b2:62:1d:40:88:bb:bf:b9:a2:bb:14:69:8d: 8c:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:18:BD:9A:E2:C2:30:B6:F4:AC:95:BA:5D:23:9F:B5:22:F7:17:01 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145435.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:aae1::/32 Signature Algorithm: sha256WithRSAEncryption 10:92:c0:58:36:de:3b:24:d6:cb:fb:56:d8:9c:1f:18:81:72: 7e:6d:72:79:c3:72:e0:b7:4d:6d:08:db:c2:d5:a7:8f:a3:2c: 48:39:a5:a4:66:e3:3c:12:c5:e8:b8:86:d7:65:5b:d8:62:45: 93:39:a1:bf:9b:5d:b5:4d:9d:2a:15:60:0f:6d:b9:59:6c:e2: 27:58:a9:38:11:b1:96:76:7a:b6:99:30:56:76:d7:ab:41:50: a0:0c:a4:b1:55:39:f4:1c:87:0d:3e:4f:1a:9c:de:c2:e7:4d: 7b:fd:a3:6e:93:94:c1:97:6b:d2:9b:15:21:e4:88:2c:fd:d9: 97:f0:0b:ce:20:6c:a4:e2:3c:e6:be:82:f1:f9:c0:34:7e:e1: 9b:b1:a6:0a:ba:90:91:3d:73:93:07:66:57:e8:c9:2e:11:88: 3e:4b:e6:e4:45:4a:97:51:23:2f:11:34:1d:35:92:2e:5d:03: 90:eb:62:74:6e:16:f6:ce:9d:56:9c:63:1a:da:b0:f5:7e:71: e1:db:c6:d4:2d:73:6e:85:26:07:11:ba:8c:c3:36:b9:97:35: fa:e7:88:d1:db:44:77:16:90:61:03:7c:dd:83:a9:d0:60:1a: b2:80:53:e3:c6:be:98:ca:dc:2b:22:81:fb:1f:23:0a:2d:8b: 86:86:6c:97 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUFmM942ROUTorIxUGOGRzGBTFh9gwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTYzMVoX DTI3MDMwMzA2MjEzMVowMzExMC8GA1UEAxMoQTcxOEJEOUFFMkMyMzBCNkY0QUM5 NUJBNUQyMzlGQjUyMkY3MTcwMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKGsVZKw3rYZloruf2HtJJ74QxBShRSmmUNRpLOwRj9KFp3bSt2VqGYTm/yy irRnwyvjWrKZuGJF68V6xEPiBIzYKiKwi8gYp2ldyW2H8POkWRJK9LfXmCer0P8M 9yDcPzd2glnrcQHDPFi9kOGfM8CEr6Y0xI2eoQevVSX4CcFNSMvxVqstdCfa/fEQ k+8FlkQt78gMgaJV9u2nH7XwT3+lmHOEF99fjKuB5qO6jc26xM+JEhsvlU9qjrHR PR0x7naKX/d4X57xThjMiobXC+YG/KFNcBQhlHQg1oS1kdVf2e6kDV/8Onp7hFKW DZUHBvWyYh1AiLu/uaK7FGmNjDsCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSnGL2a 4sIwtvSslbpdI5+1IvcXATAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTQzNS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK quEwDQYJKoZIhvcNAQELBQADggEBABCSwFg23jsk1sv7VticHxiBcn5tcnnDcuC3 TW0I28LVp4+jLEg5paRm4zwSxei4htdlW9hiRZM5ob+bXbVNnSoVYA9tuVls4idY qTgRsZZ2eraZMFZ216tBUKAMpLFVOfQchw0+Txqc3sLnTXv9o26TlMGXa9KbFSHk iCz92ZfwC84gbKTiPOa+gvH5wDR+4Zuxpgq6kJE9c5MHZlfoyS4RiD5L5uRFSpdR Iy8RNB01ki5dA5DrYnRuFvbOnVacYxrasPV+ceHbxtQtc26FJgcRuozDNrmXNfrn iNHbRHcWkGEDfN2DqdBgGrKAU+PGvpjK3CsigfsfIwoti4aGbJc= -----END CERTIFICATE-----Generated at Sat Mar 28 11:46:06 2026 by rpki-client