$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145439.roa File: AS145439.roa (raw, json) Hash identifier: AqDFWeVSbQrbTLYxWHdOSN2XMmE5vOBxrUbZeNnGvRs= Subject key identifier: 1E:E5:E8:86:FB:13:66:3D:67:DB:43:8A:BB:6A:10:F3:36:80:24:A3 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 2CD5F32E040138E8B62F47AAC67200EFF5C49453 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145439.roa Signing time: Wed 04 Mar 2026 06:21:10 +0000 ROA not before: Wed 04 Mar 2026 06:16:10 +0000 ROA not after: Wed 03 Mar 2027 06:21:10 +0000 asID: 145439 IP address blocks: 240a:aae5::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:d5:f3:2e:04:01:38:e8:b6:2f:47:aa:c6:72:00:ef:f5:c4:94:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:16:10 2026 GMT Not After : Mar 3 06:21:10 2027 GMT Subject: CN=1EE5E886FB13663D67DB438ABB6A10F3368024A3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:e4:c5:86:21:87:de:e0:65:0d:72:cd:37:da: 9f:40:31:7c:8f:6c:d5:f6:f0:41:62:9d:f8:b1:e3: 7d:e5:6a:c2:56:ee:02:89:45:fd:21:5f:7b:2e:c6: b7:32:8c:51:cf:88:29:12:0d:0d:93:24:cf:4e:4e: 5a:d0:57:27:3a:a9:dd:49:60:46:55:2c:bd:3f:4a: 52:cd:15:ec:e1:62:61:ad:00:5a:f4:89:e3:c1:12: 1f:80:5f:87:3a:ab:93:f1:94:8a:eb:2e:9c:36:eb: d5:5a:f6:26:09:cc:b2:4f:f0:fa:fd:f8:2a:dc:b6: 76:3c:e3:16:81:a7:6d:27:e3:14:f7:1f:cb:a6:63: 3f:7d:7a:34:0d:3c:cb:0f:d1:fe:9a:73:29:cc:72: 53:5d:11:ba:f1:b8:da:bd:5d:88:a9:75:f5:82:18: 17:05:e1:94:7e:bc:c1:8f:50:5a:de:69:21:de:8a: be:a2:da:51:a2:df:8a:c4:7c:51:6a:d4:c1:db:18: 2d:f5:98:3c:99:b1:0b:bb:94:28:bf:04:b6:e9:3c: ce:a3:b7:bd:95:81:46:a9:40:7d:d9:78:31:6e:c8: 35:78:ad:cd:d5:e4:32:5d:31:c6:77:49:d6:92:2e: d2:ee:b6:4c:e3:ce:75:2a:e7:0c:82:9f:8d:6c:81: 46:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:E5:E8:86:FB:13:66:3D:67:DB:43:8A:BB:6A:10:F3:36:80:24:A3 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145439.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:aae5::/32 Signature Algorithm: sha256WithRSAEncryption 0c:41:e9:63:77:5b:99:a1:b9:2f:25:2e:48:98:c5:bd:2b:c8: 40:99:d1:9f:a2:8b:a7:84:b2:5c:84:88:11:f9:f9:13:28:91: a2:3f:22:39:55:34:02:32:c1:02:64:57:06:f1:86:76:a7:af: 33:81:28:f1:b5:7b:a5:56:ca:f3:4a:9d:6f:9d:3a:49:96:8f: fa:38:8f:38:02:7f:14:f0:8c:9f:10:bc:b9:5d:df:28:4e:d0: c0:dd:40:a1:2b:4b:71:99:cc:6f:2d:bc:2b:54:5a:bc:5e:e9: bf:8c:09:9b:71:6f:4c:7b:b5:1a:f2:32:be:85:24:3a:06:5d: 57:f1:85:b1:59:97:00:7f:67:39:54:b9:54:b6:55:de:af:ed: c2:79:fd:a0:b6:30:c6:71:c6:dd:2a:30:92:f8:74:30:5d:71: c8:9b:0c:7c:64:e2:d1:15:40:81:fc:02:8c:d8:fe:43:c1:f2: 7d:b9:31:c9:1c:1b:97:ad:38:e8:15:4b:09:70:0b:33:15:75: 98:63:81:c3:6b:9b:2e:fc:d8:02:9f:23:27:1e:6e:29:26:38: 63:80:57:b3:35:17:6d:e2:fc:3b:35:c9:04:38:ba:9f:1c:05: d3:97:f1:74:41:76:91:06:a2:d0:88:c1:31:96:27:d7:3d:83: fa:a6:e6:e1 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIULNXzLgQBOOi2L0eqxnIA7/XElFMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTYxMFoX DTI3MDMwMzA2MjExMFowMzExMC8GA1UEAxMoMUVFNUU4ODZGQjEzNjYzRDY3REI0 MzhBQkI2QTEwRjMzNjgwMjRBMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOfkxYYhh97gZQ1yzTfan0AxfI9s1fbwQWKd+LHjfeVqwlbuAolF/SFfey7G tzKMUc+IKRINDZMkz05OWtBXJzqp3UlgRlUsvT9KUs0V7OFiYa0AWvSJ48ESH4Bf hzqrk/GUiusunDbr1Vr2JgnMsk/w+v34Kty2djzjFoGnbSfjFPcfy6ZjP316NA08 yw/R/ppzKcxyU10RuvG42r1diKl19YIYFwXhlH68wY9QWt5pId6KvqLaUaLfisR8 UWrUwdsYLfWYPJmxC7uUKL8Etuk8zqO3vZWBRqlAfdl4MW7INXitzdXkMl0xxndJ 1pIu0u62TOPOdSrnDIKfjWyBRrcCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQe5eiG +xNmPWfbQ4q7ahDzNoAkozAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTQzOS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK quUwDQYJKoZIhvcNAQELBQADggEBAAxB6WN3W5mhuS8lLkiYxb0ryECZ0Z+ii6eE slyEiBH5+RMokaI/IjlVNAIywQJkVwbxhnanrzOBKPG1e6VWyvNKnW+dOkmWj/o4 jzgCfxTwjJ8QvLld3yhO0MDdQKErS3GZzG8tvCtUWrxe6b+MCZtxb0x7tRryMr6F JDoGXVfxhbFZlwB/ZzlUuVS2Vd6v7cJ5/aC2MMZxxt0qMJL4dDBdccibDHxk4tEV QIH8AozY/kPB8n25MckcG5etOOgVSwlwCzMVdZhjgcNrmy782AKfIycebikmOGOA V7M1F23i/Ds1yQQ4up8cBdOX8XRBdpEGotCIwTGWJ9c9g/qm5uE= -----END CERTIFICATE-----Generated at Sat Mar 28 11:45:28 2026 by rpki-client