$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145440.roa File: AS145440.roa (raw, json) Hash identifier: kksbD5IJWJnCPerIBkcX0XZ67Cxa3nNHqBoxyjYtS54= Subject key identifier: BD:06:DA:6A:B8:43:DD:61:7D:8D:92:8A:5F:CB:0F:80:61:32:63:4E Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 0922D367521D708FFEC40F3297A0DCC35AFF2254 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145440.roa Signing time: Wed 04 Mar 2026 06:22:32 +0000 ROA not before: Wed 04 Mar 2026 06:17:32 +0000 ROA not after: Wed 03 Mar 2027 06:22:32 +0000 asID: 145440 IP address blocks: 240a:aae6::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:22:d3:67:52:1d:70:8f:fe:c4:0f:32:97:a0:dc:c3:5a:ff:22:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:17:32 2026 GMT Not After : Mar 3 06:22:32 2027 GMT Subject: CN=BD06DA6AB843DD617D8D928A5FCB0F806132634E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:95:91:ed:b6:6d:87:35:18:f4:d0:47:53:f5: d4:6c:ed:3b:17:d0:2d:c5:40:94:e1:67:c6:9e:47: 0c:0b:30:21:d3:0c:54:fb:d3:f1:11:c0:a1:78:3a: 58:ce:04:79:82:12:5a:7b:02:ed:60:08:b2:f1:ee: fc:3b:d3:0b:09:76:96:30:05:3b:c0:ab:81:fb:9a: fe:8e:ed:dc:64:6f:9e:d6:70:64:ed:d4:d0:4a:86: b1:db:e0:60:b6:49:3c:92:b7:ef:2e:f2:57:66:26: 33:8f:a2:cd:d6:89:cd:3c:28:d7:f3:11:87:86:7d: 0a:87:f9:e8:e4:e7:9f:14:e7:d3:c4:b9:ae:24:2c: 74:c0:35:3d:e4:1c:36:39:34:cb:fd:83:12:55:3d: 5f:d0:d7:77:bc:ef:20:64:c7:3a:68:76:78:db:fb: de:84:cf:2e:c2:1d:e2:1d:06:3f:c7:a1:84:e2:3c: 14:9f:be:00:12:d9:03:4f:ee:7f:0c:f7:cd:e0:64: c7:61:3e:06:79:96:ed:e8:71:16:0e:66:14:6c:1f: a7:9f:66:7b:55:56:61:3f:9a:db:8a:c8:1a:6b:31: 28:2b:ae:c4:53:b9:51:32:2d:40:4b:8a:7b:c6:d0: fc:ca:c8:8d:df:9c:af:9d:5b:d3:d9:d3:a3:f4:06: be:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:06:DA:6A:B8:43:DD:61:7D:8D:92:8A:5F:CB:0F:80:61:32:63:4E X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145440.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:aae6::/32 Signature Algorithm: sha256WithRSAEncryption 2e:a1:eb:2b:12:8e:ff:75:cb:08:e9:44:3d:3c:d1:29:f1:55: 31:8f:53:cf:0c:ba:3d:ac:e1:07:7d:6c:55:3b:be:73:4c:a9: 8a:9b:fa:60:26:85:66:47:00:63:6b:1b:1c:f5:90:17:f1:85: 44:2d:98:42:c6:4d:68:05:e9:d3:d8:18:eb:66:89:07:64:0f: 41:54:61:56:f8:e4:7d:82:bf:13:e4:c0:17:17:c2:10:3b:f7: 43:f9:90:b2:25:4d:65:6a:b5:19:9b:b8:da:30:96:48:ff:06: fa:ba:21:b5:77:52:21:b0:68:1a:62:3a:c3:17:5b:11:07:41: 62:10:5a:c6:f6:03:09:cb:a0:04:88:94:bb:61:90:14:1e:c7: d6:0c:0f:09:10:64:6d:08:75:92:bb:0c:70:af:40:2f:e8:5c: 2d:48:e4:f5:7f:85:a5:c8:3d:57:57:fc:b1:b9:3f:c2:56:b3: ab:67:a2:64:0f:62:e9:c9:26:6f:8e:41:00:01:c3:15:4a:02: 49:92:94:51:95:af:4b:f9:96:60:a0:64:d5:c9:46:8f:a6:ca: 95:e6:6d:e9:c2:84:29:81:09:c6:25:7c:ac:cd:97:05:fe:98: c5:eb:de:02:80:1f:53:23:c1:2f:6e:68:67:71:28:5e:ad:ad: 41:db:b1:4a -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUCSLTZ1IdcI/+xA8yl6Dcw1r/IlQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTczMloX DTI3MDMwMzA2MjIzMlowMzExMC8GA1UEAxMoQkQwNkRBNkFCODQzREQ2MTdEOEQ5 MjhBNUZDQjBGODA2MTMyNjM0RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAI2Vke22bYc1GPTQR1P11GztOxfQLcVAlOFnxp5HDAswIdMMVPvT8RHAoXg6 WM4EeYISWnsC7WAIsvHu/DvTCwl2ljAFO8Crgfua/o7t3GRvntZwZO3U0EqGsdvg YLZJPJK37y7yV2YmM4+izdaJzTwo1/MRh4Z9Cof56OTnnxTn08S5riQsdMA1PeQc Njk0y/2DElU9X9DXd7zvIGTHOmh2eNv73oTPLsId4h0GP8ehhOI8FJ++ABLZA0/u fwz3zeBkx2E+BnmW7ehxFg5mFGwfp59me1VWYT+a24rIGmsxKCuuxFO5UTItQEuK e8bQ/MrIjd+cr51b09nTo/QGvnsCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBS9Btpq uEPdYX2Nkopfyw+AYTJjTjAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTQ0MC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK quYwDQYJKoZIhvcNAQELBQADggEBAC6h6ysSjv91ywjpRD080SnxVTGPU88Muj2s 4Qd9bFU7vnNMqYqb+mAmhWZHAGNrGxz1kBfxhUQtmELGTWgF6dPYGOtmiQdkD0FU YVb45H2CvxPkwBcXwhA790P5kLIlTWVqtRmbuNowlkj/Bvq6IbV3UiGwaBpiOsMX WxEHQWIQWsb2AwnLoASIlLthkBQex9YMDwkQZG0IdZK7DHCvQC/oXC1I5PV/haXI PVdX/LG5P8JWs6tnomQPYunJJm+OQQABwxVKAkmSlFGVr0v5lmCgZNXJRo+mypXm benChCmBCcYlfKzNlwX+mMXr3gKAH1MjwS9uaGdxKF6trUHbsUo= -----END CERTIFICATE-----Generated at Sat Mar 28 11:44:51 2026 by rpki-client