$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145454.roa File: AS145454.roa (raw, json) Hash identifier: G44ysRjrjBr6UoeMW+BL1XxV4IyKjp44NZb9eepsZi8= Subject key identifier: D5:CA:6E:A0:84:4D:CA:18:AA:17:87:0E:23:AB:19:64:42:27:F7:DA Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 52E836A9AA0239DD6392DA72B661162BE3C1710C Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145454.roa Signing time: Wed 04 Mar 2026 06:22:34 +0000 ROA not before: Wed 04 Mar 2026 06:17:34 +0000 ROA not after: Wed 03 Mar 2027 06:22:34 +0000 asID: 145454 IP address blocks: 240a:aaf4::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:e8:36:a9:aa:02:39:dd:63:92:da:72:b6:61:16:2b:e3:c1:71:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:17:34 2026 GMT Not After : Mar 3 06:22:34 2027 GMT Subject: CN=D5CA6EA0844DCA18AA17870E23AB19644227F7DA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:14:57:d1:31:b7:f8:11:5e:0b:67:8a:9c:10: 12:6a:f6:00:ba:24:a9:d8:d2:d7:62:a0:9d:25:91: 4f:86:5c:1c:b3:9a:38:c5:21:1c:ff:09:dd:c3:49: 4b:73:65:11:b8:c7:ac:fe:4c:d6:0c:2f:d3:46:72: ec:ed:dc:a3:43:76:3d:16:ba:a0:61:4e:5e:83:30: b3:f9:15:fb:8d:bd:4f:df:c8:35:b3:79:e6:c3:92: ae:7a:36:84:69:3d:68:1e:0b:72:4b:63:91:84:01: 98:8e:0e:84:6a:b0:fa:c1:a4:4d:ef:20:66:8f:67: 1f:d8:5c:74:46:f7:57:bc:60:35:6e:cc:15:7e:73: 0f:3e:c4:8d:34:8d:fb:56:11:4b:ed:5f:8f:eb:3a: f6:f9:e4:f2:23:f4:5e:8f:59:73:e8:fe:84:7f:ca: d5:6c:5d:34:27:ab:52:86:53:43:49:9e:06:38:92: 36:52:e7:eb:a6:72:fc:98:29:72:12:4b:0f:63:1f: 46:68:50:c7:9a:fd:e1:30:81:c2:6d:8a:d2:14:cd: e6:09:f8:bb:09:31:4e:79:5b:ea:fd:57:f0:c5:54: 19:27:ed:cf:f9:22:4c:b3:6b:a8:e5:86:0b:2c:19: da:08:0a:b4:bf:5d:27:34:fa:0c:06:54:31:48:d5: 5d:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:CA:6E:A0:84:4D:CA:18:AA:17:87:0E:23:AB:19:64:42:27:F7:DA X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145454.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:aaf4::/32 Signature Algorithm: sha256WithRSAEncryption d3:72:13:1e:95:9d:bd:ea:43:a3:5b:8c:6d:d0:3f:bf:0d:5e: 87:42:69:10:17:77:89:a3:3f:be:f9:2c:26:d8:e0:24:51:96: 91:51:34:a9:46:1e:5e:98:98:2b:4d:c0:42:c6:ed:57:11:bf: 8b:ec:48:a3:53:33:2d:11:c8:ea:86:83:73:24:fe:da:ef:fd: 04:5c:c3:07:f5:fe:2a:50:e7:2c:6d:2b:50:85:40:0e:37:e0: b9:b7:0a:af:79:34:c1:78:d6:bd:b4:95:1d:29:d7:0e:54:e8: f5:8e:13:73:33:4d:19:95:99:52:74:dc:ed:0b:1f:ba:27:e9: 3f:4f:79:e3:3e:d2:3a:c9:2c:82:1c:21:f3:e7:fb:dd:0d:2c: 52:03:7f:87:3d:c3:90:63:db:a0:0f:4f:78:f1:40:81:56:14: 4c:e4:af:56:a2:90:b6:ca:86:33:a5:c5:68:05:6d:40:4a:47: 57:b1:3e:c6:62:dc:e4:2a:05:fd:f0:22:3e:ad:2d:b6:d9:24: bf:0d:82:b0:37:71:f5:bd:e6:0a:42:34:ee:49:37:fd:10:e4: 33:a0:c3:20:54:87:7e:e7:71:fe:9d:12:9c:ae:66:32:26:c9: be:d1:0f:50:33:a6:b5:0e:bd:6a:cc:6d:f1:ca:7a:c9:6c:df: a7:9c:d7:5e -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUUug2qaoCOd1jktpytmEWK+PBcQwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTczNFoX DTI3MDMwMzA2MjIzNFowMzExMC8GA1UEAxMoRDVDQTZFQTA4NDREQ0ExOEFBMTc4 NzBFMjNBQjE5NjQ0MjI3RjdEQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL8UV9Ext/gRXgtnipwQEmr2ALokqdjS12KgnSWRT4ZcHLOaOMUhHP8J3cNJ S3NlEbjHrP5M1gwv00Zy7O3co0N2PRa6oGFOXoMws/kV+429T9/INbN55sOSrno2 hGk9aB4LcktjkYQBmI4OhGqw+sGkTe8gZo9nH9hcdEb3V7xgNW7MFX5zDz7EjTSN +1YRS+1fj+s69vnk8iP0Xo9Zc+j+hH/K1WxdNCerUoZTQ0meBjiSNlLn66Zy/Jgp chJLD2MfRmhQx5r94TCBwm2K0hTN5gn4uwkxTnlb6v1X8MVUGSftz/kiTLNrqOWG CywZ2ggKtL9dJzT6DAZUMUjVXd0CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBTVym6g hE3KGKoXhw4jqxlkQif32jAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTQ1NC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qvQwDQYJKoZIhvcNAQELBQADggEBANNyEx6Vnb3qQ6NbjG3QP78NXodCaRAXd4mj P775LCbY4CRRlpFRNKlGHl6YmCtNwELG7VcRv4vsSKNTMy0RyOqGg3Mk/trv/QRc wwf1/ipQ5yxtK1CFQA434Lm3Cq95NMF41r20lR0p1w5U6PWOE3MzTRmVmVJ03O0L H7on6T9PeeM+0jrJLIIcIfPn+90NLFIDf4c9w5Bj26APT3jxQIFWFEzkr1aikLbK hjOlxWgFbUBKR1exPsZi3OQqBf3wIj6tLbbZJL8NgrA3cfW95gpCNO5JN/0Q5DOg wyBUh37ncf6dEpyuZjImyb7RD1AzprUOvWrMbfHKesls36ec114= -----END CERTIFICATE-----Generated at Sat Mar 28 11:42:48 2026 by rpki-client