$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145455.roa File: AS145455.roa (raw, json) Hash identifier: 1lK/btCHNoWNH82SPuM4+lnSStILG2geRcgHW0CkpOA= Subject key identifier: 48:82:F3:24:54:0E:A9:18:BF:36:4B:C9:6C:4D:5B:0E:EB:2C:37:95 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 3DAAE98D0821A942B8A9EFC6358A7FC907721FEF Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145455.roa Signing time: Wed 04 Mar 2026 06:19:23 +0000 ROA not before: Wed 04 Mar 2026 06:14:23 +0000 ROA not after: Wed 03 Mar 2027 06:19:23 +0000 asID: 145455 IP address blocks: 240a:aaf5::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:aa:e9:8d:08:21:a9:42:b8:a9:ef:c6:35:8a:7f:c9:07:72:1f:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:14:23 2026 GMT Not After : Mar 3 06:19:23 2027 GMT Subject: CN=4882F324540EA918BF364BC96C4D5B0EEB2C3795 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:bc:79:65:26:b2:b9:17:e0:ee:2d:80:d3:df: 93:95:d2:e7:b6:ef:b8:ca:e8:0a:8d:20:05:1c:2e: 9f:6d:8d:0a:ac:6f:4b:03:48:05:34:5f:55:3e:59: f0:1f:8f:41:a8:ae:b0:44:80:a0:b2:bc:1c:f9:17: 1f:e7:79:95:77:ae:ad:75:57:f0:3d:24:4d:9c:4a: a7:04:ae:a9:43:8d:48:9f:2a:71:a3:69:3f:3b:2b: d3:bb:ed:2f:9c:c9:f3:38:54:26:bb:8c:5b:e4:5b: 91:6f:72:26:2b:66:af:07:60:d7:11:0a:8a:33:2c: b6:9d:b2:b1:54:1e:da:4b:c3:d6:cb:da:cd:00:0f: 07:d5:d3:61:ff:78:19:2c:93:69:5a:06:5c:71:18: 7d:f5:ec:4b:3f:a7:9f:9f:72:35:08:fa:2c:e7:47: b5:2c:2e:1c:95:34:5f:58:3c:f5:1e:6f:2d:07:b6: fd:72:ae:64:2f:f3:4d:aa:03:93:e9:0a:d1:b6:eb: ba:87:6d:82:14:fa:d5:1f:7f:06:94:ee:72:f5:c0: fb:d5:cd:9a:57:20:0d:d7:9d:9a:60:a2:3a:2d:72: 33:43:be:13:8c:0f:eb:65:e0:08:72:b9:0f:77:97: 50:d1:6f:0b:c9:44:e9:3a:9d:9e:6b:57:0e:2e:6d: 55:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:82:F3:24:54:0E:A9:18:BF:36:4B:C9:6C:4D:5B:0E:EB:2C:37:95 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145455.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:aaf5::/32 Signature Algorithm: sha256WithRSAEncryption 9a:c3:83:ce:13:05:cd:ac:d3:5a:9e:3d:4e:5b:c7:5e:2b:0b: 89:65:46:ec:77:32:4a:cc:ca:a4:92:99:20:c9:02:c1:3d:c9: a1:00:a3:e3:18:af:4a:63:d7:2d:83:cc:11:0a:b9:8d:25:09: 93:42:04:ba:9b:37:b9:3a:c1:2a:7c:bf:f2:1a:3d:35:8b:71: 1f:5d:cd:37:cc:03:ab:29:35:53:a2:5a:10:59:d1:f8:31:27: 22:8b:dd:b1:bf:87:f9:78:34:c4:a8:03:ae:e6:c4:0b:e1:fb: 8f:9e:6f:f2:5e:47:ec:dd:54:4c:c9:92:be:39:df:fe:2a:45: 09:fa:04:db:a5:85:27:e4:63:f7:29:94:89:e7:88:8a:fb:39: 59:9b:34:28:7f:e3:e4:4b:74:e1:11:e4:b4:32:ee:50:2c:09: 1a:cc:35:73:37:70:29:5b:24:8f:15:dd:11:3e:7d:d4:5e:62: d1:8f:98:b0:d5:b8:c3:0f:e6:79:a7:9d:21:d3:14:90:a0:11: bb:ba:ea:fb:97:8e:4e:7e:a5:3b:47:5a:bf:c8:40:34:ab:64: 49:b5:ed:9d:16:c5:5f:73:3c:33:88:b2:10:2c:66:78:64:8a: df:75:f4:f6:ad:6d:29:86:58:a5:1d:5e:93:e8:94:30:75:fd: fc:65:bc:bb -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUParpjQghqUK4qe/GNYp/yQdyH+8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTQyM1oX DTI3MDMwMzA2MTkyM1owMzExMC8GA1UEAxMoNDg4MkYzMjQ1NDBFQTkxOEJGMzY0 QkM5NkM0RDVCMEVFQjJDMzc5NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKy8eWUmsrkX4O4tgNPfk5XS57bvuMroCo0gBRwun22NCqxvSwNIBTRfVT5Z 8B+PQaiusESAoLK8HPkXH+d5lXeurXVX8D0kTZxKpwSuqUONSJ8qcaNpPzsr07vt L5zJ8zhUJruMW+RbkW9yJitmrwdg1xEKijMstp2ysVQe2kvD1svazQAPB9XTYf94 GSyTaVoGXHEYffXsSz+nn59yNQj6LOdHtSwuHJU0X1g89R5vLQe2/XKuZC/zTaoD k+kK0bbruodtghT61R9/BpTucvXA+9XNmlcgDdedmmCiOi1yM0O+E4wP62XgCHK5 D3eXUNFvC8lE6TqdnmtXDi5tVa0CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRIgvMk VA6pGL82S8lsTVsO6yw3lTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTQ1NS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qvUwDQYJKoZIhvcNAQELBQADggEBAJrDg84TBc2s01qePU5bx14rC4llRux3MkrM yqSSmSDJAsE9yaEAo+MYr0pj1y2DzBEKuY0lCZNCBLqbN7k6wSp8v/IaPTWLcR9d zTfMA6spNVOiWhBZ0fgxJyKL3bG/h/l4NMSoA67mxAvh+4+eb/JeR+zdVEzJkr45 3/4qRQn6BNulhSfkY/cplInniIr7OVmbNCh/4+RLdOER5LQy7lAsCRrMNXM3cClb JI8V3RE+fdReYtGPmLDVuMMP5nmnnSHTFJCgEbu66vuXjk5+pTtHWr/IQDSrZEm1 7Z0WxV9zPDOIshAsZnhkit919PatbSmGWKUdXpPolDB1/fxlvLs= -----END CERTIFICATE-----Generated at Sat Mar 28 15:53:13 2026 by rpki-client