$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145458.roa File: AS145458.roa (raw, json) Hash identifier: rjHJx+7S7LBsSjTxjeebMZ9gg0fLNfKFoLSNbDDYMkE= Subject key identifier: 4D:8D:DF:08:46:F9:DF:72:CC:88:18:33:94:83:6F:9B:86:EE:B6:2C Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 36AF0A58A56A657D072FC2B87F1DD95191A7D644 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145458.roa Signing time: Wed 04 Mar 2026 06:20:11 +0000 ROA not before: Wed 04 Mar 2026 06:15:11 +0000 ROA not after: Wed 03 Mar 2027 06:20:11 +0000 asID: 145458 IP address blocks: 240a:aaf8::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:af:0a:58:a5:6a:65:7d:07:2f:c2:b8:7f:1d:d9:51:91:a7:d6:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:15:11 2026 GMT Not After : Mar 3 06:20:11 2027 GMT Subject: CN=4D8DDF0846F9DF72CC88183394836F9B86EEB62C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:5a:a5:83:4a:8a:a1:3b:35:0c:ef:bb:3e:eb: 06:84:c8:67:a9:d1:ed:d5:3a:b7:6a:1b:4a:5c:20: d4:c7:0d:64:a6:9f:8e:fb:ff:bf:f0:17:82:fb:b2: 6d:e7:9d:a6:ab:54:bb:c1:7a:0d:bc:5d:42:2e:31: 15:19:20:e0:c6:b5:1f:2b:9c:a9:d3:15:2b:30:b4: ca:c3:e8:06:70:03:30:f0:a3:18:62:c4:fb:65:17: b7:5a:64:95:9c:bc:ae:56:5f:3f:e3:ae:04:03:90: 23:13:43:e5:f9:ca:b9:43:f5:fd:1a:88:67:13:9f: e3:49:ce:0f:dd:a1:bb:1c:d7:6b:76:f4:e6:77:91: 2b:f8:10:61:d8:47:61:d1:73:92:f5:08:4e:af:3f: 87:8e:60:5f:ce:c3:a0:30:54:ad:5b:b0:9d:d2:85: 49:a5:a6:07:ac:fc:ce:bd:02:22:5d:8e:18:45:35: 93:d0:85:18:15:92:6c:68:a1:9a:44:92:5f:5f:18: 9d:03:ac:0e:4a:1f:f0:e8:0d:85:e4:f0:72:78:6d: c1:8a:15:9d:f4:1e:36:c5:09:84:10:97:ff:00:2c: 60:76:24:92:c2:d8:4f:76:11:c9:1f:47:21:07:c8: 75:cc:5c:7d:24:4e:5a:a0:8b:df:ed:c9:4e:68:dc: da:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:8D:DF:08:46:F9:DF:72:CC:88:18:33:94:83:6F:9B:86:EE:B6:2C X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145458.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:aaf8::/32 Signature Algorithm: sha256WithRSAEncryption 55:61:ba:e9:30:35:6e:24:4c:00:ef:b6:43:b7:bb:67:fa:e9: fb:13:0a:62:aa:45:07:f6:86:9e:b9:8d:90:ad:7e:66:d6:17: e3:c9:ab:93:33:f2:e6:25:c7:80:79:dd:5f:37:31:68:0b:f3: 7f:8f:1b:dc:ac:ca:d0:27:74:a3:d1:c4:d9:60:76:4b:39:bd: bb:8d:a3:2d:d6:73:4a:43:97:06:ad:43:08:23:87:25:fd:f7: f9:6e:1e:7d:48:13:3b:8d:86:7c:19:5b:1d:04:37:10:60:97: b5:26:d0:09:e2:3b:0d:16:c7:fb:24:26:4c:34:3f:ff:5d:71: 8a:92:4f:0e:92:49:7a:fe:91:31:61:2d:7a:2d:5c:34:79:d0: 12:38:ce:97:55:e6:d1:f3:7a:fa:ed:27:90:77:16:de:7d:0f: 17:14:31:21:4b:9e:ea:a7:e7:64:58:5c:5c:fc:40:7c:e9:50: 13:1f:85:a5:37:b9:98:9f:c5:6f:28:86:9d:60:43:f4:f1:a7: b9:9a:28:54:33:c5:b2:89:8e:8c:4f:b8:da:1f:62:44:48:70: 63:b2:45:eb:c9:76:7e:0b:7e:3d:52:be:7d:a6:b6:8a:fe:bb: 50:5c:b0:77:2d:a5:86:8a:2b:94:78:43:ad:f2:99:98:fe:05: 4b:c8:f4:12 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUNq8KWKVqZX0HL8K4fx3ZUZGn1kQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTUxMVoX DTI3MDMwMzA2MjAxMVowMzExMC8GA1UEAxMoNEQ4RERGMDg0NkY5REY3MkNDODgx ODMzOTQ4MzZGOUI4NkVFQjYyQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANpapYNKiqE7NQzvuz7rBoTIZ6nR7dU6t2obSlwg1McNZKafjvv/v/AXgvuy beedpqtUu8F6DbxdQi4xFRkg4Ma1HyucqdMVKzC0ysPoBnADMPCjGGLE+2UXt1pk lZy8rlZfP+OuBAOQIxND5fnKuUP1/RqIZxOf40nOD92huxzXa3b05neRK/gQYdhH YdFzkvUITq8/h45gX87DoDBUrVuwndKFSaWmB6z8zr0CIl2OGEU1k9CFGBWSbGih mkSSX18YnQOsDkof8OgNheTwcnhtwYoVnfQeNsUJhBCX/wAsYHYkksLYT3YRyR9H IQfIdcxcfSROWqCL3+3JTmjc2h0CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRNjd8I RvnfcsyIGDOUg2+bhu62LDAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTQ1OC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qvgwDQYJKoZIhvcNAQELBQADggEBAFVhuukwNW4kTADvtkO3u2f66fsTCmKqRQf2 hp65jZCtfmbWF+PJq5Mz8uYlx4B53V83MWgL83+PG9ysytAndKPRxNlgdks5vbuN oy3Wc0pDlwatQwgjhyX99/luHn1IEzuNhnwZWx0ENxBgl7Um0AniOw0Wx/skJkw0 P/9dcYqSTw6SSXr+kTFhLXotXDR50BI4zpdV5tHzevrtJ5B3Ft59DxcUMSFLnuqn 52RYXFz8QHzpUBMfhaU3uZifxW8ohp1gQ/Txp7maKFQzxbKJjoxPuNofYkRIcGOy RevJdn4Lfj1Svn2mtor+u1BcsHctpYaKK5R4Q63ymZj+BUvI9BI= -----END CERTIFICATE-----Generated at Sat Mar 28 13:18:07 2026 by rpki-client