$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145459.roa File: AS145459.roa (raw, json) Hash identifier: gcOM+rB68Xi7XYNebzyja2yCc6M2oE5/YfandXypDq0= Subject key identifier: 5C:11:43:D6:66:E6:DD:2F:3F:C1:6D:0A:99:EA:1F:C7:65:EA:EA:A5 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 76175D01293DEDC2445FE75F58B03653EC40D45C Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145459.roa Signing time: Wed 04 Mar 2026 06:19:47 +0000 ROA not before: Wed 04 Mar 2026 06:14:47 +0000 ROA not after: Wed 03 Mar 2027 06:19:47 +0000 asID: 145459 IP address blocks: 240a:aaf9::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:17:5d:01:29:3d:ed:c2:44:5f:e7:5f:58:b0:36:53:ec:40:d4:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:14:47 2026 GMT Not After : Mar 3 06:19:47 2027 GMT Subject: CN=5C1143D666E6DD2F3FC16D0A99EA1FC765EAEAA5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:9c:a9:a3:8e:57:1e:7b:c3:98:98:c2:66:7b: aa:16:1d:28:d1:ae:30:46:88:51:1f:06:62:8d:75: 31:2f:91:32:b4:7a:ca:9b:1e:60:05:fe:27:d1:c7: 7a:cf:68:2b:b2:28:79:ab:a4:0d:fa:3a:f4:5d:b0: a0:d0:9c:34:2d:00:c8:7b:47:cd:ba:b9:c3:bc:84: 05:0a:58:cc:cb:06:0b:85:34:ef:ee:ba:7f:67:6d: 88:fc:21:12:ee:82:16:1c:2e:12:b0:2e:6a:f2:c4: 7b:c2:66:c5:d1:20:14:ae:ae:c3:ac:3d:35:7c:b1: ff:ac:d8:43:a3:bd:27:93:c6:d5:1f:13:7a:07:b0: 14:f0:85:84:cd:d4:67:1c:c2:f3:ee:98:c1:35:45: d9:3a:0b:3d:ff:1c:3a:66:f7:45:84:90:44:7f:69: 70:03:e0:05:02:f3:07:d9:37:55:02:07:17:7a:47: a4:ff:22:8b:33:d9:f2:ff:d0:c8:b3:34:b7:07:4d: 48:ef:56:4b:51:78:0c:d1:f4:a4:c9:42:ec:eb:1b: b8:07:64:26:d3:11:c7:81:ea:65:ff:b0:be:0b:87: b9:7e:c3:16:e7:66:7f:64:c8:3f:1b:03:f6:57:fd: ec:68:39:13:28:6d:9f:9d:c1:32:40:7d:f0:5b:95: 16:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:11:43:D6:66:E6:DD:2F:3F:C1:6D:0A:99:EA:1F:C7:65:EA:EA:A5 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145459.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:aaf9::/32 Signature Algorithm: sha256WithRSAEncryption 04:4d:94:ac:3f:6e:11:e9:75:bf:b4:1a:99:85:cb:ad:8c:42: 99:e7:da:e2:69:a5:41:d5:3c:a2:90:a4:c6:3d:f5:09:1e:2a: 8d:92:7c:7e:2d:87:86:e1:db:45:d8:c3:e2:ef:d8:5a:38:69: 31:b7:61:05:f4:cb:98:40:11:7a:15:45:e1:13:cd:4b:85:b3: 28:86:ad:16:3e:72:12:1f:5c:ad:b0:3f:12:c7:25:06:47:1a: 8e:50:ab:3a:75:ef:b2:ae:6e:42:bd:50:32:f7:70:05:e9:d4: ed:58:4f:29:d5:48:c3:75:5f:f3:79:b0:eb:77:75:8d:ad:5e: 55:de:21:4b:fc:cc:ef:ec:1c:c3:a2:ea:7c:e3:b1:ee:47:26: b7:38:61:b8:00:0d:f6:d6:89:74:d7:ba:b4:04:b5:26:04:0e: ef:3c:1d:39:82:0a:14:37:49:22:11:03:3a:af:0b:48:ce:7a: 9a:92:ec:9c:6d:ce:06:3e:5a:85:25:3e:11:60:33:d5:60:07: 24:2a:77:9c:30:e6:c8:88:8e:e4:ec:73:4d:d9:32:a0:c4:b2: d9:8f:48:6f:7d:39:d9:da:e6:02:61:70:ba:d5:12:c2:bc:45: 82:3e:71:b7:44:bd:22:67:4e:eb:7a:7f:af:23:4c:6a:28:57: 26:59:56:16 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUdhddASk97cJEX+dfWLA2U+xA1FwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTQ0N1oX DTI3MDMwMzA2MTk0N1owMzExMC8GA1UEAxMoNUMxMTQzRDY2NkU2REQyRjNGQzE2 RDBBOTlFQTFGQzc2NUVBRUFBNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK6cqaOOVx57w5iYwmZ7qhYdKNGuMEaIUR8GYo11MS+RMrR6ypseYAX+J9HH es9oK7IoeaukDfo69F2woNCcNC0AyHtHzbq5w7yEBQpYzMsGC4U07+66f2dtiPwh Eu6CFhwuErAuavLEe8JmxdEgFK6uw6w9NXyx/6zYQ6O9J5PG1R8TegewFPCFhM3U ZxzC8+6YwTVF2ToLPf8cOmb3RYSQRH9pcAPgBQLzB9k3VQIHF3pHpP8iizPZ8v/Q yLM0twdNSO9WS1F4DNH0pMlC7OsbuAdkJtMRx4HqZf+wvguHuX7DFudmf2TIPxsD 9lf97Gg5Eyhtn53BMkB98FuVFvUCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRcEUPW ZubdLz/BbQqZ6h/HZerqpTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTQ1OS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qvkwDQYJKoZIhvcNAQELBQADggEBAARNlKw/bhHpdb+0GpmFy62MQpnn2uJppUHV PKKQpMY99QkeKo2SfH4th4bh20XYw+Lv2Fo4aTG3YQX0y5hAEXoVReETzUuFsyiG rRY+chIfXK2wPxLHJQZHGo5Qqzp177KubkK9UDL3cAXp1O1YTynVSMN1X/N5sOt3 dY2tXlXeIUv8zO/sHMOi6nzjse5HJrc4YbgADfbWiXTXurQEtSYEDu88HTmCChQ3 SSIRAzqvC0jOepqS7JxtzgY+WoUlPhFgM9VgByQqd5ww5siIjuTsc03ZMqDEstmP SG99Odna5gJhcLrVEsK8RYI+cbdEvSJnTut6f68jTGooVyZZVhY= -----END CERTIFICATE-----Generated at Sat Mar 28 13:15:14 2026 by rpki-client