$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145460.roa File: AS145460.roa (raw, json) Hash identifier: Mz8J9vniVrjmL8ZOQ3CFr4i3SDTIq1dfkunjbfvku5E= Subject key identifier: B0:D4:86:FE:4A:18:BE:B4:C8:E4:18:A1:1C:B4:DB:57:C9:C4:DC:62 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 010539FFF7462C3CADDE8EEC38C1891FC6E3BAAE Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145460.roa Signing time: Wed 04 Mar 2026 06:22:10 +0000 ROA not before: Wed 04 Mar 2026 06:17:10 +0000 ROA not after: Wed 03 Mar 2027 06:22:10 +0000 asID: 145460 IP address blocks: 240a:aafa::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:05:39:ff:f7:46:2c:3c:ad:de:8e:ec:38:c1:89:1f:c6:e3:ba:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:17:10 2026 GMT Not After : Mar 3 06:22:10 2027 GMT Subject: CN=B0D486FE4A18BEB4C8E418A11CB4DB57C9C4DC62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:0b:96:f1:f9:2f:98:09:38:57:75:1e:92:dd: 8c:47:5a:79:b3:73:46:15:eb:d1:db:50:c9:ab:79: 50:40:a9:62:83:71:f1:ce:19:fe:c2:42:90:a1:95: bb:16:39:3a:8d:9a:38:d3:5d:bb:25:be:bc:8d:f9: b6:ad:96:b6:e5:1a:7d:97:5e:42:f1:19:e4:27:58: 06:e9:a2:eb:5c:2e:d8:76:9c:d3:38:0e:ed:73:91: 04:d7:df:1e:38:d8:fc:10:6d:e0:f4:2f:fe:1f:f3: 2d:e5:a5:81:69:14:cb:68:ba:db:64:72:c8:31:a7: ff:27:8c:80:6d:e9:5b:77:08:66:04:7d:54:4c:e0: 0f:06:ff:9d:51:9a:33:5f:62:3b:d6:4a:af:2c:54: 5e:26:54:c3:a9:d3:78:c1:10:fe:b9:f7:7b:fd:a3: 63:99:41:3e:90:c3:d1:d6:cb:a9:28:c4:a6:7d:e5: 3f:35:3a:5a:f5:97:07:32:30:ce:fb:0e:c5:6e:65: 7d:97:0a:a3:76:a7:45:25:9d:60:7d:4f:e0:7b:2c: 62:17:80:a8:08:5f:8f:18:7c:1b:7f:a7:b9:ea:f5: 67:2d:7f:c6:e9:0c:99:e9:ea:4f:e8:ea:6b:5e:ec: 11:63:4b:e8:16:58:24:83:25:3e:17:3a:cd:26:1b: db:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:D4:86:FE:4A:18:BE:B4:C8:E4:18:A1:1C:B4:DB:57:C9:C4:DC:62 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145460.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:aafa::/32 Signature Algorithm: sha256WithRSAEncryption dc:a8:15:3f:5a:91:57:cf:de:30:95:e7:93:00:df:07:98:31: 23:cf:bf:97:e8:ed:6c:46:04:57:cc:a0:06:a7:53:39:ef:b3: fe:1a:31:c8:b5:73:f7:f8:6f:82:51:f9:69:81:37:5c:4a:cc: 1b:2d:96:3e:b0:93:c8:56:ee:be:8d:73:b5:99:b3:5b:6e:83: 74:8d:7f:71:ca:0b:45:70:24:82:fe:7f:fa:a8:e1:e9:76:79: dc:d5:2c:51:a1:39:ce:90:77:3a:3d:91:b8:46:be:c0:68:40: eb:b0:5a:fa:e7:b5:88:9b:af:be:43:4e:31:27:22:f3:52:21: b9:77:47:21:22:90:ab:27:ce:b5:a8:5e:83:50:b6:54:79:7d: 59:14:26:ef:9c:72:b7:e1:e3:9d:6d:9d:ec:36:cd:e0:ff:7a: 9c:78:e0:91:3a:24:1b:07:43:3d:4a:de:dc:57:94:9e:75:89: 5d:a2:5c:fe:61:db:8d:e0:a7:85:de:55:c0:9c:6c:2b:45:ba: f1:71:bc:42:fd:47:5a:82:be:f1:af:6d:e8:b1:b6:88:16:29: fb:01:f3:d8:a8:cf:46:b1:a9:33:43:60:f5:c7:64:47:94:91: 0c:5e:24:c1:b7:c5:6e:e9:fe:77:31:af:e4:67:a5:00:78:87: 47:21:22:6c -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUAQU5//dGLDyt3o7sOMGJH8bjuq4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTcxMFoX DTI3MDMwMzA2MjIxMFowMzExMC8GA1UEAxMoQjBENDg2RkU0QTE4QkVCNEM4RTQx OEExMUNCNERCNTdDOUM0REM2MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAIkLlvH5L5gJOFd1HpLdjEdaebNzRhXr0dtQyat5UECpYoNx8c4Z/sJCkKGV uxY5Oo2aONNduyW+vI35tq2WtuUafZdeQvEZ5CdYBumi61wu2Hac0zgO7XORBNff HjjY/BBt4PQv/h/zLeWlgWkUy2i622RyyDGn/yeMgG3pW3cIZgR9VEzgDwb/nVGa M19iO9ZKryxUXiZUw6nTeMEQ/rn3e/2jY5lBPpDD0dbLqSjEpn3lPzU6WvWXBzIw zvsOxW5lfZcKo3anRSWdYH1P4HssYheAqAhfjxh8G3+nuer1Zy1/xukMmenqT+jq a17sEWNL6BZYJIMlPhc6zSYb2wUCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSw1Ib+ Shi+tMjkGKEctNtXycTcYjAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTQ2MC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qvowDQYJKoZIhvcNAQELBQADggEBANyoFT9akVfP3jCV55MA3weYMSPPv5fo7WxG BFfMoAanUznvs/4aMci1c/f4b4JR+WmBN1xKzBstlj6wk8hW7r6Nc7WZs1tug3SN f3HKC0VwJIL+f/qo4el2edzVLFGhOc6Qdzo9kbhGvsBoQOuwWvrntYibr75DTjEn IvNSIbl3RyEikKsnzrWoXoNQtlR5fVkUJu+ccrfh451tnew2zeD/epx44JE6JBsH Qz1K3txXlJ51iV2iXP5h243gp4XeVcCcbCtFuvFxvEL9R1qCvvGvbeixtogWKfsB 89ioz0axqTNDYPXHZEeUkQxeJMG3xW7p/ncxr+RnpQB4h0chImw= -----END CERTIFICATE-----Generated at Sat Mar 28 11:49:48 2026 by rpki-client