$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145461.roa File: AS145461.roa (raw, json) Hash identifier: 6irxxKvIva5R7JiE/XTRu3B7vVMG6Spb8ClLN4934mU= Subject key identifier: CB:91:55:1F:D2:72:62:D3:65:3E:AF:80:DF:50:0C:FE:E6:4E:99:79 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 7861C19E987895AFF46D0125F21D1198DA072477 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145461.roa Signing time: Wed 04 Mar 2026 06:19:30 +0000 ROA not before: Wed 04 Mar 2026 06:14:30 +0000 ROA not after: Wed 03 Mar 2027 06:19:30 +0000 asID: 145461 IP address blocks: 240a:aafb::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:61:c1:9e:98:78:95:af:f4:6d:01:25:f2:1d:11:98:da:07:24:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:14:30 2026 GMT Not After : Mar 3 06:19:30 2027 GMT Subject: CN=CB91551FD27262D3653EAF80DF500CFEE64E9979 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:e8:59:37:0d:ec:1e:6b:11:fd:03:23:e7:a1: 09:89:ef:23:2f:1a:33:77:53:cc:e5:24:c5:ab:a5: 7e:60:4e:78:25:03:30:ea:5d:52:fa:e7:57:a5:7f: 74:eb:ec:49:e6:41:f0:4b:f7:fe:1e:d0:ee:81:c2: 17:bc:27:ea:e1:e7:3c:4e:a6:eb:26:91:47:e9:60: 5b:1c:98:35:b6:56:7f:e4:8c:d7:4d:fe:7f:ef:51: 4a:6f:08:ca:22:01:42:ca:d5:31:d3:e2:5c:e2:e5: 55:1d:ec:e9:0a:de:c0:e9:9a:e1:9c:49:15:a4:12: d9:79:b2:6f:2b:5e:df:11:53:8b:27:01:1c:3a:94: 4f:b0:8a:c7:1b:16:93:62:44:3a:a9:ef:e1:be:9d: 3c:95:d0:0b:27:55:64:ed:ba:fe:98:b3:00:0b:85: ef:2b:fc:d0:9e:75:9a:38:7a:eb:67:4a:bd:34:df: 2e:1d:4f:76:b0:d2:9f:99:49:17:00:01:5b:4f:be: ac:14:68:20:06:e9:dc:7c:e8:25:db:c2:53:81:a3: 5b:16:6c:a8:86:f7:be:c7:06:5e:bb:eb:13:aa:0f: 24:70:7f:83:35:3b:8a:4b:e3:b5:00:f4:ea:48:bb: 66:9e:d3:3e:de:c8:b9:1e:65:04:92:6b:78:8d:cc: ba:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:91:55:1F:D2:72:62:D3:65:3E:AF:80:DF:50:0C:FE:E6:4E:99:79 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145461.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:aafb::/32 Signature Algorithm: sha256WithRSAEncryption a2:7f:1d:82:dd:0d:ac:76:20:e4:12:8b:23:ee:6f:be:de:70: 14:17:99:b0:a5:1e:eb:eb:e2:d1:e5:8b:82:b7:de:55:70:fc: 89:82:78:e6:09:1e:46:14:d3:7c:96:7c:af:79:79:21:8d:94: 16:90:1b:14:e4:48:b5:1a:6a:0b:f6:f3:91:f8:b6:56:e0:fa: 9d:ea:e7:8e:86:02:a3:2b:98:9a:5a:f7:1f:c9:4c:f3:32:59: 96:5d:5b:96:de:88:61:28:58:74:96:40:e0:b1:07:ef:a0:ef: e6:28:7d:84:da:36:a1:1a:84:0b:9c:90:3b:04:92:6e:a2:39: b2:2c:36:2c:7b:93:cf:9b:b6:1c:3f:80:e8:cc:11:e8:a9:76: b5:1f:e2:44:5b:fc:32:27:31:15:91:28:05:c8:78:47:b8:7a: 9f:af:00:fa:91:98:09:f8:9e:92:0a:b3:15:c5:0e:0c:a5:d1: 10:6c:ec:41:a7:91:47:e1:b5:a5:d1:89:4e:9d:8a:07:9e:b7: 01:48:10:fd:ad:23:db:9d:dc:d2:4c:8b:bf:14:06:3b:d6:ae: 4f:b4:d6:1c:98:98:9f:c4:51:68:3b:11:ed:19:70:3c:80:79: 20:61:e3:05:08:5e:32:0d:bd:74:9a:f7:bd:ab:58:39:8f:fe: 8e:fc:39:ca -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUeGHBnph4la/0bQEl8h0RmNoHJHcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTQzMFoX DTI3MDMwMzA2MTkzMFowMzExMC8GA1UEAxMoQ0I5MTU1MUZEMjcyNjJEMzY1M0VB RjgwREY1MDBDRkVFNjRFOTk3OTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK7oWTcN7B5rEf0DI+ehCYnvIy8aM3dTzOUkxaulfmBOeCUDMOpdUvrnV6V/ dOvsSeZB8Ev3/h7Q7oHCF7wn6uHnPE6m6yaRR+lgWxyYNbZWf+SM103+f+9RSm8I yiIBQsrVMdPiXOLlVR3s6QrewOma4ZxJFaQS2Xmybyte3xFTiycBHDqUT7CKxxsW k2JEOqnv4b6dPJXQCydVZO26/pizAAuF7yv80J51mjh662dKvTTfLh1PdrDSn5lJ FwABW0++rBRoIAbp3HzoJdvCU4GjWxZsqIb3vscGXrvrE6oPJHB/gzU7ikvjtQD0 6ki7Zp7TPt7IuR5lBJJreI3MutECAwEAAaOCAcUwggHBMB0GA1UdDgQWBBTLkVUf 0nJi02U+r4DfUAz+5k6ZeTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTQ2MS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qvswDQYJKoZIhvcNAQELBQADggEBAKJ/HYLdDax2IOQSiyPub77ecBQXmbClHuvr 4tHli4K33lVw/ImCeOYJHkYU03yWfK95eSGNlBaQGxTkSLUaagv285H4tlbg+p3q 546GAqMrmJpa9x/JTPMyWZZdW5beiGEoWHSWQOCxB++g7+YofYTaNqEahAuckDsE km6iObIsNix7k8+bthw/gOjMEeipdrUf4kRb/DInMRWRKAXIeEe4ep+vAPqRmAn4 npIKsxXFDgyl0RBs7EGnkUfhtaXRiU6digeetwFIEP2tI9ud3NJMi78UBjvWrk+0 1hyYmJ/EUWg7Ee0ZcDyAeSBh4wUIXjINvXSa972rWDmP/o78Oco= -----END CERTIFICATE-----Generated at Sat Mar 28 13:16:41 2026 by rpki-client