$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145468.roa File: AS145468.roa (raw, json) Hash identifier: ivJg8TBB0eHcSUYqTGwgB9MwEqJPbNLc0PpYs7cQzEw= Subject key identifier: BB:40:75:FA:F8:61:F5:AD:95:02:52:1E:E7:4E:54:0C:72:17:AA:F9 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 015B20594461BB515A7997D9B0EE9838BE5EB4B1 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145468.roa Signing time: Wed 04 Mar 2026 06:19:43 +0000 ROA not before: Wed 04 Mar 2026 06:14:43 +0000 ROA not after: Wed 03 Mar 2027 06:19:43 +0000 asID: 145468 IP address blocks: 240a:ab02::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:5b:20:59:44:61:bb:51:5a:79:97:d9:b0:ee:98:38:be:5e:b4:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:14:43 2026 GMT Not After : Mar 3 06:19:43 2027 GMT Subject: CN=BB4075FAF861F5AD9502521EE74E540C7217AAF9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:3b:64:bf:c6:59:f8:59:76:02:b1:3e:2a:6e: 46:38:75:40:35:f1:b8:f0:15:7d:81:de:94:a8:b3: c2:e2:b4:63:a2:48:ad:9d:1b:38:ab:67:84:fa:0d: 72:6b:0e:7b:db:3d:26:3d:fc:6a:6d:5c:d0:ee:3a: 4e:4d:8e:8e:f7:67:43:0b:15:5b:34:1a:7f:1a:be: ab:07:36:6f:ce:b7:f0:5e:3e:aa:aa:04:2c:7a:25: 53:f4:94:3a:4d:c8:bf:1e:8f:bd:7c:70:65:ed:a0: cd:64:73:c2:ab:75:2d:77:50:2a:61:95:de:f8:7b: 71:58:ff:04:38:7d:3d:6c:b3:98:cc:a1:58:83:e3: 96:b8:09:d8:d0:07:45:af:0e:7c:cf:97:3c:94:cd: 3e:a6:1f:de:18:1a:35:03:d5:08:64:ec:1b:60:27: 87:93:8d:8e:26:ee:f2:b9:0c:42:0d:f4:68:01:fb: e6:07:5e:ef:58:2f:9c:50:1f:65:d9:57:65:f3:dd: ca:46:3d:bc:5c:b0:3c:34:04:32:eb:fd:7a:e5:1f: 61:ff:e7:e4:22:8e:32:bd:e0:ab:9b:2a:af:f0:81: 53:04:30:f5:8a:8f:c7:70:7e:33:0c:be:2f:21:3e: 57:c2:3c:40:2b:2a:35:79:38:14:08:b1:7c:10:e3: 8c:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:40:75:FA:F8:61:F5:AD:95:02:52:1E:E7:4E:54:0C:72:17:AA:F9 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145468.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:ab02::/32 Signature Algorithm: sha256WithRSAEncryption 09:c7:2e:67:51:d3:d7:90:f0:d1:aa:78:9a:d1:d1:b0:7a:cf: 88:44:7c:33:bb:f1:c7:1d:28:95:aa:db:d1:be:c8:f2:03:d3: 7f:ed:23:b5:87:a3:bd:f4:97:2c:fb:02:cb:8f:01:77:05:92: f4:c6:92:52:38:5f:9f:f3:df:a7:f0:db:2a:97:3b:f7:dd:86: aa:a4:2d:01:5f:54:c1:9f:84:76:8d:bd:e4:5b:9a:7f:ae:82: 0f:08:c4:69:1d:17:fa:37:eb:6a:00:73:d7:b5:3d:3b:08:7d: 27:b9:1f:54:fa:03:66:7d:7f:78:f7:24:6e:c4:cb:28:bf:ae: 46:85:0a:df:f5:c4:5d:b2:84:9d:5a:ec:df:c2:77:4c:96:b9: 05:57:5f:2b:31:16:b8:a4:c3:40:2a:66:ca:2b:de:cf:1e:b6: 79:0c:b2:cf:cd:a7:f9:5b:d0:c9:5b:89:56:41:35:cc:5a:46: 55:1a:fd:17:c3:b6:4e:d2:37:31:0f:09:80:fb:1a:4b:69:c2: 53:e4:03:e9:34:29:df:63:1b:d5:8c:6d:5f:02:7b:67:b0:f8: b2:b9:ff:d8:f6:b1:ca:dc:a6:56:7e:7b:a8:40:88:48:2f:7d: 6d:f6:2d:43:f4:1e:d7:74:15:30:d8:eb:9f:fe:e3:a8:d5:53: bb:b4:f0:e0 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUAVsgWURhu1FaeZfZsO6YOL5etLEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTQ0M1oX DTI3MDMwMzA2MTk0M1owMzExMC8GA1UEAxMoQkI0MDc1RkFGODYxRjVBRDk1MDI1 MjFFRTc0RTU0MEM3MjE3QUFGOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALw7ZL/GWfhZdgKxPipuRjh1QDXxuPAVfYHelKizwuK0Y6JIrZ0bOKtnhPoN cmsOe9s9Jj38am1c0O46Tk2OjvdnQwsVWzQafxq+qwc2b8638F4+qqoELHolU/SU Ok3Ivx6PvXxwZe2gzWRzwqt1LXdQKmGV3vh7cVj/BDh9PWyzmMyhWIPjlrgJ2NAH Ra8OfM+XPJTNPqYf3hgaNQPVCGTsG2Anh5ONjibu8rkMQg30aAH75gde71gvnFAf ZdlXZfPdykY9vFywPDQEMuv9euUfYf/n5CKOMr3gq5sqr/CBUwQw9YqPx3B+Mwy+ LyE+V8I8QCsqNXk4FAixfBDjjG8CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBS7QHX6 +GH1rZUCUh7nTlQMcheq+TAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTQ2OC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qwIwDQYJKoZIhvcNAQELBQADggEBAAnHLmdR09eQ8NGqeJrR0bB6z4hEfDO78ccd KJWq29G+yPID03/tI7WHo730lyz7AsuPAXcFkvTGklI4X5/z36fw2yqXO/fdhqqk LQFfVMGfhHaNveRbmn+ugg8IxGkdF/o362oAc9e1PTsIfSe5H1T6A2Z9f3j3JG7E yyi/rkaFCt/1xF2yhJ1a7N/Cd0yWuQVXXysxFrikw0AqZsor3s8etnkMss/Np/lb 0MlbiVZBNcxaRlUa/RfDtk7SNzEPCYD7GktpwlPkA+k0Kd9jG9WMbV8Ce2ew+LK5 /9j2scrcplZ+e6hAiEgvfW32LUP0Htd0FTDY65/+46jVU7u08OA= -----END CERTIFICATE-----Generated at Sat Mar 28 11:45:58 2026 by rpki-client