$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145489.roa File: AS145489.roa (raw, json) Hash identifier: x8OqhZB1kh2A12fDTYqLUhE08j/IGw1tG/41y4Lg4nc= Subject key identifier: 2E:96:DE:D1:0B:34:39:F0:86:50:1A:04:42:4B:3B:42:B7:DB:19:D3 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 51D1A83995AB1060905CA8532FCCA84953DA6090 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145489.roa Signing time: Wed 04 Mar 2026 06:20:03 +0000 ROA not before: Wed 04 Mar 2026 06:15:03 +0000 ROA not after: Wed 03 Mar 2027 06:20:03 +0000 asID: 145489 IP address blocks: 240a:ab17::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:d1:a8:39:95:ab:10:60:90:5c:a8:53:2f:cc:a8:49:53:da:60:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:15:03 2026 GMT Not After : Mar 3 06:20:03 2027 GMT Subject: CN=2E96DED10B3439F086501A04424B3B42B7DB19D3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:2c:2b:01:22:f0:c6:cc:83:f9:55:c5:ec:73: 18:f4:a7:42:eb:8a:99:15:01:2b:b3:07:6b:33:2f: 75:b6:9a:95:a8:fa:c2:db:21:75:c0:53:8f:c6:31: ea:57:df:88:e3:40:a0:c4:46:05:59:c0:d2:be:fa: af:21:2f:6e:50:23:99:da:fd:76:0a:a1:79:39:c8: 8d:3b:35:1f:a6:80:8c:48:17:93:a7:e6:26:34:93: 7c:eb:89:f5:5f:4a:46:37:28:54:4c:32:0e:64:f1: 8a:c0:a6:01:9a:aa:fd:ce:ba:6b:19:d8:fb:f6:3f: d9:6b:32:8f:5b:2e:78:ba:ea:40:87:71:8c:25:c3: c6:c5:88:4f:1a:a5:1c:87:1b:52:b9:98:d8:4e:28: f2:d6:55:69:4d:6e:bd:e6:d3:82:b3:77:f0:1d:c0: 1e:3f:d0:0d:1f:82:64:81:6a:20:02:ae:11:5a:af: 05:72:dd:7c:f5:0d:66:f0:55:21:7e:83:21:0d:74: c0:ab:30:8b:db:39:be:84:28:3c:7d:4b:38:30:f6: 81:ef:6c:bd:81:24:74:fd:ea:3c:35:f3:f3:02:05: a7:69:7b:48:31:82:6b:09:05:a6:2d:d1:44:45:76: 24:c4:68:9f:c5:88:fe:03:f4:18:c7:27:2b:0f:50: bd:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:96:DE:D1:0B:34:39:F0:86:50:1A:04:42:4B:3B:42:B7:DB:19:D3 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145489.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:ab17::/32 Signature Algorithm: sha256WithRSAEncryption 6e:a7:82:32:3c:d7:b3:c5:9a:d7:73:b3:35:18:b3:24:38:65: b9:02:2e:a7:e6:3d:ac:27:b5:cf:d3:89:04:24:d3:9d:03:b7: 4e:58:ec:9c:9b:e0:19:0c:c5:a8:51:b8:b8:72:fb:95:a0:d3: 50:ce:1b:35:c9:81:95:c0:db:36:4f:d3:5b:d2:51:d2:8e:f5: 0a:2c:f5:99:45:75:84:9d:66:01:d7:8f:71:45:6a:3b:29:7e: 86:81:cf:0c:0a:53:e8:fe:a5:63:cf:ed:2e:dd:4e:a4:08:6d: 18:22:a2:4b:ea:55:44:2b:a5:55:74:e6:62:62:60:db:e9:d7: e8:12:e3:9d:03:f8:f6:50:ae:7d:7f:5b:c1:13:f4:ba:60:de: c1:09:3f:75:61:0c:08:bf:99:02:47:1f:9e:8d:6d:14:63:c0: 91:e4:4f:07:e0:39:e3:ac:f6:79:05:91:f2:db:68:d7:85:55: 75:b3:c7:45:a1:50:a1:df:3f:04:38:bd:70:b0:ab:50:ac:7b: 42:50:a5:fd:94:48:56:9e:32:fa:11:34:1f:2e:b3:d9:19:56: e4:88:c3:81:0a:c1:33:2f:21:d6:b1:2a:fc:a4:26:92:2a:18: 66:96:eb:d3:6b:88:6e:81:0b:7b:04:c3:10:40:61:38:68:37: f2:79:71:54 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUUdGoOZWrEGCQXKhTL8yoSVPaYJAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTUwM1oX DTI3MDMwMzA2MjAwM1owMzExMC8GA1UEAxMoMkU5NkRFRDEwQjM0MzlGMDg2NTAx QTA0NDI0QjNCNDJCN0RCMTlEMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAN0sKwEi8MbMg/lVxexzGPSnQuuKmRUBK7MHazMvdbaalaj6wtshdcBTj8Yx 6lffiONAoMRGBVnA0r76ryEvblAjmdr9dgqheTnIjTs1H6aAjEgXk6fmJjSTfOuJ 9V9KRjcoVEwyDmTxisCmAZqq/c66axnY+/Y/2Wsyj1sueLrqQIdxjCXDxsWITxql HIcbUrmY2E4o8tZVaU1uvebTgrN38B3AHj/QDR+CZIFqIAKuEVqvBXLdfPUNZvBV IX6DIQ10wKswi9s5voQoPH1LODD2ge9svYEkdP3qPDXz8wIFp2l7SDGCawkFpi3R REV2JMRon8WI/gP0GMcnKw9QvWMCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQult7R CzQ58IZQGgRCSztCt9sZ0zAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTQ4OS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qxcwDQYJKoZIhvcNAQELBQADggEBAG6ngjI817PFmtdzszUYsyQ4ZbkCLqfmPawn tc/TiQQk050Dt05Y7Jyb4BkMxahRuLhy+5Wg01DOGzXJgZXA2zZP01vSUdKO9Qos 9ZlFdYSdZgHXj3FFajspfoaBzwwKU+j+pWPP7S7dTqQIbRgiokvqVUQrpVV05mJi YNvp1+gS450D+PZQrn1/W8ET9Lpg3sEJP3VhDAi/mQJHH56NbRRjwJHkTwfgOeOs 9nkFkfLbaNeFVXWzx0WhUKHfPwQ4vXCwq1Cse0JQpf2USFaeMvoRNB8us9kZVuSI w4EKwTMvIdaxKvykJpIqGGaW69NriG6BC3sEwxBAYThoN/J5cVQ= -----END CERTIFICATE-----Generated at Sat Mar 28 13:18:11 2026 by rpki-client