$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145498.roa File: AS145498.roa (raw, json) Hash identifier: qh7kSwhISf2NhaU3hVGy1Fi2sXa69xvTk5T19k4dFxM= Subject key identifier: 87:07:E5:A4:46:2C:6D:FE:43:45:A8:83:D6:A5:4F:0D:C1:B4:81:DD Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 565D3EF7A38F8D9408A95F56EDB28D4BE5B9CB56 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145498.roa Signing time: Wed 04 Mar 2026 06:22:23 +0000 ROA not before: Wed 04 Mar 2026 06:17:23 +0000 ROA not after: Wed 03 Mar 2027 06:22:23 +0000 asID: 145498 IP address blocks: 240a:ab20::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:5d:3e:f7:a3:8f:8d:94:08:a9:5f:56:ed:b2:8d:4b:e5:b9:cb:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:17:23 2026 GMT Not After : Mar 3 06:22:23 2027 GMT Subject: CN=8707E5A4462C6DFE4345A883D6A54F0DC1B481DD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:c8:00:54:ae:90:c3:97:24:13:2f:71:15:94: 6f:48:82:26:f1:ec:e6:13:8c:8c:e2:7b:2b:00:b8: c8:6d:af:20:3f:7e:e8:88:ae:48:43:ba:1a:75:a3: a2:44:62:3b:24:2d:17:fc:ed:8d:3d:0e:67:5a:0e: 76:3f:ab:99:db:48:b7:5c:f6:5b:fe:df:18:f8:a0: b7:de:bb:c9:5b:3e:5a:ef:e5:e3:01:94:a4:9a:6f: f7:b1:a2:77:fc:31:b9:a2:c3:e2:28:3e:43:dc:5f: 7a:09:13:b3:0c:84:ab:38:18:29:87:82:ec:7f:75: be:78:a5:0d:02:1d:6a:8c:ef:78:69:5d:83:b2:9e: 25:2e:ad:6f:5d:7e:39:9e:9a:c1:a0:ae:17:6c:8e: d3:b8:99:c9:a2:73:71:f4:6e:99:80:d8:5e:56:25: 5a:af:ae:51:60:a9:3c:b2:7b:b2:94:ba:28:b0:98: 91:b6:b2:cb:4f:00:40:bc:b8:b2:b2:54:a9:44:35: ab:d8:1f:b7:2c:42:8b:75:b6:53:97:e2:7f:df:15: ae:b1:f6:ff:d4:6e:e4:4d:42:fb:1f:dc:2e:45:21: f4:5f:18:e8:7e:79:32:ab:e2:08:c5:bc:9b:fb:2c: b1:ca:e9:00:c0:0d:a9:29:7d:75:40:fb:c9:37:64: 8c:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:07:E5:A4:46:2C:6D:FE:43:45:A8:83:D6:A5:4F:0D:C1:B4:81:DD X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145498.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:ab20::/32 Signature Algorithm: sha256WithRSAEncryption c5:56:6f:d5:1d:08:be:07:7f:7e:49:51:09:ff:1d:7f:95:12: 38:cb:a9:48:0b:f9:ca:c8:a3:16:6d:ec:6b:a3:e5:ed:20:fc: a5:51:df:cc:37:7f:eb:67:f4:5b:6b:74:02:db:1f:0a:d4:1d: 80:e3:2d:aa:49:5e:72:70:d4:c9:d2:2a:24:3e:c5:cb:f5:b0: 20:cf:57:e7:57:57:e0:ef:84:89:f6:68:16:80:a3:ee:57:c1: a6:23:56:26:53:6e:4a:6a:31:8a:13:3b:22:e8:22:ce:a9:43: ae:fd:11:1c:87:1c:06:0b:d6:70:fd:20:31:05:b0:b1:33:9e: f0:01:5a:7c:10:68:a7:cc:d1:a4:5d:9b:d3:35:e9:23:43:04: 22:3a:cb:35:0f:e9:02:cd:c4:e4:72:12:e0:c0:46:dc:1d:ed: 4e:17:e2:f1:a7:22:91:62:b9:a8:79:9f:38:0b:61:a3:93:bb: 8c:72:d4:34:b4:7b:87:d5:8f:b4:99:d2:56:5a:fb:d7:7a:00: 2c:2b:96:85:29:a3:7f:5c:ce:e3:0d:41:80:f3:7f:ef:2d:ce: 49:02:0b:f1:e5:a0:15:ae:94:6b:9a:19:60:b3:aa:5c:11:fd: 02:67:9e:ee:d2:fa:47:4a:b4:6b:a4:fd:4c:b4:84:cc:9a:f0: 38:52:e7:ff -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUVl0+96OPjZQIqV9W7bKNS+W5y1YwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTcyM1oX DTI3MDMwMzA2MjIyM1owMzExMC8GA1UEAxMoODcwN0U1QTQ0NjJDNkRGRTQzNDVB ODgzRDZBNTRGMERDMUI0ODFERDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALvIAFSukMOXJBMvcRWUb0iCJvHs5hOMjOJ7KwC4yG2vID9+6IiuSEO6GnWj okRiOyQtF/ztjT0OZ1oOdj+rmdtIt1z2W/7fGPigt967yVs+Wu/l4wGUpJpv97Gi d/wxuaLD4ig+Q9xfegkTswyEqzgYKYeC7H91vnilDQIdaozveGldg7KeJS6tb11+ OZ6awaCuF2yO07iZyaJzcfRumYDYXlYlWq+uUWCpPLJ7spS6KLCYkbayy08AQLy4 srJUqUQ1q9gftyxCi3W2U5fif98VrrH2/9Ru5E1C+x/cLkUh9F8Y6H55MqviCMW8 m/ssscrpAMANqSl9dUD7yTdkjNkCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSHB+Wk Rixt/kNFqIPWpU8NwbSB3TAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTQ5OC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qyAwDQYJKoZIhvcNAQELBQADggEBAMVWb9UdCL4Hf35JUQn/HX+VEjjLqUgL+crI oxZt7Guj5e0g/KVR38w3f+tn9FtrdALbHwrUHYDjLapJXnJw1MnSKiQ+xcv1sCDP V+dXV+DvhIn2aBaAo+5XwaYjViZTbkpqMYoTOyLoIs6pQ679ERyHHAYL1nD9IDEF sLEznvABWnwQaKfM0aRdm9M16SNDBCI6yzUP6QLNxORyEuDARtwd7U4X4vGnIpFi uah5nzgLYaOTu4xy1DS0e4fVj7SZ0lZa+9d6ACwrloUpo39czuMNQYDzf+8tzkkC C/HloBWulGuaGWCzqlwR/QJnnu7S+kdKtGuk/Uy0hMya8DhS5/8= -----END CERTIFICATE-----Generated at Sat Mar 28 11:41:27 2026 by rpki-client