$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145508.roa File: AS145508.roa (raw, json) Hash identifier: elD1FGMreBHMqrjUpehczD7quEirBNajUxPqk6deYmk= Subject key identifier: 6D:82:6D:A7:6B:DD:97:00:22:5D:6C:4D:AF:D7:0D:65:58:FE:54:E4 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 0749ED65388FE2386EA91156515E4C7EBC7A3826 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145508.roa Signing time: Wed 04 Mar 2026 06:19:52 +0000 ROA not before: Wed 04 Mar 2026 06:14:52 +0000 ROA not after: Wed 03 Mar 2027 06:19:52 +0000 asID: 145508 IP address blocks: 240a:ab2a::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:49:ed:65:38:8f:e2:38:6e:a9:11:56:51:5e:4c:7e:bc:7a:38:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:14:52 2026 GMT Not After : Mar 3 06:19:52 2027 GMT Subject: CN=6D826DA76BDD9700225D6C4DAFD70D6558FE54E4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:23:4e:d2:04:68:c2:7c:95:fe:3c:69:e6:2f: 02:c7:04:f8:24:6d:67:b1:59:23:79:83:97:47:20: 64:0b:8e:a6:d2:be:16:0c:29:65:3e:7c:d3:4e:3b: 7e:4d:e6:46:c8:02:35:e2:e2:fc:d4:a2:ab:23:10: 5c:da:69:63:79:86:09:81:57:4e:59:84:53:2a:a5: 98:65:0e:25:20:6c:c4:eb:c2:7a:cc:b6:74:2d:f3: 89:2c:36:e4:d4:d4:91:dd:e2:d8:b2:44:63:43:b5: b4:91:8b:f0:0c:d2:68:3b:17:de:53:9f:5f:b8:36: 77:f6:5f:65:91:a2:04:d4:97:ca:13:32:80:ce:18: cb:24:1e:14:91:d1:12:17:d2:d9:ab:47:17:ae:b7: 0a:86:f8:f4:42:5d:42:2a:8b:e8:60:b5:20:77:b3: 31:bf:a3:bb:d5:54:96:ee:00:52:42:45:92:ea:3c: f9:7a:1f:97:02:54:24:40:67:cc:b1:be:f8:b4:1f: fc:68:50:52:7f:84:a9:cc:83:55:0e:d3:c9:2a:da: 83:67:5e:1d:cf:e7:ef:82:9f:99:91:c2:b8:c9:a5: e3:86:60:71:78:eb:31:db:d6:f5:68:fb:bb:d6:6d: b6:d7:a6:6b:c7:4a:65:c6:81:29:25:25:9a:9c:7e: f7:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:82:6D:A7:6B:DD:97:00:22:5D:6C:4D:AF:D7:0D:65:58:FE:54:E4 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145508.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:ab2a::/32 Signature Algorithm: sha256WithRSAEncryption 89:70:8a:5a:78:6b:29:c6:12:7e:c0:37:e1:d4:1a:01:ef:98: 5c:e8:d3:b7:1b:69:43:b4:db:ab:92:6e:40:2d:a1:75:bc:e6: 53:3b:d3:5c:6c:67:ec:e7:4c:ec:f7:d4:ce:32:80:3a:96:8b: 90:a3:d0:e9:ae:95:31:f8:39:0f:0e:a7:91:e4:94:ca:14:33: a4:2b:35:65:c0:cc:7c:52:a8:55:e0:c5:a3:e2:08:28:3c:30: 4c:f9:62:a4:65:b3:03:53:64:95:f3:90:7d:0e:77:68:97:44: 44:86:6f:23:26:97:02:c1:d6:e7:87:5a:0b:64:ca:7a:9d:48: 34:0f:66:44:70:b7:aa:c4:51:54:27:96:66:c0:8c:86:29:8b: d7:8d:ae:85:92:6d:49:fe:79:04:8d:94:7d:d3:fb:91:1b:5f: 92:91:45:2b:18:da:fd:54:8b:e4:57:a9:19:c1:1c:a1:c8:00: 47:6a:92:fa:45:e7:e9:5b:70:e0:48:88:a9:f6:b1:79:39:52: 42:b3:a9:a3:a1:8e:d9:72:3e:17:3e:75:18:a3:3b:42:71:bc: 26:81:99:5c:16:ab:8a:e1:72:63:72:50:02:72:4a:d5:f0:c8: 30:a3:fe:47:b7:8a:16:49:ee:e1:ce:02:b7:d4:94:8e:d8:43: 0b:60:96:a3 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUB0ntZTiP4jhuqRFWUV5Mfrx6OCYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTQ1MloX DTI3MDMwMzA2MTk1MlowMzExMC8GA1UEAxMoNkQ4MjZEQTc2QkREOTcwMDIyNUQ2 QzREQUZENzBENjU1OEZFNTRFNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKUjTtIEaMJ8lf48aeYvAscE+CRtZ7FZI3mDl0cgZAuOptK+FgwpZT580047 fk3mRsgCNeLi/NSiqyMQXNppY3mGCYFXTlmEUyqlmGUOJSBsxOvCesy2dC3ziSw2 5NTUkd3i2LJEY0O1tJGL8AzSaDsX3lOfX7g2d/ZfZZGiBNSXyhMygM4YyyQeFJHR EhfS2atHF663Cob49EJdQiqL6GC1IHezMb+ju9VUlu4AUkJFkuo8+XoflwJUJEBn zLG++LQf/GhQUn+EqcyDVQ7TySrag2deHc/n74KfmZHCuMml44ZgcXjrMdvW9Wj7 u9Ztttema8dKZcaBKSUlmpx+92ECAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRtgm2n a92XACJdbE2v1w1lWP5U5DAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTUwOC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qyowDQYJKoZIhvcNAQELBQADggEBAIlwilp4aynGEn7AN+HUGgHvmFzo07cbaUO0 26uSbkAtoXW85lM701xsZ+znTOz31M4ygDqWi5Cj0OmulTH4OQ8Op5HklMoUM6Qr NWXAzHxSqFXgxaPiCCg8MEz5YqRlswNTZJXzkH0Od2iXRESGbyMmlwLB1ueHWgtk ynqdSDQPZkRwt6rEUVQnlmbAjIYpi9eNroWSbUn+eQSNlH3T+5EbX5KRRSsY2v1U i+RXqRnBHKHIAEdqkvpF5+lbcOBIiKn2sXk5UkKzqaOhjtlyPhc+dRijO0JxvCaB mVwWq4rhcmNyUAJyStXwyDCj/ke3ihZJ7uHOArfUlI7YQwtglqM= -----END CERTIFICATE-----Generated at Sat Mar 28 13:13:42 2026 by rpki-client