$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145511.roa File: AS145511.roa (raw, json) Hash identifier: KKCKQM3hX1rVqG8TNLvDibJVOYRf6kZz4hMgfWdEi1I= Subject key identifier: FE:8A:34:5C:06:AB:1E:B0:BE:19:F0:B9:FC:87:D6:40:3A:1F:7C:52 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 64ADB8C3DEA8BFC90A8228696DE6B811CBD9E9B7 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145511.roa Signing time: Wed 04 Mar 2026 06:19:59 +0000 ROA not before: Wed 04 Mar 2026 06:14:59 +0000 ROA not after: Wed 03 Mar 2027 06:19:59 +0000 asID: 145511 IP address blocks: 240a:ab2d::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:ad:b8:c3:de:a8:bf:c9:0a:82:28:69:6d:e6:b8:11:cb:d9:e9:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:14:59 2026 GMT Not After : Mar 3 06:19:59 2027 GMT Subject: CN=FE8A345C06AB1EB0BE19F0B9FC87D6403A1F7C52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:37:95:9a:2c:f8:7a:83:b5:68:7e:e8:f1:92: bd:a1:a4:75:0e:c2:1b:cf:18:b5:18:13:2a:14:83: d2:2a:5e:16:6a:b0:dc:8f:9e:9f:3b:a3:f7:77:6a: 8c:ed:33:fe:d5:1e:42:c2:0d:88:fe:f2:a8:ea:e4: 6a:11:e4:79:6d:5b:13:b1:a1:e8:00:64:0a:42:04: 36:21:ae:1a:59:21:bd:6f:4c:3f:b7:f3:b0:2f:3b: f6:82:d0:6e:15:91:8d:b9:55:51:15:bc:04:b5:1d: ff:41:b8:f7:b0:aa:9e:11:bc:08:69:b9:b3:5b:94: d1:3e:e7:3b:8e:53:e9:49:e4:74:f3:d5:f9:ed:33: 31:e7:e2:c1:b2:09:3d:1e:fe:36:e0:5a:f4:17:bd: 78:cb:8b:6e:cd:d8:ea:78:60:63:ab:83:da:03:b1: 93:ef:89:90:a9:f2:b7:b6:59:c1:06:37:bd:65:4d: 61:5f:8e:ab:fa:37:7f:55:86:8f:c8:7b:12:99:45: d5:17:5e:31:30:f3:04:34:06:a4:dd:b7:f5:b9:88: 06:90:12:82:ee:7c:c7:2f:7e:e3:19:c1:fc:c2:7f: e5:5a:ed:e7:80:f4:0a:f0:00:92:ad:ac:93:cc:3c: d4:b2:d4:5c:12:2b:f2:6a:96:6f:e7:fe:ed:5f:04: 41:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:8A:34:5C:06:AB:1E:B0:BE:19:F0:B9:FC:87:D6:40:3A:1F:7C:52 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145511.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:ab2d::/32 Signature Algorithm: sha256WithRSAEncryption 4e:89:82:07:20:a6:08:7d:9d:e0:09:e0:16:7d:44:fc:41:eb: e1:9e:e2:e2:bd:57:e6:08:d8:df:58:4e:86:82:a2:6f:c7:73: 42:13:c8:3a:04:05:22:d2:01:a2:58:20:91:54:a3:75:f7:20: cd:10:64:5f:b2:13:e1:dd:ba:e6:8f:62:2d:f2:a3:1f:4e:90: 72:6c:82:9e:cc:8f:32:4e:42:93:ae:32:e5:e7:68:96:7d:dd: cc:eb:77:4c:49:b7:c8:f1:b5:7f:b7:30:83:97:b4:00:7b:02: a7:b4:6a:af:20:d1:b3:7b:e0:d2:aa:9c:f5:cb:9f:00:7f:3a: 7a:e4:19:d5:5b:bf:80:98:80:a7:59:71:01:94:ae:43:ca:5a: 44:42:fc:f4:21:63:f0:24:8f:42:ca:0b:66:3f:83:b4:5c:57: 29:95:dc:17:4d:4d:2a:a1:e1:d2:94:da:ac:87:53:4d:fa:23: ac:7a:08:60:4b:6a:0e:e0:88:de:46:69:7a:37:56:b4:fa:b1: 37:6d:14:f0:8a:d9:d0:42:7f:20:45:31:d0:54:c4:ef:46:9d: ac:5c:1c:bd:ed:57:b2:c5:14:18:4b:10:55:e1:6e:a2:11:ea: f7:c2:f1:6f:31:f7:62:86:d8:11:f9:19:5b:28:56:99:c8:20: 0d:f0:ea:6b -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUZK24w96ov8kKgihpbea4EcvZ6bcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTQ1OVoX DTI3MDMwMzA2MTk1OVowMzExMC8GA1UEAxMoRkU4QTM0NUMwNkFCMUVCMEJFMTlG MEI5RkM4N0Q2NDAzQTFGN0M1MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL43lZos+HqDtWh+6PGSvaGkdQ7CG88YtRgTKhSD0ipeFmqw3I+enzuj93dq jO0z/tUeQsINiP7yqOrkahHkeW1bE7Gh6ABkCkIENiGuGlkhvW9MP7fzsC879oLQ bhWRjblVURW8BLUd/0G497CqnhG8CGm5s1uU0T7nO45T6UnkdPPV+e0zMefiwbIJ PR7+NuBa9Be9eMuLbs3Y6nhgY6uD2gOxk++JkKnyt7ZZwQY3vWVNYV+Oq/o3f1WG j8h7EplF1RdeMTDzBDQGpN239bmIBpASgu58xy9+4xnB/MJ/5Vrt54D0CvAAkq2s k8w81LLUXBIr8mqWb+f+7V8EQUcCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBT+ijRc BqsesL4Z8Ln8h9ZAOh98UjAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTUxMS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qy0wDQYJKoZIhvcNAQELBQADggEBAE6Jggcgpgh9neAJ4BZ9RPxB6+Ge4uK9V+YI 2N9YToaCom/Hc0ITyDoEBSLSAaJYIJFUo3X3IM0QZF+yE+HduuaPYi3yox9OkHJs gp7MjzJOQpOuMuXnaJZ93czrd0xJt8jxtX+3MIOXtAB7Aqe0aq8g0bN74NKqnPXL nwB/OnrkGdVbv4CYgKdZcQGUrkPKWkRC/PQhY/Akj0LKC2Y/g7RcVymV3BdNTSqh 4dKU2qyHU036I6x6CGBLag7giN5GaXo3VrT6sTdtFPCK2dBCfyBFMdBUxO9Gnaxc HL3tV7LFFBhLEFXhbqIR6vfC8W8x92KG2BH5GVsoVpnIIA3w6ms= -----END CERTIFICATE-----Generated at Sat Mar 28 11:50:05 2026 by rpki-client