$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145514.roa File: AS145514.roa (raw, json) Hash identifier: nZBUZY99fNrwdtbR7L8z5rWgcEdr+b9JAWLMY05Tvb0= Subject key identifier: 04:64:E7:38:A6:2A:59:13:9A:87:4C:DE:2D:74:3A:97:83:F2:47:F2 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 5B658B51F807044A8BDED5589EFBA4B7F6F75AF0 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145514.roa Signing time: Wed 04 Mar 2026 06:21:20 +0000 ROA not before: Wed 04 Mar 2026 06:16:20 +0000 ROA not after: Wed 03 Mar 2027 06:21:20 +0000 asID: 145514 IP address blocks: 240a:ab30::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:65:8b:51:f8:07:04:4a:8b:de:d5:58:9e:fb:a4:b7:f6:f7:5a:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:16:20 2026 GMT Not After : Mar 3 06:21:20 2027 GMT Subject: CN=0464E738A62A59139A874CDE2D743A9783F247F2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:4a:cf:a8:58:8d:55:ad:ae:a6:98:5b:a1:db: da:e7:c3:48:0e:b2:0b:fc:4a:b8:a8:ac:fb:ee:d6: 8b:71:d2:31:16:71:cc:ad:48:75:3c:21:7b:82:81: 7d:65:41:13:5b:db:c7:31:fe:4d:e7:fa:de:81:53: a0:68:58:03:4c:c5:71:38:5d:36:51:43:b0:92:48: fa:52:cc:e8:d2:2d:df:eb:1d:eb:3d:37:88:91:60: c1:8f:82:de:4a:ee:f5:ed:c3:59:3a:e3:f5:02:f4: 61:aa:f3:0e:d2:9b:2c:cc:fa:e2:0c:2b:7a:24:90: e0:6d:e2:bc:92:9f:54:69:71:f9:cb:d8:55:10:b2: 3f:46:18:f6:f2:2c:c6:78:49:c7:d5:a1:96:da:62: e4:95:74:c7:d3:65:5f:93:7f:14:91:3a:f9:2a:13: 7f:61:02:8a:97:c3:0c:1c:6f:3f:0b:26:2e:7c:72: 01:b1:1f:b2:de:d9:8b:5f:c3:59:3b:a9:6e:53:fa: c3:59:fa:ed:a4:24:a7:bd:22:b0:4e:66:e2:37:90: e9:9b:03:be:29:ce:1a:64:bc:69:4d:3f:82:29:9a: 53:92:38:96:37:fa:c8:d2:8c:61:e0:05:2f:79:ba: ce:53:a9:25:3a:97:e8:d9:38:8b:4a:70:3a:1a:c5: 3b:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:64:E7:38:A6:2A:59:13:9A:87:4C:DE:2D:74:3A:97:83:F2:47:F2 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145514.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:ab30::/32 Signature Algorithm: sha256WithRSAEncryption c3:af:47:82:6a:73:0b:84:9d:05:76:af:53:69:e5:d0:6a:53: 3d:c1:a0:c5:b2:18:a5:e2:46:62:a7:92:01:8a:7f:46:dd:f4: ce:09:cb:a3:0f:fe:e5:f5:92:24:2d:23:0b:17:60:bb:dc:c9: c5:39:ff:5f:8c:9f:7b:ae:5d:1f:87:fa:2d:8b:43:0e:0e:5a: c3:b3:90:22:17:59:ea:1f:9f:4d:d2:c5:b3:10:7e:01:8d:48: 89:25:9d:ba:b4:36:ab:5b:70:00:88:20:eb:f4:ec:63:ee:ea: 63:42:de:ab:f0:31:04:c9:74:11:98:73:83:d0:0e:6c:ea:04: dd:69:2c:e1:b0:8c:7a:51:d2:71:f2:7d:f8:1e:23:1f:e1:50: 22:95:51:ac:71:75:ec:59:16:a1:16:e5:53:59:b0:08:d2:af: 76:d6:fa:fe:1c:73:53:26:d0:8b:05:ba:91:f1:f0:59:99:bd: 84:1d:aa:a5:3e:44:4f:82:a3:22:41:4f:f0:82:79:fd:03:ca: 46:aa:83:87:dc:bb:fe:6b:ce:bf:ad:18:0f:1b:15:d9:da:a3: df:43:72:ca:da:20:c8:26:18:14:0d:6a:30:03:10:a2:12:bb: d0:e9:03:d3:97:ef:fa:3d:46:b5:92:ef:6b:5c:ee:3a:a5:7c: eb:ad:c7:78 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUW2WLUfgHBEqL3tVYnvukt/b3WvAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTYyMFoX DTI3MDMwMzA2MjEyMFowMzExMC8GA1UEAxMoMDQ2NEU3MzhBNjJBNTkxMzlBODc0 Q0RFMkQ3NDNBOTc4M0YyNDdGMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK1Kz6hYjVWtrqaYW6Hb2ufDSA6yC/xKuKis++7Wi3HSMRZxzK1IdTwhe4KB fWVBE1vbxzH+Tef63oFToGhYA0zFcThdNlFDsJJI+lLM6NIt3+sd6z03iJFgwY+C 3kru9e3DWTrj9QL0YarzDtKbLMz64gwreiSQ4G3ivJKfVGlx+cvYVRCyP0YY9vIs xnhJx9Whltpi5JV0x9NlX5N/FJE6+SoTf2ECipfDDBxvPwsmLnxyAbEfst7Zi1/D WTupblP6w1n67aQkp70isE5m4jeQ6ZsDvinOGmS8aU0/gimaU5I4ljf6yNKMYeAF L3m6zlOpJTqX6Nk4i0pwOhrFOxMCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQEZOc4 pipZE5qHTN4tdDqXg/JH8jAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTUxNC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qzAwDQYJKoZIhvcNAQELBQADggEBAMOvR4JqcwuEnQV2r1Np5dBqUz3BoMWyGKXi RmKnkgGKf0bd9M4Jy6MP/uX1kiQtIwsXYLvcycU5/1+Mn3uuXR+H+i2LQw4OWsOz kCIXWeofn03SxbMQfgGNSIklnbq0NqtbcACIIOv07GPu6mNC3qvwMQTJdBGYc4PQ DmzqBN1pLOGwjHpR0nHyffgeIx/hUCKVUaxxdexZFqEW5VNZsAjSr3bW+v4cc1Mm 0IsFupHx8FmZvYQdqqU+RE+CoyJBT/CCef0Dykaqg4fcu/5rzr+tGA8bFdnao99D csraIMgmGBQNajADEKISu9DpA9OX7/o9RrWS72tc7jqlfOutx3g= -----END CERTIFICATE-----Generated at Sat Mar 28 11:46:02 2026 by rpki-client