$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145515.roa File: AS145515.roa (raw, json) Hash identifier: wPG3LJzBhfaOZeth8rY/drToKTmnh1u1sqF9ToyZCxM= Subject key identifier: F1:89:CE:EC:E7:A8:4F:42:BF:70:29:18:12:F0:0F:31:FE:EB:1A:FC Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 5F6D952238C7A41E9CCEDFE6714726CBB98880E6 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145515.roa Signing time: Wed 04 Mar 2026 06:21:34 +0000 ROA not before: Wed 04 Mar 2026 06:16:34 +0000 ROA not after: Wed 03 Mar 2027 06:21:34 +0000 asID: 145515 IP address blocks: 240a:ab31::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:6d:95:22:38:c7:a4:1e:9c:ce:df:e6:71:47:26:cb:b9:88:80:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:16:34 2026 GMT Not After : Mar 3 06:21:34 2027 GMT Subject: CN=F189CEECE7A84F42BF70291812F00F31FEEB1AFC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:ac:85:20:b1:5e:d0:79:0e:80:70:bb:1d:da: 8b:21:37:6f:da:d5:b8:67:c3:a9:0b:e3:80:8f:08: 1f:26:92:70:37:2c:8a:13:dc:05:c5:bb:c2:a8:d7: 8e:ef:76:e9:45:51:a5:6e:60:0c:54:ea:db:d8:f1: 77:a3:ad:31:3a:37:03:9e:48:36:d7:60:20:1a:3f: 56:50:6f:db:41:cf:2e:45:b4:41:c9:28:65:1e:ce: 7c:2d:bf:f3:c5:4e:fb:2d:f4:c8:07:73:ec:f9:b3: f9:ae:6e:82:65:93:e2:a1:3f:9b:cd:7a:9d:4f:47: a1:23:01:b9:02:6a:c3:cf:33:62:9d:14:be:85:6d: b4:6d:e7:05:6c:69:e7:92:69:9d:b0:69:cc:11:42: 30:4a:fa:ff:c9:4b:06:c4:55:ef:19:9b:7b:f6:5d: d5:40:d5:4a:77:72:88:b8:be:9a:b3:2a:18:a8:05: 67:07:c6:9a:91:50:b2:ee:4d:03:c1:38:62:75:e2: 04:04:2f:44:70:8b:f1:c9:0e:08:50:6b:fa:ca:4e: 2d:08:de:1b:a5:60:83:7a:ed:f0:4b:d5:39:90:66: e6:05:ea:bc:22:19:44:44:ef:1a:7a:e7:34:bf:3d: 50:42:46:e5:5d:36:34:f4:ad:4c:1e:7f:5f:07:51: 03:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:89:CE:EC:E7:A8:4F:42:BF:70:29:18:12:F0:0F:31:FE:EB:1A:FC X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145515.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:ab31::/32 Signature Algorithm: sha256WithRSAEncryption 16:7b:17:f6:af:e1:c0:d5:2b:7d:97:e9:8a:19:9c:ab:22:46: c2:f3:49:a2:fe:f3:a4:08:ff:9b:fe:9a:ce:fd:3a:69:8d:4a: 3c:c8:0c:ce:a3:bc:f2:a3:d6:ca:f1:62:be:b4:a4:45:60:ab: da:3c:bb:8e:73:13:1d:dd:d4:5b:bd:15:da:95:46:0e:0e:c4: 84:c0:21:93:61:79:c9:d0:02:47:9b:e8:fb:3e:25:c2:d9:46: 18:f9:4a:41:77:70:6d:38:68:8d:dd:02:47:74:78:5e:10:dc: ac:4c:32:76:95:63:9b:36:3e:a6:b6:fc:3b:e9:7c:7a:de:08: 85:46:bb:8a:e9:1e:4d:95:48:98:cb:39:35:03:dd:23:69:5c: 75:e7:26:1f:50:8a:d0:75:64:a0:1f:9b:fa:42:ba:1c:5f:67: 22:83:24:99:75:df:0c:2a:49:5f:1d:79:98:52:6c:1c:91:9f: fc:99:63:f9:28:54:be:e5:bc:46:bc:c8:b4:0e:7d:2e:a8:12: f9:e0:3d:71:35:2c:6f:b3:f1:d2:e0:a6:e0:9e:59:ff:1f:41: 82:c2:8c:d4:f7:e9:f0:d4:b5:9b:7b:27:d4:75:a7:88:bf:0e: 5a:9a:33:6c:08:d4:af:41:60:c2:47:f1:7f:c9:69:a0:35:40: ba:46:f1:77 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUX22VIjjHpB6czt/mcUcmy7mIgOYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTYzNFoX DTI3MDMwMzA2MjEzNFowMzExMC8GA1UEAxMoRjE4OUNFRUNFN0E4NEY0MkJGNzAy OTE4MTJGMDBGMzFGRUVCMUFGQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAN6shSCxXtB5DoBwux3aiyE3b9rVuGfDqQvjgI8IHyaScDcsihPcBcW7wqjX ju926UVRpW5gDFTq29jxd6OtMTo3A55INtdgIBo/VlBv20HPLkW0QckoZR7OfC2/ 88VO+y30yAdz7Pmz+a5ugmWT4qE/m816nU9HoSMBuQJqw88zYp0UvoVttG3nBWxp 55JpnbBpzBFCMEr6/8lLBsRV7xmbe/Zd1UDVSndyiLi+mrMqGKgFZwfGmpFQsu5N A8E4YnXiBAQvRHCL8ckOCFBr+spOLQjeG6Vgg3rt8EvVOZBm5gXqvCIZRETvGnrn NL89UEJG5V02NPStTB5/XwdRA4sCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBTxic7s 56hPQr9wKRgS8A8x/usa/DAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTUxNS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qzEwDQYJKoZIhvcNAQELBQADggEBABZ7F/av4cDVK32X6YoZnKsiRsLzSaL+86QI /5v+ms79OmmNSjzIDM6jvPKj1srxYr60pEVgq9o8u45zEx3d1Fu9FdqVRg4OxITA IZNhecnQAkeb6Ps+JcLZRhj5SkF3cG04aI3dAkd0eF4Q3KxMMnaVY5s2Pqa2/Dvp fHreCIVGu4rpHk2VSJjLOTUD3SNpXHXnJh9QitB1ZKAfm/pCuhxfZyKDJJl13wwq SV8deZhSbByRn/yZY/koVL7lvEa8yLQOfS6oEvngPXE1LG+z8dLgpuCeWf8fQYLC jNT36fDUtZt7J9R1p4i/DlqaM2wI1K9BYMJH8X/JaaA1QLpG8Xc= -----END CERTIFICATE-----Generated at Sat Mar 28 11:46:09 2026 by rpki-client