$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145519.roa File: AS145519.roa (raw, json) Hash identifier: XSLyWxru2Zcp+SzFZw2NVMXWMyZAakNqZLXNKhMdBcE= Subject key identifier: B6:4E:22:E4:00:F9:70:1B:19:4A:6A:37:18:3D:98:B7:5F:A8:D3:5C Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 02FEB8E662122675004367214256F9EF27FDBA93 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145519.roa Signing time: Wed 04 Mar 2026 06:30:46 +0000 ROA not before: Wed 04 Mar 2026 06:25:46 +0000 ROA not after: Wed 03 Mar 2027 06:30:46 +0000 asID: 145519 IP address blocks: 240a:ab35::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:fe:b8:e6:62:12:26:75:00:43:67:21:42:56:f9:ef:27:fd:ba:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:25:46 2026 GMT Not After : Mar 3 06:30:46 2027 GMT Subject: CN=B64E22E400F9701B194A6A37183D98B75FA8D35C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:b3:c6:ca:10:c8:55:e0:98:d5:8a:e3:09:6e: 4e:91:9c:e3:a0:fc:ab:b6:9b:f1:ba:6b:f8:50:13: 57:b5:45:17:d4:b1:5a:2f:d8:d9:6d:9d:c8:f0:d9: 1a:24:90:89:eb:7e:5c:4b:fd:11:c7:b2:62:66:3a: ae:f9:ce:06:c5:00:5a:ac:19:9d:b7:d1:ad:67:9e: 3f:c3:3f:30:b9:bf:cd:0e:cd:37:d0:e4:c6:83:00: 36:0f:7b:78:25:0a:f1:98:7f:f0:8c:7b:95:25:31: f8:6d:f8:64:55:1d:c6:3f:4b:2f:7e:23:33:50:c7: 0b:8d:63:da:f2:41:30:ff:18:2b:d8:a2:ac:a1:bb: 6a:2f:3e:3d:e1:22:7f:ee:64:79:b9:80:80:41:2f: 71:10:2a:4f:99:81:26:8c:ca:28:04:0c:5d:25:e5: 96:8f:ca:74:46:28:36:b8:0d:07:52:d6:4d:f3:7e: e8:ab:5e:72:6c:c9:3b:c2:e8:21:fd:e3:7f:f4:08: 9e:21:ae:bb:64:0d:91:54:74:1a:d6:f8:c6:c0:50: 9a:c3:07:8c:64:58:d8:0e:a4:83:6c:5e:bf:47:49: a2:14:5f:71:1d:8d:60:94:38:ff:59:25:9d:53:1b: eb:d2:f1:26:2b:bc:77:27:af:f9:51:73:2e:fa:22: 22:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:4E:22:E4:00:F9:70:1B:19:4A:6A:37:18:3D:98:B7:5F:A8:D3:5C X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145519.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:ab35::/32 Signature Algorithm: sha256WithRSAEncryption 05:d8:04:b4:d9:c0:5e:06:b4:d8:72:a4:be:20:19:0a:f0:81: 00:36:64:99:75:a5:98:58:d2:20:b9:45:d8:b2:0b:da:e9:25: f0:44:ba:6c:d5:b4:47:cd:86:36:7d:ad:c6:b8:fb:a0:1a:19: 0a:a7:ab:d3:10:5d:d9:5a:6c:8c:8a:9e:f9:2f:70:11:ed:fc: c3:d4:10:4f:5b:31:64:75:c8:35:6a:a1:19:df:35:0d:ad:57: 2d:36:24:ce:09:43:2e:bc:a3:5b:d3:36:a3:fc:e3:77:34:21: 79:10:85:ea:2c:46:e9:11:a2:77:41:98:19:a8:3e:18:0b:dc: 13:11:04:32:53:75:6d:46:35:97:5f:c5:bd:4e:a2:15:2a:eb: 89:07:c8:75:f9:5e:16:0a:4c:53:74:5f:47:bd:57:93:ba:8e: 40:9b:c8:fd:20:e7:b9:32:34:be:68:a5:22:20:44:e3:d4:69: 0b:4c:69:a5:f1:91:58:fe:b3:c5:45:c4:73:fb:73:e4:8f:1e: a1:17:e6:4f:7f:7d:9f:fb:db:c5:54:e8:cb:79:43:ce:e2:6a: 24:1a:9c:ba:f7:6e:5d:75:0e:8e:98:f8:35:07:cb:d7:67:82: 28:b2:6c:8a:db:7c:58:73:22:aa:8d:70:15:16:0a:bc:3f:78: 34:3b:c5:48 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUAv645mISJnUAQ2chQlb57yf9upMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MjU0NloX DTI3MDMwMzA2MzA0NlowMzExMC8GA1UEAxMoQjY0RTIyRTQwMEY5NzAxQjE5NEE2 QTM3MTgzRDk4Qjc1RkE4RDM1QzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOqzxsoQyFXgmNWK4wluTpGc46D8q7ab8bpr+FATV7VFF9SxWi/Y2W2dyPDZ GiSQiet+XEv9EceyYmY6rvnOBsUAWqwZnbfRrWeeP8M/MLm/zQ7NN9DkxoMANg97 eCUK8Zh/8Ix7lSUx+G34ZFUdxj9LL34jM1DHC41j2vJBMP8YK9iirKG7ai8+PeEi f+5kebmAgEEvcRAqT5mBJozKKAQMXSXllo/KdEYoNrgNB1LWTfN+6KtecmzJO8Lo If3jf/QIniGuu2QNkVR0Gtb4xsBQmsMHjGRY2A6kg2xev0dJohRfcR2NYJQ4/1kl nVMb69LxJiu8dyev+VFzLvoiIlsCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBS2TiLk APlwGxlKajcYPZi3X6jTXDAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTUxOS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qzUwDQYJKoZIhvcNAQELBQADggEBAAXYBLTZwF4GtNhypL4gGQrwgQA2ZJl1pZhY 0iC5RdiyC9rpJfBEumzVtEfNhjZ9rca4+6AaGQqnq9MQXdlabIyKnvkvcBHt/MPU EE9bMWR1yDVqoRnfNQ2tVy02JM4JQy68o1vTNqP843c0IXkQheosRukRondBmBmo PhgL3BMRBDJTdW1GNZdfxb1OohUq64kHyHX5XhYKTFN0X0e9V5O6jkCbyP0g57ky NL5opSIgROPUaQtMaaXxkVj+s8VFxHP7c+SPHqEX5k9/fZ/728VU6Mt5Q87iaiQa nLr3bl11Do6Y+DUHy9dngiiybIrbfFhzIqqNcBUWCrw/eDQ7xUg= -----END CERTIFICATE-----Generated at Sat Mar 28 11:44:47 2026 by rpki-client