$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145534.roa File: AS145534.roa (raw, json) Hash identifier: dblBOXY7KnOo10KWQVnuASOj0Ys0fVTudQ4q0rsxC9E= Subject key identifier: B1:78:E0:3E:DD:E8:34:9A:ED:F3:3F:4A:E3:68:5C:3A:3E:50:C7:C3 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 4B190ADADBAA8DE9A53552BC586F91BDC27613D9 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145534.roa Signing time: Wed 04 Mar 2026 06:29:33 +0000 ROA not before: Wed 04 Mar 2026 06:24:33 +0000 ROA not after: Wed 03 Mar 2027 06:29:33 +0000 asID: 145534 IP address blocks: 240a:ab44::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:19:0a:da:db:aa:8d:e9:a5:35:52:bc:58:6f:91:bd:c2:76:13:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:24:33 2026 GMT Not After : Mar 3 06:29:33 2027 GMT Subject: CN=B178E03EDDE8349AEDF33F4AE3685C3A3E50C7C3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:9c:2b:45:f8:9d:84:7b:c5:13:92:66:60:ca: 26:fb:81:c3:55:5b:0c:1d:e8:95:94:1c:e7:f8:79: 79:3e:81:3c:69:58:50:c0:98:80:7e:9c:7f:4a:46: 1c:8d:52:eb:1f:df:c3:24:0b:62:7f:c0:7b:9d:72: 9b:92:9a:db:ff:b3:0d:f3:50:f7:ee:c8:90:27:59: 95:bc:74:11:94:17:7f:a3:6c:a1:e2:3b:a2:cf:47: 07:a8:ca:82:c3:65:e5:0b:e3:ec:24:e4:64:b7:f4: d6:be:18:b6:80:1c:3e:4c:2c:fb:a8:28:c0:ba:83: 67:cd:2e:8a:84:70:16:b4:ec:71:4b:70:e9:70:76: b4:15:82:4a:f8:0e:83:7d:4e:c3:82:29:50:45:90: a3:85:02:30:b9:8e:22:af:de:48:49:03:ac:bd:e7: 7c:9c:be:f8:f1:4a:fc:f1:93:52:21:84:6a:62:45: ca:2a:4c:2e:8b:ee:30:15:dc:11:79:54:ed:c8:de: 2e:69:ec:a5:6b:bb:b9:e2:aa:70:21:99:ec:da:6f: 31:3c:83:0d:4d:fc:f9:04:f7:79:d4:ad:eb:e4:94: 44:52:98:aa:c3:b0:44:0c:53:14:35:ff:17:86:d5: 59:3f:59:04:be:d0:e2:72:6d:d3:85:63:05:01:ac: 68:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:78:E0:3E:DD:E8:34:9A:ED:F3:3F:4A:E3:68:5C:3A:3E:50:C7:C3 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145534.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:ab44::/32 Signature Algorithm: sha256WithRSAEncryption be:39:94:01:ef:ca:e9:25:26:4c:97:6a:f9:7b:cb:60:19:67: cd:13:5b:40:d6:86:a6:4e:28:f6:74:05:8a:74:84:e8:35:6f: 09:e8:a0:9b:63:fc:46:22:10:24:a3:b5:e7:13:dd:61:61:f3: 54:6c:7b:a9:48:98:ae:3e:26:67:81:4f:50:74:02:ae:0f:23: ef:01:ea:69:b8:bd:74:61:62:6f:55:09:ce:06:b3:2b:d2:ce: ee:2f:ac:61:a9:dd:50:f8:d7:5f:b0:39:58:8d:a6:87:23:59: a4:27:58:4d:3c:ed:a7:2b:b7:d9:7c:9d:fb:05:71:30:33:11: 22:49:e0:be:56:1c:17:84:f9:be:d2:aa:f9:68:77:b0:06:95: 6d:ba:24:1b:c6:26:eb:e5:e7:93:da:b9:4f:53:c4:e2:17:20: 99:e2:c4:cf:24:0d:bf:62:8d:2a:18:8d:89:8d:b3:9f:99:6d: aa:f1:bd:04:aa:07:d0:ab:e2:d2:d4:86:65:71:90:e0:d3:de: 1f:dd:fd:14:be:d3:dd:da:f0:c9:d3:e4:13:43:82:3f:86:d3: a1:19:cf:74:fa:6c:94:b9:70:a4:d3:ce:b2:25:37:3c:34:f8: 9e:0a:7d:38:fb:24:6d:fa:7e:26:0b:00:5e:ce:d2:18:af:91: d5:74:a1:8d -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUSxkK2tuqjemlNVK8WG+RvcJ2E9kwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MjQzM1oX DTI3MDMwMzA2MjkzM1owMzExMC8GA1UEAxMoQjE3OEUwM0VEREU4MzQ5QUVERjMz RjRBRTM2ODVDM0EzRTUwQzdDMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMScK0X4nYR7xROSZmDKJvuBw1VbDB3olZQc5/h5eT6BPGlYUMCYgH6cf0pG HI1S6x/fwyQLYn/Ae51ym5Ka2/+zDfNQ9+7IkCdZlbx0EZQXf6NsoeI7os9HB6jK gsNl5Qvj7CTkZLf01r4YtoAcPkws+6gowLqDZ80uioRwFrTscUtw6XB2tBWCSvgO g31Ow4IpUEWQo4UCMLmOIq/eSEkDrL3nfJy++PFK/PGTUiGEamJFyipMLovuMBXc EXlU7cjeLmnspWu7ueKqcCGZ7NpvMTyDDU38+QT3edSt6+SURFKYqsOwRAxTFDX/ F4bVWT9ZBL7Q4nJt04VjBQGsaFUCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSxeOA+ 3eg0mu3zP0rjaFw6PlDHwzAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTUzNC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK q0QwDQYJKoZIhvcNAQELBQADggEBAL45lAHvyuklJkyXavl7y2AZZ80TW0DWhqZO KPZ0BYp0hOg1bwnooJtj/EYiECSjtecT3WFh81Rse6lImK4+JmeBT1B0Aq4PI+8B 6mm4vXRhYm9VCc4GsyvSzu4vrGGp3VD411+wOViNpocjWaQnWE087acrt9l8nfsF cTAzESJJ4L5WHBeE+b7Sqvlod7AGlW26JBvGJuvl55PauU9TxOIXIJnixM8kDb9i jSoYjYmNs5+ZbarxvQSqB9Cr4tLUhmVxkODT3h/d/RS+093a8MnT5BNDgj+G06EZ z3T6bJS5cKTTzrIlNzw0+J4KfTj7JG36fiYLAF7O0hivkdV0oY0= -----END CERTIFICATE-----Generated at Sat Mar 28 11:43:11 2026 by rpki-client