$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145544.roa File: AS145544.roa (raw, json) Hash identifier: czYvkZbdGoaBTgbN356xB/0RzbRaSbjTULfhIej4uTo= Subject key identifier: FE:6B:48:38:6B:EE:FC:28:B7:A7:00:68:72:86:BE:C9:E5:3A:3E:D5 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 422EFD2B8DEC09482CBF766CE6B30C53E44073FC Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145544.roa Signing time: Wed 04 Mar 2026 06:30:19 +0000 ROA not before: Wed 04 Mar 2026 06:25:19 +0000 ROA not after: Wed 03 Mar 2027 06:30:19 +0000 asID: 145544 IP address blocks: 240a:ab4e::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:2e:fd:2b:8d:ec:09:48:2c:bf:76:6c:e6:b3:0c:53:e4:40:73:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:25:19 2026 GMT Not After : Mar 3 06:30:19 2027 GMT Subject: CN=FE6B48386BEEFC28B7A700687286BEC9E53A3ED5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:ad:4c:b8:3f:74:9f:bd:31:f9:91:8e:ab:60: fe:b9:26:66:af:a0:e5:4b:2a:3b:f8:72:8a:73:fb: bc:c3:73:21:9e:6b:a0:f3:22:a5:b2:27:4d:ef:75: 6a:0c:0a:8d:56:27:d3:5f:85:c8:8e:7e:18:00:c6: 91:99:40:3c:86:d8:67:10:86:2b:b3:c5:4c:ff:45: d2:2f:f9:70:e7:ca:24:f8:d8:2f:f2:65:ef:b6:87: 02:ac:bb:cf:87:0f:cb:8b:c9:d6:ac:e8:a0:ea:8b: c3:8b:1c:ea:fb:28:aa:22:75:3c:37:b8:b8:c2:5c: 03:36:c6:c0:2f:43:bb:86:1e:68:15:ac:20:c0:7b: 6c:71:82:b3:55:13:3a:d9:4a:f8:6c:41:59:64:a9: 97:3d:97:42:ad:f4:9b:44:18:89:aa:ef:59:3a:92: 24:12:16:6c:aa:e0:0f:3d:b3:b3:35:be:08:cc:97: 1d:d9:98:61:de:70:38:89:f9:74:42:f1:19:41:ff: a9:ae:79:fd:42:e1:4c:f6:45:ba:ba:fb:89:96:a8: d1:37:02:33:b8:df:1c:23:e4:04:de:81:6e:f1:c6: 61:44:04:e1:fb:7c:cd:d7:30:9d:93:32:53:6b:47: 2b:73:e2:c9:0b:06:9b:70:73:5a:8f:8d:68:91:52: 8d:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:6B:48:38:6B:EE:FC:28:B7:A7:00:68:72:86:BE:C9:E5:3A:3E:D5 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145544.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:ab4e::/32 Signature Algorithm: sha256WithRSAEncryption 16:75:54:7e:20:9f:f8:d7:38:0f:8c:d2:42:b3:24:77:f3:3e: 21:d5:22:d7:c8:81:2b:1a:5b:a6:53:9e:be:de:85:4d:54:f0: 44:9d:4e:c0:05:b8:5a:25:cc:1c:ad:f9:47:ec:31:9f:1f:7f: 4a:0f:d3:34:be:b9:d7:ea:23:6a:f7:75:a3:8b:d6:b2:c2:08: 1e:89:8c:ee:7d:bd:76:9c:46:ab:cd:75:c0:6e:76:17:8f:77: 31:db:7e:16:4a:a2:cf:21:8e:4e:a6:95:18:7d:91:27:ac:55: 20:17:4c:bd:39:8f:40:bf:01:f5:36:03:76:5f:19:73:ed:f5: 51:2d:61:f0:07:29:4e:d5:ee:c1:75:1f:57:92:3d:19:57:12: ad:d8:2e:1b:b5:cf:ef:dc:0f:00:9e:f3:07:1d:f1:6f:f4:88: 68:f0:78:94:0f:ec:43:cd:f5:b3:0b:a9:11:b3:bd:13:48:d9: 96:be:65:d7:b2:4c:4d:68:09:22:58:4c:5c:b7:c3:15:b4:df: d4:00:a8:bb:f9:1d:c7:4e:cd:a6:82:fb:e6:e3:28:7a:07:f8: f0:ec:f4:ac:a9:8e:d4:dc:bd:d0:29:cd:8c:ce:d7:88:b0:db: 6e:01:0f:39:39:dc:78:b2:40:e9:42:b8:08:3f:1f:87:8b:c8: e6:c3:d3:a8 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUQi79K43sCUgsv3Zs5rMMU+RAc/wwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MjUxOVoX DTI3MDMwMzA2MzAxOVowMzExMC8GA1UEAxMoRkU2QjQ4Mzg2QkVFRkMyOEI3QTcw MDY4NzI4NkJFQzlFNTNBM0VENTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALGtTLg/dJ+9MfmRjqtg/rkmZq+g5UsqO/hyinP7vMNzIZ5roPMipbInTe91 agwKjVYn01+FyI5+GADGkZlAPIbYZxCGK7PFTP9F0i/5cOfKJPjYL/Jl77aHAqy7 z4cPy4vJ1qzooOqLw4sc6vsoqiJ1PDe4uMJcAzbGwC9Du4YeaBWsIMB7bHGCs1UT OtlK+GxBWWSplz2XQq30m0QYiarvWTqSJBIWbKrgDz2zszW+CMyXHdmYYd5wOIn5 dELxGUH/qa55/ULhTPZFurr7iZao0TcCM7jfHCPkBN6BbvHGYUQE4ft8zdcwnZMy U2tHK3PiyQsGm3BzWo+NaJFSjcECAwEAAaOCAcUwggHBMB0GA1UdDgQWBBT+a0g4 a+78KLenAGhyhr7J5To+1TAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTU0NC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK q04wDQYJKoZIhvcNAQELBQADggEBABZ1VH4gn/jXOA+M0kKzJHfzPiHVItfIgSsa W6ZTnr7ehU1U8ESdTsAFuFolzByt+UfsMZ8ff0oP0zS+udfqI2r3daOL1rLCCB6J jO59vXacRqvNdcBudhePdzHbfhZKos8hjk6mlRh9kSesVSAXTL05j0C/AfU2A3Zf GXPt9VEtYfAHKU7V7sF1H1eSPRlXEq3YLhu1z+/cDwCe8wcd8W/0iGjweJQP7EPN 9bMLqRGzvRNI2Za+ZdeyTE1oCSJYTFy3wxW039QAqLv5HcdOzaaC++bjKHoH+PDs 9KypjtTcvdApzYzO14iw224BDzk53HiyQOlCuAg/H4eLyObD06g= -----END CERTIFICATE-----Generated at Sat Mar 28 11:42:42 2026 by rpki-client