$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145545.roa File: AS145545.roa (raw, json) Hash identifier: oFUv7xUlxnb3CejB7VzFH0Igl0Wjkt0b+LIZcOaB8iI= Subject key identifier: 25:AD:B8:4E:0A:52:FC:49:88:D6:E0:4F:0C:CB:BF:14:E7:CD:05:E5 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 33550CBB65B814FF4FCF1E84A92C137E89A656B5 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145545.roa Signing time: Wed 04 Mar 2026 06:30:21 +0000 ROA not before: Wed 04 Mar 2026 06:25:21 +0000 ROA not after: Wed 03 Mar 2027 06:30:21 +0000 asID: 145545 IP address blocks: 240a:ab4f::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:55:0c:bb:65:b8:14:ff:4f:cf:1e:84:a9:2c:13:7e:89:a6:56:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:25:21 2026 GMT Not After : Mar 3 06:30:21 2027 GMT Subject: CN=25ADB84E0A52FC4988D6E04F0CCBBF14E7CD05E5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:e9:24:cd:d1:c4:9e:7b:21:e1:c2:8b:35:58: 7d:01:26:e5:3b:de:b6:81:6d:f2:b9:5c:9b:7f:9c: 4c:e2:2e:78:7f:26:21:e1:c1:dd:11:d9:64:db:f6: 21:47:79:3e:77:a9:3f:f6:3d:d4:d8:85:3a:d2:e0: bf:f2:c1:0e:a7:a1:39:d2:53:30:20:d6:4c:a2:d3: 7c:f6:fd:e4:eb:99:35:83:e8:2f:f1:26:c3:7d:a1: e4:b6:11:a6:3b:85:b7:70:09:d3:74:9f:d2:40:4c: 50:a0:97:c9:3b:e3:c4:19:a5:ee:0f:ae:c7:a0:b2: 99:53:b1:38:ed:16:ad:e9:73:0a:99:53:47:6c:65: 2b:cd:64:01:98:43:05:db:19:fd:4e:77:97:19:4f: c1:f2:c4:d3:96:8c:25:23:c3:d2:cd:49:0e:a3:22: 43:75:66:1d:3d:c1:7c:6c:2b:c1:4f:2a:ad:96:3f: 98:21:dd:db:5c:6e:3a:ae:2c:2f:a1:ef:60:18:db: bd:10:81:f4:77:06:99:c7:95:bd:1b:4f:b0:6f:c5: e7:d6:f0:f6:f5:a3:77:2b:57:be:42:0f:5a:71:7b: 5b:8d:27:bd:02:6a:ca:c5:05:7c:a4:64:7d:f0:ca: eb:c8:be:d6:40:d9:91:68:4a:9c:ad:13:ff:ee:6d: 75:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:AD:B8:4E:0A:52:FC:49:88:D6:E0:4F:0C:CB:BF:14:E7:CD:05:E5 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145545.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:ab4f::/32 Signature Algorithm: sha256WithRSAEncryption 6b:09:42:2a:c4:ee:89:f3:d2:70:50:c2:76:bd:a2:cf:25:1c: 9b:11:30:c1:09:54:53:8a:5c:f7:9f:8c:f2:a9:8a:f5:f1:a2: e8:06:1e:2e:0a:b3:13:10:8a:e0:21:3a:69:fe:7f:a3:9d:e8: 19:fd:cb:4b:f2:ab:63:12:a0:75:4e:b5:93:8b:0e:32:e7:f5: bf:60:91:d2:84:55:d1:d9:ed:d1:0b:fd:bf:5f:01:36:4d:09: 28:d7:a5:4b:fe:0a:50:ae:48:37:68:ce:15:b2:10:58:71:a9: dd:17:b5:2a:4f:d3:1f:9c:ba:ad:08:f5:eb:72:ea:e5:74:ba: 5d:85:80:ef:de:ef:7c:a5:7b:95:4a:aa:2d:80:d5:f3:74:be: 65:df:ab:88:ce:39:74:ea:80:e2:9f:a8:b4:d3:3c:91:1c:a7: 69:e1:bd:9a:bd:e3:e2:12:84:c5:9c:ff:9a:14:17:63:74:09: 38:ae:0b:04:b3:5c:12:14:2e:56:c9:22:3a:31:e0:2e:c9:47: 03:0d:39:9f:bd:98:2b:b4:da:c6:64:13:6d:3b:9b:4b:ef:2e: b3:c2:63:98:b0:eb:dc:4c:fc:96:ac:3b:6d:72:e8:5e:d2:67: e8:17:38:c1:fc:a2:a4:fa:bd:da:81:17:8b:89:56:ce:ca:22: 14:da:6d:1c -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUM1UMu2W4FP9Pzx6EqSwTfommVrUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MjUyMVoX DTI3MDMwMzA2MzAyMVowMzExMC8GA1UEAxMoMjVBREI4NEUwQTUyRkM0OTg4RDZF MDRGMENDQkJGMTRFN0NEMDVFNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAN3pJM3RxJ57IeHCizVYfQEm5TvetoFt8rlcm3+cTOIueH8mIeHB3RHZZNv2 IUd5PnepP/Y91NiFOtLgv/LBDqehOdJTMCDWTKLTfPb95OuZNYPoL/Emw32h5LYR pjuFt3AJ03Sf0kBMUKCXyTvjxBml7g+ux6CymVOxOO0WrelzCplTR2xlK81kAZhD BdsZ/U53lxlPwfLE05aMJSPD0s1JDqMiQ3VmHT3BfGwrwU8qrZY/mCHd21xuOq4s L6HvYBjbvRCB9HcGmceVvRtPsG/F59bw9vWjdytXvkIPWnF7W40nvQJqysUFfKRk ffDK68i+1kDZkWhKnK0T/+5tdUUCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQlrbhO ClL8SYjW4E8My78U580F5TAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTU0NS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK q08wDQYJKoZIhvcNAQELBQADggEBAGsJQirE7onz0nBQwna9os8lHJsRMMEJVFOK XPefjPKpivXxougGHi4KsxMQiuAhOmn+f6Od6Bn9y0vyq2MSoHVOtZOLDjLn9b9g kdKEVdHZ7dEL/b9fATZNCSjXpUv+ClCuSDdozhWyEFhxqd0XtSpP0x+cuq0I9ety 6uV0ul2FgO/e73yle5VKqi2A1fN0vmXfq4jOOXTqgOKfqLTTPJEcp2nhvZq94+IS hMWc/5oUF2N0CTiuCwSzXBIULlbJIjox4C7JRwMNOZ+9mCu02sZkE207m0vvLrPC Y5iw69xM/JasO21y6F7SZ+gXOMH8oqT6vdqBF4uJVs7KIhTabRw= -----END CERTIFICATE-----Generated at Sat Mar 28 13:13:23 2026 by rpki-client