$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145548.roa File: AS145548.roa (raw, json) Hash identifier: FA9Jsj62eCAGX7hoI1Bd6oUMHuqkrnneGm+7I6eejGw= Subject key identifier: 4C:70:13:0A:14:2F:EB:A4:C5:55:D8:73:7D:B6:A7:83:F4:0B:2C:FC Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 4EDF1591CD16C8A10D8466C3B028B228D0185B6E Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145548.roa Signing time: Wed 04 Mar 2026 06:29:54 +0000 ROA not before: Wed 04 Mar 2026 06:24:54 +0000 ROA not after: Wed 03 Mar 2027 06:29:54 +0000 asID: 145548 IP address blocks: 240a:ab52::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:df:15:91:cd:16:c8:a1:0d:84:66:c3:b0:28:b2:28:d0:18:5b:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:24:54 2026 GMT Not After : Mar 3 06:29:54 2027 GMT Subject: CN=4C70130A142FEBA4C555D8737DB6A783F40B2CFC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:aa:d2:62:02:6f:62:4c:c3:d8:d1:c1:34:d5: 68:60:83:09:5b:c2:ea:f0:b5:6a:9c:59:5d:7f:53: dd:38:4a:00:59:4b:f1:a8:fa:6a:37:cb:0c:eb:7d: 1f:40:c1:a6:68:e2:22:ec:78:12:e7:16:11:18:2a: f6:f4:35:61:43:01:c3:06:24:6f:99:f3:9b:b6:7c: 66:3d:71:32:69:85:f4:d2:8d:9a:2c:f5:ef:04:6d: 29:22:21:6d:d3:e4:45:76:1d:88:ad:cb:c9:2b:a2: 5b:d6:3e:97:5a:c1:7a:d2:0e:e6:92:b4:77:08:d1: 0e:29:82:94:18:6f:8b:ae:c9:96:b9:af:50:b8:c3: 28:d2:0c:b6:be:a9:be:f9:db:c4:19:5d:d5:25:8f: d6:99:72:05:7b:a3:e8:25:82:8b:c7:19:94:7e:a2: 61:cf:c3:4a:02:e9:0a:c0:83:d4:86:7b:88:63:c5: 30:1f:72:17:49:70:65:48:52:8d:f7:11:c8:96:c9: 37:f5:38:49:84:54:47:48:df:d5:28:4b:18:fe:5c: a8:51:74:22:25:af:4f:fa:6a:63:43:1f:d8:12:1e: ed:c7:e6:5f:10:7e:c1:ad:ce:da:d0:b3:ff:ab:90: 66:f5:16:eb:60:ef:10:55:7a:2a:bf:aa:70:bf:41: 01:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:70:13:0A:14:2F:EB:A4:C5:55:D8:73:7D:B6:A7:83:F4:0B:2C:FC X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145548.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:ab52::/32 Signature Algorithm: sha256WithRSAEncryption 05:ca:70:e3:c2:0c:a3:0b:ad:3c:d1:2c:a4:71:03:7f:f6:d0: 3c:c6:fe:03:6f:dd:be:1a:10:ba:6e:9b:60:fc:17:70:97:f4: e4:d1:36:91:6d:2e:ec:8c:6d:7f:52:62:70:66:c4:23:96:42: e6:23:be:60:5f:6b:5a:d0:de:c3:de:06:da:0f:20:7f:35:51: ae:a8:4b:74:0b:f8:e4:ca:ed:2c:a0:c2:10:93:26:f3:e3:44: 12:d6:1d:31:40:f8:60:bf:0b:6c:98:81:d6:b2:4d:f3:a3:4b: 7c:28:cc:7c:de:6f:6d:ce:76:a9:7f:8b:96:18:b6:1c:eb:f9: 5e:30:31:fc:8e:40:f6:03:68:d9:e4:ce:8d:58:c2:64:2c:0d: 7f:be:3f:2d:b6:cb:b8:52:c0:4c:3a:b7:76:f2:b8:fe:c5:7b: 72:2a:b2:b5:3a:a1:f6:39:7a:91:0d:00:85:2a:af:55:55:6a: 20:39:05:2e:48:62:58:58:09:33:4b:78:85:59:e5:2a:e9:f9: b0:7c:00:db:6e:cd:85:9e:e4:af:12:8a:be:da:dc:6e:e7:4d: 39:98:a5:25:b9:01:87:2b:c9:37:7d:c2:ad:b2:d8:f0:0b:34: 0d:bc:42:c8:b5:48:d0:44:a0:a8:42:d9:25:ec:36:d3:b0:bd: 4e:2f:4d:67 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUTt8Vkc0WyKENhGbDsCiyKNAYW24wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MjQ1NFoX DTI3MDMwMzA2Mjk1NFowMzExMC8GA1UEAxMoNEM3MDEzMEExNDJGRUJBNEM1NTVE ODczN0RCNkE3ODNGNDBCMkNGQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANKq0mICb2JMw9jRwTTVaGCDCVvC6vC1apxZXX9T3ThKAFlL8aj6ajfLDOt9 H0DBpmjiIux4EucWERgq9vQ1YUMBwwYkb5nzm7Z8Zj1xMmmF9NKNmiz17wRtKSIh bdPkRXYdiK3LySuiW9Y+l1rBetIO5pK0dwjRDimClBhvi67JlrmvULjDKNIMtr6p vvnbxBld1SWP1plyBXuj6CWCi8cZlH6iYc/DSgLpCsCD1IZ7iGPFMB9yF0lwZUhS jfcRyJbJN/U4SYRUR0jf1ShLGP5cqFF0IiWvT/pqY0Mf2BIe7cfmXxB+wa3O2tCz /6uQZvUW62DvEFV6Kr+qcL9BARMCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRMcBMK FC/rpMVV2HN9tqeD9Ass/DAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTU0OC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK q1IwDQYJKoZIhvcNAQELBQADggEBAAXKcOPCDKMLrTzRLKRxA3/20DzG/gNv3b4a ELpum2D8F3CX9OTRNpFtLuyMbX9SYnBmxCOWQuYjvmBfa1rQ3sPeBtoPIH81Ua6o S3QL+OTK7SygwhCTJvPjRBLWHTFA+GC/C2yYgdayTfOjS3wozHzeb23Odql/i5YY thzr+V4wMfyOQPYDaNnkzo1YwmQsDX++Py22y7hSwEw6t3byuP7Fe3IqsrU6ofY5 epENAIUqr1VVaiA5BS5IYlhYCTNLeIVZ5Srp+bB8ANtuzYWe5K8Sir7a3G7nTTmY pSW5AYcryTd9wq2y2PALNA28Qsi1SNBEoKhC2SXsNtOwvU4vTWc= -----END CERTIFICATE-----Generated at Sat Mar 28 13:14:19 2026 by rpki-client