$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145550.roa File: AS145550.roa (raw, json) Hash identifier: pJm6ikrEjLCuGusN4ZGbUViD2jKcqe1ig4dgfY4YXVc= Subject key identifier: 5D:8B:0F:A0:96:BE:F3:38:76:17:53:D8:26:97:65:20:B8:DE:1D:01 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 1AB93937B4FD86EC167AC3E12CBF35594732A625 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145550.roa Signing time: Wed 04 Mar 2026 06:30:50 +0000 ROA not before: Wed 04 Mar 2026 06:25:50 +0000 ROA not after: Wed 03 Mar 2027 06:30:50 +0000 asID: 145550 IP address blocks: 240a:ab54::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:b9:39:37:b4:fd:86:ec:16:7a:c3:e1:2c:bf:35:59:47:32:a6:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:25:50 2026 GMT Not After : Mar 3 06:30:50 2027 GMT Subject: CN=5D8B0FA096BEF338761753D826976520B8DE1D01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:47:2b:85:0a:c7:64:dc:0f:d1:f5:34:b3:8e: ad:c7:be:42:77:c5:41:08:7d:70:68:de:e0:91:e2: 41:16:83:a4:6d:11:0d:19:30:bd:e9:27:07:b5:dd: 6c:be:df:16:d9:79:65:7b:19:41:39:bb:25:6e:cc: 27:0d:a7:45:42:ea:83:f7:c9:f5:fc:61:c7:6a:b5: 97:0e:dd:9f:10:30:09:49:b1:27:ff:13:99:1b:9f: 55:6a:cc:0b:b4:14:f5:21:97:6f:0d:9b:b3:fa:3a: 32:a8:d5:76:f2:d4:8a:55:45:2b:38:f0:05:e7:87: e9:3f:26:85:1e:aa:9e:1b:65:74:02:b9:7e:e1:2c: c0:34:a1:eb:ca:08:a0:6f:42:36:96:99:0f:ac:b9: c7:cb:d2:1d:1e:5f:36:c0:e3:0b:c8:97:6b:20:d0: 0e:15:e8:0f:d4:45:11:4e:f1:83:a2:f9:54:01:bb: a0:0d:c1:29:14:8a:be:0e:3e:97:cb:fc:bc:ce:d9: 80:e3:1e:29:47:6c:ef:42:0f:53:aa:6a:31:65:1e: 65:fb:4f:65:02:77:3c:90:ae:86:1a:88:57:60:b7: 11:45:50:61:a5:39:f6:f5:7a:8f:f3:ec:a4:d8:6c: 46:2a:3d:88:c7:e2:de:9c:68:ce:19:ee:fb:a8:e2: 13:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:8B:0F:A0:96:BE:F3:38:76:17:53:D8:26:97:65:20:B8:DE:1D:01 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145550.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:ab54::/32 Signature Algorithm: sha256WithRSAEncryption 6b:21:31:d9:d9:00:bd:89:8a:0e:70:39:f5:73:c6:49:ac:72: a4:14:8b:e5:0f:20:be:53:ad:98:13:1b:b2:98:cd:e6:92:38: 29:1b:49:6a:1f:fd:f2:b7:53:ec:dc:59:46:d8:6e:71:ed:d2: 49:b7:4b:54:d1:9a:26:9d:4e:70:32:8f:f1:a9:86:4f:e0:83: 86:a6:bc:6f:f7:3e:93:bd:db:95:7e:08:52:a9:f3:bb:9b:2b: 68:62:20:07:fb:0c:4f:5d:08:e4:10:8d:2d:b0:3b:c4:cc:fe: df:fa:1d:49:ab:29:9c:65:01:49:aa:78:e6:90:33:d1:ff:a1: a3:70:90:5d:09:ae:59:db:b1:87:15:b0:99:e4:ee:67:de:09: ce:a2:3a:64:5f:50:33:8b:14:27:9d:4b:9b:00:9d:9f:80:dc: a6:ce:5d:e2:2b:94:c5:a4:a2:60:43:24:be:85:e2:e5:af:ae: 28:cf:bc:50:66:b1:cd:da:08:6d:fa:f0:06:58:ed:2c:4b:c6: 9b:d1:6f:e2:d4:44:99:22:30:a2:50:40:86:1b:ae:fa:8a:fb: d8:c7:5d:03:8e:c4:30:39:25:6e:69:49:fa:6d:fb:d9:67:9c: 80:f7:d7:21:d0:dc:41:df:bc:af:a0:c0:6f:d9:27:3f:0a:bf: e3:2e:10:97 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUGrk5N7T9huwWesPhLL81WUcypiUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MjU1MFoX DTI3MDMwMzA2MzA1MFowMzExMC8GA1UEAxMoNUQ4QjBGQTA5NkJFRjMzODc2MTc1 M0Q4MjY5NzY1MjBCOERFMUQwMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMFHK4UKx2TcD9H1NLOOrce+QnfFQQh9cGje4JHiQRaDpG0RDRkwveknB7Xd bL7fFtl5ZXsZQTm7JW7MJw2nRULqg/fJ9fxhx2q1lw7dnxAwCUmxJ/8TmRufVWrM C7QU9SGXbw2bs/o6MqjVdvLUilVFKzjwBeeH6T8mhR6qnhtldAK5fuEswDSh68oI oG9CNpaZD6y5x8vSHR5fNsDjC8iXayDQDhXoD9RFEU7xg6L5VAG7oA3BKRSKvg4+ l8v8vM7ZgOMeKUds70IPU6pqMWUeZftPZQJ3PJCuhhqIV2C3EUVQYaU59vV6j/Ps pNhsRio9iMfi3pxozhnu+6jiEwUCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRdiw+g lr7zOHYXU9gml2UguN4dATAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTU1MC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK q1QwDQYJKoZIhvcNAQELBQADggEBAGshMdnZAL2Jig5wOfVzxkmscqQUi+UPIL5T rZgTG7KYzeaSOCkbSWof/fK3U+zcWUbYbnHt0km3S1TRmiadTnAyj/Gphk/gg4am vG/3PpO925V+CFKp87ubK2hiIAf7DE9dCOQQjS2wO8TM/t/6HUmrKZxlAUmqeOaQ M9H/oaNwkF0JrlnbsYcVsJnk7mfeCc6iOmRfUDOLFCedS5sAnZ+A3KbOXeIrlMWk omBDJL6F4uWvrijPvFBmsc3aCG368AZY7SxLxpvRb+LURJkiMKJQQIYbrvqK+9jH XQOOxDA5JW5pSfpt+9lnnID31yHQ3EHfvK+gwG/ZJz8Kv+MuEJc= -----END CERTIFICATE-----Generated at Sat Mar 28 14:26:34 2026 by rpki-client