$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145694.roa File: AS145694.roa (raw, json) Hash identifier: 5DCBsZOLsvJB7zerMkC5v5zkkSZGSzH1A1RT49xFMYI= Subject key identifier: C5:AE:B5:22:93:57:02:D9:E7:4E:2A:BE:B2:94:7D:F9:15:9A:37:CA Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 5A0A5C96BF2ECE9E13B33DB2BDF07F134EE56099 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145694.roa Signing time: Wed 04 Mar 2026 06:31:03 +0000 ROA not before: Wed 04 Mar 2026 06:26:03 +0000 ROA not after: Wed 03 Mar 2027 06:31:03 +0000 asID: 145694 IP address blocks: 240a:abe4::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:0a:5c:96:bf:2e:ce:9e:13:b3:3d:b2:bd:f0:7f:13:4e:e5:60:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:26:03 2026 GMT Not After : Mar 3 06:31:03 2027 GMT Subject: CN=C5AEB522935702D9E74E2ABEB2947DF9159A37CA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:cb:c2:0a:d8:91:32:df:af:65:d3:f0:cd:48: 04:e5:7e:9d:fb:42:88:4d:88:2c:25:3e:6b:7e:cc: e8:4b:b9:7f:8f:fa:2b:ce:47:ec:20:7f:70:e0:93: a7:65:4a:d1:e1:ae:e5:e0:7e:fa:d5:b2:d2:17:78: dc:05:9f:44:a2:ca:1a:05:67:3e:a2:c8:f5:59:ad: 48:9a:db:5c:e8:64:42:6e:7e:55:29:c0:9c:12:d5: 1a:15:2e:55:af:8f:11:f6:80:30:5f:48:eb:dd:8f: d0:de:6a:79:30:d9:4b:9d:ba:7a:bd:16:b6:c1:1e: d6:38:fc:ee:b7:06:0e:75:2a:28:fa:f0:b7:ae:af: a4:b4:43:69:a3:3c:34:66:b4:d0:4e:ad:0d:dc:f4: 64:4e:04:cc:b0:c1:e2:ff:7c:3b:a9:55:77:af:eb: 14:ad:93:1a:fe:a4:80:98:86:aa:bf:7b:ad:63:bd: 62:af:c1:68:12:ac:35:2e:b2:95:a1:de:fd:68:1a: 6f:c6:a5:7e:72:10:ae:3e:f2:cc:ab:06:b4:5e:92: b2:c5:58:c4:83:b3:22:02:1a:5d:3e:71:75:0b:c8: ca:c1:e1:cf:8e:f1:54:0b:7d:b7:1b:2b:61:22:14: 06:19:f5:27:b2:54:aa:98:46:87:95:bf:a5:fb:46: 87:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:AE:B5:22:93:57:02:D9:E7:4E:2A:BE:B2:94:7D:F9:15:9A:37:CA X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145694.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:abe4::/32 Signature Algorithm: sha256WithRSAEncryption 1b:99:f5:18:a4:a5:c8:d0:06:c7:b4:c3:1e:e6:ee:f1:4a:7d: 0c:bb:62:c9:01:3c:6c:d5:49:82:2b:4b:ef:d1:61:d1:5b:0a: ba:04:9f:d9:f5:31:59:46:95:2d:02:e0:0b:77:25:d8:ba:4b: 24:1f:97:3b:be:d3:91:d8:59:2c:2b:e0:a4:7b:bb:76:c4:52: e9:de:1e:26:21:f2:60:ba:02:12:59:9e:35:2c:25:d4:66:4d: b3:41:60:58:9e:02:43:14:3e:f9:16:9c:eb:5f:fd:a9:76:e6: b8:1e:8a:21:e7:9f:5a:0e:49:8d:9b:44:2b:0f:a6:5c:42:aa: b1:38:24:dd:3e:d5:a8:95:01:31:84:87:1d:a6:db:f3:8c:a5: 1d:8a:c8:7b:6f:d1:12:eb:6e:dc:a8:16:c8:7f:46:79:2e:20: 4a:73:5d:51:79:3d:99:11:ea:b8:a6:48:1c:ef:b4:20:b1:56: 9e:7d:2e:14:78:37:d0:69:2f:c1:9a:fc:47:43:78:d1:e3:63: df:28:7b:1e:6a:fe:8e:51:b1:05:59:eb:c7:db:6f:64:bd:fe: 59:c7:49:89:9c:55:9f:6b:45:c9:ff:ed:60:77:b8:1b:61:26: 83:7b:c1:da:a6:e3:0f:74:d6:38:f5:0b:e4:39:26:58:92:0c: 78:51:82:16 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUWgpclr8uzp4Tsz2yvfB/E07lYJkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MjYwM1oX DTI3MDMwMzA2MzEwM1owMzExMC8GA1UEAxMoQzVBRUI1MjI5MzU3MDJEOUU3NEUy QUJFQjI5NDdERjkxNTlBMzdDQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJfLwgrYkTLfr2XT8M1IBOV+nftCiE2ILCU+a37M6Eu5f4/6K85H7CB/cOCT p2VK0eGu5eB++tWy0hd43AWfRKLKGgVnPqLI9VmtSJrbXOhkQm5+VSnAnBLVGhUu Va+PEfaAMF9I692P0N5qeTDZS526er0WtsEe1jj87rcGDnUqKPrwt66vpLRDaaM8 NGa00E6tDdz0ZE4EzLDB4v98O6lVd6/rFK2TGv6kgJiGqr97rWO9Yq/BaBKsNS6y laHe/Wgab8alfnIQrj7yzKsGtF6SssVYxIOzIgIaXT5xdQvIysHhz47xVAt9txsr YSIUBhn1J7JUqphGh5W/pftGhxUCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBTFrrUi k1cC2edOKr6ylH35FZo3yjAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTY5NC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK q+QwDQYJKoZIhvcNAQELBQADggEBABuZ9RikpcjQBse0wx7m7vFKfQy7YskBPGzV SYIrS+/RYdFbCroEn9n1MVlGlS0C4At3Jdi6SyQflzu+05HYWSwr4KR7u3bEUune HiYh8mC6AhJZnjUsJdRmTbNBYFieAkMUPvkWnOtf/al25rgeiiHnn1oOSY2bRCsP plxCqrE4JN0+1aiVATGEhx2m2/OMpR2KyHtv0RLrbtyoFsh/RnkuIEpzXVF5PZkR 6rimSBzvtCCxVp59LhR4N9BpL8Ga/EdDeNHjY98oex5q/o5RsQVZ68fbb2S9/lnH SYmcVZ9rRcn/7WB3uBthJoN7wdqm4w901jj1C+Q5JliSDHhRghY= -----END CERTIFICATE-----Generated at Sat Mar 28 11:41:18 2026 by rpki-client