$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145807.roa File: AS145807.roa (raw, json) Hash identifier: otA2+OukL3kvAo7lXtYmWF9E+bNM52pyzZklLvTTUy0= Subject key identifier: 5F:98:45:DD:D4:3F:17:A0:D4:63:4E:08:29:4A:FC:F5:0D:48:22:4A Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 227A11EEFC1163847154E721062E5B47987AE18D Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145807.roa Signing time: Wed 04 Mar 2026 06:30:23 +0000 ROA not before: Wed 04 Mar 2026 06:25:23 +0000 ROA not after: Wed 03 Mar 2027 06:30:23 +0000 asID: 145807 IP address blocks: 240a:ac55::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:7a:11:ee:fc:11:63:84:71:54:e7:21:06:2e:5b:47:98:7a:e1:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:25:23 2026 GMT Not After : Mar 3 06:30:23 2027 GMT Subject: CN=5F9845DDD43F17A0D4634E08294AFCF50D48224A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:fa:16:22:69:ca:63:8c:4c:d4:36:07:d0:01: 9f:ab:34:e7:bf:f2:b9:aa:c9:51:cb:28:8b:3d:92: 0c:a3:12:0e:84:7a:f7:53:e0:60:a7:e2:25:17:52: df:35:46:01:39:ab:56:e9:ec:03:42:71:ad:ed:e4: d7:ec:78:59:f0:ba:b6:86:31:09:ce:72:27:70:e0: dc:b7:7b:49:dd:65:50:33:bc:e3:88:a9:a7:18:ed: 9a:91:22:9d:98:94:e3:a3:46:13:cd:e3:f6:4f:23: d6:5c:4c:28:86:f2:85:08:d6:d9:50:e7:21:61:aa: 05:40:9a:3d:88:66:75:26:6a:99:ad:32:30:f9:48: 7b:f1:6f:d9:42:b0:7c:70:38:fe:89:95:ac:50:7c: e4:ed:30:6d:f0:81:c3:87:5c:a6:8d:df:17:00:a6: 56:a6:0a:5a:f9:36:d4:9b:58:af:3c:ab:12:c7:3a: 1d:9e:70:90:3b:d5:3f:14:83:ce:38:b4:96:6d:80: 02:e3:eb:a3:b9:db:b7:16:06:75:e1:e7:1a:fe:2d: a7:f3:4e:0f:49:58:29:62:93:c8:a3:a9:ad:6f:3b: 26:5c:6b:e9:5d:05:bc:fa:6e:b0:d1:bb:e7:17:6b: a8:4f:b3:93:0b:fb:61:87:19:27:fe:3b:ca:e3:52: 94:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:98:45:DD:D4:3F:17:A0:D4:63:4E:08:29:4A:FC:F5:0D:48:22:4A X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145807.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:ac55::/32 Signature Algorithm: sha256WithRSAEncryption cb:17:bd:b1:d5:92:84:be:e8:42:51:71:18:da:bc:79:5e:2d: ed:37:82:fe:c4:71:51:cd:26:a8:15:0c:26:9e:ea:2d:a0:4b: 48:c8:a4:be:00:ca:db:f0:b7:93:d6:d8:d2:0b:e8:a7:12:ae: 86:40:fe:b0:5e:67:81:79:f7:eb:32:8a:b3:42:05:93:05:52: 53:27:6f:8a:53:a0:4e:c9:f1:7b:56:30:fb:c9:81:b9:c0:09: f3:59:e6:77:9b:23:56:6b:80:a1:7a:b1:d4:ac:75:12:f3:07: af:78:73:36:4f:86:e1:f1:62:a1:75:b5:44:c8:65:cf:39:e5: 70:e6:ce:f5:c0:56:a7:e6:df:32:e6:ad:c6:75:f7:97:49:25: 5a:7f:b7:31:99:07:f7:87:6c:51:49:51:7c:27:24:90:36:bc: 88:37:17:60:c0:fd:a6:03:48:da:26:8c:a4:61:58:aa:44:2f: 09:c8:98:ca:83:1a:5a:62:3c:a1:4f:d6:43:13:14:80:2e:e7: 16:31:ba:00:3b:e0:7b:98:0c:e4:38:bf:74:2a:5a:ce:3b:1e: d1:ec:1b:71:81:77:44:27:84:01:a4:d5:3b:1d:98:e1:93:a8: dc:e7:da:ec:a3:f3:86:55:9d:0d:30:45:10:79:d6:6d:98:8d: 70:b5:e8:2c -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUInoR7vwRY4RxVOchBi5bR5h64Y0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MjUyM1oX DTI3MDMwMzA2MzAyM1owMzExMC8GA1UEAxMoNUY5ODQ1RERENDNGMTdBMEQ0NjM0 RTA4Mjk0QUZDRjUwRDQ4MjI0QTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOb6FiJpymOMTNQ2B9ABn6s057/yuarJUcsoiz2SDKMSDoR691PgYKfiJRdS 3zVGATmrVunsA0Jxre3k1+x4WfC6toYxCc5yJ3Dg3Ld7Sd1lUDO844ippxjtmpEi nZiU46NGE83j9k8j1lxMKIbyhQjW2VDnIWGqBUCaPYhmdSZqma0yMPlIe/Fv2UKw fHA4/omVrFB85O0wbfCBw4dcpo3fFwCmVqYKWvk21JtYrzyrEsc6HZ5wkDvVPxSD zji0lm2AAuPro7nbtxYGdeHnGv4tp/NOD0lYKWKTyKOprW87Jlxr6V0FvPpusNG7 5xdrqE+zkwv7YYcZJ/47yuNSlPMCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRfmEXd 1D8XoNRjTggpSvz1DUgiSjAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTgwNy5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rFUwDQYJKoZIhvcNAQELBQADggEBAMsXvbHVkoS+6EJRcRjavHleLe03gv7EcVHN JqgVDCae6i2gS0jIpL4Aytvwt5PW2NIL6KcSroZA/rBeZ4F59+syirNCBZMFUlMn b4pToE7J8XtWMPvJgbnACfNZ5nebI1ZrgKF6sdSsdRLzB694czZPhuHxYqF1tUTI Zc855XDmzvXAVqfm3zLmrcZ195dJJVp/tzGZB/eHbFFJUXwnJJA2vIg3F2DA/aYD SNomjKRhWKpELwnImMqDGlpiPKFP1kMTFIAu5xYxugA74HuYDOQ4v3QqWs47HtHs G3GBd0QnhAGk1TsdmOGTqNzn2uyj84ZVnQ0wRRB51m2YjXC16Cw= -----END CERTIFICATE-----Generated at Sat Mar 28 11:42:14 2026 by rpki-client