$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145809.roa File: AS145809.roa (raw, json) Hash identifier: /0iEM72jfh3mJF36jDq6u/B/0kHv/cGp18nwtvNojoA= Subject key identifier: A5:4F:B8:46:59:7F:F7:D1:FF:1B:D0:EF:65:47:52:7F:90:57:3B:86 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 478A392FE87A16201E0E2E882EDE7FD2AAB26E42 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145809.roa Signing time: Wed 04 Mar 2026 06:30:20 +0000 ROA not before: Wed 04 Mar 2026 06:25:20 +0000 ROA not after: Wed 03 Mar 2027 06:30:20 +0000 asID: 145809 IP address blocks: 240a:ac57::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:8a:39:2f:e8:7a:16:20:1e:0e:2e:88:2e:de:7f:d2:aa:b2:6e:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:25:20 2026 GMT Not After : Mar 3 06:30:20 2027 GMT Subject: CN=A54FB846597FF7D1FF1BD0EF6547527F90573B86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:85:55:08:0a:6c:fe:89:3f:ea:c7:7b:9e:3b: 1e:b1:9e:cc:ef:ec:09:55:70:13:5c:23:88:52:9e: f9:b4:ac:22:4a:15:de:6a:a1:bd:91:69:49:76:2d: 1f:16:a1:07:71:6d:46:5b:e7:8f:2b:6c:c5:d8:80: d8:73:5b:a7:f1:17:e6:ac:18:3c:2f:17:17:d4:19: 18:9a:c0:69:8b:da:8e:dd:a3:fd:09:02:5e:61:1f: 2c:6f:b9:5e:68:74:0d:8a:09:d3:c5:ed:59:db:a8: f9:11:b7:5b:31:56:b2:0d:49:56:94:33:73:ce:1e: e8:ab:81:57:07:4c:d3:fe:dc:30:25:5e:b0:18:26: 87:ab:a8:ac:a7:40:f3:ed:a9:39:07:8b:eb:5a:88: d8:5c:27:52:fc:5f:90:73:23:29:d3:bc:bd:3d:9f: 3c:d2:90:1e:67:e4:75:13:34:4d:8e:a5:36:0d:ce: 60:42:5d:bb:33:5d:c0:e4:df:79:68:e3:a9:53:43: 35:0b:4a:20:18:66:c0:67:aa:e2:5b:0e:26:0e:ec: 2e:3c:ac:1e:fe:ff:cd:8e:99:28:56:f2:ca:ab:fe: 58:35:c7:31:ee:d3:33:0b:2f:b9:4d:f8:81:6f:b5: 36:d8:33:d6:b8:7c:c0:4d:07:8f:d3:e0:f5:e4:99: 51:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:4F:B8:46:59:7F:F7:D1:FF:1B:D0:EF:65:47:52:7F:90:57:3B:86 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145809.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:ac57::/32 Signature Algorithm: sha256WithRSAEncryption 12:c7:8e:1c:7a:02:d3:1e:5b:be:a9:fc:6f:32:be:12:98:61: 9b:53:99:c7:14:45:98:df:59:8b:11:68:03:e2:65:23:e3:01: dd:a8:6d:da:1b:86:85:78:1d:bb:41:4f:04:e3:66:71:9a:77: 18:3b:28:38:ab:c3:af:6f:95:a8:5e:32:d4:df:f5:9b:f6:c8: 83:8b:78:3e:d1:5a:c3:6f:3e:73:eb:cf:15:e1:b3:af:07:f2: 80:9f:39:45:c8:af:67:c6:bb:ad:1d:9e:72:3b:c2:3a:13:a5: fc:5f:23:9e:38:dd:3f:25:f0:71:3a:cb:12:74:fe:5c:dc:4c: b6:80:fd:6a:c5:17:d4:2b:c7:23:4a:ad:b2:50:5a:0c:54:fc: c2:59:44:e5:f3:63:07:80:02:f4:5e:82:16:e9:ef:93:95:50: a0:a3:0e:f1:2b:39:fc:bc:52:54:8d:54:96:24:3e:48:45:91: 1e:05:98:00:77:8c:2b:ae:61:8a:98:87:86:82:cc:6d:96:9e: b6:9d:29:15:07:9e:6e:40:67:d0:eb:70:b7:1f:53:5f:02:92: 30:26:e6:e8:49:38:1d:d6:61:79:15:f6:e1:6e:8a:25:04:8d: cd:f6:71:a3:27:13:47:b0:29:48:11:e9:de:ea:1b:83:2c:ab: 07:ad:a0:b0 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUR4o5L+h6FiAeDi6ILt5/0qqybkIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MjUyMFoX DTI3MDMwMzA2MzAyMFowMzExMC8GA1UEAxMoQTU0RkI4NDY1OTdGRjdEMUZGMUJE MEVGNjU0NzUyN0Y5MDU3M0I4NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAISFVQgKbP6JP+rHe547HrGezO/sCVVwE1wjiFKe+bSsIkoV3mqhvZFpSXYt HxahB3FtRlvnjytsxdiA2HNbp/EX5qwYPC8XF9QZGJrAaYvajt2j/QkCXmEfLG+5 Xmh0DYoJ08XtWduo+RG3WzFWsg1JVpQzc84e6KuBVwdM0/7cMCVesBgmh6uorKdA 8+2pOQeL61qI2FwnUvxfkHMjKdO8vT2fPNKQHmfkdRM0TY6lNg3OYEJduzNdwOTf eWjjqVNDNQtKIBhmwGeq4lsOJg7sLjysHv7/zY6ZKFbyyqv+WDXHMe7TMwsvuU34 gW+1Ntgz1rh8wE0Hj9Pg9eSZUe8CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSlT7hG WX/30f8b0O9lR1J/kFc7hjAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTgwOS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rFcwDQYJKoZIhvcNAQELBQADggEBABLHjhx6AtMeW76p/G8yvhKYYZtTmccURZjf WYsRaAPiZSPjAd2obdobhoV4HbtBTwTjZnGadxg7KDirw69vlaheMtTf9Zv2yIOL eD7RWsNvPnPrzxXhs68H8oCfOUXIr2fGu60dnnI7wjoTpfxfI5443T8l8HE6yxJ0 /lzcTLaA/WrFF9QrxyNKrbJQWgxU/MJZROXzYweAAvReghbp75OVUKCjDvErOfy8 UlSNVJYkPkhFkR4FmAB3jCuuYYqYh4aCzG2WnradKRUHnm5AZ9DrcLcfU18CkjAm 5uhJOB3WYXkV9uFuiiUEjc32caMnE0ewKUgR6d7qG4MsqwetoLA= -----END CERTIFICATE-----Generated at Sat Mar 28 13:16:42 2026 by rpki-client