$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145854.roa File: AS145854.roa (raw, json) Hash identifier: XsaEExbwFjxB/jdyXGZTqKWR51lCaqBmW/pY1i8dcbg= Subject key identifier: 2D:7D:A4:F5:10:24:E3:61:E8:E3:39:0C:4C:DA:CD:53:4D:1C:3C:9E Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 750B6D9699A1B4D5F1DE2C9AD42A4F9725930215 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145854.roa Signing time: Wed 04 Mar 2026 06:30:46 +0000 ROA not before: Wed 04 Mar 2026 06:25:46 +0000 ROA not after: Wed 03 Mar 2027 06:30:46 +0000 asID: 145854 IP address blocks: 240a:ac84::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:0b:6d:96:99:a1:b4:d5:f1:de:2c:9a:d4:2a:4f:97:25:93:02:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:25:46 2026 GMT Not After : Mar 3 06:30:46 2027 GMT Subject: CN=2D7DA4F51024E361E8E3390C4CDACD534D1C3C9E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:bf:b6:eb:d2:e9:c5:fc:db:ad:26:6e:a7:75: 9e:0f:7b:ee:bf:52:7e:b7:bf:b7:0e:0c:1f:cb:78: a5:69:d8:c3:c6:a1:10:dd:ee:b7:a5:dc:e4:69:67: 40:36:f9:cd:db:bf:fb:b7:dc:96:14:d6:2a:91:0f: d4:7e:18:51:ec:a0:76:c6:d6:fe:33:fd:6e:6b:2c: 0f:58:cd:77:15:14:7f:61:b2:ed:c3:8b:66:7e:fe: 34:81:60:6e:3c:39:81:c7:a6:66:37:46:28:37:b4: 95:65:b5:0d:14:46:54:a9:2c:05:ef:7d:40:df:7a: ad:04:7d:ce:3d:90:22:dc:26:47:01:c6:15:c2:2f: bd:66:75:70:82:04:d9:40:a8:91:91:ed:3a:1f:9a: 85:17:f9:06:77:af:87:4c:2f:01:a2:39:69:a5:d4: 87:8b:c1:4c:76:d8:22:4c:7e:bf:9b:6a:3c:cd:78: 2d:34:e3:e4:71:e8:75:2a:a9:9f:f7:bf:9a:1a:22: 49:ff:22:97:57:25:09:b0:0b:9a:de:66:c3:f5:76: e6:16:44:8b:ea:b2:d6:5d:8d:69:97:8f:8e:2a:e0: 7b:ba:68:6d:76:7c:6d:ea:4a:8d:ad:96:35:bf:50: fd:f8:b1:d8:f4:d5:76:43:b3:a5:4e:93:fe:f6:dc: db:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:7D:A4:F5:10:24:E3:61:E8:E3:39:0C:4C:DA:CD:53:4D:1C:3C:9E X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145854.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:ac84::/32 Signature Algorithm: sha256WithRSAEncryption d5:84:6f:0b:64:fa:df:22:27:25:71:fb:b5:67:0b:63:8b:77: fa:e5:6d:85:7b:a2:51:3b:b1:c4:30:b5:4b:df:4a:99:af:d4: 18:8e:51:e2:92:e3:46:9d:00:52:25:ba:f0:20:74:2e:f3:4f: ef:be:18:9c:c7:6f:68:7f:3b:d3:ed:82:cf:c8:62:92:b1:b8: e5:72:39:b7:be:02:17:f9:42:83:70:f4:a8:16:f4:e9:ea:89: 6b:aa:96:6e:41:31:fa:c0:97:ab:ad:0d:76:5a:eb:36:d7:be: 9c:17:9d:46:b0:a4:cc:9a:1b:83:d4:66:73:34:35:e8:0a:0f: ac:ad:b9:3a:3e:da:05:fd:e4:fa:44:a3:20:7e:2c:77:b9:3a: f3:be:97:fd:fd:b5:37:08:56:41:0a:1f:09:53:5c:82:1e:21: 79:6a:19:d3:3e:c9:b6:05:ef:6f:89:5b:c8:87:df:71:a3:b2: 41:bd:bb:f3:2a:f0:9a:e2:86:3f:da:5a:6b:5e:97:f3:19:ca: a0:cd:cf:35:75:88:8f:43:d6:52:b7:46:40:03:38:30:bf:42: a4:12:7b:54:c9:06:e7:a6:0b:95:5a:a1:ca:82:03:5b:77:9c: fe:bb:6d:f4:f5:82:5b:f6:f2:0e:a5:28:b4:49:1a:b7:db:fc: 32:2d:c7:1a -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUdQttlpmhtNXx3iya1CpPlyWTAhUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MjU0NloX DTI3MDMwMzA2MzA0NlowMzExMC8GA1UEAxMoMkQ3REE0RjUxMDI0RTM2MUU4RTMz OTBDNENEQUNENTM0RDFDM0M5RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKW/tuvS6cX8260mbqd1ng977r9Sfre/tw4MH8t4pWnYw8ahEN3ut6Xc5Gln QDb5zdu/+7fclhTWKpEP1H4YUeygdsbW/jP9bmssD1jNdxUUf2Gy7cOLZn7+NIFg bjw5gcemZjdGKDe0lWW1DRRGVKksBe99QN96rQR9zj2QItwmRwHGFcIvvWZ1cIIE 2UCokZHtOh+ahRf5Bnevh0wvAaI5aaXUh4vBTHbYIkx+v5tqPM14LTTj5HHodSqp n/e/mhoiSf8il1clCbALmt5mw/V25hZEi+qy1l2NaZePjirge7pobXZ8bepKja2W Nb9Q/fix2PTVdkOzpU6T/vbc22sCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQtfaT1 ECTjYejjOQxM2s1TTRw8njAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTg1NC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rIQwDQYJKoZIhvcNAQELBQADggEBANWEbwtk+t8iJyVx+7VnC2OLd/rlbYV7olE7 scQwtUvfSpmv1BiOUeKS40adAFIluvAgdC7zT+++GJzHb2h/O9Ptgs/IYpKxuOVy Obe+Ahf5QoNw9KgW9OnqiWuqlm5BMfrAl6utDXZa6zbXvpwXnUawpMyaG4PUZnM0 NegKD6ytuTo+2gX95PpEoyB+LHe5OvO+l/39tTcIVkEKHwlTXIIeIXlqGdM+ybYF 72+JW8iH33GjskG9u/Mq8Jrihj/aWmtel/MZyqDNzzV1iI9D1lK3RkADODC/QqQS e1TJBuemC5VaocqCA1t3nP67bfT1glv28g6lKLRJGrfb/DItxxo= -----END CERTIFICATE-----Generated at Sat Mar 28 15:54:48 2026 by rpki-client