$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145909.roa File: AS145909.roa (raw, json) Hash identifier: usuPdH5D46DQ2Erw2vCgLP37krv3rbXQMLoB5Gv2Nnc= Subject key identifier: BB:DE:31:B0:65:20:14:2D:F5:89:BA:64:32:5D:8F:3B:BD:49:9A:A1 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 4ABB03B1DB4056CEDA759ECDEC2E7D6A0C2469A6 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145909.roa Signing time: Wed 04 Mar 2026 06:30:38 +0000 ROA not before: Wed 04 Mar 2026 06:25:38 +0000 ROA not after: Wed 03 Mar 2027 06:30:38 +0000 asID: 145909 IP address blocks: 240a:acbb::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:bb:03:b1:db:40:56:ce:da:75:9e:cd:ec:2e:7d:6a:0c:24:69:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:25:38 2026 GMT Not After : Mar 3 06:30:38 2027 GMT Subject: CN=BBDE31B06520142DF589BA64325D8F3BBD499AA1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:c2:e8:ba:31:27:6d:9f:5b:50:d8:4b:e0:f2: 28:36:d4:08:0b:96:01:25:09:19:20:eb:26:3c:2b: b5:d8:cf:25:10:6a:c3:d8:cd:fc:1e:68:b2:48:13: 2d:e7:4e:cc:13:26:5f:a6:e4:d1:9d:e9:3a:3f:06: d4:34:58:ef:f4:33:dd:82:13:e0:5f:15:9a:82:b6: 09:21:c9:11:d5:0f:c6:12:80:82:58:de:23:30:0f: 29:ed:b3:ef:38:5f:50:68:b4:15:26:68:fe:a3:35: 3d:ce:81:6f:50:f5:2f:d8:8b:9d:70:8d:aa:28:7a: 16:d1:06:e3:19:82:ef:b7:84:c0:60:06:2e:44:b4: 47:14:f1:d0:5f:78:a7:6d:18:06:62:8f:4e:5e:34: e2:9a:d2:6c:0c:78:29:ed:e9:43:85:32:f3:9b:66: 05:cf:cd:a4:69:30:24:e1:1c:da:ed:cf:5e:bc:45: f5:d6:3b:3e:38:ec:3c:f2:81:b5:e2:78:7a:48:07: 98:ce:b3:fb:5f:a8:91:91:e4:9e:8b:8d:95:a9:ef: d4:13:f3:54:b8:7d:4e:08:97:cc:15:ee:9d:b5:8e: f4:69:0e:b1:7e:b4:13:3a:9c:ff:a5:90:c1:03:86: 70:28:01:76:03:13:d7:e7:fe:b3:d3:b0:3f:47:56: 7e:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:DE:31:B0:65:20:14:2D:F5:89:BA:64:32:5D:8F:3B:BD:49:9A:A1 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145909.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:acbb::/32 Signature Algorithm: sha256WithRSAEncryption 9b:7c:a2:28:1a:c9:b2:01:a0:31:a6:96:3f:b1:ef:8d:d8:b0: 41:eb:10:16:a7:ca:49:71:06:7f:34:76:d3:6e:68:b2:67:8e: 30:f5:cb:e5:e8:ae:6e:8a:fb:40:21:4a:02:00:ac:b9:93:a6: 80:74:90:36:50:b2:53:ea:61:1f:50:d5:68:df:1b:43:90:46: 19:4b:5c:29:a3:49:d9:cd:4c:31:a8:3d:46:4f:ad:f5:f6:40: fd:f7:f6:1d:2a:ce:50:13:5a:59:e5:df:84:da:3b:f0:b6:2b: 2d:22:d2:68:13:df:bc:f2:e8:2f:b4:93:d2:9e:0a:f3:02:9f: 62:14:97:d8:6e:cd:2c:70:08:91:02:32:1c:36:50:66:2a:b2: 05:0e:05:28:6e:b5:4f:bd:d7:ef:12:4e:e3:6d:6e:91:4f:38: 91:86:92:20:ce:f7:db:4d:3c:c3:94:b8:9b:f2:33:85:da:52: ad:f3:e2:55:6c:66:24:6c:08:ab:3a:9e:fd:cd:c7:22:54:66: b1:9f:2a:2c:70:83:9e:6f:64:a1:b7:00:4f:97:f8:36:19:68: 64:f6:54:2c:11:f8:a5:a7:06:93:6d:de:bc:81:0a:df:58:15: 85:04:fa:43:16:04:5c:54:25:b4:9c:e2:09:51:83:2a:9e:eb: 96:21:f4:14 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUSrsDsdtAVs7adZ7N7C59agwkaaYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MjUzOFoX DTI3MDMwMzA2MzAzOFowMzExMC8GA1UEAxMoQkJERTMxQjA2NTIwMTQyREY1ODlC QTY0MzI1RDhGM0JCRDQ5OUFBMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOXC6LoxJ22fW1DYS+DyKDbUCAuWASUJGSDrJjwrtdjPJRBqw9jN/B5oskgT LedOzBMmX6bk0Z3pOj8G1DRY7/Qz3YIT4F8VmoK2CSHJEdUPxhKAgljeIzAPKe2z 7zhfUGi0FSZo/qM1Pc6Bb1D1L9iLnXCNqih6FtEG4xmC77eEwGAGLkS0RxTx0F94 p20YBmKPTl404prSbAx4Ke3pQ4Uy85tmBc/NpGkwJOEc2u3PXrxF9dY7PjjsPPKB teJ4ekgHmM6z+1+okZHknouNlanv1BPzVLh9TgiXzBXunbWO9GkOsX60Ezqc/6WQ wQOGcCgBdgMT1+f+s9OwP0dWfk0CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBS73jGw ZSAULfWJumQyXY87vUmaoTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTkwOS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rLswDQYJKoZIhvcNAQELBQADggEBAJt8oigaybIBoDGmlj+x743YsEHrEBanyklx Bn80dtNuaLJnjjD1y+Xorm6K+0AhSgIArLmTpoB0kDZQslPqYR9Q1WjfG0OQRhlL XCmjSdnNTDGoPUZPrfX2QP339h0qzlATWlnl34TaO/C2Ky0i0mgT37zy6C+0k9Ke CvMCn2IUl9huzSxwCJECMhw2UGYqsgUOBShutU+91+8STuNtbpFPOJGGkiDO99tN PMOUuJvyM4XaUq3z4lVsZiRsCKs6nv3NxyJUZrGfKixwg55vZKG3AE+X+DYZaGT2 VCwR+KWnBpNt3ryBCt9YFYUE+kMWBFxUJbSc4glRgyqe65Yh9BQ= -----END CERTIFICATE-----Generated at Sat Mar 28 14:30:42 2026 by rpki-client