$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145569.roa File: AS145569.roa (raw, json) Hash identifier: XL+vtD9GwJSV5ByDYg2iTfAkRp62OP3Q9VbGcG+gMEg= Subject key identifier: 89:B1:EC:1C:9B:18:E8:8B:66:09:A9:B4:43:55:58:12:31:C6:38:19 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 7EAD214ADC0BFDF1916FF24531CAD678D5B6DA6F Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145569.roa Signing time: Wed 04 Mar 2026 06:30:08 +0000 ROA not before: Wed 04 Mar 2026 06:25:08 +0000 ROA not after: Wed 03 Mar 2027 06:30:08 +0000 asID: 145569 IP address blocks: 240a:ab67::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:ad:21:4a:dc:0b:fd:f1:91:6f:f2:45:31:ca:d6:78:d5:b6:da:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:25:08 2026 GMT Not After : Mar 3 06:30:08 2027 GMT Subject: CN=89B1EC1C9B18E88B6609A9B44355581231C63819 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:ce:a2:37:9f:0b:dd:fc:48:73:0d:78:11:6d: fa:fe:4a:18:58:41:79:ee:e6:c8:ee:d9:1d:db:77: 92:10:97:93:39:16:3e:39:10:fe:cc:47:f6:7c:2d: dc:39:fc:81:06:e0:93:98:99:7c:f5:3b:a4:14:4f: 91:51:1c:bd:30:83:6f:a2:86:16:b6:20:14:74:f9: 71:71:12:f0:10:f4:1e:5d:d5:51:3c:58:2d:ca:42: be:d1:af:ab:f4:4b:5e:9a:41:2f:15:d1:60:22:23: 67:be:a8:14:a4:73:d7:88:8c:14:13:45:77:75:3a: 62:72:6a:d1:ba:33:96:fe:d0:2e:b2:70:42:6e:ee: 7b:d2:ae:d4:c1:bf:f7:07:fa:e0:19:19:33:30:c7: 27:e3:43:a9:7f:4e:06:d4:c5:bf:ae:15:e4:1f:22: f6:44:d7:8d:b2:57:d2:3c:91:8a:db:4e:66:51:12: 50:19:8a:f8:40:95:5d:f1:07:32:0c:e6:03:f5:41: f8:b6:d4:a1:3c:c3:26:13:82:f4:03:d6:93:48:97: 1b:2a:e3:16:a4:13:35:e8:0a:7d:73:3e:a5:b5:39: 97:bd:a5:46:a5:59:e7:c0:a0:dd:06:43:49:53:82: 82:8e:f5:d8:0a:74:af:f9:dd:32:4f:33:e0:59:6d: 29:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:B1:EC:1C:9B:18:E8:8B:66:09:A9:B4:43:55:58:12:31:C6:38:19 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145569.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:ab67::/32 Signature Algorithm: sha256WithRSAEncryption ae:6b:60:2b:f0:6a:6a:79:a9:8e:0c:0e:0d:38:d6:61:35:b6: 13:9a:d8:8c:79:e4:0f:6b:dc:14:ca:f7:87:b8:5f:37:a9:0c: e5:50:28:31:9a:e3:84:6c:04:06:ea:47:07:9d:a7:f5:05:cc: 01:68:61:13:23:4c:05:2c:ec:0c:25:92:c9:dc:c9:67:a8:8a: 9b:21:15:04:80:b9:04:73:07:35:ab:27:93:18:38:53:d7:8a: cf:35:3d:3b:c1:f8:83:9e:5d:e4:42:48:aa:19:c8:6f:71:62: 47:19:d7:d1:aa:4b:4e:01:cf:b4:a1:76:cb:a9:4b:07:c3:70: 24:da:16:29:a2:57:a8:c7:19:dc:bd:75:c4:92:16:c5:03:d8: b2:0b:13:57:17:7b:6c:0b:27:e6:b6:ed:3c:ca:a7:1b:74:82: 45:25:db:59:06:14:2b:bb:c7:0d:4b:6f:1f:0e:99:fd:1f:4d: 67:a6:be:3b:74:cc:e9:9f:3c:9c:af:d0:eb:ab:a3:bb:77:65: a9:b4:c0:2b:0d:e3:d9:ed:83:b5:10:cf:79:0b:4a:b4:a4:6e: a9:4b:4d:b5:a7:01:c8:1d:2e:78:8d:5d:79:b2:d1:2e:c7:77: d8:85:79:cc:6e:5b:85:3d:da:fb:6e:1e:0e:ec:37:da:1f:ab: cf:4a:dc:4e -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUfq0hStwL/fGRb/JFMcrWeNW22m8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MjUwOFoX DTI3MDMwMzA2MzAwOFowMzExMC8GA1UEAxMoODlCMUVDMUM5QjE4RTg4QjY2MDlB OUI0NDM1NTU4MTIzMUM2MzgxOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALrOojefC938SHMNeBFt+v5KGFhBee7myO7ZHdt3khCXkzkWPjkQ/sxH9nwt 3Dn8gQbgk5iZfPU7pBRPkVEcvTCDb6KGFrYgFHT5cXES8BD0Hl3VUTxYLcpCvtGv q/RLXppBLxXRYCIjZ76oFKRz14iMFBNFd3U6YnJq0bozlv7QLrJwQm7ue9Ku1MG/ 9wf64BkZMzDHJ+NDqX9OBtTFv64V5B8i9kTXjbJX0jyRittOZlESUBmK+ECVXfEH MgzmA/VB+LbUoTzDJhOC9APWk0iXGyrjFqQTNegKfXM+pbU5l72lRqVZ58Cg3QZD SVOCgo712Ap0r/ndMk8z4FltKXUCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSJsewc mxjoi2YJqbRDVVgSMcY4GTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTU2OS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK q2cwDQYJKoZIhvcNAQELBQADggEBAK5rYCvwamp5qY4MDg041mE1thOa2Ix55A9r 3BTK94e4XzepDOVQKDGa44RsBAbqRwedp/UFzAFoYRMjTAUs7AwlksncyWeoipsh FQSAuQRzBzWrJ5MYOFPXis81PTvB+IOeXeRCSKoZyG9xYkcZ19GqS04Bz7Shdsup SwfDcCTaFimiV6jHGdy9dcSSFsUD2LILE1cXe2wLJ+a27TzKpxt0gkUl21kGFCu7 xw1Lbx8Omf0fTWemvjt0zOmfPJyv0Ouro7t3Zam0wCsN49ntg7UQz3kLSrSkbqlL TbWnAcgdLniNXXmy0S7Hd9iFecxuW4U92vtuHg7sN9ofq89K3E4= -----END CERTIFICATE-----Generated at Sat Mar 28 11:41:36 2026 by rpki-client