$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145606.roa File: AS145606.roa (raw, json) Hash identifier: OqxEVTccwKxROk6BEfoeUTGFeeN9HpaWvBrX1SxQH7g= Subject key identifier: 87:74:85:4D:1E:6E:B0:3A:AD:15:A4:90:A1:4C:05:46:7C:EA:90:7A Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 687FBB2572014381F32B20695FDBF9C8ADA0A423 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145606.roa Signing time: Wed 04 Mar 2026 06:30:02 +0000 ROA not before: Wed 04 Mar 2026 06:25:02 +0000 ROA not after: Wed 03 Mar 2027 06:30:02 +0000 asID: 145606 IP address blocks: 240a:ab8c::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:7f:bb:25:72:01:43:81:f3:2b:20:69:5f:db:f9:c8:ad:a0:a4:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:25:02 2026 GMT Not After : Mar 3 06:30:02 2027 GMT Subject: CN=8774854D1E6EB03AAD15A490A14C05467CEA907A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:b7:a6:36:d8:be:6f:fe:70:00:87:0c:fa:50: 3c:67:43:68:ba:68:16:8b:3e:bc:7c:1a:3c:32:88: 63:0d:fa:8e:e5:f7:f5:11:e0:12:f8:7d:30:95:0e: 90:44:6a:ca:35:c0:f4:8b:23:c2:31:76:42:e0:43: 74:61:23:09:f1:5f:6e:fa:87:21:37:2a:50:fc:41: d2:96:17:c7:da:ac:c1:1a:a3:c1:9c:76:da:3b:cb: 67:88:0e:b6:91:e8:d2:45:fd:a5:60:f7:db:15:1f: 74:55:ed:bd:05:b7:fc:ed:20:c2:0c:33:28:5e:92: 65:e7:3e:8c:63:43:09:24:25:b5:64:7d:a5:e7:ea: 3b:57:19:ac:9e:c8:ce:12:3f:21:c1:1e:09:76:85: bd:24:1e:f0:6a:f5:99:09:71:17:18:91:36:49:b4: 76:1d:1e:d9:15:d3:f3:3f:b1:f8:4e:74:13:5f:3a: 0b:9e:15:ed:2c:ef:59:cb:c4:6e:ae:df:6f:da:34: f3:3c:12:e0:ab:78:23:9a:7c:6f:fe:39:cf:e3:e6: 81:9f:78:bc:dd:e7:09:75:94:11:c8:af:0f:d8:8e: dd:85:cd:e3:79:35:fc:e6:da:a1:6b:13:5a:b9:ee: 0e:03:f5:52:ce:32:42:a8:04:83:b5:3d:12:b7:3a: f4:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:74:85:4D:1E:6E:B0:3A:AD:15:A4:90:A1:4C:05:46:7C:EA:90:7A X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145606.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:ab8c::/32 Signature Algorithm: sha256WithRSAEncryption 4d:79:02:9d:df:a2:8f:98:76:75:78:ee:b5:49:e0:77:bc:ba: c9:bf:92:e2:5c:0d:fa:12:ff:25:15:73:67:74:ad:5f:f8:49: 8c:7e:14:2f:40:d6:d3:55:8e:56:da:a5:7d:f8:b7:90:cf:9d: f5:71:61:53:9b:89:2d:81:b3:57:2a:34:82:4f:4c:16:33:e5: 9d:2e:e8:44:f9:31:d4:19:0e:06:87:df:c1:39:e1:8a:db:8d: 32:62:79:3f:3a:1c:bd:14:ba:da:67:2d:0b:37:94:29:22:27: 1c:de:cd:d2:48:ab:5c:f3:d1:98:a2:f0:91:f9:77:bc:8f:33: 71:bc:31:2a:04:c7:ed:42:b1:e9:23:d7:0d:03:38:a2:25:3f: cb:c4:57:f7:60:86:02:83:33:01:f3:2f:a8:9f:f8:ac:51:f5: 81:e3:70:c9:a4:18:ba:d7:3e:c0:7d:94:c8:a9:c4:cb:9f:61: a1:11:98:1f:d0:47:1b:9a:3b:8d:cc:cc:c6:bf:87:b6:68:56: 52:8d:6b:ee:a1:0d:2b:57:2e:98:80:df:86:95:b8:c2:4e:5c: 37:6b:e6:db:77:ee:0c:f8:94:47:5b:bb:ce:10:cd:9a:77:6a: 7e:78:c8:fa:d0:39:2e:30:f3:dc:63:0b:2d:5b:c2:79:94:87: 44:d6:fd:24 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUaH+7JXIBQ4HzKyBpX9v5yK2gpCMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MjUwMloX DTI3MDMwMzA2MzAwMlowMzExMC8GA1UEAxMoODc3NDg1NEQxRTZFQjAzQUFEMTVB NDkwQTE0QzA1NDY3Q0VBOTA3QTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALK3pjbYvm/+cACHDPpQPGdDaLpoFos+vHwaPDKIYw36juX39RHgEvh9MJUO kERqyjXA9IsjwjF2QuBDdGEjCfFfbvqHITcqUPxB0pYXx9qswRqjwZx22jvLZ4gO tpHo0kX9pWD32xUfdFXtvQW3/O0gwgwzKF6SZec+jGNDCSQltWR9pefqO1cZrJ7I zhI/IcEeCXaFvSQe8Gr1mQlxFxiRNkm0dh0e2RXT8z+x+E50E186C54V7SzvWcvE bq7fb9o08zwS4Kt4I5p8b/45z+PmgZ94vN3nCXWUEcivD9iO3YXN43k1/ObaoWsT WrnuDgP1Us4yQqgEg7U9Erc69IsCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSHdIVN Hm6wOq0VpJChTAVGfOqQejAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTYwNi5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK q4wwDQYJKoZIhvcNAQELBQADggEBAE15Ap3foo+YdnV47rVJ4He8usm/kuJcDfoS /yUVc2d0rV/4SYx+FC9A1tNVjlbapX34t5DPnfVxYVObiS2Bs1cqNIJPTBYz5Z0u 6ET5MdQZDgaH38E54YrbjTJieT86HL0UutpnLQs3lCkiJxzezdJIq1zz0Zii8JH5 d7yPM3G8MSoEx+1Csekj1w0DOKIlP8vEV/dghgKDMwHzL6if+KxR9YHjcMmkGLrX PsB9lMipxMufYaERmB/QRxuaO43MzMa/h7ZoVlKNa+6hDStXLpiA34aVuMJOXDdr 5tt37gz4lEdbu84QzZp3an54yPrQOS4w89xjCy1bwnmUh0TW/SQ= -----END CERTIFICATE-----Generated at Sat Mar 28 11:41:23 2026 by rpki-client