$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145611.roa File: AS145611.roa (raw, json) Hash identifier: D9qMC2K/gG3yhJHO/fPuq+1RMZgXIMxMwCBWMo1cTdM= Subject key identifier: 09:E6:AF:90:A9:D7:E2:16:D2:D2:C1:91:03:B3:4D:10:18:9A:DD:D0 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 65DCAFE3B32A221B3D7FBDE6BFF3715EF27CE03C Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145611.roa Signing time: Wed 04 Mar 2026 06:31:11 +0000 ROA not before: Wed 04 Mar 2026 06:26:11 +0000 ROA not after: Wed 03 Mar 2027 06:31:11 +0000 asID: 145611 IP address blocks: 240a:ab91::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:dc:af:e3:b3:2a:22:1b:3d:7f:bd:e6:bf:f3:71:5e:f2:7c:e0:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:26:11 2026 GMT Not After : Mar 3 06:31:11 2027 GMT Subject: CN=09E6AF90A9D7E216D2D2C19103B34D10189ADDD0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:f3:89:37:d4:54:36:3e:c5:77:77:3a:a4:1d: c2:1f:56:29:62:30:78:7d:a0:c5:72:18:f7:87:6a: 8e:dc:2a:85:a5:fe:99:5e:39:15:ea:ce:f4:a9:01: 9b:68:67:b2:74:d7:54:68:db:84:f2:d6:06:80:cd: dd:cd:de:33:f5:df:4b:c7:24:3b:60:ed:4b:cb:2c: f1:41:aa:79:b7:e1:27:6a:c1:da:7d:aa:01:ef:24: 70:a8:ea:e5:0f:7a:33:60:53:b2:19:d5:c5:fa:44: 34:5e:19:39:4f:05:fc:cf:24:9d:f4:d6:2b:ea:5a: 61:48:37:48:fc:07:fd:a3:81:29:09:5b:83:42:71: ae:a1:91:1d:d2:81:a0:61:e2:f1:8d:30:40:90:89: d2:91:3a:49:45:4b:90:eb:b4:65:ee:05:37:4c:78: e9:6f:66:d0:ea:04:bd:c9:c2:5c:c3:83:cb:8d:d1: 6b:9e:a0:b8:ab:ec:32:2c:34:4e:47:45:ec:dd:b4: 88:77:2d:97:93:60:89:86:c8:eb:88:9e:b0:03:4c: da:00:39:b1:db:80:c5:41:3a:b2:48:01:57:7a:c5: e2:a4:99:e5:2d:d0:22:44:09:88:4c:d0:66:a0:38: 82:ac:22:5c:d7:50:26:d9:3f:b0:7f:4c:2a:f3:24: d6:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:E6:AF:90:A9:D7:E2:16:D2:D2:C1:91:03:B3:4D:10:18:9A:DD:D0 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145611.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:ab91::/32 Signature Algorithm: sha256WithRSAEncryption 3c:f9:3a:96:13:bc:85:40:f4:14:85:00:e5:13:90:a1:71:4b: d7:ef:92:1b:bc:d4:c6:a4:97:aa:5f:9c:4d:87:a6:ff:2a:71: b8:13:a3:0d:f4:36:b3:32:d2:0e:f0:14:11:f3:c3:68:69:9f: a6:2f:c3:70:44:b1:82:db:ef:ed:55:a6:d4:7a:7a:99:e1:ca: 9f:48:68:ba:ba:76:e4:42:cd:5b:5e:c9:29:c0:58:8b:9c:46: 3d:4b:85:84:90:30:82:72:93:de:c5:c5:1c:f4:fe:c3:5c:db: 0e:09:93:a6:8e:9c:be:e3:b4:c9:72:18:bf:34:d4:b0:61:77: 6c:86:9d:f5:52:c0:93:f5:85:a2:27:0f:47:40:24:be:14:4d: d4:2c:d4:24:66:cb:0a:39:9a:38:b2:45:79:65:9a:5d:80:c5: 81:aa:f7:b6:29:08:a1:aa:b5:44:49:48:12:9a:b9:9c:1b:52: 01:4d:a4:b0:19:41:51:0a:c0:32:e6:3b:2d:38:f9:bb:a3:78: 51:20:01:6a:15:fb:b5:1f:32:66:ce:02:d9:ca:e7:40:2e:66: 2c:ee:1c:ab:30:87:ac:8a:7a:12:59:f5:b3:d9:43:76:62:cd: 42:1d:cb:1d:80:82:39:6a:d1:92:d8:d2:8a:6a:d9:73:30:30: 54:c5:f0:af -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUZdyv47MqIhs9f73mv/NxXvJ84DwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MjYxMVoX DTI3MDMwMzA2MzExMVowMzExMC8GA1UEAxMoMDlFNkFGOTBBOUQ3RTIxNkQyRDJD MTkxMDNCMzREMTAxODlBREREMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANLziTfUVDY+xXd3OqQdwh9WKWIweH2gxXIY94dqjtwqhaX+mV45FerO9KkB m2hnsnTXVGjbhPLWBoDN3c3eM/XfS8ckO2DtS8ss8UGqebfhJ2rB2n2qAe8kcKjq 5Q96M2BTshnVxfpENF4ZOU8F/M8knfTWK+paYUg3SPwH/aOBKQlbg0JxrqGRHdKB oGHi8Y0wQJCJ0pE6SUVLkOu0Ze4FN0x46W9m0OoEvcnCXMODy43Ra56guKvsMiw0 TkdF7N20iHctl5NgiYbI64iesANM2gA5sduAxUE6skgBV3rF4qSZ5S3QIkQJiEzQ ZqA4gqwiXNdQJtk/sH9MKvMk1ucCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQJ5q+Q qdfiFtLSwZEDs00QGJrd0DAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTYxMS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK q5EwDQYJKoZIhvcNAQELBQADggEBADz5OpYTvIVA9BSFAOUTkKFxS9fvkhu81Mak l6pfnE2Hpv8qcbgTow30NrMy0g7wFBHzw2hpn6Yvw3BEsYLb7+1VptR6epnhyp9I aLq6duRCzVteySnAWIucRj1LhYSQMIJyk97FxRz0/sNc2w4Jk6aOnL7jtMlyGL80 1LBhd2yGnfVSwJP1haInD0dAJL4UTdQs1CRmywo5mjiyRXllml2AxYGq97YpCKGq tURJSBKauZwbUgFNpLAZQVEKwDLmOy04+bujeFEgAWoV+7UfMmbOAtnK50AuZizu HKswh6yKehJZ9bPZQ3ZizUIdyx2Agjlq0ZLY0opq2XMwMFTF8K8= -----END CERTIFICATE-----Generated at Sat Mar 28 13:10:24 2026 by rpki-client