$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145613.roa File: AS145613.roa (raw, json) Hash identifier: Gm442+8zRjq6mfm5+8UvCKfQVsD2j0sEVJiP5vtjbpg= Subject key identifier: 35:EA:FA:9E:8E:5F:72:2A:FF:F0:00:2E:53:4B:32:BA:B3:8C:43:F9 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 1BE840452F0CAD015B21BFFC1C7912B636981B57 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145613.roa Signing time: Wed 04 Mar 2026 06:29:41 +0000 ROA not before: Wed 04 Mar 2026 06:24:41 +0000 ROA not after: Wed 03 Mar 2027 06:29:41 +0000 asID: 145613 IP address blocks: 240a:ab93::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:e8:40:45:2f:0c:ad:01:5b:21:bf:fc:1c:79:12:b6:36:98:1b:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:24:41 2026 GMT Not After : Mar 3 06:29:41 2027 GMT Subject: CN=35EAFA9E8E5F722AFFF0002E534B32BAB38C43F9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:ff:74:a6:79:4d:05:18:3b:db:56:68:21:f2: d7:99:47:9f:fc:33:9d:e2:b3:fc:b8:b1:83:47:e4: aa:2f:aa:4c:93:37:11:38:36:49:b9:e9:c8:5e:02: ee:be:7c:e1:2b:a0:f4:b2:cc:01:a7:72:11:8c:2d: 19:3d:07:e4:29:bf:f5:59:e8:51:f1:38:97:29:89: eb:f7:30:8e:3c:f3:c3:17:09:2d:81:fe:da:cf:37: 57:c6:27:f0:52:83:8a:90:84:54:7b:42:39:7e:98: 87:5a:05:2a:10:23:72:eb:66:10:00:6a:9c:58:91: 98:b1:39:7e:2e:e9:6e:f6:ae:d0:72:4d:ef:0c:cd: 26:bb:63:a3:22:c6:84:71:ab:19:88:46:d9:23:23: 34:fb:d5:4b:cb:21:60:80:ef:7b:63:42:75:33:c7: 74:72:6f:ad:d9:27:f2:3b:46:1f:f2:86:fe:be:9d: f7:c3:e7:84:60:2e:af:15:1b:9c:ef:25:ef:e5:89: bd:62:c6:48:05:66:9a:e8:a2:a9:43:d7:1a:3c:47: d6:c0:58:d5:f0:88:95:30:e8:2c:a5:e1:65:52:02: 66:af:e5:b8:23:17:21:d6:77:90:0a:00:73:d7:85: e2:93:88:c8:1a:d3:eb:e5:24:71:7c:b7:1e:d8:71: 6d:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:EA:FA:9E:8E:5F:72:2A:FF:F0:00:2E:53:4B:32:BA:B3:8C:43:F9 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145613.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:ab93::/32 Signature Algorithm: sha256WithRSAEncryption 72:fa:4b:36:9c:ae:d7:9f:eb:e9:13:56:28:06:87:88:61:f1: da:4c:b0:54:59:a1:7d:0c:ac:5e:87:27:b1:2b:16:45:ef:c3: 4f:34:4d:9c:00:d8:7b:21:ae:0e:77:37:8e:55:a3:e6:36:b5: 36:be:8c:5d:ce:45:bd:52:bc:50:13:f5:25:ec:83:9f:ff:0a: 26:0e:75:53:24:5d:ca:b0:8a:56:7f:86:bf:1a:51:93:8f:4e: e6:28:8b:d2:59:e2:e6:1a:5a:c4:5e:9c:50:cc:7e:62:ca:2c: df:7f:db:5d:20:92:b6:ba:c5:b1:f0:47:69:c5:93:15:61:b3: 47:78:28:37:56:1a:6c:e0:c3:40:d2:d4:a4:e7:3c:78:27:56: 00:18:a6:44:f0:fa:1b:a2:bd:23:fc:15:66:0e:17:be:b0:9a: e1:e8:b5:d7:2e:8d:21:ac:e8:9d:a3:97:98:f5:6d:6a:fe:d8: bb:7c:ba:9e:69:12:bc:36:a3:07:4c:de:aa:ec:95:e8:3f:a7: ac:0a:49:c4:e1:53:06:2b:af:34:2c:86:88:cd:e3:3d:f1:d6: 2e:3f:46:e9:af:f3:1d:43:c6:fe:ac:b6:78:cf:7c:a4:26:08: 9c:51:07:d0:5b:58:56:9c:18:a0:ee:db:11:7e:c6:28:4e:bf: 26:8c:8f:a6 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUG+hARS8MrQFbIb/8HHkStjaYG1cwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MjQ0MVoX DTI3MDMwMzA2Mjk0MVowMzExMC8GA1UEAxMoMzVFQUZBOUU4RTVGNzIyQUZGRjAw MDJFNTM0QjMyQkFCMzhDNDNGOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKP/dKZ5TQUYO9tWaCHy15lHn/wzneKz/Lixg0fkqi+qTJM3ETg2SbnpyF4C 7r584Sug9LLMAadyEYwtGT0H5Cm/9VnoUfE4lymJ6/cwjjzzwxcJLYH+2s83V8Yn 8FKDipCEVHtCOX6Yh1oFKhAjcutmEABqnFiRmLE5fi7pbvau0HJN7wzNJrtjoyLG hHGrGYhG2SMjNPvVS8shYIDve2NCdTPHdHJvrdkn8jtGH/KG/r6d98PnhGAurxUb nO8l7+WJvWLGSAVmmuiiqUPXGjxH1sBY1fCIlTDoLKXhZVICZq/luCMXIdZ3kAoA c9eF4pOIyBrT6+UkcXy3HthxbfsCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQ16vqe jl9yKv/wAC5TSzK6s4xD+TAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTYxMy5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK q5MwDQYJKoZIhvcNAQELBQADggEBAHL6Szacrtef6+kTVigGh4hh8dpMsFRZoX0M rF6HJ7ErFkXvw080TZwA2Hshrg53N45Vo+Y2tTa+jF3ORb1SvFAT9SXsg5//CiYO dVMkXcqwilZ/hr8aUZOPTuYoi9JZ4uYaWsRenFDMfmLKLN9/210gkra6xbHwR2nF kxVhs0d4KDdWGmzgw0DS1KTnPHgnVgAYpkTw+huivSP8FWYOF76wmuHotdcujSGs 6J2jl5j1bWr+2Lt8up5pErw2owdM3qrsleg/p6wKScThUwYrrzQshojN4z3x1i4/ Rumv8x1Dxv6stnjPfKQmCJxRB9BbWFacGKDu2xF+xihOvyaMj6Y= -----END CERTIFICATE-----Generated at Sat Mar 28 11:50:05 2026 by rpki-client