$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145617.roa File: AS145617.roa (raw, json) Hash identifier: PfYIm/AtVMSaH7NIcD8r2izlTIN8mb6WinZKvtIk9Q4= Subject key identifier: 14:DD:76:84:DF:83:3E:E6:6A:CD:F2:97:0B:D4:DE:74:0D:C4:DC:ED Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 2C7B266416363D22FC4105220CDD9D44D6A4E0A8 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145617.roa Signing time: Wed 04 Mar 2026 06:30:25 +0000 ROA not before: Wed 04 Mar 2026 06:25:25 +0000 ROA not after: Wed 03 Mar 2027 06:30:25 +0000 asID: 145617 IP address blocks: 240a:ab97::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:7b:26:64:16:36:3d:22:fc:41:05:22:0c:dd:9d:44:d6:a4:e0:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:25:25 2026 GMT Not After : Mar 3 06:30:25 2027 GMT Subject: CN=14DD7684DF833EE66ACDF2970BD4DE740DC4DCED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:1d:e9:9d:ce:a2:9e:c3:37:68:7f:0a:67:46: e6:ab:53:6f:61:86:ff:84:f1:30:73:62:59:e5:69: 14:22:d3:c4:29:63:99:34:07:60:d1:f5:9f:8a:d6: 4d:1e:71:8b:b2:3d:1a:2f:6c:d5:4b:5d:83:b6:b3: b5:ff:5b:df:6e:b2:9c:bc:cc:af:79:5f:40:dd:39: 7c:ea:53:44:36:30:0b:72:e9:e4:71:48:12:3a:59: 99:41:8b:58:29:a6:cf:ec:2e:67:d4:bf:af:64:f0: c7:fe:99:2b:05:b9:a6:b8:c9:f2:16:04:db:17:2a: 73:78:5d:38:f2:bc:de:21:d4:09:86:38:84:a4:12: 73:24:60:aa:f3:21:9f:34:73:7a:e9:05:25:c9:fd: 3d:cf:2e:ee:50:e5:01:95:fb:de:a6:be:f5:79:d1: 57:4a:32:f5:d7:23:46:30:80:02:38:d5:3a:1e:57: c8:15:cd:84:d5:a6:5b:6c:af:e1:47:30:63:ec:e7: 04:d0:70:fc:01:4f:65:b2:80:0b:6a:c0:a8:8c:4c: 5c:8b:5f:2c:8f:0b:6c:63:75:81:ac:77:52:c0:74: 44:d6:cd:eb:f0:2b:89:e7:2e:ae:7d:cf:6b:7d:09: 8f:4e:98:3b:f1:33:26:c4:15:8c:1e:dc:e7:b9:b0: 6f:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:DD:76:84:DF:83:3E:E6:6A:CD:F2:97:0B:D4:DE:74:0D:C4:DC:ED X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145617.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:ab97::/32 Signature Algorithm: sha256WithRSAEncryption b2:3a:fd:c6:2e:38:b4:b6:b7:6f:d0:68:8b:5f:09:40:d4:47: 6c:6f:db:8d:b0:f1:49:5d:3a:d5:13:d0:bc:27:4c:23:4e:41: 3b:6e:49:22:f9:b8:06:7c:5c:00:65:54:36:95:b7:cc:10:2a: a2:21:9e:5e:37:79:70:83:bc:c5:98:dd:c3:f6:b2:38:15:ce: 61:de:6c:fb:e9:62:e3:84:22:cc:35:7f:40:79:8e:13:73:c2: 70:fc:c7:b5:83:91:16:a8:1d:1f:a8:64:a1:59:77:37:c4:eb: 5b:c4:e6:da:af:2b:f7:48:79:95:db:49:17:20:be:55:4c:3d: 5b:1e:3e:96:4b:8f:f9:2b:bb:a9:9f:d0:16:53:8b:ee:97:27: 07:d8:07:91:6d:54:f0:90:76:fe:fc:f8:55:50:1e:4e:f6:f8: 22:37:ec:e1:da:a7:a8:1a:cb:3f:e2:e5:0c:40:8a:d2:8a:4d: 22:45:72:13:a2:33:03:58:23:8f:65:bf:ed:ad:21:98:2f:0c: 24:4f:96:67:78:71:ee:75:1b:89:6c:c8:68:19:8f:4c:7d:5d: f8:76:49:9a:d5:45:3c:02:2a:d5:1d:73:71:67:4a:cd:88:1d: df:2f:8a:27:22:6d:87:81:2f:37:de:e4:5f:ee:2a:ed:fe:3d: bc:da:8a:d4 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIULHsmZBY2PSL8QQUiDN2dRNak4KgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MjUyNVoX DTI3MDMwMzA2MzAyNVowMzExMC8GA1UEAxMoMTRERDc2ODRERjgzM0VFNjZBQ0RG Mjk3MEJENERFNzQwREM0RENFRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMQd6Z3Oop7DN2h/CmdG5qtTb2GG/4TxMHNiWeVpFCLTxCljmTQHYNH1n4rW TR5xi7I9Gi9s1Utdg7aztf9b326ynLzMr3lfQN05fOpTRDYwC3Lp5HFIEjpZmUGL WCmmz+wuZ9S/r2Twx/6ZKwW5prjJ8hYE2xcqc3hdOPK83iHUCYY4hKQScyRgqvMh nzRzeukFJcn9Pc8u7lDlAZX73qa+9XnRV0oy9dcjRjCAAjjVOh5XyBXNhNWmW2yv 4UcwY+znBNBw/AFPZbKAC2rAqIxMXItfLI8LbGN1gax3UsB0RNbN6/Ariecurn3P a30Jj06YO/EzJsQVjB7c57mwbwMCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQU3XaE 34M+5mrN8pcL1N50DcTc7TAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTYxNy5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK q5cwDQYJKoZIhvcNAQELBQADggEBALI6/cYuOLS2t2/QaItfCUDUR2xv242w8Uld OtUT0LwnTCNOQTtuSSL5uAZ8XABlVDaVt8wQKqIhnl43eXCDvMWY3cP2sjgVzmHe bPvpYuOEIsw1f0B5jhNzwnD8x7WDkRaoHR+oZKFZdzfE61vE5tqvK/dIeZXbSRcg vlVMPVsePpZLj/kru6mf0BZTi+6XJwfYB5FtVPCQdv78+FVQHk72+CI37OHap6ga yz/i5QxAitKKTSJFchOiMwNYI49lv+2tIZgvDCRPlmd4ce51G4lsyGgZj0x9Xfh2 SZrVRTwCKtUdc3FnSs2IHd8viicibYeBLzfe5F/uKu3+PbzaitQ= -----END CERTIFICATE-----Generated at Sat Mar 28 11:49:45 2026 by rpki-client