$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145624.roa File: AS145624.roa (raw, json) Hash identifier: SpYoD36n8LU1nKT6Yc9KlZS2Pmky4IZCpXYl+BwimNg= Subject key identifier: 6A:65:06:07:47:79:E5:86:D2:92:FD:87:4C:8A:E2:B2:8C:5A:4D:66 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 49D5E8D281AA5EB2DA62B95DE6EBD932D75C08C9 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145624.roa Signing time: Wed 04 Mar 2026 06:31:06 +0000 ROA not before: Wed 04 Mar 2026 06:26:06 +0000 ROA not after: Wed 03 Mar 2027 06:31:06 +0000 asID: 145624 IP address blocks: 240a:ab9e::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:d5:e8:d2:81:aa:5e:b2:da:62:b9:5d:e6:eb:d9:32:d7:5c:08:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:26:06 2026 GMT Not After : Mar 3 06:31:06 2027 GMT Subject: CN=6A6506074779E586D292FD874C8AE2B28C5A4D66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:6f:5d:6b:f4:3b:c8:42:80:07:71:b9:12:c7: ef:24:28:6d:7b:f4:41:cb:c1:10:ac:15:74:1f:9f: 71:f0:a8:ab:76:27:40:fc:e8:4f:7d:74:9d:75:6a: 9e:2b:a2:5a:de:d5:48:20:d1:d3:f1:87:6a:d8:8a: 68:d4:42:88:0c:8f:f7:9b:79:39:e2:4a:55:8b:91: 8c:93:b6:33:f8:a2:c1:ad:82:10:43:94:4a:e3:0c: dd:a4:d3:fb:a1:47:9e:e8:03:6d:49:eb:eb:da:50: 8e:54:ec:42:02:18:3f:52:4e:34:21:8f:33:5e:ad: 69:3c:1d:59:41:31:b7:7a:f6:18:56:ec:eb:3a:8a: 33:39:33:fd:6b:93:cf:9f:c3:c5:b2:75:de:cb:83: 8a:2e:46:e4:12:00:bc:7d:b3:75:22:78:d7:e4:a6: cc:d1:ff:d6:43:ae:ac:78:86:bb:af:3c:ac:29:1c: 1e:72:9e:d6:ca:7b:2c:8c:6e:ca:f0:be:fd:c4:f7: 0d:1e:8e:78:60:ba:65:92:ab:eb:b8:93:b8:31:70: 13:30:0f:26:ce:92:0e:19:e3:09:da:c3:77:1e:c2: e3:c3:d4:c0:0b:ab:1a:b0:be:2a:39:37:0f:ad:f7: 7e:f3:bc:14:8b:a5:03:27:e6:19:ed:dd:8b:92:c0: 0f:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:65:06:07:47:79:E5:86:D2:92:FD:87:4C:8A:E2:B2:8C:5A:4D:66 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145624.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:ab9e::/32 Signature Algorithm: sha256WithRSAEncryption 42:6c:9e:5d:19:81:6c:10:30:49:d5:6a:a2:03:73:f6:3b:f2: e3:4a:a7:e7:fd:ff:51:22:0f:0c:7c:c9:96:a3:d5:dd:54:a0: 25:b6:40:fb:56:49:40:61:bc:46:2c:c1:95:12:c0:9e:75:10: af:d1:ae:8e:63:9a:a5:3a:51:7f:d9:40:d5:3e:a3:9a:fa:7c: a0:0e:58:97:f5:5a:d3:9a:a3:0f:40:c3:5d:0e:8b:35:fc:d0: f6:ab:83:9a:09:3b:3a:36:a4:ea:60:ed:61:98:30:cd:79:d0: a6:ee:ed:54:eb:7e:d9:ad:62:d5:2c:c5:6b:d9:c9:ea:fa:cf: 6a:5b:3a:d6:b7:4f:84:b6:09:09:e8:04:21:4f:19:48:1d:83: 20:1b:05:e6:5a:22:ce:16:2d:35:cf:59:d6:fc:bf:3b:22:43: 72:b8:36:26:eb:d7:34:9d:0c:eb:ef:1c:09:fa:f9:fe:c3:4d: 9c:d5:72:5c:f0:6d:24:f2:fc:ac:2a:04:bd:de:f4:0f:e4:51: cf:d0:69:9b:91:b8:bb:f5:c5:09:bd:21:7e:39:9e:bd:9f:1d: 83:f3:df:e9:c5:6a:5b:e4:96:99:77:e5:08:50:0c:bb:4b:41: 14:f3:3f:bf:07:8d:46:95:a4:ba:fa:28:90:57:98:4c:69:95: ac:78:a9:7e -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUSdXo0oGqXrLaYrld5uvZMtdcCMkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MjYwNloX DTI3MDMwMzA2MzEwNlowMzExMC8GA1UEAxMoNkE2NTA2MDc0Nzc5RTU4NkQyOTJG RDg3NEM4QUUyQjI4QzVBNEQ2NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALVvXWv0O8hCgAdxuRLH7yQobXv0QcvBEKwVdB+fcfCoq3YnQPzoT310nXVq niuiWt7VSCDR0/GHatiKaNRCiAyP95t5OeJKVYuRjJO2M/iiwa2CEEOUSuMM3aTT +6FHnugDbUnr69pQjlTsQgIYP1JONCGPM16taTwdWUExt3r2GFbs6zqKMzkz/WuT z5/DxbJ13suDii5G5BIAvH2zdSJ41+SmzNH/1kOurHiGu688rCkcHnKe1sp7LIxu yvC+/cT3DR6OeGC6ZZKr67iTuDFwEzAPJs6SDhnjCdrDdx7C48PUwAurGrC+Kjk3 D633fvO8FIulAyfmGe3di5LAD9MCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRqZQYH R3nlhtKS/YdMiuKyjFpNZjAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTYyNC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK q54wDQYJKoZIhvcNAQELBQADggEBAEJsnl0ZgWwQMEnVaqIDc/Y78uNKp+f9/1Ei Dwx8yZaj1d1UoCW2QPtWSUBhvEYswZUSwJ51EK/Rro5jmqU6UX/ZQNU+o5r6fKAO WJf1WtOaow9Aw10OizX80Parg5oJOzo2pOpg7WGYMM150Kbu7VTrftmtYtUsxWvZ yer6z2pbOta3T4S2CQnoBCFPGUgdgyAbBeZaIs4WLTXPWdb8vzsiQ3K4Nibr1zSd DOvvHAn6+f7DTZzVclzwbSTy/KwqBL3e9A/kUc/QaZuRuLv1xQm9IX45nr2fHYPz 3+nFalvklpl35QhQDLtLQRTzP78HjUaVpLr6KJBXmExplax4qX4= -----END CERTIFICATE-----Generated at Sat Mar 28 11:49:58 2026 by rpki-client