$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145630.roa File: AS145630.roa (raw, json) Hash identifier: M1FkZES0DOMnOFytMDnlT2vbd+8F4RfpcC1W08XLeAs= Subject key identifier: 2E:2F:41:14:C1:57:18:6D:08:86:89:2D:51:EE:99:0C:98:A6:A8:98 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 66BE5A64DF46B4492E34E093FEB512CF7F35907F Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145630.roa Signing time: Wed 04 Mar 2026 06:30:50 +0000 ROA not before: Wed 04 Mar 2026 06:25:50 +0000 ROA not after: Wed 03 Mar 2027 06:30:50 +0000 asID: 145630 IP address blocks: 240a:aba4::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:be:5a:64:df:46:b4:49:2e:34:e0:93:fe:b5:12:cf:7f:35:90:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:25:50 2026 GMT Not After : Mar 3 06:30:50 2027 GMT Subject: CN=2E2F4114C157186D0886892D51EE990C98A6A898 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:a4:dd:c2:1c:70:a2:54:50:bf:6d:26:8a:0d: 07:c6:1c:c4:0e:7e:c3:f2:03:4a:fd:6a:8c:50:5e: 3e:36:36:96:1c:31:be:ac:a3:10:8f:7c:14:13:cb: e1:d0:89:c9:cc:2b:9e:58:80:ff:71:48:d4:14:0a: 38:02:49:25:a5:d7:49:dd:90:ba:50:e7:c6:07:ed: 37:d8:69:d6:3c:df:85:9c:29:5a:3b:00:04:dc:3b: 05:b0:46:01:5e:8f:89:30:f3:44:c0:6b:20:62:3a: e4:eb:57:9d:39:fd:ab:61:82:87:50:5a:ea:9a:6e: 74:2d:76:a6:f7:04:c7:3b:41:f6:06:7f:7d:94:db: 0d:f9:5f:3c:87:aa:e6:5a:dc:d9:3a:c9:06:ca:a1: 24:ed:99:8e:b4:d8:70:47:40:f8:fc:90:f7:e3:59: d5:89:43:f9:ef:40:87:7d:bc:9f:f1:88:79:01:b3: bb:b2:88:c2:66:ef:50:e4:87:67:92:28:3d:5b:58: 2b:a6:fd:3d:be:ea:2d:70:93:f0:b7:de:90:d2:86: 7a:58:7e:70:11:85:95:53:98:10:f9:f3:48:3a:2c: 7d:ed:57:d8:2e:26:9c:72:42:38:66:0f:dd:72:8d: fd:f4:9d:4b:52:1d:b2:5f:16:e3:c9:4f:c7:a3:9f: b7:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:2F:41:14:C1:57:18:6D:08:86:89:2D:51:EE:99:0C:98:A6:A8:98 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145630.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:aba4::/32 Signature Algorithm: sha256WithRSAEncryption ac:97:5f:9a:76:aa:b3:43:54:3a:63:ba:f0:c9:4c:c8:7b:e4: 97:2b:80:53:db:4d:a2:a5:a7:15:f8:32:86:0c:14:3b:e7:57: 03:e4:09:01:28:52:9a:0f:1e:6f:f0:b0:52:74:61:06:c9:74: 6b:28:71:bf:6f:a1:da:78:31:1e:5e:bd:63:e3:eb:9b:a7:8b: 68:44:cf:6e:19:23:63:50:a3:d4:73:90:de:bd:5b:5b:4b:1e: db:66:c7:e9:da:76:fa:cc:70:fd:c6:42:9f:44:15:fb:44:7a: 72:43:a8:c0:2a:ba:6f:77:b1:8f:08:4e:df:be:4e:71:99:9e: 12:7c:50:34:65:68:18:cf:2f:d4:52:be:ac:87:7e:07:a9:cb: b1:55:59:53:73:fa:98:e1:85:e8:88:4c:b7:d7:6d:b1:a7:24: f5:71:c4:ae:5b:53:0d:6d:45:28:ef:2a:51:fa:ea:7a:94:63: 8b:e2:63:bb:dd:b6:11:ec:c9:60:ea:f8:5c:84:d1:36:6e:a8: 4c:a7:77:ec:38:28:6f:36:a9:9a:9b:d7:15:5f:fa:ec:df:c0: a9:fe:18:71:78:51:82:47:22:6f:d8:f2:b4:13:d6:d1:10:36: e6:77:ce:56:81:9e:cb:6a:c3:9b:2c:bc:fb:4f:61:6e:b9:a2: 63:5e:40:d7 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUZr5aZN9GtEkuNOCT/rUSz381kH8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MjU1MFoX DTI3MDMwMzA2MzA1MFowMzExMC8GA1UEAxMoMkUyRjQxMTRDMTU3MTg2RDA4ODY4 OTJENTFFRTk5MEM5OEE2QTg5ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALKk3cIccKJUUL9tJooNB8YcxA5+w/IDSv1qjFBePjY2lhwxvqyjEI98FBPL 4dCJycwrnliA/3FI1BQKOAJJJaXXSd2QulDnxgftN9hp1jzfhZwpWjsABNw7BbBG AV6PiTDzRMBrIGI65OtXnTn9q2GCh1Ba6ppudC12pvcExztB9gZ/fZTbDflfPIeq 5lrc2TrJBsqhJO2ZjrTYcEdA+PyQ9+NZ1YlD+e9Ah328n/GIeQGzu7KIwmbvUOSH Z5IoPVtYK6b9Pb7qLXCT8LfekNKGelh+cBGFlVOYEPnzSDosfe1X2C4mnHJCOGYP 3XKN/fSdS1Idsl8W48lPx6Oft3UCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQuL0EU wVcYbQiGiS1R7pkMmKaomDAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTYzMC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK q6QwDQYJKoZIhvcNAQELBQADggEBAKyXX5p2qrNDVDpjuvDJTMh75JcrgFPbTaKl pxX4MoYMFDvnVwPkCQEoUpoPHm/wsFJ0YQbJdGsocb9vodp4MR5evWPj65uni2hE z24ZI2NQo9RzkN69W1tLHttmx+nadvrMcP3GQp9EFftEenJDqMAqum93sY8ITt++ TnGZnhJ8UDRlaBjPL9RSvqyHfgepy7FVWVNz+pjhheiITLfXbbGnJPVxxK5bUw1t RSjvKlH66nqUY4viY7vdthHsyWDq+FyE0TZuqEynd+w4KG82qZqb1xVf+uzfwKn+ GHF4UYJHIm/Y8rQT1tEQNuZ3zlaBnstqw5ssvPtPYW65omNeQNc= -----END CERTIFICATE-----Generated at Sat Mar 28 11:44:23 2026 by rpki-client