$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145635.roa File: AS145635.roa (raw, json) Hash identifier: K9qFaailJ39uqCyWcQ3NO0fha5rtSOuf3coDdYWeWGw= Subject key identifier: 2F:AD:AB:69:2A:93:1C:DF:EA:14:BD:8F:AC:C8:9E:2F:26:CE:32:EA Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 48A0886473BDED5C2D337A2B86488740FAE88ED8 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145635.roa Signing time: Wed 04 Mar 2026 06:30:37 +0000 ROA not before: Wed 04 Mar 2026 06:25:37 +0000 ROA not after: Wed 03 Mar 2027 06:30:37 +0000 asID: 145635 IP address blocks: 240a:aba9::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:a0:88:64:73:bd:ed:5c:2d:33:7a:2b:86:48:87:40:fa:e8:8e:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:25:37 2026 GMT Not After : Mar 3 06:30:37 2027 GMT Subject: CN=2FADAB692A931CDFEA14BD8FACC89E2F26CE32EA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:19:fb:09:04:e1:7c:2c:6a:95:0d:60:68:6d: 5a:29:c3:ed:6e:a3:18:76:39:eb:74:a5:ee:58:4e: 9c:69:e7:2e:e7:70:17:20:76:5b:83:11:83:8a:9f: 7c:ed:87:72:a3:62:e1:9f:8d:ac:cd:29:4f:d3:a2: cf:42:cd:24:da:20:ac:7f:92:5e:01:29:c6:5b:22: 27:73:fc:ac:72:d9:06:8f:63:e8:8f:8a:07:46:b7: 71:b3:ef:2c:0c:75:5c:20:48:5f:21:f6:90:b9:06: 45:77:ad:4e:38:be:c3:73:cb:8d:a4:52:bd:67:6e: 71:d0:7a:c2:e4:e9:87:be:1c:26:c4:3d:89:ca:0b: 9e:36:62:78:e0:70:a9:4d:14:4a:89:c9:e5:d1:94: 9b:77:76:57:20:62:f5:2c:59:12:fc:35:81:18:2a: af:8d:0f:65:3d:1c:d5:8e:64:c5:08:16:b9:36:2f: 75:54:97:ab:27:39:23:ba:a2:6c:7e:a0:b9:82:b6: d3:36:8d:ee:75:9b:5d:16:cf:8e:0c:90:6a:57:f2: a0:5e:60:c4:55:eb:94:cb:2c:7f:3a:f2:22:02:ed: c2:e9:5b:a9:09:88:4c:fb:96:5a:5e:55:6f:d2:01: da:a6:ab:0f:f0:f2:d3:03:ca:e4:c9:5c:cb:5f:a1: 2d:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:AD:AB:69:2A:93:1C:DF:EA:14:BD:8F:AC:C8:9E:2F:26:CE:32:EA X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145635.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:aba9::/32 Signature Algorithm: sha256WithRSAEncryption 46:2d:7c:30:be:65:bb:14:73:5e:c9:74:7a:2c:76:a1:b9:b1: 04:8e:44:21:32:21:9b:fb:61:05:e7:75:6d:40:0f:9b:22:9e: fc:a0:16:29:7a:8c:76:74:81:6b:6f:cd:85:f0:64:6d:75:57: 06:8b:d3:57:75:78:5f:93:22:d7:25:3c:e5:b2:2d:3f:bf:22: 9d:36:a5:44:11:bc:1d:25:3c:c8:c4:74:95:77:f0:38:a1:06: b6:cf:ef:76:d3:6c:aa:53:6b:60:7e:27:c7:b0:d2:54:83:bc: 03:36:d8:96:61:82:3b:12:fa:0e:16:87:85:84:17:b5:7a:65: af:8e:59:80:99:9d:c1:28:c3:9c:b7:42:dd:0c:9a:e7:45:70: da:64:2f:94:bd:ec:6a:c9:f3:b4:88:31:1c:7d:3e:6a:fd:e6: 7b:3f:48:d4:e0:03:6b:62:1c:7e:d2:3c:e1:8f:e8:0c:39:ba: 2e:78:85:b3:3f:1c:0b:f8:cf:8d:f1:62:db:d0:90:aa:f9:52: 2c:31:f0:d3:9d:bb:54:16:d8:a6:09:ae:92:37:fc:95:8a:67: 2e:57:87:29:6f:ef:2e:f2:b9:22:3b:40:1b:cd:43:e5:9d:87: 3d:f4:12:65:0e:b1:95:5d:88:ce:f5:87:da:b7:e8:9a:6e:b5: ae:4f:f2:00 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUSKCIZHO97VwtM3orhkiHQProjtgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MjUzN1oX DTI3MDMwMzA2MzAzN1owMzExMC8GA1UEAxMoMkZBREFCNjkyQTkzMUNERkVBMTRC RDhGQUNDODlFMkYyNkNFMzJFQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALMZ+wkE4XwsapUNYGhtWinD7W6jGHY563Sl7lhOnGnnLudwFyB2W4MRg4qf fO2HcqNi4Z+NrM0pT9Oiz0LNJNogrH+SXgEpxlsiJ3P8rHLZBo9j6I+KB0a3cbPv LAx1XCBIXyH2kLkGRXetTji+w3PLjaRSvWducdB6wuTph74cJsQ9icoLnjZieOBw qU0USonJ5dGUm3d2VyBi9SxZEvw1gRgqr40PZT0c1Y5kxQgWuTYvdVSXqyc5I7qi bH6guYK20zaN7nWbXRbPjgyQalfyoF5gxFXrlMssfzryIgLtwulbqQmITPuWWl5V b9IB2qarD/Dy0wPK5Mlcy1+hLcMCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQvratp KpMc3+oUvY+syJ4vJs4y6jAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTYzNS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK q6kwDQYJKoZIhvcNAQELBQADggEBAEYtfDC+ZbsUc17JdHosdqG5sQSORCEyIZv7 YQXndW1AD5sinvygFil6jHZ0gWtvzYXwZG11VwaL01d1eF+TItclPOWyLT+/Ip02 pUQRvB0lPMjEdJV38DihBrbP73bTbKpTa2B+J8ew0lSDvAM22JZhgjsS+g4Wh4WE F7V6Za+OWYCZncEow5y3Qt0MmudFcNpkL5S97GrJ87SIMRx9Pmr95ns/SNTgA2ti HH7SPOGP6Aw5ui54hbM/HAv4z43xYtvQkKr5Uiwx8NOdu1QW2KYJrpI3/JWKZy5X hylv7y7yuSI7QBvNQ+Wdhz30EmUOsZVdiM71h9q36Jputa5P8gA= -----END CERTIFICATE-----Generated at Sat Mar 28 11:43:57 2026 by rpki-client