$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145643.roa File: AS145643.roa (raw, json) Hash identifier: lspaNrRlqxChu2/ifnnp+LJ+5QkF9VWLUdq3bBZILRU= Subject key identifier: 95:6F:3A:28:85:C3:34:AB:0B:24:BA:91:7C:3D:E5:4C:C2:76:D2:BC Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 2D72D79F61BC59FFC7053E9379EB31B3F828AD55 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145643.roa Signing time: Wed 04 Mar 2026 06:31:12 +0000 ROA not before: Wed 04 Mar 2026 06:26:12 +0000 ROA not after: Wed 03 Mar 2027 06:31:12 +0000 asID: 145643 IP address blocks: 240a:abb1::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:72:d7:9f:61:bc:59:ff:c7:05:3e:93:79:eb:31:b3:f8:28:ad:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:26:12 2026 GMT Not After : Mar 3 06:31:12 2027 GMT Subject: CN=956F3A2885C334AB0B24BA917C3DE54CC276D2BC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:d4:5b:b5:33:56:bc:fd:20:18:d8:03:14:07: f7:76:23:34:79:d5:ab:7f:c7:2a:51:4a:4f:52:de: f8:6c:29:0c:21:61:2f:76:d5:70:ca:c6:f0:dc:4f: b9:0b:6f:ee:56:d3:94:e8:10:1e:75:5d:71:79:d6: fe:7c:20:31:aa:0f:36:11:e9:07:6a:4d:91:81:00: ee:80:f8:37:10:84:59:ae:81:ed:58:b0:f0:f0:eb: dd:4e:2b:bd:c6:ce:20:c8:3a:e3:de:78:64:33:f8: a6:11:f9:c3:03:98:d0:74:f8:cd:e6:25:df:3d:96: d4:1d:c6:2c:6b:c4:66:7d:8b:b3:f2:7d:3d:28:66: 67:13:a7:7e:a3:f0:9c:4d:8e:14:73:c6:e3:41:2c: 58:20:15:5a:18:54:91:d1:b3:04:d8:04:53:8c:d5: 22:ac:bb:dd:dc:99:4d:71:da:4f:87:f8:95:e1:93: fe:45:39:87:89:00:76:97:42:f9:c3:05:97:0c:39: 5b:59:99:5d:91:28:91:57:4b:72:39:65:8e:07:8f: 71:29:5c:71:fd:b7:e7:09:02:a1:92:6b:88:21:9f: 97:26:cb:0e:09:22:d4:b2:8e:4a:dd:46:ae:ab:7e: 58:ca:59:2b:94:2f:7b:d2:ad:08:ad:c3:e6:91:1e: bb:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:6F:3A:28:85:C3:34:AB:0B:24:BA:91:7C:3D:E5:4C:C2:76:D2:BC X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145643.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:abb1::/32 Signature Algorithm: sha256WithRSAEncryption ac:62:3b:53:b4:bc:df:45:36:1f:b2:72:3c:2c:12:e6:21:8d: 87:d6:4c:9e:12:a2:d3:af:6f:11:33:ff:df:a6:1e:7a:b9:8b: ac:be:0f:b7:2d:ed:3f:8d:bc:12:1d:10:69:6f:a7:1d:79:fe: f1:2a:cb:92:5e:9a:1e:72:7c:65:15:5c:7f:83:84:5e:d5:42: 43:d5:42:26:d5:dd:3f:9d:db:8b:75:73:a6:50:7d:ea:97:d0: 64:3a:c6:7c:ea:cf:f8:76:09:1a:d5:22:30:4d:d5:16:d5:80: af:6f:a2:9f:8d:e4:ac:07:55:fb:85:9a:16:6f:e2:b8:d3:47: 7b:4c:61:56:1c:bd:c0:2a:49:ca:bf:c4:84:05:6b:0c:4a:4d: 7f:c6:43:dc:fa:32:c0:5f:2c:7c:ed:13:1d:2b:9e:64:2c:41: b3:3f:01:4f:98:ce:51:17:ef:37:fa:a7:24:82:4a:43:21:53: b0:71:55:eb:bb:f3:c8:32:45:86:2f:8b:a3:98:19:be:4c:92: d1:d9:0c:6e:48:cc:b1:4b:4e:a4:59:21:a6:79:91:c0:24:73: f1:2d:2c:76:fe:e6:28:d9:65:5f:b7:7f:cb:4d:34:e9:f8:1f: 54:f9:f1:5b:ec:52:43:0b:7c:fd:ad:18:d1:c3:3f:6a:4e:8e: 94:0d:29:6f -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIULXLXn2G8Wf/HBT6Teesxs/gorVUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MjYxMloX DTI3MDMwMzA2MzExMlowMzExMC8GA1UEAxMoOTU2RjNBMjg4NUMzMzRBQjBCMjRC QTkxN0MzREU1NENDMjc2RDJCQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJ/UW7UzVrz9IBjYAxQH93YjNHnVq3/HKlFKT1Le+GwpDCFhL3bVcMrG8NxP uQtv7lbTlOgQHnVdcXnW/nwgMaoPNhHpB2pNkYEA7oD4NxCEWa6B7Viw8PDr3U4r vcbOIMg64954ZDP4phH5wwOY0HT4zeYl3z2W1B3GLGvEZn2Ls/J9PShmZxOnfqPw nE2OFHPG40EsWCAVWhhUkdGzBNgEU4zVIqy73dyZTXHaT4f4leGT/kU5h4kAdpdC +cMFlww5W1mZXZEokVdLcjlljgePcSlccf235wkCoZJriCGflybLDgki1LKOSt1G rqt+WMpZK5Qve9KtCK3D5pEeu6sCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSVbzoo hcM0qwskupF8PeVMwnbSvDAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTY0My5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK q7EwDQYJKoZIhvcNAQELBQADggEBAKxiO1O0vN9FNh+ycjwsEuYhjYfWTJ4SotOv bxEz/9+mHnq5i6y+D7ct7T+NvBIdEGlvpx15/vEqy5Jemh5yfGUVXH+DhF7VQkPV QibV3T+d24t1c6ZQfeqX0GQ6xnzqz/h2CRrVIjBN1RbVgK9vop+N5KwHVfuFmhZv 4rjTR3tMYVYcvcAqScq/xIQFawxKTX/GQ9z6MsBfLHztEx0rnmQsQbM/AU+YzlEX 7zf6pySCSkMhU7BxVeu788gyRYYvi6OYGb5MktHZDG5IzLFLTqRZIaZ5kcAkc/Et LHb+5ijZZV+3f8tNNOn4H1T58VvsUkMLfP2tGNHDP2pOjpQNKW8= -----END CERTIFICATE-----Generated at Sat Mar 28 15:53:11 2026 by rpki-client