$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145644.roa File: AS145644.roa (raw, json) Hash identifier: rYNnN9JSi9v+/ZRAZW3N57uUGitPggbufsDuzS0ULXs= Subject key identifier: 73:F5:A1:97:59:0F:DE:FE:AE:7A:95:32:14:E6:B3:AE:0A:D1:3C:E3 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 443AFD4372643F005E82B195F4623ECC23569835 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145644.roa Signing time: Wed 04 Mar 2026 06:29:40 +0000 ROA not before: Wed 04 Mar 2026 06:24:40 +0000 ROA not after: Wed 03 Mar 2027 06:29:40 +0000 asID: 145644 IP address blocks: 240a:abb2::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:3a:fd:43:72:64:3f:00:5e:82:b1:95:f4:62:3e:cc:23:56:98:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:24:40 2026 GMT Not After : Mar 3 06:29:40 2027 GMT Subject: CN=73F5A197590FDEFEAE7A953214E6B3AE0AD13CE3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:d8:82:9e:a0:cf:bd:67:77:51:35:3b:c6:63: 74:90:4f:f6:72:ea:a0:de:f4:1e:74:3f:e3:f1:56: d9:bb:16:e7:6d:8a:b1:b7:38:db:30:b6:62:af:b1: 6a:81:0e:92:0b:22:dd:65:b5:de:64:fd:94:4f:7c: d4:ec:91:dc:0b:e3:48:28:b9:ce:3b:38:58:98:8c: 90:df:71:bd:c0:79:0a:07:5f:11:a5:d0:f9:92:3f: 94:7f:db:9c:74:7f:28:4f:3c:ef:cd:ce:0c:47:a6: 1c:2b:95:75:14:2b:0f:75:f7:8c:1e:fd:ca:81:1a: 1c:03:29:ae:31:43:37:53:8c:d6:ea:a1:2a:97:4c: 95:47:fc:7e:62:43:a0:1d:4e:28:4e:99:8f:96:83: 3c:06:a5:13:f6:f7:4e:a7:46:28:1c:b3:b4:79:5a: f4:d0:72:34:85:b1:6c:b5:7b:3d:4b:3f:52:15:31: a9:a1:82:d6:4d:e7:d2:d4:a0:17:f0:aa:da:ec:7e: ea:3b:6e:0e:be:51:2b:a9:8c:e4:f3:3f:d4:ec:30: 2c:e2:c6:17:6a:3c:ed:95:0b:86:77:dd:0d:65:08: a5:a0:50:95:1f:1e:2a:4a:2c:c0:cd:47:b4:20:ac: f1:72:89:6f:54:56:7b:e6:ef:90:b8:a7:a0:b7:b9: 9d:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:F5:A1:97:59:0F:DE:FE:AE:7A:95:32:14:E6:B3:AE:0A:D1:3C:E3 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145644.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:abb2::/32 Signature Algorithm: sha256WithRSAEncryption 10:b1:f6:11:07:4e:02:d3:77:57:8f:19:14:90:51:41:b9:a9: 04:f8:9f:0d:ee:af:1c:c2:1d:a9:fb:69:a3:a2:e6:10:88:87: 28:70:2e:f6:f5:46:0c:0a:10:72:23:b4:49:71:1d:3f:f3:a5: e7:71:13:a4:52:21:b2:04:b3:ee:64:d6:54:42:71:ee:4b:64: 84:fb:94:64:21:8f:c6:b1:32:b6:b3:74:94:56:f7:d0:92:15: 46:a1:70:c6:92:e6:da:c8:79:f1:0c:ca:9b:e2:f5:eb:65:5e: e7:9e:53:7a:5c:8d:15:18:70:be:11:9b:8e:ca:8a:9d:08:3c: dc:b4:c1:78:b5:62:c9:ab:67:e8:44:b5:96:5b:0f:21:19:43: 81:66:be:db:7c:e3:05:2b:04:7d:2d:e0:86:00:2d:30:81:4b: 79:27:38:5b:cc:68:52:30:65:39:24:20:36:34:97:14:89:0e: 65:91:4a:6c:f9:14:23:d6:1f:60:38:30:19:f8:bf:3b:c6:29: 6a:1d:ca:10:14:76:76:ea:c8:76:4c:3a:ef:b7:48:62:92:13: 97:f2:b8:1e:39:a7:21:d2:8b:ed:6e:de:d8:ae:50:74:bb:5a: 94:e1:1c:f0:43:a3:55:61:c2:d6:79:2c:95:18:af:7d:49:25: df:cf:b6:28 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIURDr9Q3JkPwBegrGV9GI+zCNWmDUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MjQ0MFoX DTI3MDMwMzA2Mjk0MFowMzExMC8GA1UEAxMoNzNGNUExOTc1OTBGREVGRUFFN0E5 NTMyMTRFNkIzQUUwQUQxM0NFMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALbYgp6gz71nd1E1O8ZjdJBP9nLqoN70HnQ/4/FW2bsW522Ksbc42zC2Yq+x aoEOkgsi3WW13mT9lE981OyR3AvjSCi5zjs4WJiMkN9xvcB5CgdfEaXQ+ZI/lH/b nHR/KE88783ODEemHCuVdRQrD3X3jB79yoEaHAMprjFDN1OM1uqhKpdMlUf8fmJD oB1OKE6Zj5aDPAalE/b3TqdGKByztHla9NByNIWxbLV7PUs/UhUxqaGC1k3n0tSg F/Cq2ux+6jtuDr5RK6mM5PM/1OwwLOLGF2o87ZULhnfdDWUIpaBQlR8eKkoswM1H tCCs8XKJb1RWe+bvkLinoLe5nQMCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRz9aGX WQ/e/q56lTIU5rOuCtE84zAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTY0NC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK q7IwDQYJKoZIhvcNAQELBQADggEBABCx9hEHTgLTd1ePGRSQUUG5qQT4nw3urxzC Han7aaOi5hCIhyhwLvb1RgwKEHIjtElxHT/zpedxE6RSIbIEs+5k1lRCce5LZIT7 lGQhj8axMrazdJRW99CSFUahcMaS5trIefEMypvi9etlXueeU3pcjRUYcL4Rm47K ip0IPNy0wXi1YsmrZ+hEtZZbDyEZQ4Fmvtt84wUrBH0t4IYALTCBS3knOFvMaFIw ZTkkIDY0lxSJDmWRSmz5FCPWH2A4MBn4vzvGKWodyhAUdnbqyHZMOu+3SGKSE5fy uB45pyHSi+1u3tiuUHS7WpThHPBDo1VhwtZ5LJUYr31JJd/Ptig= -----END CERTIFICATE-----Generated at Sat Mar 28 13:18:05 2026 by rpki-client