$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145646.roa File: AS145646.roa (raw, json) Hash identifier: RnvyA31oYjR4X+RxuNyV0NatMu+sbdRGx16ZKQZdX6o= Subject key identifier: 7D:2A:4D:6F:5C:DA:D7:34:E4:96:24:68:48:04:8D:B7:19:05:8A:09 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 6124C81C26EB58D50C183D23AC4544BD139816BB Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145646.roa Signing time: Wed 04 Mar 2026 06:29:43 +0000 ROA not before: Wed 04 Mar 2026 06:24:43 +0000 ROA not after: Wed 03 Mar 2027 06:29:43 +0000 asID: 145646 IP address blocks: 240a:abb4::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:24:c8:1c:26:eb:58:d5:0c:18:3d:23:ac:45:44:bd:13:98:16:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:24:43 2026 GMT Not After : Mar 3 06:29:43 2027 GMT Subject: CN=7D2A4D6F5CDAD734E496246848048DB719058A09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:2a:51:c2:f1:f3:67:de:4d:2c:15:3f:b9:fc: cf:e5:ee:42:43:2f:d7:dd:9a:74:58:9c:9d:da:13: 4b:49:cb:dd:d9:23:65:2a:53:15:d3:b1:15:45:28: 3a:8e:d2:53:91:82:1a:fe:b8:2b:b5:ea:9d:43:ce: 5e:4f:92:cf:b1:61:aa:8a:f5:bf:c3:88:5e:e0:77: e4:7a:cb:98:ff:63:58:6c:9e:f8:f1:bd:c4:41:dc: a5:73:31:36:56:a8:e7:e6:28:2c:8d:2c:84:3a:25: 40:ba:ca:5a:ec:8a:4f:6f:17:6a:0b:cf:7c:f8:53: f2:12:0d:9d:b9:33:98:e8:f4:c1:b3:74:b5:1b:cd: fe:c2:8d:76:23:33:1d:c1:76:d2:52:e3:b9:0b:bf: fd:a8:79:f6:93:d1:2f:ce:95:98:70:1b:24:43:37: 25:17:ae:fc:79:b4:ce:d0:2f:3a:87:2a:39:63:34: 83:7e:32:86:b6:07:06:80:75:88:52:95:f2:51:35: 1c:ef:8d:60:2c:e5:17:9d:3e:a2:bc:33:e0:8e:7d: fe:09:43:6b:7e:10:08:a2:78:33:6e:86:1a:ad:0b: e4:9c:6a:ff:e1:9d:2f:ee:cc:80:61:0f:63:02:29: d0:29:4f:f0:a4:5a:f7:1b:15:7d:99:de:73:9d:1d: c2:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:2A:4D:6F:5C:DA:D7:34:E4:96:24:68:48:04:8D:B7:19:05:8A:09 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145646.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:abb4::/32 Signature Algorithm: sha256WithRSAEncryption c8:f9:ba:98:0d:4a:51:ca:ec:3c:7f:6d:0f:b6:e2:cf:e0:30: 34:2f:64:5c:92:2e:9c:7e:48:3d:87:d9:cd:f3:aa:7f:5a:a6: 19:f3:1e:aa:02:c6:a3:bc:c2:bf:10:6d:d8:4f:a1:ba:63:a4: a6:a5:97:33:1d:76:d7:3c:a1:b1:13:79:f5:62:60:47:02:65: e6:0b:1a:1c:b4:c9:1e:1d:66:ae:de:46:83:92:47:0f:42:b0: 31:b4:14:7f:b4:1b:a3:1c:28:f7:86:01:ee:a8:50:40:44:5d: 04:23:ad:05:09:d9:2d:8c:ec:01:89:41:e1:8a:4b:9e:56:ef: 7c:a7:83:5b:a4:da:ca:ea:9a:42:36:78:64:fe:3d:df:29:ee: 85:54:db:34:98:8f:ca:40:ac:e1:b9:6e:f0:d6:04:a7:c2:7c: ed:8a:55:94:26:3c:96:eb:6a:6f:14:1a:e9:8c:fa:d0:0a:d2: 37:68:41:26:16:e9:f1:4a:7c:80:a9:ce:83:d2:71:a5:b7:ad: 22:58:08:5e:a9:a9:89:f7:8e:dc:a6:7e:b9:a0:28:b6:a5:41: e1:46:10:45:e3:75:4c:63:1e:48:8a:52:1e:bc:0f:7d:97:32: 41:20:09:f7:8a:5b:20:27:21:e6:39:83:88:e9:88:4a:ab:8a: 65:38:cf:02 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUYSTIHCbrWNUMGD0jrEVEvROYFrswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MjQ0M1oX DTI3MDMwMzA2Mjk0M1owMzExMC8GA1UEAxMoN0QyQTRENkY1Q0RBRDczNEU0OTYy NDY4NDgwNDhEQjcxOTA1OEEwOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALgqUcLx82feTSwVP7n8z+XuQkMv192adFicndoTS0nL3dkjZSpTFdOxFUUo Oo7SU5GCGv64K7XqnUPOXk+Sz7Fhqor1v8OIXuB35HrLmP9jWGye+PG9xEHcpXMx Nlao5+YoLI0shDolQLrKWuyKT28XagvPfPhT8hINnbkzmOj0wbN0tRvN/sKNdiMz HcF20lLjuQu//ah59pPRL86VmHAbJEM3JReu/Hm0ztAvOocqOWM0g34yhrYHBoB1 iFKV8lE1HO+NYCzlF50+orwz4I59/glDa34QCKJ4M26GGq0L5Jxq/+GdL+7MgGEP YwIp0ClP8KRa9xsVfZnec50dwnMCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBR9Kk1v XNrXNOSWJGhIBI23GQWKCTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTY0Ni5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK q7QwDQYJKoZIhvcNAQELBQADggEBAMj5upgNSlHK7Dx/bQ+24s/gMDQvZFySLpx+ SD2H2c3zqn9aphnzHqoCxqO8wr8QbdhPobpjpKallzMddtc8obETefViYEcCZeYL Ghy0yR4dZq7eRoOSRw9CsDG0FH+0G6McKPeGAe6oUEBEXQQjrQUJ2S2M7AGJQeGK S55W73yng1uk2srqmkI2eGT+Pd8p7oVU2zSYj8pArOG5bvDWBKfCfO2KVZQmPJbr am8UGumM+tAK0jdoQSYW6fFKfICpzoPScaW3rSJYCF6pqYn3jtymfrmgKLalQeFG EEXjdUxjHkiKUh68D32XMkEgCfeKWyAnIeY5g4jpiEqrimU4zwI= -----END CERTIFICATE-----Generated at Sat Mar 28 13:18:05 2026 by rpki-client