$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145647.roa File: AS145647.roa (raw, json) Hash identifier: 0Tc+Hs09MHSrzSfpbmj/uXMvoW5+osIiMjgyFw1fOBg= Subject key identifier: DD:8C:C8:51:B7:27:8F:72:3C:02:4C:1D:61:50:16:60:96:D9:EF:32 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 39CCEE0789EC989911B0694391E21B356CC82AA9 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145647.roa Signing time: Wed 04 Mar 2026 06:30:44 +0000 ROA not before: Wed 04 Mar 2026 06:25:44 +0000 ROA not after: Wed 03 Mar 2027 06:30:44 +0000 asID: 145647 IP address blocks: 240a:abb5::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:cc:ee:07:89:ec:98:99:11:b0:69:43:91:e2:1b:35:6c:c8:2a:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:25:44 2026 GMT Not After : Mar 3 06:30:44 2027 GMT Subject: CN=DD8CC851B7278F723C024C1D6150166096D9EF32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:27:76:40:7a:57:bd:8e:5c:44:d1:df:b5:19: 8c:7c:bb:5d:2a:eb:93:6f:5a:56:56:f4:b5:dd:2b: b6:56:02:b6:df:79:a0:e2:7a:55:77:10:8e:cf:af: 93:d9:cc:f8:12:c6:4a:56:74:02:79:c8:e8:55:44: 21:1b:6b:03:df:60:21:ac:32:6f:c6:80:da:d3:e9: a4:c4:62:59:f1:6b:fc:2a:90:24:ca:62:17:50:30: 73:8b:b8:e7:94:a2:3a:11:06:10:06:a2:8c:72:9e: df:90:6d:47:49:77:d7:88:ab:8e:81:0a:f9:16:6e: 2e:dd:c6:a0:b5:25:2a:2b:29:82:d2:d5:d7:49:16: 96:56:62:0c:36:9e:b4:f3:4c:ed:59:9a:a5:95:d6: b7:41:05:8e:8c:ec:44:aa:8f:11:14:42:a9:94:7b: 64:bf:f0:39:c8:35:7c:75:f7:57:a7:61:c5:7f:3a: 5c:4f:40:0b:99:97:a5:29:ce:ab:1e:74:72:72:55: eb:e0:6f:9c:f5:67:ba:ad:71:1f:1e:66:4b:3f:f6: 4f:e6:d6:cf:51:71:5d:6b:f0:25:40:b8:02:cf:e6: d3:43:82:77:c3:b0:c8:74:67:62:e4:46:37:a4:bf: fc:74:ec:c1:9a:d0:fa:6c:d6:c0:09:ff:67:72:d8: e5:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:8C:C8:51:B7:27:8F:72:3C:02:4C:1D:61:50:16:60:96:D9:EF:32 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145647.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:abb5::/32 Signature Algorithm: sha256WithRSAEncryption 27:a8:5c:e5:8f:6b:09:e9:6d:58:d2:b1:cc:cc:b8:36:d3:fc: eb:58:84:05:9e:c6:7b:c1:a3:b1:cd:1a:ee:86:41:4a:9a:b7: a4:be:6c:10:b4:7a:78:cb:f2:ac:36:0d:1a:73:d4:4a:0f:3d: f1:7e:d6:e8:e3:58:31:31:91:bb:d9:44:b4:54:df:e4:86:c0: 48:ed:81:b4:9d:2c:62:7d:c3:be:1c:e9:be:d1:7b:23:5f:26: ec:32:0b:23:ac:e0:26:d4:f4:5f:08:8c:21:e4:f8:12:b7:91: 04:25:8a:77:e5:db:7f:0b:cc:24:8b:8e:2a:eb:6b:bb:35:1f: 6b:f8:56:a1:6d:54:de:8f:91:b2:5c:c6:79:c0:d1:bd:c2:cb: 5e:94:cc:7f:73:b2:d5:60:fb:f3:3a:28:05:4b:84:39:e7:c9: ec:a4:1c:cd:7a:5a:07:6d:69:4f:5a:5e:bf:fd:e4:13:50:97: d0:f0:64:1d:b3:81:26:77:2b:e8:10:e4:47:fe:52:86:83:3a: 92:6d:5d:50:9d:68:25:b4:86:71:ec:47:c5:c8:5e:9c:c0:c0: 76:5b:2c:aa:b3:9e:f5:aa:b5:9e:2a:32:92:c6:a3:f7:6f:55: 03:71:5e:c6:bb:e4:56:5b:5c:cf:96:54:b9:cb:26:20:a0:3c: 14:09:3a:78 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUOczuB4nsmJkRsGlDkeIbNWzIKqkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MjU0NFoX DTI3MDMwMzA2MzA0NFowMzExMC8GA1UEAxMoREQ4Q0M4NTFCNzI3OEY3MjNDMDI0 QzFENjE1MDE2NjA5NkQ5RUYzMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJwndkB6V72OXETR37UZjHy7XSrrk29aVlb0td0rtlYCtt95oOJ6VXcQjs+v k9nM+BLGSlZ0AnnI6FVEIRtrA99gIawyb8aA2tPppMRiWfFr/CqQJMpiF1Awc4u4 55SiOhEGEAaijHKe35BtR0l314irjoEK+RZuLt3GoLUlKispgtLV10kWllZiDDae tPNM7VmapZXWt0EFjozsRKqPERRCqZR7ZL/wOcg1fHX3V6dhxX86XE9AC5mXpSnO qx50cnJV6+BvnPVnuq1xHx5mSz/2T+bWz1FxXWvwJUC4As/m00OCd8OwyHRnYuRG N6S//HTswZrQ+mzWwAn/Z3LY5Z0CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBTdjMhR tyePcjwCTB1hUBZgltnvMjAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTY0Ny5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK q7UwDQYJKoZIhvcNAQELBQADggEBACeoXOWPawnpbVjSsczMuDbT/OtYhAWexnvB o7HNGu6GQUqat6S+bBC0enjL8qw2DRpz1EoPPfF+1ujjWDExkbvZRLRU3+SGwEjt gbSdLGJ9w74c6b7ReyNfJuwyCyOs4CbU9F8IjCHk+BK3kQQlinfl238LzCSLjirr a7s1H2v4VqFtVN6PkbJcxnnA0b3Cy16UzH9zstVg+/M6KAVLhDnnyeykHM16Wgdt aU9aXr/95BNQl9DwZB2zgSZ3K+gQ5Ef+UoaDOpJtXVCdaCW0hnHsR8XIXpzAwHZb LKqznvWqtZ4qMpLGo/dvVQNxXsa75FZbXM+WVLnLJiCgPBQJOng= -----END CERTIFICATE-----Generated at Sat Mar 28 11:42:17 2026 by rpki-client