$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145648.roa File: AS145648.roa (raw, json) Hash identifier: mWUO3imPKZHWZdYs9DhnOempFYPuhXg5zKLoMNAfySw= Subject key identifier: 42:81:AA:44:E8:81:BF:77:CE:49:7D:53:8F:FF:D7:87:A6:45:BA:C5 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 29BBC4C78F88E3E8F4B7B43263AE87D09B3797EB Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145648.roa Signing time: Wed 04 Mar 2026 06:31:10 +0000 ROA not before: Wed 04 Mar 2026 06:26:10 +0000 ROA not after: Wed 03 Mar 2027 06:31:10 +0000 asID: 145648 IP address blocks: 240a:abb6::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:bb:c4:c7:8f:88:e3:e8:f4:b7:b4:32:63:ae:87:d0:9b:37:97:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:26:10 2026 GMT Not After : Mar 3 06:31:10 2027 GMT Subject: CN=4281AA44E881BF77CE497D538FFFD787A645BAC5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:67:3b:a2:31:62:6b:25:48:de:82:2a:a5:75: 2f:ee:59:51:cd:10:25:12:da:e6:80:a1:18:9b:b2: 5e:a3:32:3a:65:9c:5c:74:97:ee:ee:44:0f:ee:d6: 30:d8:a9:60:ce:29:7b:2e:c2:30:59:1a:53:df:30: 27:89:72:f4:3c:2c:81:a3:e4:13:c1:4e:ac:f3:15: fe:e2:e7:47:47:d8:aa:6b:0a:a5:ee:ca:5a:f9:1c: 2d:27:36:62:05:dc:a6:ec:6f:79:7d:2c:c8:39:1d: 56:97:06:23:92:65:b9:b6:1a:2f:9c:3c:08:86:9b: 59:ea:0a:cc:90:95:66:d0:96:18:c2:0f:9c:98:05: 09:d5:cf:e9:62:3d:83:c4:1f:d0:7c:9b:eb:4a:a7: 0b:0a:f8:0c:e0:91:18:49:fd:28:3a:02:f7:e7:48: 9c:68:bb:5a:59:c8:16:7e:24:98:fa:ba:8b:77:cd: 8a:41:90:f0:8d:12:f2:39:2d:6c:e2:d8:5c:2b:cc: f2:6c:97:f5:55:65:44:39:8e:da:12:a5:4a:7e:98: 59:fb:ce:f2:db:19:bd:99:95:ba:5a:f5:b3:21:2a: b6:78:70:b4:b6:0a:db:08:90:c5:8a:bf:7d:c4:62: 90:cc:a6:27:8c:f0:68:d6:1b:20:c5:9d:6a:08:93: 14:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:81:AA:44:E8:81:BF:77:CE:49:7D:53:8F:FF:D7:87:A6:45:BA:C5 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145648.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:abb6::/32 Signature Algorithm: sha256WithRSAEncryption a3:ee:0e:80:d9:3e:43:10:c4:11:51:89:b7:3a:db:bc:26:4f: 76:21:2f:f2:0d:98:b7:15:56:94:fc:ba:89:dd:94:6f:7e:e0: ea:7d:ac:11:ea:29:68:ce:d1:b3:ca:41:d6:38:71:bc:1a:1e: 10:a0:c9:89:7e:46:25:4e:df:9b:ec:89:eb:41:33:e2:2b:e6: 09:94:05:fa:20:e7:d8:e9:6b:f4:be:58:16:71:e0:c7:34:5e: 79:97:5a:5a:79:51:53:9e:71:cb:1e:79:dc:09:2b:d4:45:85: 10:9a:b4:c7:90:7c:99:14:dd:02:2f:44:44:97:8f:28:85:c1: 23:0b:c7:8f:e9:b4:4a:39:83:2c:10:81:26:ee:c7:30:e3:12: b3:b2:1a:04:4f:59:33:28:df:2b:79:81:70:df:e5:ce:ab:ec: 7c:2a:df:03:76:fc:01:09:8c:72:bd:9a:29:1f:28:34:25:45: 0f:c7:14:a9:54:7a:37:46:b2:32:37:4f:45:e2:a7:e2:76:45: 0f:6c:32:ee:68:1a:71:5d:84:49:67:49:12:54:63:fd:64:9f: 3c:d4:04:07:18:d0:ef:3f:08:c0:1e:6d:3f:f2:2a:0f:87:10: 6d:95:c1:73:8c:52:e0:db:86:8e:c7:cf:a9:e4:d5:95:93:d9: db:82:9e:3e -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUKbvEx4+I4+j0t7QyY66H0Js3l+swDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MjYxMFoX DTI3MDMwMzA2MzExMFowMzExMC8GA1UEAxMoNDI4MUFBNDRFODgxQkY3N0NFNDk3 RDUzOEZGRkQ3ODdBNjQ1QkFDNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJdnO6IxYmslSN6CKqV1L+5ZUc0QJRLa5oChGJuyXqMyOmWcXHSX7u5ED+7W MNipYM4pey7CMFkaU98wJ4ly9DwsgaPkE8FOrPMV/uLnR0fYqmsKpe7KWvkcLSc2 YgXcpuxveX0syDkdVpcGI5JlubYaL5w8CIabWeoKzJCVZtCWGMIPnJgFCdXP6WI9 g8Qf0Hyb60qnCwr4DOCRGEn9KDoC9+dInGi7WlnIFn4kmPq6i3fNikGQ8I0S8jkt bOLYXCvM8myX9VVlRDmO2hKlSn6YWfvO8tsZvZmVulr1syEqtnhwtLYK2wiQxYq/ fcRikMymJ4zwaNYbIMWdagiTFCMCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRCgapE 6IG/d85JfVOP/9eHpkW6xTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTY0OC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK q7YwDQYJKoZIhvcNAQELBQADggEBAKPuDoDZPkMQxBFRibc627wmT3YhL/INmLcV VpT8uondlG9+4Op9rBHqKWjO0bPKQdY4cbwaHhCgyYl+RiVO35vsietBM+Ir5gmU Bfog59jpa/S+WBZx4Mc0XnmXWlp5UVOeccseedwJK9RFhRCatMeQfJkU3QIvRESX jyiFwSMLx4/ptEo5gywQgSbuxzDjErOyGgRPWTMo3yt5gXDf5c6r7Hwq3wN2/AEJ jHK9mikfKDQlRQ/HFKlUejdGsjI3T0Xip+J2RQ9sMu5oGnFdhElnSRJUY/1knzzU BAcY0O8/CMAebT/yKg+HEG2VwXOMUuDbho7Hz6nk1ZWT2duCnj4= -----END CERTIFICATE-----Generated at Sat Mar 28 11:42:19 2026 by rpki-client