$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145650.roa File: AS145650.roa (raw, json) Hash identifier: 3ce+UmQzKA9g6DYa8hDkmypW12BQhmGTYvUOwxOIk/8= Subject key identifier: 91:36:14:38:67:8C:46:C7:58:7B:B9:3D:DE:48:AF:C6:B0:EC:F8:A5 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 6DD066B44C13931B3FDA9F236094B1A25B4F73DE Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145650.roa Signing time: Wed 04 Mar 2026 06:30:09 +0000 ROA not before: Wed 04 Mar 2026 06:25:09 +0000 ROA not after: Wed 03 Mar 2027 06:30:09 +0000 asID: 145650 IP address blocks: 240a:abb8::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:d0:66:b4:4c:13:93:1b:3f:da:9f:23:60:94:b1:a2:5b:4f:73:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:25:09 2026 GMT Not After : Mar 3 06:30:09 2027 GMT Subject: CN=91361438678C46C7587BB93DDE48AFC6B0ECF8A5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:d4:9b:c0:81:bc:ae:55:e2:95:9f:ac:ba:e7: 12:a5:1f:f3:12:f2:92:1f:5b:2e:10:81:27:2a:0d: bc:eb:37:ac:8e:ba:b5:b5:99:0b:49:2d:96:62:b4: 70:2e:61:4f:eb:6c:7b:92:0e:75:18:8a:be:0c:5a: 9f:52:89:70:93:00:03:9b:31:01:13:91:6f:1d:66: f0:65:6c:d0:61:25:44:cc:1e:a8:15:e4:19:cb:ac: 83:a3:24:51:e1:11:79:10:be:e0:b4:28:93:e1:dd: 6c:1d:42:77:0d:b5:76:26:95:47:9a:2d:98:41:3b: 77:3a:6e:0a:27:98:88:4b:05:50:04:00:3c:47:45: c2:47:f3:82:6c:06:f5:c0:25:12:4e:92:84:78:3a: 40:68:0c:b2:9c:c7:8e:dc:59:50:7c:d2:8e:fb:e1: a9:80:92:c6:c7:ac:ce:a2:6a:5c:8f:3d:aa:5e:46: b7:fb:90:f6:40:c8:6a:99:43:95:6e:e9:44:e5:da: 64:2b:74:2d:d8:5d:af:30:23:16:a6:76:08:c8:e6: 1b:17:73:2a:7b:db:ac:fa:a5:8a:a5:d6:e5:8d:70: d8:d6:34:04:45:96:a7:68:a1:5a:84:ca:e4:4d:30: 98:68:60:79:b0:4e:0a:6a:47:37:3e:71:47:a1:84: aa:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:36:14:38:67:8C:46:C7:58:7B:B9:3D:DE:48:AF:C6:B0:EC:F8:A5 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145650.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:abb8::/32 Signature Algorithm: sha256WithRSAEncryption 0a:1f:05:00:fb:6c:21:57:69:b0:a4:2c:b5:e3:65:4a:08:fa: 9b:ec:49:04:46:3a:c3:a2:f2:9d:5c:55:1f:0b:f4:51:f1:5f: 4d:72:fa:af:77:c2:8b:c4:29:df:c2:03:43:d5:6c:37:8d:68: af:b1:28:01:d8:06:e8:17:b5:71:2a:11:7f:ef:9b:aa:61:c5: 17:76:e2:c7:eb:db:86:d4:c7:d3:2d:36:76:43:0b:6c:c8:17: 44:04:6a:8f:1c:32:38:90:6a:84:89:8a:d8:8c:a2:bb:27:6d: f4:96:93:04:0f:c5:13:dd:cc:f9:df:33:9f:79:7b:64:40:43: a3:69:a0:98:eb:de:f1:17:9f:04:db:db:59:aa:c4:e5:ce:b7: 1c:e7:51:1c:f4:61:3a:bf:8e:20:6f:d7:2e:34:90:52:5b:7f: 86:c9:00:3b:98:fc:95:c0:62:f1:3f:6a:20:24:0f:fb:8a:db: 5b:8d:05:23:66:d0:73:bc:47:42:5a:9d:71:27:f9:9c:7c:e2: 77:0d:54:42:df:b5:01:e4:9a:ec:9d:9c:6e:d9:70:fe:c2:37: 78:ec:e6:19:5e:fb:be:3f:5a:26:f0:76:04:b6:3c:70:6a:f5: 6c:78:72:db:3b:23:fa:7f:ed:93:06:f3:9e:80:61:56:be:6a: ea:ed:07:14 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUbdBmtEwTkxs/2p8jYJSxoltPc94wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MjUwOVoX DTI3MDMwMzA2MzAwOVowMzExMC8GA1UEAxMoOTEzNjE0Mzg2NzhDNDZDNzU4N0JC OTNEREU0OEFGQzZCMEVDRjhBNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMzUm8CBvK5V4pWfrLrnEqUf8xLykh9bLhCBJyoNvOs3rI66tbWZC0ktlmK0 cC5hT+tse5IOdRiKvgxan1KJcJMAA5sxARORbx1m8GVs0GElRMweqBXkGcusg6Mk UeEReRC+4LQok+HdbB1Cdw21diaVR5otmEE7dzpuCieYiEsFUAQAPEdFwkfzgmwG 9cAlEk6ShHg6QGgMspzHjtxZUHzSjvvhqYCSxseszqJqXI89ql5Gt/uQ9kDIaplD lW7pROXaZCt0LdhdrzAjFqZ2CMjmGxdzKnvbrPqliqXW5Y1w2NY0BEWWp2ihWoTK 5E0wmGhgebBOCmpHNz5xR6GEqpECAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSRNhQ4 Z4xGx1h7uT3eSK/GsOz4pTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTY1MC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK q7gwDQYJKoZIhvcNAQELBQADggEBAAofBQD7bCFXabCkLLXjZUoI+pvsSQRGOsOi 8p1cVR8L9FHxX01y+q93wovEKd/CA0PVbDeNaK+xKAHYBugXtXEqEX/vm6phxRd2 4sfr24bUx9MtNnZDC2zIF0QEao8cMjiQaoSJitiMorsnbfSWkwQPxRPdzPnfM595 e2RAQ6NpoJjr3vEXnwTb21mqxOXOtxznURz0YTq/jiBv1y40kFJbf4bJADuY/JXA YvE/aiAkD/uK21uNBSNm0HO8R0JanXEn+Zx84ncNVELftQHkmuydnG7ZcP7CN3js 5hle+74/WibwdgS2PHBq9Wx4cts7I/p/7ZMG856AYVa+aurtBxQ= -----END CERTIFICATE-----Generated at Sat Mar 28 11:44:19 2026 by rpki-client