$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145661.roa File: AS145661.roa (raw, json) Hash identifier: JksyEau2I1jAn3l5WMNMHk2uOdf1dmyttu3eLZf117I= Subject key identifier: 72:EF:A6:68:96:91:9D:65:01:7B:D5:4E:D1:02:C8:04:10:14:78:75 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 5FBAB06DE3ACD2A22A0EC6004B19086000C2230C Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145661.roa Signing time: Wed 04 Mar 2026 06:30:28 +0000 ROA not before: Wed 04 Mar 2026 06:25:28 +0000 ROA not after: Wed 03 Mar 2027 06:30:28 +0000 asID: 145661 IP address blocks: 240a:abc3::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:ba:b0:6d:e3:ac:d2:a2:2a:0e:c6:00:4b:19:08:60:00:c2:23:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:25:28 2026 GMT Not After : Mar 3 06:30:28 2027 GMT Subject: CN=72EFA66896919D65017BD54ED102C80410147875 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:90:52:d7:29:b5:9a:0c:2f:9d:16:f2:9c:43: 7d:8f:2b:d9:62:cd:dd:c6:ff:09:34:b4:2c:45:a1: 8b:fe:eb:f7:61:54:6c:c0:a9:31:6c:31:81:d6:7e: c3:88:4a:33:cc:aa:ca:79:eb:11:e4:d9:d5:64:f8: 8f:3d:e5:b4:e5:72:85:bf:68:55:8c:eb:8a:2e:52: 5b:96:00:2c:92:5d:a3:92:a1:44:b3:b3:35:46:04: 37:51:56:be:e5:e8:1f:ec:cd:2f:0b:af:72:26:0b: 14:d2:60:ce:d8:9c:e1:14:6c:0c:c1:86:b7:f8:22: db:8e:6f:40:30:40:6a:3f:1f:0c:72:4f:a6:16:eb: 50:1f:12:9d:c3:02:88:c2:f6:a9:53:08:db:83:17: 9d:a1:f9:23:8f:72:ef:12:db:a1:8a:2e:15:bd:82: d6:65:f5:e7:b5:53:2d:0c:56:c9:b4:b5:fc:09:f8: 20:03:a1:ca:3d:ae:4e:2a:70:e3:52:43:e3:ff:eb: 90:87:54:f6:c2:4c:2d:94:59:31:76:d4:a9:9c:7a: 50:63:d1:9a:6a:a7:a6:63:0d:7e:8f:07:1f:2c:82: bd:25:ba:56:81:47:a2:4c:fe:de:91:ec:2e:c4:4a: e2:c8:a7:0f:94:6a:f1:13:cd:0a:9f:e4:60:c4:b9: d9:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:EF:A6:68:96:91:9D:65:01:7B:D5:4E:D1:02:C8:04:10:14:78:75 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145661.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:abc3::/32 Signature Algorithm: sha256WithRSAEncryption 2e:8b:e9:02:c0:03:12:bf:39:4e:bd:53:da:54:b1:38:18:23: 59:fc:f4:8c:4b:73:81:56:c2:88:a5:29:d2:2a:9a:16:a9:59: 60:9d:b3:47:d8:60:0f:96:fe:3f:b7:7b:be:75:f1:09:de:33: 29:ac:55:46:e0:c7:88:41:85:1a:f5:a1:f1:6b:6c:d5:84:a4: e6:05:d1:4f:b7:0c:67:06:25:f7:11:59:33:8a:d6:4a:67:ff: e3:56:4d:dc:7e:89:54:0f:f4:cb:43:56:b7:d3:35:32:1f:28: f8:16:aa:1d:a7:79:1f:f8:b6:cb:12:d0:bd:af:c8:d4:7b:b6: 12:ab:26:51:24:50:fc:12:af:d6:36:b5:82:a5:09:78:91:32: ba:40:f6:af:b3:bf:93:af:6e:a7:ce:41:21:1e:df:e3:e1:7c: a3:33:9e:8d:38:ee:fc:2a:fe:73:ac:49:b6:25:d9:04:4f:56: 00:ce:4f:4f:d7:9f:e1:db:d1:81:91:56:6b:da:3d:97:5c:ca: 01:e0:87:41:a5:c0:f9:f8:18:3a:f5:5b:ed:4f:bf:3b:ac:dc: 85:7a:fd:95:45:a2:33:9c:99:c8:a9:ce:e0:b3:cf:41:58:d5: 5e:20:89:51:d6:dd:41:a7:10:a2:1d:ac:75:22:5e:8a:7b:f2: b9:9c:d4:d7 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUX7qwbeOs0qIqDsYASxkIYADCIwwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MjUyOFoX DTI3MDMwMzA2MzAyOFowMzExMC8GA1UEAxMoNzJFRkE2Njg5NjkxOUQ2NTAxN0JE NTRFRDEwMkM4MDQxMDE0Nzg3NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM+QUtcptZoML50W8pxDfY8r2WLN3cb/CTS0LEWhi/7r92FUbMCpMWwxgdZ+ w4hKM8yqynnrEeTZ1WT4jz3ltOVyhb9oVYzrii5SW5YALJJdo5KhRLOzNUYEN1FW vuXoH+zNLwuvciYLFNJgztic4RRsDMGGt/gi245vQDBAaj8fDHJPphbrUB8SncMC iML2qVMI24MXnaH5I49y7xLboYouFb2C1mX157VTLQxWybS1/An4IAOhyj2uTipw 41JD4//rkIdU9sJMLZRZMXbUqZx6UGPRmmqnpmMNfo8HHyyCvSW6VoFHokz+3pHs LsRK4sinD5Rq8RPNCp/kYMS52ZMCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRy76Zo lpGdZQF71U7RAsgEEBR4dTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTY2MS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK q8MwDQYJKoZIhvcNAQELBQADggEBAC6L6QLAAxK/OU69U9pUsTgYI1n89IxLc4FW woilKdIqmhapWWCds0fYYA+W/j+3e7518QneMymsVUbgx4hBhRr1ofFrbNWEpOYF 0U+3DGcGJfcRWTOK1kpn/+NWTdx+iVQP9MtDVrfTNTIfKPgWqh2neR/4tssS0L2v yNR7thKrJlEkUPwSr9Y2tYKlCXiRMrpA9q+zv5OvbqfOQSEe3+PhfKMzno047vwq /nOsSbYl2QRPVgDOT0/Xn+Hb0YGRVmvaPZdcygHgh0GlwPn4GDr1W+1Pvzus3IV6 /ZVFojOcmcipzuCzz0FY1V4giVHW3UGnEKIdrHUiXop78rmc1Nc= -----END CERTIFICATE-----Generated at Sat Mar 28 11:42:32 2026 by rpki-client