$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145662.roa File: AS145662.roa (raw, json) Hash identifier: +vBQRj/lC3XC+kRNtI5fmt8K9nc7g65gCKBRkw+uhb4= Subject key identifier: C1:8F:BA:8E:BD:B3:14:0B:93:22:83:D3:7E:13:3F:63:EF:06:7F:44 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 75383CEAF8C52835F7ED04541811407646208FA8 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145662.roa Signing time: Wed 04 Mar 2026 06:30:20 +0000 ROA not before: Wed 04 Mar 2026 06:25:20 +0000 ROA not after: Wed 03 Mar 2027 06:30:20 +0000 asID: 145662 IP address blocks: 240a:abc4::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:38:3c:ea:f8:c5:28:35:f7:ed:04:54:18:11:40:76:46:20:8f:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:25:20 2026 GMT Not After : Mar 3 06:30:20 2027 GMT Subject: CN=C18FBA8EBDB3140B932283D37E133F63EF067F44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:80:fe:85:61:e7:3f:b7:af:59:85:c3:01:15: fa:8e:bf:70:86:aa:35:77:2f:67:17:5f:dc:c1:5e: 4e:45:0f:93:13:ed:68:4b:48:a7:94:55:e2:bd:8d: 88:66:14:48:f9:c0:3d:e8:e5:dd:61:5e:39:3a:a9: ef:61:ec:51:06:0f:fc:75:1c:c9:7a:ee:1f:d2:43: aa:d5:2d:26:02:e7:8b:b4:87:76:e9:89:f4:40:0b: 86:3a:4c:f9:de:f0:c3:2f:e2:53:9e:12:2b:87:0f: 13:80:fe:57:6c:06:2f:94:38:e8:bb:e5:d6:91:46: 65:82:e1:72:08:a7:be:cb:89:b5:6b:bb:6b:f3:3e: 6c:2a:a5:ec:be:dd:7b:e8:a5:0d:41:20:39:8b:9f: 4b:23:0a:c3:8d:71:c6:8d:60:e8:ff:84:25:01:f4: ca:2f:63:32:51:81:fd:f8:41:5e:2f:5a:12:44:1b: 99:70:96:bf:d2:5c:79:ee:4d:3b:20:b1:e3:13:1b: a7:4d:e2:a5:bb:58:13:5f:f0:67:62:db:9a:0a:5d: 37:55:f1:fb:48:1a:ce:1f:20:4a:4c:28:0f:ca:f6: 36:3f:5e:82:3a:c6:e8:2d:81:73:a4:50:41:00:bd: dc:a9:a3:80:15:f9:dc:71:3e:6a:e8:9f:da:c2:5a: ca:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:8F:BA:8E:BD:B3:14:0B:93:22:83:D3:7E:13:3F:63:EF:06:7F:44 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145662.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:abc4::/32 Signature Algorithm: sha256WithRSAEncryption 5d:0a:d6:10:60:fd:4d:e0:fa:88:bb:6e:4b:83:e2:c1:e0:01: 86:22:c7:19:b0:ec:64:d3:49:f2:e1:06:6c:e9:7c:91:98:2f: 89:e8:f8:f3:c2:b7:71:1f:0b:38:7c:dd:d8:95:67:7d:19:c8: c0:80:fa:2c:cf:ad:8a:bb:a9:af:28:b9:d2:c4:17:fa:e3:4d: 90:0f:7b:0b:8b:3c:6d:52:97:6a:bb:a9:68:4e:a4:e7:29:38: a5:fe:04:35:ba:ef:fb:76:85:18:50:d2:98:9c:c3:30:e7:e3: a3:69:f0:da:6e:b1:21:7e:04:7d:c3:72:2f:83:ce:66:ad:3a: b2:57:cc:94:ea:c1:1f:4d:89:2f:e7:21:54:fd:8a:1f:87:04: 3e:0c:99:02:4b:4b:db:1c:03:4e:5e:31:9b:95:6c:b5:ca:46: 37:22:5c:a3:5a:9c:35:a3:21:51:8b:85:8a:b0:49:71:4a:cd: 54:b4:64:e3:37:4f:17:90:81:48:2c:33:9b:f7:c4:45:de:fd: 41:a8:0c:6f:eb:92:8b:76:08:86:62:26:ba:01:4a:2b:af:4c: ec:c4:eb:ad:27:b2:67:a5:13:38:47:be:20:b6:8f:ff:af:ba: 56:64:f8:63:fe:e7:53:f6:3d:03:49:21:d3:3e:65:ad:62:03: 5b:f8:7e:b3 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUdTg86vjFKDX37QRUGBFAdkYgj6gwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MjUyMFoX DTI3MDMwMzA2MzAyMFowMzExMC8GA1UEAxMoQzE4RkJBOEVCREIzMTQwQjkzMjI4 M0QzN0UxMzNGNjNFRjA2N0Y0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK2A/oVh5z+3r1mFwwEV+o6/cIaqNXcvZxdf3MFeTkUPkxPtaEtIp5RV4r2N iGYUSPnAPejl3WFeOTqp72HsUQYP/HUcyXruH9JDqtUtJgLni7SHdumJ9EALhjpM +d7wwy/iU54SK4cPE4D+V2wGL5Q46Lvl1pFGZYLhcginvsuJtWu7a/M+bCql7L7d e+ilDUEgOYufSyMKw41xxo1g6P+EJQH0yi9jMlGB/fhBXi9aEkQbmXCWv9Jcee5N OyCx4xMbp03ipbtYE1/wZ2LbmgpdN1Xx+0gazh8gSkwoD8r2Nj9egjrG6C2Bc6RQ QQC93KmjgBX53HE+auif2sJayukCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBTBj7qO vbMUC5Mig9N+Ez9j7wZ/RDAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTY2Mi5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK q8QwDQYJKoZIhvcNAQELBQADggEBAF0K1hBg/U3g+oi7bkuD4sHgAYYixxmw7GTT SfLhBmzpfJGYL4no+PPCt3EfCzh83diVZ30ZyMCA+izPrYq7qa8oudLEF/rjTZAP ewuLPG1Sl2q7qWhOpOcpOKX+BDW67/t2hRhQ0picwzDn46Np8NpusSF+BH3Dci+D zmatOrJXzJTqwR9NiS/nIVT9ih+HBD4MmQJLS9scA05eMZuVbLXKRjciXKNanDWj IVGLhYqwSXFKzVS0ZOM3TxeQgUgsM5v3xEXe/UGoDG/rkot2CIZiJroBSiuvTOzE 660nsmelEzhHviC2j/+vulZk+GP+51P2PQNJIdM+Za1iA1v4frM= -----END CERTIFICATE-----Generated at Sat Mar 28 11:42:31 2026 by rpki-client