$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145663.roa File: AS145663.roa (raw, json) Hash identifier: 9CjglxYi7APlYfxvW4XgY9574DnPhOetHIGR9l+U0pY= Subject key identifier: 38:BB:5A:90:59:C9:D5:78:C2:B5:64:C7:A8:BC:79:8A:92:AD:F2:58 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 374E85CE3F6D6FFBD49F3757FB78820FFEE4F529 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145663.roa Signing time: Wed 04 Mar 2026 06:29:38 +0000 ROA not before: Wed 04 Mar 2026 06:24:38 +0000 ROA not after: Wed 03 Mar 2027 06:29:38 +0000 asID: 145663 IP address blocks: 240a:abc5::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:4e:85:ce:3f:6d:6f:fb:d4:9f:37:57:fb:78:82:0f:fe:e4:f5:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:24:38 2026 GMT Not After : Mar 3 06:29:38 2027 GMT Subject: CN=38BB5A9059C9D578C2B564C7A8BC798A92ADF258 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:2b:e4:47:a7:32:de:39:77:32:35:8f:38:65: 33:c8:b0:75:91:92:8c:26:3c:19:e0:fe:61:39:39: c4:cc:a3:0f:53:ad:05:f3:90:ad:93:31:2e:5e:28: 29:60:7c:34:ef:62:50:cb:2d:87:a1:d3:90:43:48: 17:90:2b:b4:25:09:17:22:a4:39:25:31:69:ea:ee: 9e:60:a2:fd:47:8c:c8:5c:ad:79:48:77:b5:0d:2e: d0:95:47:44:55:31:cd:76:64:7c:6a:7b:92:a9:22: 9c:e8:69:af:b0:fd:f3:51:6b:77:54:92:fa:b3:1c: d4:b0:64:c3:51:3c:13:a5:a0:cf:db:e2:7e:8b:06: 41:46:47:4e:16:c4:04:32:bf:3e:20:0e:34:a1:65: c7:b0:9c:fe:35:04:f0:06:e9:df:86:69:c2:1c:6c: f6:40:30:a0:7a:88:42:37:f4:3c:97:84:48:e0:d4: b6:07:c0:c9:66:55:39:9e:75:f2:0f:8c:0e:88:a8: de:65:84:ad:98:30:11:c8:94:ae:87:2e:39:e6:17: c0:cb:69:a6:cc:07:c4:16:6b:4c:30:d6:b6:29:7e: 10:4e:cd:b0:2b:a2:e7:36:47:69:d3:96:3b:97:b8: eb:a4:f5:cc:9d:e4:f8:bb:bf:7c:de:e0:c3:17:0c: 94:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:BB:5A:90:59:C9:D5:78:C2:B5:64:C7:A8:BC:79:8A:92:AD:F2:58 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145663.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:abc5::/32 Signature Algorithm: sha256WithRSAEncryption 60:cd:03:23:7d:e7:8d:94:95:19:3d:4f:e6:86:d3:8a:99:a3: 3e:4d:30:e1:36:6c:4c:8d:0e:8e:98:e6:9e:46:90:5a:ec:4d: 21:46:da:9f:ce:66:b4:dc:69:fa:22:c4:3a:af:b1:e2:5e:03: 9e:0d:42:ed:79:e0:00:20:f6:3b:d2:ff:29:29:31:18:9e:90: 7d:24:ce:bf:54:c1:ea:d9:96:81:85:37:a1:72:7b:67:9a:9b: 99:b0:0d:fd:0e:20:38:50:c7:18:ff:3d:dc:87:a0:b2:ae:3f: 01:f6:87:b0:ba:e7:f4:30:36:c8:75:ca:33:25:4e:e5:7c:61: 44:15:2e:c3:03:79:2f:cf:fb:99:20:ac:c4:9e:da:fa:1f:47: 90:88:7c:be:b6:e4:ec:9d:a3:a9:80:e6:37:43:ad:3c:02:07: 91:14:2e:cf:69:83:d9:60:64:76:dc:6f:8c:8f:f5:02:59:4e: 3c:41:0a:b8:d3:d2:89:c4:cc:fa:81:d8:ce:fd:ed:69:5b:f1: 56:54:e8:3c:28:43:c1:73:c7:67:c7:9c:9b:0a:80:ce:f2:66: 49:55:76:b6:98:9a:ca:1e:cf:69:8b:90:18:6b:00:71:ba:7f: e3:2b:45:d2:39:a9:37:e9:d4:fb:1b:d2:73:af:ad:06:4c:5a: fa:ee:8f:8b -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUN06Fzj9tb/vUnzdX+3iCD/7k9SkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MjQzOFoX DTI3MDMwMzA2MjkzOFowMzExMC8GA1UEAxMoMzhCQjVBOTA1OUM5RDU3OEMyQjU2 NEM3QThCQzc5OEE5MkFERjI1ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM0r5EenMt45dzI1jzhlM8iwdZGSjCY8GeD+YTk5xMyjD1OtBfOQrZMxLl4o KWB8NO9iUMsth6HTkENIF5ArtCUJFyKkOSUxaerunmCi/UeMyFyteUh3tQ0u0JVH RFUxzXZkfGp7kqkinOhpr7D981Frd1SS+rMc1LBkw1E8E6Wgz9vifosGQUZHThbE BDK/PiAONKFlx7Cc/jUE8Abp34Zpwhxs9kAwoHqIQjf0PJeESODUtgfAyWZVOZ51 8g+MDoio3mWErZgwEciUrocuOeYXwMtppswHxBZrTDDWtil+EE7NsCui5zZHadOW O5e466T1zJ3k+Lu/fN7gwxcMlH0CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQ4u1qQ WcnVeMK1ZMeovHmKkq3yWDAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTY2My5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK q8UwDQYJKoZIhvcNAQELBQADggEBAGDNAyN9542UlRk9T+aG04qZoz5NMOE2bEyN Do6Y5p5GkFrsTSFG2p/OZrTcafoixDqvseJeA54NQu154AAg9jvS/ykpMRiekH0k zr9UwerZloGFN6Fye2eam5mwDf0OIDhQxxj/PdyHoLKuPwH2h7C65/QwNsh1yjMl TuV8YUQVLsMDeS/P+5kgrMSe2vofR5CIfL625Oydo6mA5jdDrTwCB5EULs9pg9lg ZHbcb4yP9QJZTjxBCrjT0onEzPqB2M797Wlb8VZU6DwoQ8Fzx2fHnJsKgM7yZklV draYmsoez2mLkBhrAHG6f+MrRdI5qTfp1Psb0nOvrQZMWvruj4s= -----END CERTIFICATE-----Generated at Sat Mar 28 15:53:36 2026 by rpki-client