$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145669.roa File: AS145669.roa (raw, json) Hash identifier: 5WlPcxb8cGP/ZDju5fiRf3siWCOiU4AegQYDVSvirmI= Subject key identifier: EF:92:A6:72:57:9E:0C:AF:1E:92:45:CB:9B:96:32:37:A5:42:5B:A1 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 58254CBC3AF756C77E1927CFCA9DFAD5E4DCF507 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145669.roa Signing time: Wed 04 Mar 2026 06:29:51 +0000 ROA not before: Wed 04 Mar 2026 06:24:51 +0000 ROA not after: Wed 03 Mar 2027 06:29:51 +0000 asID: 145669 IP address blocks: 240a:abcb::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:25:4c:bc:3a:f7:56:c7:7e:19:27:cf:ca:9d:fa:d5:e4:dc:f5:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:24:51 2026 GMT Not After : Mar 3 06:29:51 2027 GMT Subject: CN=EF92A672579E0CAF1E9245CB9B963237A5425BA1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:75:68:ac:60:ce:65:09:4f:aa:88:72:2a:71: 7a:c7:ef:de:4c:58:f5:55:88:c9:5f:fc:cd:dd:f2: 85:21:97:30:fc:fe:9c:52:ff:58:dd:0c:e6:ed:18: a8:45:b1:99:f0:c1:ab:45:5e:72:4e:47:5a:7c:65: 30:52:b6:d2:f5:49:49:4c:a3:12:0a:10:c3:b2:da: 98:14:ec:cc:5e:fd:b5:2a:b9:13:4d:ac:68:f4:b9: 48:5d:ed:68:a8:51:f0:3d:2f:07:8a:13:58:94:48: d1:28:90:7d:f2:fd:9c:00:da:e2:d2:f7:bf:79:ad: bd:05:c8:11:e3:08:39:15:a8:42:3e:78:53:78:92: 31:82:1b:03:74:fe:e6:7e:de:2b:22:ee:fa:bb:4f: d3:96:6e:2e:79:92:18:00:9b:05:5b:48:fa:d4:82: 0c:10:8d:af:57:92:e4:34:d7:87:4c:9a:e8:d2:83: b2:f2:a8:ff:ae:23:47:e9:c7:7d:75:fe:9f:ea:1a: 71:08:81:14:27:f0:48:82:6a:42:10:c8:0a:13:3b: cb:b6:d8:af:e1:0b:0e:75:b5:3a:d0:76:75:76:9a: b9:6a:a4:1a:cb:21:c9:d7:ec:cb:3c:3e:6e:06:e2: 06:37:b3:98:49:99:04:8b:d7:4b:32:8b:5b:c4:ca: ae:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:92:A6:72:57:9E:0C:AF:1E:92:45:CB:9B:96:32:37:A5:42:5B:A1 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145669.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:abcb::/32 Signature Algorithm: sha256WithRSAEncryption c5:c0:e9:8d:2e:99:4c:49:f2:30:51:06:b9:2b:fe:15:75:73: f0:95:59:07:4b:95:f7:3a:86:62:e6:19:c1:31:6a:a0:48:17: 5f:98:c1:98:ed:fe:3c:07:7a:85:cc:db:12:b9:3f:3f:76:e5: 01:38:c3:33:17:d6:5d:e7:f4:42:ee:bf:03:39:5f:79:2c:eb: eb:07:7c:81:4a:9c:48:81:45:96:a1:73:a0:9e:c0:0b:73:51: 71:a0:6f:85:68:99:99:84:60:7d:50:52:59:65:64:5c:f5:e2: 90:58:c4:e5:60:cb:28:fc:65:27:25:e5:7f:fd:88:59:40:0c: d2:fe:0d:7e:ff:2f:11:fe:c0:17:11:cd:1a:13:ff:e7:02:53: 83:b6:54:96:1e:81:ac:65:e8:fa:82:c2:6f:4f:4c:c8:55:d4: 30:0a:d1:e4:47:03:8d:8d:d8:a2:1b:ca:74:ab:e6:64:0d:2b: 37:c0:e5:38:99:a3:28:40:ae:a9:f9:59:f8:a1:68:e7:30:a2: 81:23:36:68:a6:d0:72:eb:84:e2:d6:89:9f:99:22:1e:1e:6c: 4e:56:83:07:7d:ec:09:c3:55:a2:ec:04:08:af:f7:04:1c:99: 84:e7:54:70:62:07:16:6c:a5:e3:d9:3d:4d:73:73:6d:20:80: 2f:07:21:9f -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUWCVMvDr3Vsd+GSfPyp361eTc9QcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MjQ1MVoX DTI3MDMwMzA2Mjk1MVowMzExMC8GA1UEAxMoRUY5MkE2NzI1NzlFMENBRjFFOTI0 NUNCOUI5NjMyMzdBNTQyNUJBMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALh1aKxgzmUJT6qIcipxesfv3kxY9VWIyV/8zd3yhSGXMPz+nFL/WN0M5u0Y qEWxmfDBq0Veck5HWnxlMFK20vVJSUyjEgoQw7LamBTszF79tSq5E02saPS5SF3t aKhR8D0vB4oTWJRI0SiQffL9nADa4tL3v3mtvQXIEeMIORWoQj54U3iSMYIbA3T+ 5n7eKyLu+rtP05ZuLnmSGACbBVtI+tSCDBCNr1eS5DTXh0ya6NKDsvKo/64jR+nH fXX+n+oacQiBFCfwSIJqQhDIChM7y7bYr+ELDnW1OtB2dXaauWqkGsshydfsyzw+ bgbiBjezmEmZBIvXSzKLW8TKrlUCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBTvkqZy V54Mrx6SRcubljI3pUJboTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTY2OS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK q8swDQYJKoZIhvcNAQELBQADggEBAMXA6Y0umUxJ8jBRBrkr/hV1c/CVWQdLlfc6 hmLmGcExaqBIF1+YwZjt/jwHeoXM2xK5Pz925QE4wzMX1l3n9ELuvwM5X3ks6+sH fIFKnEiBRZahc6CewAtzUXGgb4VomZmEYH1QUlllZFz14pBYxOVgyyj8ZScl5X/9 iFlADNL+DX7/LxH+wBcRzRoT/+cCU4O2VJYegaxl6PqCwm9PTMhV1DAK0eRHA42N 2KIbynSr5mQNKzfA5TiZoyhArqn5WfihaOcwooEjNmim0HLrhOLWiZ+ZIh4ebE5W gwd97AnDVaLsBAiv9wQcmYTnVHBiBxZspePZPU1zc20ggC8HIZ8= -----END CERTIFICATE-----Generated at Sat Mar 28 13:13:23 2026 by rpki-client