$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145670.roa File: AS145670.roa (raw, json) Hash identifier: FfK8p4QMsvW96DxUOp0yHWcSwRvh5zkNxV0B+r37gyU= Subject key identifier: 5A:5C:F0:F7:61:40:56:59:76:3F:61:32:C5:EC:50:B7:DB:F9:10:15 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 073B4BC57959A7200C125EB97A4EA31350BB34AB Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145670.roa Signing time: Wed 04 Mar 2026 06:30:59 +0000 ROA not before: Wed 04 Mar 2026 06:25:59 +0000 ROA not after: Wed 03 Mar 2027 06:30:59 +0000 asID: 145670 IP address blocks: 240a:abcc::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:3b:4b:c5:79:59:a7:20:0c:12:5e:b9:7a:4e:a3:13:50:bb:34:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:25:59 2026 GMT Not After : Mar 3 06:30:59 2027 GMT Subject: CN=5A5CF0F761405659763F6132C5EC50B7DBF91015 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:33:14:c0:89:f9:29:07:07:f5:f3:55:6d:22: e9:ed:dc:ff:91:d1:17:61:5b:51:42:28:45:62:39: e9:ad:62:cb:f5:79:28:5b:dc:38:38:10:42:de:82: e1:bc:cf:cc:55:d8:6d:b6:45:b6:32:06:3f:41:89: 4f:82:55:c2:01:a4:9d:12:82:5c:5b:ed:a9:c9:7f: 90:ca:b0:2c:65:e5:03:c8:47:0f:b3:2d:d0:ff:39: 6c:54:d4:2c:e5:38:c9:46:bb:c8:a4:8e:dd:62:7e: 84:c3:77:2c:4d:cc:06:6e:b4:c5:0d:a4:19:2a:3c: 14:2f:18:12:d8:ab:ce:ef:d4:6d:46:fc:c4:86:46: 97:41:ae:a0:18:b8:b4:6c:d6:77:8d:8e:a1:b3:8f: 39:39:99:67:65:04:a0:93:57:b5:fd:03:ec:28:41: 14:ce:22:ce:1c:48:7e:ea:12:32:c1:93:1b:49:37: 62:8a:66:45:57:d9:8a:42:33:8e:a0:79:7d:60:92: 9f:f6:af:b8:c3:e3:63:15:8e:e0:b5:77:08:b6:cf: db:5f:4b:14:f7:87:a1:f7:cc:6b:1d:7b:ee:fe:f8: 19:45:15:48:8e:bf:dd:07:d3:4d:20:70:4e:8e:2e: d6:4c:c3:bf:6a:21:03:79:90:dd:ea:5a:93:db:7d: 1c:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:5C:F0:F7:61:40:56:59:76:3F:61:32:C5:EC:50:B7:DB:F9:10:15 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145670.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:abcc::/32 Signature Algorithm: sha256WithRSAEncryption 71:ac:a9:77:1b:47:ba:d3:60:c6:a3:a3:a4:48:6e:78:9e:aa: e8:46:db:bb:ab:cc:3b:bd:95:62:30:42:c3:e9:fe:13:fa:6f: fd:72:7b:93:00:18:44:76:d7:88:ae:d2:f9:64:0c:ac:c7:fa: 50:6d:c5:62:a4:0d:ce:09:72:fb:ee:5c:93:89:b1:c0:4c:60: cb:e1:5e:7b:fd:42:77:d6:a7:39:fb:9a:60:d2:4c:e1:d1:fa: d7:d5:a8:4d:d3:65:22:e5:25:47:6c:46:3e:c3:4f:4a:4b:48: ee:82:7c:5d:96:70:a0:d8:d5:5d:e6:24:3f:75:ba:94:2f:97: 3c:21:32:4c:6b:c5:34:2b:7c:aa:87:5f:2e:ed:32:65:41:bb: 8b:f8:f0:b5:03:47:1e:50:02:1b:fe:fa:fe:c5:a1:5c:8a:b0: 62:ae:7b:a7:ef:84:32:ea:49:a7:0a:32:38:9f:94:d7:36:35: 17:bf:86:8c:80:96:7b:20:29:98:43:e2:a9:dc:ab:9e:a8:79: bf:10:7e:9c:f5:75:e2:1c:ec:83:32:b7:de:9f:08:fb:d4:e7: 0c:5d:ad:5c:41:ae:bd:53:04:e9:8f:4f:2a:89:06:48:03:60: 6e:3a:61:30:4d:4e:e7:df:6f:72:b1:eb:8f:4c:79:ef:66:6b: 66:bb:f2:d2 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUBztLxXlZpyAMEl65ek6jE1C7NKswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MjU1OVoX DTI3MDMwMzA2MzA1OVowMzExMC8GA1UEAxMoNUE1Q0YwRjc2MTQwNTY1OTc2M0Y2 MTMyQzVFQzUwQjdEQkY5MTAxNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKAzFMCJ+SkHB/XzVW0i6e3c/5HRF2FbUUIoRWI56a1iy/V5KFvcODgQQt6C 4bzPzFXYbbZFtjIGP0GJT4JVwgGknRKCXFvtqcl/kMqwLGXlA8hHD7Mt0P85bFTU LOU4yUa7yKSO3WJ+hMN3LE3MBm60xQ2kGSo8FC8YEtirzu/UbUb8xIZGl0GuoBi4 tGzWd42OobOPOTmZZ2UEoJNXtf0D7ChBFM4izhxIfuoSMsGTG0k3YopmRVfZikIz jqB5fWCSn/avuMPjYxWO4LV3CLbP219LFPeHoffMax177v74GUUVSI6/3QfTTSBw To4u1kzDv2ohA3mQ3epak9t9HLUCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRaXPD3 YUBWWXY/YTLF7FC32/kQFTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTY3MC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK q8wwDQYJKoZIhvcNAQELBQADggEBAHGsqXcbR7rTYMajo6RIbniequhG27urzDu9 lWIwQsPp/hP6b/1ye5MAGER214iu0vlkDKzH+lBtxWKkDc4JcvvuXJOJscBMYMvh Xnv9QnfWpzn7mmDSTOHR+tfVqE3TZSLlJUdsRj7DT0pLSO6CfF2WcKDY1V3mJD91 upQvlzwhMkxrxTQrfKqHXy7tMmVBu4v48LUDRx5QAhv++v7FoVyKsGKue6fvhDLq SacKMjiflNc2NRe/hoyAlnsgKZhD4qncq56oeb8Qfpz1deIc7IMyt96fCPvU5wxd rVxBrr1TBOmPTyqJBkgDYG46YTBNTuffb3Kx649Mee9ma2a78tI= -----END CERTIFICATE-----Generated at Sat Mar 28 11:49:53 2026 by rpki-client