$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145681.roa File: AS145681.roa (raw, json) Hash identifier: tNMj9Kwu9oSQzkzR7fxzpv9HYa1gf9jooKuoYj+/yj0= Subject key identifier: 2E:92:F4:68:4C:15:8A:D6:89:15:FA:65:3D:D3:1E:FC:A0:DA:FC:13 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 24E55B3A5B957E51E88E71F4C73B238C42693886 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145681.roa Signing time: Wed 04 Mar 2026 06:30:18 +0000 ROA not before: Wed 04 Mar 2026 06:25:18 +0000 ROA not after: Wed 03 Mar 2027 06:30:18 +0000 asID: 145681 IP address blocks: 240a:abd7::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:e5:5b:3a:5b:95:7e:51:e8:8e:71:f4:c7:3b:23:8c:42:69:38:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:25:18 2026 GMT Not After : Mar 3 06:30:18 2027 GMT Subject: CN=2E92F4684C158AD68915FA653DD31EFCA0DAFC13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:0c:5d:9e:15:70:1e:11:d0:d8:a8:0f:0c:84: 8e:b2:6b:e4:8b:a2:d6:ce:60:ed:85:f0:75:6f:b6: 67:62:fd:e5:bb:12:30:7e:77:0a:c1:12:bf:5e:b6: bd:f8:69:15:b4:84:53:6a:8f:2f:c0:5d:a5:f7:8c: 3c:6c:08:b5:b8:65:15:d8:67:13:e3:50:a6:82:26: 9d:76:83:a5:93:e2:f0:99:4f:f7:b9:f5:19:2a:30: c3:a6:f4:89:50:a9:de:a4:d7:b3:75:79:c3:6f:3c: d8:7d:60:40:d9:96:84:9e:64:39:f9:6f:1a:c7:87: 9a:d7:17:ff:a7:c8:0e:79:de:ad:ab:9e:6e:d3:4c: e8:0b:4a:67:15:e9:99:d7:29:2e:e5:e6:e9:c6:56: 0e:4b:b9:c0:35:33:00:28:e4:88:54:ba:80:ad:22: 8a:82:7c:c8:f0:fb:83:31:4c:54:03:d5:3f:03:01: 83:eb:6a:6c:fd:0f:65:dc:33:af:22:ed:03:20:72: 71:6f:b7:08:ad:ba:84:d3:eb:93:7e:12:48:58:b8: b7:a0:cd:48:f2:fa:02:9c:30:cc:95:c8:e0:a8:f8: 30:e0:a9:6d:55:be:e8:95:e1:5a:cc:f1:5d:b7:32: 30:1a:d0:55:d1:10:0b:65:d4:3f:8e:e5:32:0b:61: ee:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:92:F4:68:4C:15:8A:D6:89:15:FA:65:3D:D3:1E:FC:A0:DA:FC:13 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145681.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:abd7::/32 Signature Algorithm: sha256WithRSAEncryption 66:2a:68:5c:21:77:af:2a:ff:65:0b:bb:52:fc:5e:c8:7c:7b: 80:4f:3a:ae:37:0c:a9:34:30:a7:b8:7a:b6:26:0c:7b:d9:81: 21:70:01:15:05:9e:b0:be:9d:b8:af:fe:9f:58:ab:49:03:83: fb:b5:af:e8:9c:a6:ea:0b:01:19:db:68:b4:90:7e:90:e2:94: 6f:56:91:de:9d:74:43:5f:f5:1b:e2:22:5a:60:d0:36:49:98: 55:3b:f7:60:7b:bf:eb:e6:06:20:9c:99:2f:81:1f:80:62:f1: a8:73:bd:8c:4f:21:5e:50:34:fb:d2:54:65:3f:62:e0:1b:72: 33:a3:4a:9d:47:bd:4c:ae:03:fa:e6:36:77:b6:22:78:0c:b7: a6:2d:24:2f:04:80:be:79:e3:2b:21:85:31:b0:b2:e7:22:09: fd:14:7b:0f:f9:3f:7b:5a:c5:3f:05:41:26:1b:af:34:55:f7: 03:47:8b:d7:20:11:73:5d:c8:99:76:bd:d2:26:4f:60:c7:96: 8b:e3:c4:51:ec:80:fe:01:02:10:c5:e5:79:3a:ec:65:17:f5: 4d:b2:5a:b5:6d:a9:68:37:3b:c2:32:5b:ca:19:ce:9c:09:20: 31:95:71:49:32:83:c1:d0:c1:82:51:27:57:87:f7:8f:1e:df: 06:c9:e6:75 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUJOVbOluVflHojnH0xzsjjEJpOIYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MjUxOFoX DTI3MDMwMzA2MzAxOFowMzExMC8GA1UEAxMoMkU5MkY0Njg0QzE1OEFENjg5MTVG QTY1M0REMzFFRkNBMERBRkMxMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKUMXZ4VcB4R0NioDwyEjrJr5Iui1s5g7YXwdW+2Z2L95bsSMH53CsESv162 vfhpFbSEU2qPL8BdpfeMPGwItbhlFdhnE+NQpoImnXaDpZPi8JlP97n1GSoww6b0 iVCp3qTXs3V5w2882H1gQNmWhJ5kOflvGseHmtcX/6fIDnnerauebtNM6AtKZxXp mdcpLuXm6cZWDku5wDUzACjkiFS6gK0iioJ8yPD7gzFMVAPVPwMBg+tqbP0PZdwz ryLtAyBycW+3CK26hNPrk34SSFi4t6DNSPL6ApwwzJXI4Kj4MOCpbVW+6JXhWszx XbcyMBrQVdEQC2XUP47lMgth7r0CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQukvRo TBWK1okV+mU90x78oNr8EzAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTY4MS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK q9cwDQYJKoZIhvcNAQELBQADggEBAGYqaFwhd68q/2ULu1L8Xsh8e4BPOq43DKk0 MKe4erYmDHvZgSFwARUFnrC+nbiv/p9Yq0kDg/u1r+icpuoLARnbaLSQfpDilG9W kd6ddENf9RviIlpg0DZJmFU792B7v+vmBiCcmS+BH4Bi8ahzvYxPIV5QNPvSVGU/ YuAbcjOjSp1HvUyuA/rmNne2IngMt6YtJC8EgL554yshhTGwsuciCf0Uew/5P3ta xT8FQSYbrzRV9wNHi9cgEXNdyJl2vdImT2DHlovjxFHsgP4BAhDF5Xk67GUX9U2y WrVtqWg3O8IyW8oZzpwJIDGVcUkyg8HQwYJRJ1eH948e3wbJ5nU= -----END CERTIFICATE-----Generated at Sat Mar 28 11:42:07 2026 by rpki-client