$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145688.roa File: AS145688.roa (raw, json) Hash identifier: 3U4yxfYafJfwaCv91e2nJgrCODHmEkpRlBgkvhz2Kpo= Subject key identifier: EB:BE:36:7C:13:4E:C5:24:89:29:1C:1F:60:5E:CD:67:6D:61:82:46 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 712B199FF49E26B03449EC0D2B35B049F85D6F0A Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145688.roa Signing time: Wed 04 Mar 2026 06:30:13 +0000 ROA not before: Wed 04 Mar 2026 06:25:13 +0000 ROA not after: Wed 03 Mar 2027 06:30:13 +0000 asID: 145688 IP address blocks: 240a:abde::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:2b:19:9f:f4:9e:26:b0:34:49:ec:0d:2b:35:b0:49:f8:5d:6f:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:25:13 2026 GMT Not After : Mar 3 06:30:13 2027 GMT Subject: CN=EBBE367C134EC52489291C1F605ECD676D618246 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:a6:00:cb:6b:39:72:b9:41:f6:c0:04:14:b9: a4:a0:a6:2d:36:10:3a:37:78:c1:93:b9:9c:5e:22: ce:e5:14:f4:b4:be:7c:ea:5e:e7:bd:fb:cf:99:c8: fc:20:51:5b:bf:6b:22:18:71:9d:8d:ef:3a:5c:5c: f6:7a:e5:8d:e2:4d:ed:5d:8f:70:c4:d0:fa:1d:07: 2f:63:80:e8:18:e7:8c:ce:b0:49:87:1e:c0:db:da: 6c:c0:3f:5b:e5:11:1d:20:cf:f7:db:81:92:83:65: 6d:e8:58:d4:69:8e:ea:73:56:03:e9:20:3b:11:74: 8e:ad:bb:33:0e:c4:5b:b6:e1:a7:6e:99:a8:ec:17: 5a:67:3c:b7:f2:4d:94:30:53:8d:8d:99:ae:4f:e8: df:99:32:eb:a9:7d:18:1f:44:9b:0a:92:1b:0d:dd: 2a:fe:b6:b8:e7:82:df:4a:41:94:97:da:06:06:64: 4d:20:5a:b0:fc:e1:74:bd:e4:88:95:aa:9c:96:63: 4f:02:d1:1d:dd:fb:1c:ea:f1:53:0c:68:2a:38:a8: f4:59:77:2e:23:80:82:e8:e3:62:57:9a:c4:95:1b: 65:bd:d7:f6:70:ec:34:4b:47:b2:0d:d9:0d:af:d2: d9:85:c5:26:35:15:4f:8a:95:5e:15:be:2d:07:c4: c5:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:BE:36:7C:13:4E:C5:24:89:29:1C:1F:60:5E:CD:67:6D:61:82:46 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145688.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:abde::/32 Signature Algorithm: sha256WithRSAEncryption 33:dc:54:52:68:8b:6c:67:34:2b:c6:40:90:66:ac:67:3b:a3: 9d:5d:25:98:f2:4c:dd:b2:73:ef:3f:55:d9:8b:4a:8d:1c:51: ba:7d:c0:8e:ee:c4:d3:9f:fd:60:63:9b:08:19:e8:71:74:ae: 8f:d2:fe:d5:dd:61:31:d7:bc:50:67:bb:80:44:dc:63:4f:33: bd:e6:d8:02:9b:a8:f3:aa:2f:24:cd:a9:92:38:15:ac:84:85: 5b:97:f7:47:7f:f3:2b:b5:37:0a:6a:6c:0e:3a:af:df:24:0c: 5a:bf:18:25:cc:ac:c6:fd:1c:9c:ec:6a:30:05:40:f8:4c:c1: d8:60:69:8e:95:4b:f6:a8:68:83:a4:4a:ea:ef:9f:87:74:7b: 6f:70:72:35:e2:a7:c9:bb:9d:0f:c3:a5:7f:65:ae:cd:56:c5: aa:70:69:c3:14:f1:87:a0:5d:b7:86:89:b8:bf:d6:53:90:11: b0:a0:f3:15:9c:4b:b8:ab:51:a9:55:3a:5f:c2:1c:56:a2:da: 40:8a:7b:97:f5:9f:25:b4:3b:21:85:7c:73:cc:ec:43:42:06: 14:cf:30:8c:c7:7f:d2:3c:d8:1b:c7:e3:f9:46:91:b0:d2:01: f6:2d:6f:e4:64:ce:2b:e2:92:38:c7:68:4a:70:27:54:29:1e: 9f:25:52:a3 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUcSsZn/SeJrA0SewNKzWwSfhdbwowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MjUxM1oX DTI3MDMwMzA2MzAxM1owMzExMC8GA1UEAxMoRUJCRTM2N0MxMzRFQzUyNDg5Mjkx QzFGNjA1RUNENjc2RDYxODI0NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKCmAMtrOXK5QfbABBS5pKCmLTYQOjd4wZO5nF4izuUU9LS+fOpe5737z5nI /CBRW79rIhhxnY3vOlxc9nrljeJN7V2PcMTQ+h0HL2OA6BjnjM6wSYcewNvabMA/ W+URHSDP99uBkoNlbehY1GmO6nNWA+kgOxF0jq27Mw7EW7bhp26ZqOwXWmc8t/JN lDBTjY2Zrk/o35ky66l9GB9EmwqSGw3dKv62uOeC30pBlJfaBgZkTSBasPzhdL3k iJWqnJZjTwLRHd37HOrxUwxoKjio9Fl3LiOAgujjYleaxJUbZb3X9nDsNEtHsg3Z Da/S2YXFJjUVT4qVXhW+LQfExdcCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBTrvjZ8 E07FJIkpHB9gXs1nbWGCRjAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTY4OC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK q94wDQYJKoZIhvcNAQELBQADggEBADPcVFJoi2xnNCvGQJBmrGc7o51dJZjyTN2y c+8/VdmLSo0cUbp9wI7uxNOf/WBjmwgZ6HF0ro/S/tXdYTHXvFBnu4BE3GNPM73m 2AKbqPOqLyTNqZI4FayEhVuX90d/8yu1NwpqbA46r98kDFq/GCXMrMb9HJzsajAF QPhMwdhgaY6VS/aoaIOkSurvn4d0e29wcjXip8m7nQ/DpX9lrs1WxapwacMU8Yeg XbeGibi/1lOQEbCg8xWcS7irUalVOl/CHFai2kCKe5f1nyW0OyGFfHPM7ENCBhTP MIzHf9I82BvH4/lGkbDSAfYtb+RkzivikjjHaEpwJ1QpHp8lUqM= -----END CERTIFICATE-----Generated at Sat Mar 28 11:42:08 2026 by rpki-client