$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145690.roa File: AS145690.roa (raw, json) Hash identifier: 3KXkNlq+y3NLVUfH4z3bEC3ElktAvhqYE1DniVyfYNs= Subject key identifier: 1C:D4:97:93:AA:B2:11:1A:49:84:08:61:5F:76:17:0C:26:89:9F:2E Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 33DBA34B4130005382ECFD3DDC1827AD41CB4F20 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145690.roa Signing time: Wed 04 Mar 2026 06:29:51 +0000 ROA not before: Wed 04 Mar 2026 06:24:51 +0000 ROA not after: Wed 03 Mar 2027 06:29:51 +0000 asID: 145690 IP address blocks: 240a:abe0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:db:a3:4b:41:30:00:53:82:ec:fd:3d:dc:18:27:ad:41:cb:4f:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:24:51 2026 GMT Not After : Mar 3 06:29:51 2027 GMT Subject: CN=1CD49793AAB2111A498408615F76170C26899F2E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:8a:75:b1:85:30:f6:26:a4:5f:88:90:5a:d7: fd:55:3b:b6:3f:4a:de:3d:c9:34:d7:dd:cb:93:89: 36:0a:ce:e0:2c:2c:8c:87:d8:08:61:9c:48:72:72: 20:c8:05:0b:30:86:6d:65:4e:0a:29:31:ba:10:b5: 07:39:66:bb:bb:d2:5a:56:3a:5e:d5:43:5d:a7:dc: 8a:e4:5b:58:a9:bc:5e:f4:02:ff:e0:b1:bd:89:8d: 86:8f:d7:c4:08:dd:2e:94:05:03:28:dc:e7:cf:1c: 1e:6a:6e:2c:7e:c5:14:47:12:30:8c:82:56:ec:61: e4:53:59:c6:fb:99:02:99:3b:af:9e:f9:c9:0c:2d: f0:69:73:d4:28:ce:b2:1a:2b:14:a6:3f:af:80:be: 6b:b5:89:3c:ca:ee:bc:e0:b7:53:26:d4:f1:f7:2d: 5b:c6:20:a1:8e:41:0d:22:e4:68:f1:ab:a3:5c:37: 2d:c3:9b:d1:98:78:b6:44:97:50:74:b9:c3:dc:8a: 50:13:e5:8b:64:c9:eb:24:bd:e3:79:b7:12:52:e0: ed:29:ba:d0:ba:fb:91:e5:90:1e:ce:ea:a4:ce:5b: b7:3a:89:e9:ae:74:51:da:85:cf:84:c2:62:16:c7: 39:ff:36:4a:5a:bf:63:fe:19:59:dc:d8:af:22:c7: e2:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:D4:97:93:AA:B2:11:1A:49:84:08:61:5F:76:17:0C:26:89:9F:2E X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145690.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:abe0::/32 Signature Algorithm: sha256WithRSAEncryption 8b:fe:2e:c2:87:4b:92:29:95:96:dd:a6:54:64:18:c9:80:52: 7c:52:b7:1c:26:84:e4:cf:c4:66:41:0e:39:7f:e9:4b:ff:87: 78:cc:95:07:87:a9:79:6c:e4:d0:e5:7f:2d:4e:4e:27:11:e0: dd:60:d1:78:ca:15:83:31:42:b6:23:a9:1f:b0:3e:3c:2f:fe: 50:11:c1:1d:67:90:3c:70:0c:14:36:1c:2f:7b:96:6a:dc:3e: b4:9b:4a:3e:97:25:0d:cc:34:0c:b8:48:5d:cf:5a:5e:eb:3e: 36:1e:91:75:78:46:7a:6c:85:32:f3:3e:2a:6e:23:65:5d:4d: e5:8f:88:7c:f5:f2:0f:dd:5b:d3:3c:06:e7:0f:fb:1f:1e:c4: fe:20:3d:cd:c2:d2:ab:cc:64:9b:21:45:13:00:d8:e8:51:37: 6b:56:3e:e7:05:9a:89:62:82:9d:cd:84:08:9d:98:e7:d0:6f: 34:03:52:1f:0c:99:0f:12:1a:19:7a:06:1d:4c:58:69:5e:6e: 3c:13:e3:a6:8d:63:4f:50:f3:88:db:17:1a:e3:79:cd:a9:3a: b9:19:34:4c:de:05:7c:ac:ef:21:a0:44:33:51:38:4c:a8:93: b8:e2:4d:6d:ce:0c:7a:2c:d6:92:87:6b:a8:66:72:5b:83:56: 0f:68:31:a4 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUM9ujS0EwAFOC7P093BgnrUHLTyAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MjQ1MVoX DTI3MDMwMzA2Mjk1MVowMzExMC8GA1UEAxMoMUNENDk3OTNBQUIyMTExQTQ5ODQw ODYxNUY3NjE3MEMyNjg5OUYyRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMuKdbGFMPYmpF+IkFrX/VU7tj9K3j3JNNfdy5OJNgrO4CwsjIfYCGGcSHJy IMgFCzCGbWVOCikxuhC1Bzlmu7vSWlY6XtVDXafciuRbWKm8XvQC/+CxvYmNho/X xAjdLpQFAyjc588cHmpuLH7FFEcSMIyCVuxh5FNZxvuZApk7r575yQwt8Glz1CjO shorFKY/r4C+a7WJPMruvOC3UybU8fctW8YgoY5BDSLkaPGro1w3LcOb0Zh4tkSX UHS5w9yKUBPli2TJ6yS943m3ElLg7Sm60Lr7keWQHs7qpM5btzqJ6a50UdqFz4TC YhbHOf82Slq/Y/4ZWdzYryLH4hsCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQc1JeT qrIRGkmECGFfdhcMJomfLjAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTY5MC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK q+AwDQYJKoZIhvcNAQELBQADggEBAIv+LsKHS5IplZbdplRkGMmAUnxStxwmhOTP xGZBDjl/6Uv/h3jMlQeHqXls5NDlfy1OTicR4N1g0XjKFYMxQrYjqR+wPjwv/lAR wR1nkDxwDBQ2HC97lmrcPrSbSj6XJQ3MNAy4SF3PWl7rPjYekXV4RnpshTLzPipu I2VdTeWPiHz18g/dW9M8BucP+x8exP4gPc3C0qvMZJshRRMA2OhRN2tWPucFmoli gp3NhAidmOfQbzQDUh8MmQ8SGhl6Bh1MWGlebjwT46aNY09Q84jbFxrjec2pOrkZ NEzeBXys7yGgRDNROEyok7jiTW3ODHos1pKHa6hmcluDVg9oMaQ= -----END CERTIFICATE-----Generated at Sat Mar 28 15:53:30 2026 by rpki-client