$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145691.roa File: AS145691.roa (raw, json) Hash identifier: M8jscoKaGWLadx6mPon06hy0oi6j1739NqPa5hEgkGA= Subject key identifier: F1:43:BA:C2:35:EB:14:61:BF:E4:D9:D3:05:78:A2:5E:26:BB:99:9D Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 26303630B17050C1C19E158341407C82BC6B3771 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145691.roa Signing time: Wed 04 Mar 2026 06:29:59 +0000 ROA not before: Wed 04 Mar 2026 06:24:59 +0000 ROA not after: Wed 03 Mar 2027 06:29:59 +0000 asID: 145691 IP address blocks: 240a:abe1::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:30:36:30:b1:70:50:c1:c1:9e:15:83:41:40:7c:82:bc:6b:37:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:24:59 2026 GMT Not After : Mar 3 06:29:59 2027 GMT Subject: CN=F143BAC235EB1461BFE4D9D30578A25E26BB999D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:8c:22:e4:d6:a6:81:ec:24:ca:39:e6:75:f8: c9:23:9d:c5:7e:e5:8d:a3:71:ec:ce:8c:47:b5:e3: 47:e9:0a:2d:41:b5:f5:ed:72:7e:d6:9d:db:72:1c: 99:cf:ce:dc:d4:5e:d4:47:41:46:de:4a:a7:cc:20: 21:5f:e5:1f:5e:41:9b:0a:b6:a8:5c:c5:16:ae:d3: 41:ac:27:7c:c6:03:1b:29:f5:ce:b8:ea:90:15:b6: 5a:fc:fc:ff:11:4b:d1:63:a7:d8:80:0e:ac:17:64: cd:e3:9f:ac:47:b0:e2:f0:31:59:bd:fb:41:34:8d: ad:33:ce:8a:ba:48:dc:b6:16:27:1f:cd:97:b2:ed: 6c:75:10:42:55:55:e6:d1:5c:da:76:90:94:f3:ed: 03:dd:41:c2:bb:af:89:5d:12:6c:3b:56:60:04:6d: aa:3b:28:b9:ae:8e:ac:08:06:3b:f4:44:5a:86:92: 5b:46:82:54:6b:a9:81:53:aa:c1:91:30:31:83:b6: b7:60:35:94:3e:b3:c3:c0:ef:ef:ae:a4:f5:85:9f: 1c:fd:cc:54:b0:14:dd:3f:08:b4:e7:55:70:83:9c: 45:5c:86:8a:8c:ac:9a:90:6b:83:47:e9:1f:3e:d0: fb:77:04:fa:ce:93:fe:59:f1:0f:33:dd:a2:1d:6e: bb:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:43:BA:C2:35:EB:14:61:BF:E4:D9:D3:05:78:A2:5E:26:BB:99:9D X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145691.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:abe1::/32 Signature Algorithm: sha256WithRSAEncryption da:88:8a:a0:1b:15:d1:4e:e9:01:41:c2:4c:f2:d6:99:ba:c4: fc:47:27:b7:fa:49:7e:67:ef:03:15:c9:08:09:69:55:8a:5a: 0d:f8:23:b5:cb:f7:24:c9:fe:1f:79:32:ee:54:1c:72:ad:e0: 78:d3:2e:cf:2f:89:86:aa:a6:ce:58:bc:2d:d9:21:29:c7:21: 26:ac:8a:2f:e9:5f:40:68:73:d9:cc:72:bc:6c:47:bc:4b:3d: a1:0c:6a:fd:4f:68:ae:a8:a5:79:e0:8b:b0:7b:9d:a1:8e:fc: 73:01:9f:0d:97:be:47:bb:5f:f6:be:49:13:da:77:f5:cb:bf: 23:02:c1:77:6d:99:ad:af:87:cf:8c:d5:e8:fe:4a:a0:53:eb: 66:9c:09:6e:25:c9:b3:b1:dd:97:e1:b5:5a:c4:ce:8e:55:20: d4:c6:71:38:60:d7:36:66:e8:b1:1d:09:5a:a3:cc:3b:52:f7: c5:65:58:82:93:32:bd:0f:3d:d3:2f:21:49:33:5f:a6:5d:9d: cd:eb:71:b3:27:5d:5f:a0:f4:9a:f9:db:da:57:f6:34:d4:39: ca:f8:7a:61:ef:3b:df:33:31:dd:b7:27:94:03:0f:7d:50:28: 45:f9:b0:15:48:ec:a7:43:86:24:84:47:70:f2:b3:b6:b3:08: 6f:ea:80:27 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUJjA2MLFwUMHBnhWDQUB8grxrN3EwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MjQ1OVoX DTI3MDMwMzA2Mjk1OVowMzExMC8GA1UEAxMoRjE0M0JBQzIzNUVCMTQ2MUJGRTRE OUQzMDU3OEEyNUUyNkJCOTk5RDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALOMIuTWpoHsJMo55nX4ySOdxX7ljaNx7M6MR7XjR+kKLUG19e1yftad23Ic mc/O3NRe1EdBRt5Kp8wgIV/lH15Bmwq2qFzFFq7TQawnfMYDGyn1zrjqkBW2Wvz8 /xFL0WOn2IAOrBdkzeOfrEew4vAxWb37QTSNrTPOirpI3LYWJx/Nl7LtbHUQQlVV 5tFc2naQlPPtA91BwruviV0SbDtWYARtqjsoua6OrAgGO/REWoaSW0aCVGupgVOq wZEwMYO2t2A1lD6zw8Dv766k9YWfHP3MVLAU3T8ItOdVcIOcRVyGioysmpBrg0fp Hz7Q+3cE+s6T/lnxDzPdoh1uu50CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBTxQ7rC NesUYb/k2dMFeKJeJruZnTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTY5MS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK q+EwDQYJKoZIhvcNAQELBQADggEBANqIiqAbFdFO6QFBwkzy1pm6xPxHJ7f6SX5n 7wMVyQgJaVWKWg34I7XL9yTJ/h95Mu5UHHKt4HjTLs8viYaqps5YvC3ZISnHISas ii/pX0Boc9nMcrxsR7xLPaEMav1PaK6opXngi7B7naGO/HMBnw2Xvke7X/a+SRPa d/XLvyMCwXdtma2vh8+M1ej+SqBT62acCW4lybOx3ZfhtVrEzo5VINTGcThg1zZm 6LEdCVqjzDtS98VlWIKTMr0PPdMvIUkzX6Zdnc3rcbMnXV+g9Jr529pX9jTUOcr4 emHvO98zMd23J5QDD31QKEX5sBVI7KdDhiSER3Dys7azCG/qgCc= -----END CERTIFICATE-----Generated at Sat Mar 28 11:42:26 2026 by rpki-client