$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145699.roa File: AS145699.roa (raw, json) Hash identifier: vfVblZsnA8p28mPdSELY/JFB2b6KWC8srzdLtaF038Y= Subject key identifier: 24:5B:7C:E3:31:EC:97:4C:50:2E:BD:58:BF:4A:77:FC:E0:A3:54:78 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 0579F3AC97724DA3A6EB31B1C4832DCFE2CA0FBD Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145699.roa Signing time: Wed 04 Mar 2026 06:31:08 +0000 ROA not before: Wed 04 Mar 2026 06:26:08 +0000 ROA not after: Wed 03 Mar 2027 06:31:08 +0000 asID: 145699 IP address blocks: 240a:abe9::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:79:f3:ac:97:72:4d:a3:a6:eb:31:b1:c4:83:2d:cf:e2:ca:0f:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:26:08 2026 GMT Not After : Mar 3 06:31:08 2027 GMT Subject: CN=245B7CE331EC974C502EBD58BF4A77FCE0A35478 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:b1:a8:f0:f0:1b:8f:12:04:eb:c1:e4:a1:78: 23:71:3f:55:f7:8b:84:f3:28:71:d5:f1:de:d9:fb: 2e:e5:74:3a:fe:89:40:83:65:10:71:d1:cd:28:ea: d3:b1:01:bc:d2:c3:b3:ab:b4:de:2b:e7:04:c3:8b: 40:36:b6:bd:e9:67:61:da:29:f7:52:fc:0f:95:d0: ea:f9:d7:ff:fa:79:96:98:58:b8:69:24:23:ab:c4: 0e:4b:91:45:72:2d:30:66:c0:76:ef:f9:ee:93:b6: 74:0e:16:e2:71:d2:ec:1f:0e:9c:72:c6:a9:0a:77: c4:be:43:21:0b:da:4a:17:2a:37:70:ba:e9:c1:ca: cb:9f:2f:48:b7:11:30:49:0e:17:f5:d8:ae:07:c1: f1:ec:03:52:9b:38:0b:1e:c7:e2:e5:0d:e5:c1:84: 1d:4a:08:c0:61:47:0f:87:36:70:1d:f5:aa:69:ea: 84:3e:84:78:20:a5:67:5e:dc:2c:d9:e6:4c:4f:ec: 91:12:7c:1d:a2:0c:d9:62:79:5d:dd:45:fe:c8:cd: 0c:ad:d7:22:d3:03:9d:3c:60:12:ab:2e:ab:84:30: 56:25:d3:5d:f1:d0:fc:ee:73:fb:bf:1b:9e:95:8c: 52:2f:a7:a8:ed:5a:54:a0:91:55:af:3a:a7:ae:4c: d5:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:5B:7C:E3:31:EC:97:4C:50:2E:BD:58:BF:4A:77:FC:E0:A3:54:78 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145699.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:abe9::/32 Signature Algorithm: sha256WithRSAEncryption 52:6c:28:ff:85:ce:95:07:e0:b4:75:31:45:97:f3:14:db:8e: b9:c0:70:33:6d:e6:03:aa:23:55:55:12:49:bf:ad:fb:8a:e8: 98:50:ed:b4:ae:b4:f0:32:26:37:53:93:2a:c4:4d:46:89:41: 83:38:2b:1d:df:2e:0c:bb:3b:3a:37:b6:c3:c4:9a:7d:4b:2c: 6b:97:62:d3:50:b7:22:fb:23:30:ae:71:9f:97:0b:8e:4c:1a: 2a:79:c1:f9:0a:7f:05:b6:b4:d4:24:ce:fa:3d:2a:8e:06:f6: 87:4c:40:d7:29:14:df:b2:17:f4:2e:90:31:3d:fb:3e:8b:74: 75:f4:9a:45:dd:1e:7a:14:5f:88:79:6f:b6:db:a7:3d:fa:6d: 0f:80:00:34:82:b0:89:da:cd:47:5e:f3:69:f0:66:37:34:ec: 4a:8f:d6:79:d9:ed:7f:ea:95:21:f1:03:bf:88:b8:9a:45:30: 45:c2:a9:b2:c2:a0:a1:ad:6a:ab:f9:a8:40:38:73:f9:a9:a7: 71:df:0f:99:5f:9d:8d:07:71:61:c3:f6:24:2b:6d:0f:c2:82: 9e:2d:99:cf:21:47:9c:8f:18:8d:bd:d2:04:7b:00:c2:8c:55: 87:9f:95:16:f3:7c:c8:ea:b6:b8:64:62:88:dc:7a:1e:1a:59: da:01:1a:ea -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUBXnzrJdyTaOm6zGxxIMtz+LKD70wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MjYwOFoX DTI3MDMwMzA2MzEwOFowMzExMC8GA1UEAxMoMjQ1QjdDRTMzMUVDOTc0QzUwMkVC RDU4QkY0QTc3RkNFMEEzNTQ3ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMGxqPDwG48SBOvB5KF4I3E/VfeLhPMocdXx3tn7LuV0Ov6JQINlEHHRzSjq 07EBvNLDs6u03ivnBMOLQDa2velnYdop91L8D5XQ6vnX//p5lphYuGkkI6vEDkuR RXItMGbAdu/57pO2dA4W4nHS7B8OnHLGqQp3xL5DIQvaShcqN3C66cHKy58vSLcR MEkOF/XYrgfB8ewDUps4Cx7H4uUN5cGEHUoIwGFHD4c2cB31qmnqhD6EeCClZ17c LNnmTE/skRJ8HaIM2WJ5Xd1F/sjNDK3XItMDnTxgEqsuq4QwViXTXfHQ/O5z+78b npWMUi+nqO1aVKCRVa86p65M1aUCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQkW3zj MeyXTFAuvVi/Snf84KNUeDAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTY5OS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK q+kwDQYJKoZIhvcNAQELBQADggEBAFJsKP+FzpUH4LR1MUWX8xTbjrnAcDNt5gOq I1VVEkm/rfuK6JhQ7bSutPAyJjdTkyrETUaJQYM4Kx3fLgy7Ozo3tsPEmn1LLGuX YtNQtyL7IzCucZ+XC45MGip5wfkKfwW2tNQkzvo9Ko4G9odMQNcpFN+yF/QukDE9 +z6LdHX0mkXdHnoUX4h5b7bbpz36bQ+AADSCsInazUde82nwZjc07EqP1nnZ7X/q lSHxA7+IuJpFMEXCqbLCoKGtaqv5qEA4c/mpp3HfD5lfnY0HcWHD9iQrbQ/Cgp4t mc8hR5yPGI290gR7AMKMVYeflRbzfMjqtrhkYojceh4aWdoBGuo= -----END CERTIFICATE-----Generated at Sat Mar 28 11:49:23 2026 by rpki-client