$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145701.roa File: AS145701.roa (raw, json) Hash identifier: v6x74dA4X5SRioKVIDBj/Ou/x3nY3EyOLm620Z6pZsM= Subject key identifier: 80:84:D1:D6:73:D4:BD:5F:44:F1:DF:B3:89:60:D4:A0:02:62:FE:66 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 60762B137D192C06B218D3DDE369183DF59C59C0 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145701.roa Signing time: Wed 04 Mar 2026 06:29:53 +0000 ROA not before: Wed 04 Mar 2026 06:24:53 +0000 ROA not after: Wed 03 Mar 2027 06:29:53 +0000 asID: 145701 IP address blocks: 240a:abeb::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:76:2b:13:7d:19:2c:06:b2:18:d3:dd:e3:69:18:3d:f5:9c:59:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:24:53 2026 GMT Not After : Mar 3 06:29:53 2027 GMT Subject: CN=8084D1D673D4BD5F44F1DFB38960D4A00262FE66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:bd:f0:49:57:4c:88:bb:4d:c1:c4:2f:a5:60: 9f:1d:6c:b0:bd:d3:13:64:9c:ab:8f:0f:40:89:50: 90:3f:2a:be:56:30:67:e0:f5:35:1e:a9:6c:6c:54: b7:b1:e6:1f:62:a2:67:35:d1:26:cb:60:9c:48:a3: 0e:29:bd:39:cc:4c:2a:7f:c6:e0:8e:ec:30:72:43: 48:c9:15:91:16:3d:29:00:2d:bf:a5:56:a3:95:a0: 03:b2:d6:f6:17:b4:e5:f1:13:b9:57:43:70:00:ce: 3b:84:3b:5a:d3:d8:7f:1e:fa:eb:9d:7e:7c:43:47: 6d:18:42:90:8a:b6:89:a1:32:16:32:63:34:f2:5f: 1a:fa:48:f5:ff:43:d7:62:6f:94:09:66:39:fd:c4: a3:92:aa:5e:43:1e:92:ba:c5:00:dd:79:58:5a:82: b5:8f:21:dd:bb:e8:91:8a:f5:06:cc:51:3b:fa:8f: e5:c4:0c:39:28:2d:ae:ac:73:d6:d6:e5:2d:26:39: 88:76:4d:57:a2:c8:0d:18:0d:c8:bd:6b:58:d9:08: 53:4e:46:59:ae:af:ac:b8:f8:a7:57:de:70:c7:c5: 23:b0:ab:2b:81:ed:90:3b:bc:23:d7:33:cb:9b:26: 3f:51:ca:1e:57:67:0d:17:ae:ba:39:07:4a:aa:ec: b6:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:84:D1:D6:73:D4:BD:5F:44:F1:DF:B3:89:60:D4:A0:02:62:FE:66 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145701.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:abeb::/32 Signature Algorithm: sha256WithRSAEncryption 35:cb:0a:5e:e8:53:cf:f7:0f:0c:67:69:84:58:38:2f:bd:24: 60:c9:f8:4a:93:99:3f:07:3a:2b:e4:d8:e5:10:ce:f7:63:e0: 7c:76:11:48:a0:02:02:0e:08:43:70:1c:e2:74:b6:4d:8c:4c: b5:b5:d8:e2:1d:54:e6:6d:45:f9:14:93:55:6b:90:98:9d:bb: b1:9d:2b:56:2d:d8:89:5c:fb:8b:1a:6b:07:9e:ac:b6:14:e9: 4a:71:68:95:04:74:11:b5:03:e2:5a:c2:5f:ca:bf:16:16:cf: 8b:8d:d1:58:80:18:8d:a2:ec:df:25:0f:d5:57:a0:32:f7:87: 28:2a:02:ff:64:5d:2e:ec:a7:16:53:3f:07:6f:13:b4:b1:bb: ae:c9:3c:a0:ca:c4:48:9a:72:67:68:56:0c:8c:bc:c7:39:ff: 6f:55:8d:22:a4:3a:6a:a2:94:29:96:84:96:04:b9:41:93:27: 02:ee:26:ea:82:0c:09:87:34:16:5c:a6:db:29:81:11:0b:f6: 91:fe:77:5b:e2:aa:c3:38:ac:bc:7d:0d:b5:f3:59:22:d7:e7: c0:53:ad:dc:a8:9a:4b:86:08:da:b9:c8:2e:84:46:d6:02:1f: d5:a8:54:66:59:a3:95:9a:01:d1:39:f2:4d:f4:58:84:21:3b: 69:ad:d8:4d -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUYHYrE30ZLAayGNPd42kYPfWcWcAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MjQ1M1oX DTI3MDMwMzA2Mjk1M1owMzExMC8GA1UEAxMoODA4NEQxRDY3M0Q0QkQ1RjQ0RjFE RkIzODk2MEQ0QTAwMjYyRkU2NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOK98ElXTIi7TcHEL6Vgnx1ssL3TE2Scq48PQIlQkD8qvlYwZ+D1NR6pbGxU t7HmH2KiZzXRJstgnEijDim9OcxMKn/G4I7sMHJDSMkVkRY9KQAtv6VWo5WgA7LW 9he05fETuVdDcADOO4Q7WtPYfx76651+fENHbRhCkIq2iaEyFjJjNPJfGvpI9f9D 12JvlAlmOf3Eo5KqXkMekrrFAN15WFqCtY8h3bvokYr1BsxRO/qP5cQMOSgtrqxz 1tblLSY5iHZNV6LIDRgNyL1rWNkIU05GWa6vrLj4p1fecMfFI7CrK4HtkDu8I9cz y5smP1HKHldnDReuujkHSqrstmcCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSAhNHW c9S9X0Tx37OJYNSgAmL+ZjAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTcwMS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK q+swDQYJKoZIhvcNAQELBQADggEBADXLCl7oU8/3DwxnaYRYOC+9JGDJ+EqTmT8H Oivk2OUQzvdj4Hx2EUigAgIOCENwHOJ0tk2MTLW12OIdVOZtRfkUk1VrkJidu7Gd K1Yt2Ilc+4saaweerLYU6UpxaJUEdBG1A+Jawl/KvxYWz4uN0ViAGI2i7N8lD9VX oDL3hygqAv9kXS7spxZTPwdvE7Sxu67JPKDKxEiacmdoVgyMvMc5/29VjSKkOmqi lCmWhJYEuUGTJwLuJuqCDAmHNBZcptspgREL9pH+d1viqsM4rLx9DbXzWSLX58BT rdyomkuGCNq5yC6ERtYCH9WoVGZZo5WaAdE58k30WIQhO2mt2E0= -----END CERTIFICATE-----Generated at Sat Mar 28 11:49:25 2026 by rpki-client