$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145705.roa File: AS145705.roa (raw, json) Hash identifier: iTYaoSrjG4/F+xAE14UwlCPX2cCneSctuFdD54byMuQ= Subject key identifier: B8:86:95:27:F0:5C:3E:BB:3D:C6:10:B5:8F:50:89:94:91:CE:F0:26 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 660BE262DB6053196772B8616CF7E767D696AC63 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145705.roa Signing time: Wed 04 Mar 2026 06:30:26 +0000 ROA not before: Wed 04 Mar 2026 06:25:26 +0000 ROA not after: Wed 03 Mar 2027 06:30:26 +0000 asID: 145705 IP address blocks: 240a:abef::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:0b:e2:62:db:60:53:19:67:72:b8:61:6c:f7:e7:67:d6:96:ac:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:25:26 2026 GMT Not After : Mar 3 06:30:26 2027 GMT Subject: CN=B8869527F05C3EBB3DC610B58F50899491CEF026 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:1f:73:a7:44:6f:77:14:ac:81:a4:c2:72:aa: 76:06:7b:ee:ab:d8:23:6d:01:a3:19:58:8d:a5:28: 57:e3:a8:fe:9d:88:e6:36:71:09:4d:13:33:73:0b: c1:c6:7a:c3:67:0b:75:c5:6e:f9:fc:39:55:64:d2: 93:20:4c:ed:e4:d0:08:19:a7:cd:5f:be:d5:8d:31: eb:b2:9e:fb:37:d8:f4:22:ec:72:08:60:90:4b:95: 3f:60:2a:1f:f6:1f:4a:f1:fd:7a:fe:95:44:3f:c1: bd:e7:a6:aa:5a:0c:54:7e:f8:07:fa:db:0f:a8:80: 02:18:34:2f:0c:f8:3e:f4:70:a9:65:8c:d8:f3:56: 00:15:1a:29:af:be:a8:20:a5:a0:d7:94:eb:d2:a3: 06:49:cd:8a:60:e2:52:a1:80:53:d8:83:03:6d:7a: a8:7c:ec:a7:0e:2b:17:f4:f5:24:ba:0c:a6:ab:36: 85:18:68:80:e1:12:7b:fc:53:29:b6:c2:06:91:03: d6:12:10:25:7b:ac:b4:d6:c6:ce:14:b5:6b:7c:56: 35:cb:29:b2:c9:18:3b:4c:65:ea:be:ac:e4:a9:41: 98:17:61:ef:18:6b:ef:f5:7f:47:fb:95:99:19:34: b6:bd:d0:75:2a:ac:ce:8d:06:a7:bf:05:f0:34:54: 8e:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:86:95:27:F0:5C:3E:BB:3D:C6:10:B5:8F:50:89:94:91:CE:F0:26 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145705.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:abef::/32 Signature Algorithm: sha256WithRSAEncryption ab:2c:9e:ef:4f:d7:06:05:75:79:a1:8e:57:12:c1:8b:e3:65: a1:72:f0:65:bb:c7:f1:c3:e5:81:e3:56:73:b8:86:4e:eb:6f: 50:21:21:5a:d3:70:df:cd:64:6d:ca:57:22:5c:b4:3a:3b:bb: a2:90:7b:80:9a:60:10:1f:92:93:8c:fe:c9:49:e6:de:91:37: 2e:55:f2:7c:e8:a3:eb:72:08:07:42:d5:46:4b:08:fd:c7:9b: 69:58:41:9b:5c:25:21:a3:f5:e2:d8:cb:14:9a:36:1d:a8:f4: 1d:56:31:84:bf:06:fb:af:2b:81:db:40:5c:f2:af:69:1b:02: 1c:dd:80:0c:06:e2:01:89:d8:89:6a:4d:80:e7:e3:79:e1:f8: 05:52:9e:ca:99:1e:b9:29:6a:3e:f4:ce:cc:15:00:15:78:95: 2e:12:d9:23:c7:e6:4a:d3:c8:6f:84:db:b1:bc:2a:17:69:82: 3f:94:1c:ee:5d:a7:82:31:02:d9:4e:c7:59:03:2d:6c:b9:53: 94:90:3b:d8:a7:96:54:4d:00:fa:f0:66:e7:cd:12:09:35:8c: 19:b6:37:23:79:40:07:20:e9:d5:4a:ba:4d:c9:e3:4f:93:40: 27:d8:df:58:4b:ef:41:68:c5:d7:4d:ab:7b:c5:6e:7a:27:fe: ef:25:54:64 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUZgviYttgUxlncrhhbPfnZ9aWrGMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MjUyNloX DTI3MDMwMzA2MzAyNlowMzExMC8GA1UEAxMoQjg4Njk1MjdGMDVDM0VCQjNEQzYx MEI1OEY1MDg5OTQ5MUNFRjAyNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKofc6dEb3cUrIGkwnKqdgZ77qvYI20BoxlYjaUoV+Oo/p2I5jZxCU0TM3ML wcZ6w2cLdcVu+fw5VWTSkyBM7eTQCBmnzV++1Y0x67Ke+zfY9CLscghgkEuVP2Aq H/YfSvH9ev6VRD/BveemqloMVH74B/rbD6iAAhg0Lwz4PvRwqWWM2PNWABUaKa++ qCCloNeU69KjBknNimDiUqGAU9iDA216qHzspw4rF/T1JLoMpqs2hRhogOESe/xT KbbCBpED1hIQJXustNbGzhS1a3xWNcspsskYO0xl6r6s5KlBmBdh7xhr7/V/R/uV mRk0tr3QdSqszo0Gp78F8DRUjhkCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBS4hpUn 8Fw+uz3GELWPUImUkc7wJjAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTcwNS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK q+8wDQYJKoZIhvcNAQELBQADggEBAKssnu9P1wYFdXmhjlcSwYvjZaFy8GW7x/HD 5YHjVnO4hk7rb1AhIVrTcN/NZG3KVyJctDo7u6KQe4CaYBAfkpOM/slJ5t6RNy5V 8nzoo+tyCAdC1UZLCP3Hm2lYQZtcJSGj9eLYyxSaNh2o9B1WMYS/BvuvK4HbQFzy r2kbAhzdgAwG4gGJ2IlqTYDn43nh+AVSnsqZHrkpaj70zswVABV4lS4S2SPH5krT yG+E27G8Khdpgj+UHO5dp4IxAtlOx1kDLWy5U5SQO9inllRNAPrwZufNEgk1jBm2 NyN5QAcg6dVKuk3J40+TQCfY31hL70FoxddNq3vFbnon/u8lVGQ= -----END CERTIFICATE-----Generated at Sat Mar 28 15:53:35 2026 by rpki-client