$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145713.roa File: AS145713.roa (raw, json) Hash identifier: d/glXufjeVszZZEQWXVR33CuQzGvAJRXW7gUo4DHWiw= Subject key identifier: 90:9E:68:CE:F5:CE:CA:29:97:05:A7:54:70:7F:C1:25:93:EA:10:9C Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 4E5F5686FE6630DBD8CA7573E560538422AF6FD6 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145713.roa Signing time: Wed 04 Mar 2026 06:30:52 +0000 ROA not before: Wed 04 Mar 2026 06:25:52 +0000 ROA not after: Wed 03 Mar 2027 06:30:52 +0000 asID: 145713 IP address blocks: 240a:abf7::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:5f:56:86:fe:66:30:db:d8:ca:75:73:e5:60:53:84:22:af:6f:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:25:52 2026 GMT Not After : Mar 3 06:30:52 2027 GMT Subject: CN=909E68CEF5CECA299705A754707FC12593EA109C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:90:fb:c3:07:24:9a:a6:4c:a3:7b:fc:74:ee: 7d:b6:84:9c:ef:56:0a:f3:24:87:bf:53:b1:4b:af: 84:38:9c:08:e8:65:0b:71:49:c3:eb:8b:5a:c8:c8: 25:2c:5a:7c:8c:2c:bb:1b:b8:1c:47:ea:f7:28:2a: db:fd:60:26:80:8d:e8:d2:94:3e:4d:a4:e2:0d:21: 07:a0:9b:35:0f:c2:81:6e:bb:9c:39:4f:bf:b2:82: c9:ca:72:d1:d4:cf:56:01:40:0f:21:8d:11:88:09: 5f:09:54:e7:04:dc:eb:50:5c:40:a5:a3:30:23:49: 70:5c:e6:87:15:db:76:1e:9d:c7:47:5f:ef:36:dc: ff:33:fc:a4:19:21:ae:ea:b0:09:8a:84:79:ab:ca: 5c:4c:df:71:17:80:01:d8:5b:38:2d:49:21:1d:c8: c3:bb:27:fc:0e:44:7c:a4:bf:de:13:e0:29:1a:74: ae:22:05:9a:04:d3:d0:bf:ce:ef:38:01:1d:ad:7a: f4:1e:bf:bf:53:56:87:48:f9:54:7a:fb:aa:40:12: d2:bd:c2:70:8c:b7:c0:02:d7:03:66:a1:73:e6:1b: 22:a4:1d:d8:57:0d:b4:e1:8f:a2:02:db:4f:f5:ce: 43:22:64:e5:2a:de:36:21:1c:7f:81:3a:d9:15:62: 75:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:9E:68:CE:F5:CE:CA:29:97:05:A7:54:70:7F:C1:25:93:EA:10:9C X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145713.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:abf7::/32 Signature Algorithm: sha256WithRSAEncryption 25:37:62:34:64:34:c5:41:13:31:7e:b6:88:12:70:f6:da:34: b0:51:a5:c9:19:d0:5b:96:3d:66:ba:df:e9:29:a0:14:38:1a: 83:e9:b9:ce:7d:40:9d:04:c2:c4:0c:ef:fb:53:59:67:12:22: e8:82:7e:f0:2d:8e:69:8d:f7:48:2d:ae:04:60:5e:0c:47:51: c6:98:78:4d:47:a0:91:91:90:70:9e:9e:c0:a7:83:b4:8d:0c: 15:3a:61:1e:0f:43:09:d4:15:fe:e3:5b:21:58:81:f0:4e:51: c9:d1:2b:f1:87:a0:59:03:c6:9e:97:aa:6f:e5:a7:c4:73:c8: 25:5e:aa:9e:79:54:3f:8b:cd:e6:cb:17:9e:fc:18:8d:ca:8b: 11:9c:76:da:22:38:e2:03:6c:c8:1a:dd:ce:1c:95:df:9f:72: 7b:f8:18:6f:d6:09:f2:7b:2f:bb:cb:09:a3:b8:51:4c:8d:be: fd:45:bf:9d:da:17:25:d0:07:ff:3b:7d:50:e8:ba:c9:3a:03: e2:a3:23:fb:1e:11:8f:63:0b:ab:7d:a3:ff:f8:49:a6:7c:a3: da:67:10:95:e2:49:53:04:5d:22:96:a7:fd:1c:e5:83:72:0e: e4:9f:38:9e:13:d2:5f:27:40:d6:da:e0:42:cc:40:de:17:3b: 4c:dc:d4:33 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUTl9Whv5mMNvYynVz5WBThCKvb9YwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MjU1MloX DTI3MDMwMzA2MzA1MlowMzExMC8GA1UEAxMoOTA5RTY4Q0VGNUNFQ0EyOTk3MDVB NzU0NzA3RkMxMjU5M0VBMTA5QzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMiQ+8MHJJqmTKN7/HTufbaEnO9WCvMkh79TsUuvhDicCOhlC3FJw+uLWsjI JSxafIwsuxu4HEfq9ygq2/1gJoCN6NKUPk2k4g0hB6CbNQ/CgW67nDlPv7KCycpy 0dTPVgFADyGNEYgJXwlU5wTc61BcQKWjMCNJcFzmhxXbdh6dx0df7zbc/zP8pBkh ruqwCYqEeavKXEzfcReAAdhbOC1JIR3Iw7sn/A5EfKS/3hPgKRp0riIFmgTT0L/O 7zgBHa169B6/v1NWh0j5VHr7qkAS0r3CcIy3wALXA2ahc+YbIqQd2FcNtOGPogLb T/XOQyJk5SreNiEcf4E62RVidYUCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSQnmjO 9c7KKZcFp1Rwf8Elk+oQnDAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTcxMy5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK q/cwDQYJKoZIhvcNAQELBQADggEBACU3YjRkNMVBEzF+togScPbaNLBRpckZ0FuW PWa63+kpoBQ4GoPpuc59QJ0EwsQM7/tTWWcSIuiCfvAtjmmN90gtrgRgXgxHUcaY eE1HoJGRkHCensCng7SNDBU6YR4PQwnUFf7jWyFYgfBOUcnRK/GHoFkDxp6Xqm/l p8RzyCVeqp55VD+LzebLF578GI3KixGcdtoiOOIDbMga3c4cld+fcnv4GG/WCfJ7 L7vLCaO4UUyNvv1Fv53aFyXQB/87fVDousk6A+KjI/seEY9jC6t9o//4SaZ8o9pn EJXiSVMEXSKWp/0c5YNyDuSfOJ4T0l8nQNba4ELMQN4XO0zc1DM= -----END CERTIFICATE-----Generated at Sat Mar 28 11:49:50 2026 by rpki-client