$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145763.roa File: AS145763.roa (raw, json) Hash identifier: JcvffjF5sGqG/pwl0g0aHYXn7Dll6XBUMXW5QjtwiRU= Subject key identifier: C3:5E:94:8F:C8:32:EF:B6:60:82:4C:BA:7C:5D:CB:87:2A:DF:B9:FC Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 7B72411D931A4A18201B365184D7268AED194741 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145763.roa Signing time: Wed 04 Mar 2026 06:30:42 +0000 ROA not before: Wed 04 Mar 2026 06:25:42 +0000 ROA not after: Wed 03 Mar 2027 06:30:42 +0000 asID: 145763 IP address blocks: 240a:ac29::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:72:41:1d:93:1a:4a:18:20:1b:36:51:84:d7:26:8a:ed:19:47:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:25:42 2026 GMT Not After : Mar 3 06:30:42 2027 GMT Subject: CN=C35E948FC832EFB660824CBA7C5DCB872ADFB9FC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:a2:83:5b:3b:21:d8:63:8f:6d:dc:da:ff:63: 3f:f2:43:56:9c:dd:a0:4c:69:10:33:97:db:ae:78: 09:22:9a:e1:dd:5b:c5:99:d5:31:80:f3:b5:75:34: a4:54:58:4b:61:2c:9c:95:2e:2f:d0:b7:fe:c9:5e: c2:02:d6:44:45:b8:ec:2b:14:92:98:5c:91:c6:6f: 78:cb:f7:95:18:71:62:36:89:f3:e8:64:c0:8e:04: 2b:bc:da:fd:50:11:23:3a:95:54:d3:6b:36:2e:37: 88:35:96:39:fe:c6:9b:72:85:5c:2c:18:50:49:19: 3d:4c:c9:3a:a4:d1:8e:83:3d:18:0a:14:6f:be:e8: d1:ed:e4:29:31:29:0c:8a:89:7e:fb:ff:17:86:15: 24:9b:22:40:44:f7:12:f3:d4:14:b9:86:58:a9:63: e9:25:cc:1c:6a:42:d7:4a:25:59:d5:f9:41:4c:80: 2d:59:e3:7d:fd:ba:ea:88:d9:e3:6e:ae:31:a3:b3: 25:4e:b8:6e:d3:16:2e:e3:1c:c6:52:db:d5:06:8b: 6d:db:d8:7a:0a:c4:a4:c6:ef:3e:81:48:e6:81:45: 92:5f:50:22:37:06:bd:a6:dd:91:55:be:44:d8:d3: 8d:dd:ae:4d:ce:e2:8a:c2:e1:6c:e6:42:23:ff:8a: 5c:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:5E:94:8F:C8:32:EF:B6:60:82:4C:BA:7C:5D:CB:87:2A:DF:B9:FC X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145763.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:ac29::/32 Signature Algorithm: sha256WithRSAEncryption 57:08:f2:eb:a8:89:31:6d:31:55:a1:88:86:ab:85:72:62:0d: 7b:d2:21:83:e3:dd:8e:7d:84:c4:68:69:c0:50:e1:c5:09:0e: b8:f0:4d:84:4c:46:03:57:ad:f7:b6:57:a8:d3:12:f6:81:de: 48:be:4b:18:64:a3:eb:ba:15:12:63:72:38:4b:c1:cd:a4:71: 69:5c:4e:c1:10:57:5e:00:2e:ab:0e:e5:2b:38:e0:ef:24:8a: 89:0d:05:8d:b5:98:9d:52:e2:4a:a4:05:36:f1:f1:79:a8:7e: 3c:a9:ab:90:71:38:ac:96:23:20:13:a3:59:cd:57:fe:db:59: 33:b9:f1:04:50:11:fc:b6:d3:a9:a7:52:a5:c4:e7:4e:f4:28: b8:ef:41:5f:5d:9e:8a:73:b1:58:c5:72:8a:d3:c1:a5:af:1d: 01:af:86:cd:5f:42:b9:ed:52:a4:47:a3:39:bc:a9:d3:5f:7f: 4e:b2:c1:a4:38:b7:91:20:e4:26:ff:83:de:15:fd:45:b2:3f: 8f:08:22:36:96:4e:c2:95:ce:f9:13:6c:28:b0:c7:44:40:05: 2c:7c:23:3a:56:b9:cf:1a:22:c1:e4:df:05:d4:e6:82:4e:e1: 91:6e:c9:51:ad:5f:fa:08:6d:c8:c0:97:f2:3a:76:fd:46:f8: ac:77:85:ec -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUe3JBHZMaShggGzZRhNcmiu0ZR0EwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MjU0MloX DTI3MDMwMzA2MzA0MlowMzExMC8GA1UEAxMoQzM1RTk0OEZDODMyRUZCNjYwODI0 Q0JBN0M1RENCODcyQURGQjlGQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM+ig1s7Idhjj23c2v9jP/JDVpzdoExpEDOX2654CSKa4d1bxZnVMYDztXU0 pFRYS2EsnJUuL9C3/slewgLWREW47CsUkphckcZveMv3lRhxYjaJ8+hkwI4EK7za /VARIzqVVNNrNi43iDWWOf7Gm3KFXCwYUEkZPUzJOqTRjoM9GAoUb77o0e3kKTEp DIqJfvv/F4YVJJsiQET3EvPUFLmGWKlj6SXMHGpC10olWdX5QUyALVnjff266ojZ 426uMaOzJU64btMWLuMcxlLb1QaLbdvYegrEpMbvPoFI5oFFkl9QIjcGvabdkVW+ RNjTjd2uTc7iisLhbOZCI/+KXIcCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBTDXpSP yDLvtmCCTLp8XcuHKt+5/DAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTc2My5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rCkwDQYJKoZIhvcNAQELBQADggEBAFcI8uuoiTFtMVWhiIarhXJiDXvSIYPj3Y59 hMRoacBQ4cUJDrjwTYRMRgNXrfe2V6jTEvaB3ki+Sxhko+u6FRJjcjhLwc2kcWlc TsEQV14ALqsO5Ss44O8kiokNBY21mJ1S4kqkBTbx8Xmofjypq5BxOKyWIyATo1nN V/7bWTO58QRQEfy206mnUqXE5070KLjvQV9dnopzsVjFcorTwaWvHQGvhs1fQrnt UqRHozm8qdNff06ywaQ4t5Eg5Cb/g94V/UWyP48IIjaWTsKVzvkTbCiwx0RABSx8 IzpWuc8aIsHk3wXU5oJO4ZFuyVGtX/oIbcjAl/I6dv1G+Kx3hew= -----END CERTIFICATE-----Generated at Sat Mar 28 11:43:01 2026 by rpki-client