$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145773.roa File: AS145773.roa (raw, json) Hash identifier: 7KJNKmkTZ0YzBumU9ARfU3u7BbKgehzsMivbZ7MxmQU= Subject key identifier: FE:D8:91:61:9C:95:69:2B:12:09:D9:1B:96:9D:37:FC:56:3E:B5:27 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 76B5826D33BBEA6D2F19FDFD6AED66D6732CDF0A Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145773.roa Signing time: Wed 04 Mar 2026 06:29:54 +0000 ROA not before: Wed 04 Mar 2026 06:24:54 +0000 ROA not after: Wed 03 Mar 2027 06:29:54 +0000 asID: 145773 IP address blocks: 240a:ac33::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:b5:82:6d:33:bb:ea:6d:2f:19:fd:fd:6a:ed:66:d6:73:2c:df:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:24:54 2026 GMT Not After : Mar 3 06:29:54 2027 GMT Subject: CN=FED891619C95692B1209D91B969D37FC563EB527 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:5e:e5:ca:3e:bd:0a:84:db:97:81:bd:a2:a9: 63:35:92:94:f2:a8:eb:4d:9e:44:a7:51:61:21:a2: cc:8d:08:70:4d:a8:ea:70:f4:09:33:6f:63:ea:6d: b6:f5:24:e0:0f:e1:2a:3a:2f:73:40:24:e3:c0:1b: 5d:cf:89:21:45:60:d9:af:d4:56:77:ea:77:7b:81: c0:16:22:a4:40:b7:e1:9f:1c:d5:3d:fb:aa:41:a0: 49:f7:0a:cf:44:85:ab:b9:ba:34:04:1c:a7:a8:aa: 11:cf:e6:f4:58:75:d7:70:76:7b:e5:6e:96:3a:6a: 83:8a:7d:d1:e4:80:b6:88:a0:c1:75:15:d2:13:93: 06:6b:81:39:e3:ab:8e:43:11:6f:a7:cf:ff:b9:06: fb:55:04:17:14:c9:c9:59:c0:4a:e0:16:ea:81:dc: 9b:56:17:7c:67:45:3c:f2:e0:9e:0b:a4:bd:72:09: 81:c8:20:47:e4:f8:71:b8:87:cb:fc:d5:8f:52:22: dd:be:e7:3e:84:19:5b:38:55:0e:ed:fb:0b:c7:72: 2f:36:0b:c8:bc:e5:53:08:c3:84:73:99:ff:37:74: d0:bc:8b:c9:43:bd:89:46:b5:f7:f7:0d:ea:f6:84: cd:ef:a9:87:ca:3f:56:b4:92:fc:fe:89:c8:7d:99: 22:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:D8:91:61:9C:95:69:2B:12:09:D9:1B:96:9D:37:FC:56:3E:B5:27 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145773.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:ac33::/32 Signature Algorithm: sha256WithRSAEncryption b2:5e:a6:77:e5:9b:b5:b5:13:50:6e:07:ad:24:58:6a:04:b0: a2:91:a7:c6:25:68:25:47:92:40:7d:db:46:23:65:19:91:eb: 34:3d:b4:42:11:3e:cb:af:0d:6e:6c:74:e0:87:ba:33:23:ab: b2:3a:7f:74:d0:b7:58:51:6a:8d:75:e4:b6:4a:cd:7d:9a:28: a6:c9:f7:41:a3:d8:2a:05:6c:f2:c5:f9:24:0b:6a:aa:2e:b1: 83:19:6f:47:e6:70:c4:6a:2f:47:76:45:57:70:5a:90:39:05: af:b0:91:ad:e7:dc:c4:2e:9b:b2:6c:7c:8d:fb:ab:c1:f0:11: 34:d8:48:8c:d0:e0:08:22:52:53:f9:cb:48:2a:6a:eb:1c:74: bd:c8:5f:c5:c5:f4:89:02:0a:b2:06:bd:63:b0:df:a9:60:fe: 9e:34:44:27:99:c9:d6:cd:3c:8a:b7:4c:42:22:e9:ce:45:79: d8:97:95:5f:3c:49:7b:b7:34:9b:0b:63:a7:a1:49:d0:e2:3f: a5:38:22:9b:61:3e:f8:1f:fb:07:82:78:2b:fa:e3:62:03:88: 02:42:07:72:ef:47:f7:53:a0:d9:ab:6f:71:38:0e:ef:97:9c: b6:86:a0:27:58:d5:3e:b0:af:ee:2e:28:9a:d5:54:4d:b9:18: f9:cf:17:cc -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUdrWCbTO76m0vGf39au1m1nMs3wowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MjQ1NFoX DTI3MDMwMzA2Mjk1NFowMzExMC8GA1UEAxMoRkVEODkxNjE5Qzk1NjkyQjEyMDlE OTFCOTY5RDM3RkM1NjNFQjUyNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANFe5co+vQqE25eBvaKpYzWSlPKo602eRKdRYSGizI0IcE2o6nD0CTNvY+pt tvUk4A/hKjovc0Ak48AbXc+JIUVg2a/UVnfqd3uBwBYipEC34Z8c1T37qkGgSfcK z0SFq7m6NAQcp6iqEc/m9Fh113B2e+Vuljpqg4p90eSAtoigwXUV0hOTBmuBOeOr jkMRb6fP/7kG+1UEFxTJyVnASuAW6oHcm1YXfGdFPPLgngukvXIJgcggR+T4cbiH y/zVj1Ii3b7nPoQZWzhVDu37C8dyLzYLyLzlUwjDhHOZ/zd00LyLyUO9iUa19/cN 6vaEze+ph8o/VrSS/P6JyH2ZIsUCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBT+2JFh nJVpKxIJ2RuWnTf8Vj61JzAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTc3My5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rDMwDQYJKoZIhvcNAQELBQADggEBALJepnflm7W1E1BuB60kWGoEsKKRp8YlaCVH kkB920YjZRmR6zQ9tEIRPsuvDW5sdOCHujMjq7I6f3TQt1hRao115LZKzX2aKKbJ 90Gj2CoFbPLF+SQLaqousYMZb0fmcMRqL0d2RVdwWpA5Ba+wka3n3MQum7JsfI37 q8HwETTYSIzQ4AgiUlP5y0gqauscdL3IX8XF9IkCCrIGvWOw36lg/p40RCeZydbN PIq3TEIi6c5FediXlV88SXu3NJsLY6ehSdDiP6U4IpthPvgf+weCeCv642IDiAJC B3LvR/dToNmrb3E4Du+XnLaGoCdY1T6wr+4uKJrVVE25GPnPF8w= -----END CERTIFICATE-----Generated at Sat Mar 28 15:53:28 2026 by rpki-client