$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145794.roa File: AS145794.roa (raw, json) Hash identifier: qJoK0ok4+KoV/Z8fcQOlvM5EEFrQVxCXqGFBFQnZLKI= Subject key identifier: 90:75:3D:4F:2D:EA:98:AC:05:76:55:A7:5F:7B:F0:FC:88:66:BD:9D Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 65C5A93F4225FFA06E9485BD860B10CAE066E3A1 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145794.roa Signing time: Wed 04 Mar 2026 06:29:48 +0000 ROA not before: Wed 04 Mar 2026 06:24:48 +0000 ROA not after: Wed 03 Mar 2027 06:29:48 +0000 asID: 145794 IP address blocks: 240a:ac48::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:c5:a9:3f:42:25:ff:a0:6e:94:85:bd:86:0b:10:ca:e0:66:e3:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:24:48 2026 GMT Not After : Mar 3 06:29:48 2027 GMT Subject: CN=90753D4F2DEA98AC057655A75F7BF0FC8866BD9D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:d6:b6:29:c9:9b:c7:03:0d:22:6e:80:84:87: af:fe:a6:3f:0f:42:b3:af:d1:9c:6a:60:2b:fb:72: 96:75:8e:df:ca:da:02:10:b5:16:1e:d0:4b:f0:6e: a1:84:25:02:7e:e5:5e:3e:3f:a5:ed:42:9b:6a:ae: 61:b4:89:26:3c:c0:4f:f3:b5:be:c0:93:00:b9:2f: a3:db:86:6f:c8:b5:2c:4d:86:a2:82:67:2e:7f:64: 3b:28:55:e7:7a:b1:49:1c:c9:9a:5f:c2:9f:04:94: e8:9c:e2:56:e0:7d:4d:72:6d:27:96:04:06:f2:99: c4:6b:ad:50:75:a2:29:c3:86:95:80:b3:7b:df:8d: 90:36:a0:08:be:bc:c1:d8:d8:d7:a0:60:70:c1:0a: 16:94:c8:c1:29:6d:a6:01:f2:d5:a7:ec:f5:40:62: aa:80:d7:32:38:fb:a6:24:f8:80:67:af:37:ec:0b: 3d:59:7b:15:39:c5:12:1c:3f:34:3c:34:24:77:83: 92:cc:08:e2:71:28:61:18:b3:de:49:94:95:6f:d3: 6f:de:43:df:88:3b:b4:48:8b:b6:8c:5f:0e:51:b9: 1a:21:bf:b5:a6:0d:7f:7d:5f:a1:64:69:ff:c6:28: 82:7f:46:07:62:a4:05:89:00:c2:79:b2:8f:40:a5: 76:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:75:3D:4F:2D:EA:98:AC:05:76:55:A7:5F:7B:F0:FC:88:66:BD:9D X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145794.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:ac48::/32 Signature Algorithm: sha256WithRSAEncryption 47:a9:fd:8a:f9:ae:c8:98:be:34:94:2f:25:75:5b:d1:45:2e: db:95:4e:48:af:09:41:1f:b1:9a:d4:c2:4d:dc:f5:fd:85:2b: c1:e6:b3:69:a5:98:3d:b4:9b:e9:a6:d4:d2:42:99:8e:cb:9c: ec:8d:df:b6:55:fb:b7:5e:d7:37:2e:97:d0:47:55:af:f1:9c: b8:ab:18:39:97:f4:a9:00:fb:6c:52:a9:4d:ba:c1:99:60:12: 9e:e6:97:6e:c3:ba:59:7f:fc:6d:e2:29:d7:07:af:0f:27:ae: a2:4c:1a:46:38:36:25:4c:1c:81:c5:b1:d9:94:f6:2a:f9:0b: a4:22:41:15:7d:1d:9d:48:95:bb:cf:00:d3:64:e7:ee:6a:1b: 32:8d:34:b3:03:e9:79:97:a4:52:b5:24:b8:9d:4b:d4:81:22: 31:16:23:de:3e:67:5b:67:e8:23:a4:89:38:99:38:49:10:00: 67:5a:fd:ce:29:61:58:2d:fe:14:ec:a6:51:a5:0e:9b:22:65: 3e:51:4b:8c:7a:ba:7e:6e:74:37:05:11:13:5c:56:92:8d:03: 4f:c0:aa:0d:aa:78:ae:2d:06:bf:ad:f2:c4:11:2f:e4:a5:64: 0a:61:32:83:ed:12:11:b9:68:31:04:84:a9:7b:ec:c9:fd:94: 7f:f4:37:83 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUZcWpP0Il/6BulIW9hgsQyuBm46EwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MjQ0OFoX DTI3MDMwMzA2Mjk0OFowMzExMC8GA1UEAxMoOTA3NTNENEYyREVBOThBQzA1NzY1 NUE3NUY3QkYwRkM4ODY2QkQ5RDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALDWtinJm8cDDSJugISHr/6mPw9Cs6/RnGpgK/tylnWO38raAhC1Fh7QS/Bu oYQlAn7lXj4/pe1Cm2quYbSJJjzAT/O1vsCTALkvo9uGb8i1LE2GooJnLn9kOyhV 53qxSRzJml/CnwSU6JziVuB9TXJtJ5YEBvKZxGutUHWiKcOGlYCze9+NkDagCL68 wdjY16BgcMEKFpTIwSltpgHy1afs9UBiqoDXMjj7piT4gGevN+wLPVl7FTnFEhw/ NDw0JHeDkswI4nEoYRiz3kmUlW/Tb95D34g7tEiLtoxfDlG5GiG/taYNf31foWRp /8Yogn9GB2KkBYkAwnmyj0CldpMCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSQdT1P LeqYrAV2Vadfe/D8iGa9nTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTc5NC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rEgwDQYJKoZIhvcNAQELBQADggEBAEep/Yr5rsiYvjSULyV1W9FFLtuVTkivCUEf sZrUwk3c9f2FK8Hms2mlmD20m+mm1NJCmY7LnOyN37ZV+7de1zcul9BHVa/xnLir GDmX9KkA+2xSqU26wZlgEp7ml27Dull//G3iKdcHrw8nrqJMGkY4NiVMHIHFsdmU 9ir5C6QiQRV9HZ1IlbvPANNk5+5qGzKNNLMD6XmXpFK1JLidS9SBIjEWI94+Z1tn 6COkiTiZOEkQAGda/c4pYVgt/hTsplGlDpsiZT5RS4x6un5udDcFERNcVpKNA0/A qg2qeK4tBr+t8sQRL+SlZAphMoPtEhG5aDEEhKl77Mn9lH/0N4M= -----END CERTIFICATE-----Generated at Sat Mar 28 11:49:44 2026 by rpki-client