$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145811.roa File: AS145811.roa (raw, json) Hash identifier: SOQyRLn0SSDjhe5McqFK0nR37GH1zdrXr2TqWQmMQzA= Subject key identifier: 6C:30:B6:80:7A:42:6F:21:DE:7B:3E:F1:AF:AD:B9:14:6C:C6:E7:82 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 0E2F922E95AB022C65915CCE1DD21B2FFCC56A00 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145811.roa Signing time: Wed 04 Mar 2026 06:29:44 +0000 ROA not before: Wed 04 Mar 2026 06:24:44 +0000 ROA not after: Wed 03 Mar 2027 06:29:44 +0000 asID: 145811 IP address blocks: 240a:ac59::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:2f:92:2e:95:ab:02:2c:65:91:5c:ce:1d:d2:1b:2f:fc:c5:6a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:24:44 2026 GMT Not After : Mar 3 06:29:44 2027 GMT Subject: CN=6C30B6807A426F21DE7B3EF1AFADB9146CC6E782 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:a1:a6:12:13:56:54:26:1d:69:b7:b4:47:40: cd:4e:a0:ed:ac:f4:4d:ed:8c:58:ab:ac:6c:e6:77: 23:94:51:d3:e8:49:20:4f:72:33:0c:65:a7:b4:38: 30:30:6c:0a:16:6c:11:52:70:22:cd:6b:ca:0c:a5: d5:ce:8a:a7:d3:42:e4:6e:c1:e5:e4:4c:90:12:af: 14:90:4f:e3:43:58:bf:6a:29:af:31:eb:10:46:04: d0:b9:17:c3:4a:36:74:c4:1f:48:28:a2:c1:c3:ca: 3e:7a:8a:3d:fb:e6:e2:e3:dc:4d:56:c1:7e:b9:91: 44:d5:1e:08:8b:17:e2:86:dc:4c:e9:f9:b0:fd:81: 19:7c:ad:38:78:ab:40:b8:61:fe:30:68:85:1d:26: 5d:ac:41:70:97:7d:66:99:ff:c0:2d:36:31:9c:2a: 16:cc:4b:6f:37:13:49:ff:97:0a:a5:ea:51:06:fe: f2:91:fe:46:16:f8:41:37:98:78:7c:11:cc:db:8c: cc:5b:30:3d:41:91:b4:35:e7:5b:9f:45:de:b1:81: e4:6b:1c:47:ee:b5:9c:90:41:7e:f1:57:64:89:02: f5:5a:81:80:16:ee:bd:21:b3:9c:9b:37:fa:f8:a7: ae:93:34:31:01:22:da:04:61:f7:32:15:f8:d2:6d: 5c:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:30:B6:80:7A:42:6F:21:DE:7B:3E:F1:AF:AD:B9:14:6C:C6:E7:82 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145811.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:ac59::/32 Signature Algorithm: sha256WithRSAEncryption 26:1a:df:47:e1:9e:6e:50:5a:df:a6:b0:92:22:29:2b:13:61: b9:59:33:5b:69:57:9e:77:8f:4d:9a:60:77:c9:6b:85:01:10: d0:ec:11:5d:9f:72:cd:85:c6:98:8c:94:cc:2e:ba:c6:1c:8b: b8:bc:e0:c0:27:cf:63:b8:9f:81:0e:68:67:02:9f:34:a2:eb: 2d:8a:33:31:25:6f:ef:10:80:d3:ed:8d:4c:3c:70:5b:a1:57: 49:00:7e:b7:86:84:3a:a3:39:4a:27:f5:1e:5c:4c:9f:3b:ab: 03:19:7b:46:0d:45:33:8c:aa:47:51:2a:d4:08:12:38:00:c5: 17:4e:14:cc:0e:90:ee:3d:ec:2e:12:62:a2:8e:7e:5a:1f:41: d7:9e:ff:1f:ef:ae:f8:c9:29:87:6d:f7:6b:cd:d2:5f:27:1f: b2:e5:59:53:fd:e6:6c:d4:49:03:42:f8:63:80:c6:e2:c1:c3: bd:0f:7b:b0:69:27:9b:a3:4d:e6:91:93:b3:5a:59:23:5a:00: 6f:1c:19:c8:f0:11:d9:e6:e2:91:d4:a4:83:5d:09:70:b2:a9: 5d:ed:25:70:c3:c9:c5:7f:5b:b0:96:6e:5b:0c:4d:25:47:42: 38:aa:af:e9:43:39:7c:a8:26:eb:5a:74:dc:2e:b7:56:23:fe: 33:1c:fc:7c -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUDi+SLpWrAixlkVzOHdIbL/zFagAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MjQ0NFoX DTI3MDMwMzA2Mjk0NFowMzExMC8GA1UEAxMoNkMzMEI2ODA3QTQyNkYyMURFN0Iz RUYxQUZBREI5MTQ2Q0M2RTc4MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJ6hphITVlQmHWm3tEdAzU6g7az0Te2MWKusbOZ3I5RR0+hJIE9yMwxlp7Q4 MDBsChZsEVJwIs1rygyl1c6Kp9NC5G7B5eRMkBKvFJBP40NYv2oprzHrEEYE0LkX w0o2dMQfSCiiwcPKPnqKPfvm4uPcTVbBfrmRRNUeCIsX4obcTOn5sP2BGXytOHir QLhh/jBohR0mXaxBcJd9Zpn/wC02MZwqFsxLbzcTSf+XCqXqUQb+8pH+Rhb4QTeY eHwRzNuMzFswPUGRtDXnW59F3rGB5GscR+61nJBBfvFXZIkC9VqBgBbuvSGznJs3 +vinrpM0MQEi2gRh9zIV+NJtXAkCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRsMLaA ekJvId57PvGvrbkUbMbngjAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTgxMS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rFkwDQYJKoZIhvcNAQELBQADggEBACYa30fhnm5QWt+msJIiKSsTYblZM1tpV553 j02aYHfJa4UBENDsEV2fcs2FxpiMlMwuusYci7i84MAnz2O4n4EOaGcCnzSi6y2K MzElb+8QgNPtjUw8cFuhV0kAfreGhDqjOUon9R5cTJ87qwMZe0YNRTOMqkdRKtQI EjgAxRdOFMwOkO497C4SYqKOflofQdee/x/vrvjJKYdt92vN0l8nH7LlWVP95mzU SQNC+GOAxuLBw70Pe7BpJ5ujTeaRk7NaWSNaAG8cGcjwEdnm4pHUpINdCXCyqV3t JXDDycV/W7CWblsMTSVHQjiqr+lDOXyoJutadNwut1Yj/jMc/Hw= -----END CERTIFICATE-----Generated at Sat Mar 28 13:10:48 2026 by rpki-client