$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145813.roa File: AS145813.roa (raw, json) Hash identifier: eJBMPYBpgPN8Wdm2S6h3qLMbp8s0B7bwylfCBEoV/Qo= Subject key identifier: 38:4B:00:78:8A:07:DF:25:12:37:81:A4:5D:4A:07:E1:53:F1:6A:3D Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 6990221E627FD7675D855F2A3C78CFC88A296C1A Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145813.roa Signing time: Wed 04 Mar 2026 06:31:09 +0000 ROA not before: Wed 04 Mar 2026 06:26:09 +0000 ROA not after: Wed 03 Mar 2027 06:31:09 +0000 asID: 145813 IP address blocks: 240a:ac5b::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:90:22:1e:62:7f:d7:67:5d:85:5f:2a:3c:78:cf:c8:8a:29:6c:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:26:09 2026 GMT Not After : Mar 3 06:31:09 2027 GMT Subject: CN=384B00788A07DF25123781A45D4A07E153F16A3D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:e9:41:ba:bd:df:0e:32:4d:6f:ef:f9:79:6f: d0:ba:f8:e5:67:cd:1a:80:a8:8d:d5:76:93:4e:0b: 4a:4b:75:6a:17:c9:c1:ac:f2:42:35:cd:e4:56:18: 3a:28:4e:85:52:e0:6d:0f:39:cb:51:4f:f1:d8:e4: 0e:b8:af:48:27:52:85:9a:dc:1c:ba:f1:e5:06:e5: 7c:10:15:4d:3b:34:b0:f5:6b:91:a6:c8:db:c9:af: 67:b9:5c:d5:29:cd:61:5a:60:40:b9:ac:18:7c:0a: 40:aa:00:ac:44:c0:65:20:40:12:0d:85:cd:69:14: 16:33:d1:33:fc:2b:5a:65:ac:96:d6:40:a7:22:f6: 8f:3d:92:01:1d:9e:be:62:ad:d9:4b:79:85:cf:ad: f8:d6:ce:91:4d:58:ce:b8:2d:e8:e1:4d:4b:4b:41: ce:39:7f:bf:9f:25:49:6e:f3:d1:0b:5a:ff:77:b0: b7:30:37:95:25:c0:6c:3f:41:bf:02:56:21:63:2c: c7:6b:cc:86:64:32:78:7b:c0:6d:11:bd:58:f0:b4: a8:fc:42:74:44:60:f1:ce:3d:bd:3e:04:f2:9f:dc: 5a:98:de:8e:a6:04:c4:35:58:83:89:87:df:55:39: cd:1f:20:e3:5f:de:04:c7:06:d1:ae:45:1c:c9:5a: 65:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:4B:00:78:8A:07:DF:25:12:37:81:A4:5D:4A:07:E1:53:F1:6A:3D X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145813.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:ac5b::/32 Signature Algorithm: sha256WithRSAEncryption 84:71:83:50:f3:90:f2:ba:c0:78:6b:97:9b:44:32:23:69:dc: ee:92:18:87:77:90:8f:fd:b8:76:6d:12:f2:f3:ea:8a:f4:10: ef:97:59:d9:6b:9f:ba:e5:74:58:99:d3:bd:ae:bf:72:0e:41: 9a:b0:dc:cc:3a:46:dd:92:3d:f4:87:6a:8f:d9:0e:1d:2c:8e: 83:df:cd:e7:00:cd:09:12:9a:7e:47:e6:82:d8:06:86:a2:d3: 78:cd:d1:79:92:0b:8c:e6:1b:50:cd:96:72:10:a8:50:cc:16: 82:3a:d4:61:4a:d6:4b:4e:b6:85:ab:97:cb:f8:bc:16:a0:e7: d5:8b:55:d2:24:77:a1:21:ed:06:b9:24:e3:0f:34:9a:e5:ef: 70:8d:ad:cb:27:47:32:ff:10:75:41:88:14:26:c5:6a:9f:b6: 64:6c:29:33:cc:0a:52:f1:07:54:42:05:0a:4d:17:76:40:b4: bc:cb:82:0c:c2:a3:eb:00:0c:bd:f1:6b:1d:86:16:c8:da:70: 31:f2:bb:71:d4:a7:52:64:35:56:6e:a6:29:f0:78:65:b2:6f: f2:50:72:b6:52:a0:bc:94:52:60:09:94:0a:b3:da:05:a0:6a: e7:87:35:10:61:2b:17:5a:89:cd:b7:b8:ce:16:be:63:8a:44: 93:94:2c:39 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUaZAiHmJ/12ddhV8qPHjPyIopbBowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MjYwOVoX DTI3MDMwMzA2MzEwOVowMzExMC8GA1UEAxMoMzg0QjAwNzg4QTA3REYyNTEyMzc4 MUE0NUQ0QTA3RTE1M0YxNkEzRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMfpQbq93w4yTW/v+Xlv0Lr45WfNGoCojdV2k04LSkt1ahfJwazyQjXN5FYY OihOhVLgbQ85y1FP8djkDrivSCdShZrcHLrx5QblfBAVTTs0sPVrkabI28mvZ7lc 1SnNYVpgQLmsGHwKQKoArETAZSBAEg2FzWkUFjPRM/wrWmWsltZApyL2jz2SAR2e vmKt2Ut5hc+t+NbOkU1Yzrgt6OFNS0tBzjl/v58lSW7z0Qta/3ewtzA3lSXAbD9B vwJWIWMsx2vMhmQyeHvAbRG9WPC0qPxCdERg8c49vT4E8p/cWpjejqYExDVYg4mH 31U5zR8g41/eBMcG0a5FHMlaZSsCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQ4SwB4 igffJRI3gaRdSgfhU/FqPTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTgxMy5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rFswDQYJKoZIhvcNAQELBQADggEBAIRxg1DzkPK6wHhrl5tEMiNp3O6SGId3kI/9 uHZtEvLz6or0EO+XWdlrn7rldFiZ072uv3IOQZqw3Mw6Rt2SPfSHao/ZDh0sjoPf zecAzQkSmn5H5oLYBoai03jN0XmSC4zmG1DNlnIQqFDMFoI61GFK1ktOtoWrl8v4 vBag59WLVdIkd6Eh7Qa5JOMPNJrl73CNrcsnRzL/EHVBiBQmxWqftmRsKTPMClLx B1RCBQpNF3ZAtLzLggzCo+sADL3xax2GFsjacDHyu3HUp1JkNVZupinweGWyb/JQ crZSoLyUUmAJlAqz2gWgaueHNRBhKxdaic23uM4WvmOKRJOULDk= -----END CERTIFICATE-----Generated at Sat Mar 28 11:46:14 2026 by rpki-client