$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145817.roa File: AS145817.roa (raw, json) Hash identifier: Dwee6oXRcU7C5Mu00SqAmq+EnYCwLUMTNxwZ0UJuw/Q= Subject key identifier: C4:F7:B0:B1:6B:D3:D1:90:74:6F:7E:65:1F:78:46:62:3C:C7:48:6E Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 0AF9679E35C3C403027CD3E1E63B5C77A1452803 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145817.roa Signing time: Wed 04 Mar 2026 06:31:07 +0000 ROA not before: Wed 04 Mar 2026 06:26:07 +0000 ROA not after: Wed 03 Mar 2027 06:31:07 +0000 asID: 145817 IP address blocks: 240a:ac5f::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:f9:67:9e:35:c3:c4:03:02:7c:d3:e1:e6:3b:5c:77:a1:45:28:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:26:07 2026 GMT Not After : Mar 3 06:31:07 2027 GMT Subject: CN=C4F7B0B16BD3D190746F7E651F7846623CC7486E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:a1:c0:99:78:3e:e1:fd:b3:d3:29:d8:86:86: f0:8b:38:f9:88:cd:be:68:00:1a:3a:96:67:79:97: c4:f1:78:09:95:20:29:8d:cd:91:68:3f:ee:54:14: b1:25:92:42:aa:5d:17:f9:95:56:7f:52:11:50:6e: b7:aa:e9:1b:03:69:45:33:cc:04:4e:15:6f:15:6a: c5:4d:55:41:60:47:31:64:09:1c:7b:b1:ae:2e:f2: 03:cf:74:5a:9c:4e:3b:fc:c9:ba:6e:4b:36:ec:7d: c7:5c:6e:a8:09:d7:ca:02:19:00:06:4f:3c:42:a8: ba:f3:d0:57:c4:2c:f2:d2:f8:f5:06:e1:ba:75:6f: a6:db:18:ea:e8:4f:ae:05:8e:d0:f6:4b:4a:c9:bc: b3:9c:4e:a1:f3:cf:ca:66:7d:c8:24:e3:8f:db:42: 1c:12:37:8a:6e:e0:77:78:be:27:a9:c3:c6:5b:f4: 76:46:d5:80:6d:97:8d:80:5d:09:0b:48:05:35:ab: 84:78:93:4e:bc:6e:a8:4a:2c:9a:26:1e:e4:79:e1: 3c:94:db:79:f8:9b:82:38:ee:68:9c:62:43:b9:2f: 51:e9:71:8b:d6:e0:c7:ec:47:af:0f:81:83:3a:2a: ea:c5:b4:e7:69:36:e9:a7:5e:ac:9b:5c:ee:85:e3: 7d:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:F7:B0:B1:6B:D3:D1:90:74:6F:7E:65:1F:78:46:62:3C:C7:48:6E X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145817.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:ac5f::/32 Signature Algorithm: sha256WithRSAEncryption 3c:41:4c:96:41:89:47:7d:32:eb:28:7f:b9:e5:21:b9:70:82: 69:ca:b7:7a:b7:b4:6f:f5:60:28:96:55:27:b2:e8:51:f1:0d: 95:96:9e:6c:b4:29:09:cb:ed:f4:1b:d7:33:aa:fc:e1:f2:f9: 3b:e2:51:91:7b:4a:e5:45:22:f7:64:62:f0:1b:7b:19:cf:93: b7:4c:59:99:05:c0:6c:5c:1a:b7:8c:d2:62:ee:58:8f:22:38: f6:2d:87:4a:7a:8a:42:25:fe:eb:9d:40:a1:c6:c6:01:db:75: 7f:e4:36:f7:63:f1:e0:c7:8f:61:74:1a:52:eb:c9:3b:0a:88: d9:85:54:e3:f9:aa:f6:49:21:92:73:22:49:68:22:88:08:00: 51:df:25:10:70:37:62:7b:55:e6:c4:03:b5:13:9d:4e:6c:28: 0f:ea:a4:83:9f:23:4f:ef:7b:52:bc:9b:0c:8c:87:df:9b:e5: a9:d5:bf:10:bc:bc:a3:62:f6:8b:b2:30:6c:73:39:2e:35:65: 8c:7d:01:35:1d:be:32:59:56:e4:f2:f9:cd:74:0a:ab:b9:40: 98:56:47:de:b7:a8:d7:91:b8:dd:8d:25:e7:61:82:a4:09:fd: ef:a4:53:f3:bb:79:65:d0:12:4c:27:8f:0f:3d:37:ff:99:dd: 8f:c4:0e:df -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUCvlnnjXDxAMCfNPh5jtcd6FFKAMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MjYwN1oX DTI3MDMwMzA2MzEwN1owMzExMC8GA1UEAxMoQzRGN0IwQjE2QkQzRDE5MDc0NkY3 RTY1MUY3ODQ2NjIzQ0M3NDg2RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMihwJl4PuH9s9Mp2IaG8Is4+YjNvmgAGjqWZ3mXxPF4CZUgKY3NkWg/7lQU sSWSQqpdF/mVVn9SEVBut6rpGwNpRTPMBE4VbxVqxU1VQWBHMWQJHHuxri7yA890 WpxOO/zJum5LNux9x1xuqAnXygIZAAZPPEKouvPQV8Qs8tL49QbhunVvptsY6uhP rgWO0PZLSsm8s5xOofPPymZ9yCTjj9tCHBI3im7gd3i+J6nDxlv0dkbVgG2XjYBd CQtIBTWrhHiTTrxuqEosmiYe5HnhPJTbefibgjjuaJxiQ7kvUelxi9bgx+xHrw+B gzoq6sW052k26aderJtc7oXjfR0CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBTE97Cx a9PRkHRvfmUfeEZiPMdIbjAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTgxNy5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rF8wDQYJKoZIhvcNAQELBQADggEBADxBTJZBiUd9Musof7nlIblwgmnKt3q3tG/1 YCiWVSey6FHxDZWWnmy0KQnL7fQb1zOq/OHy+TviUZF7SuVFIvdkYvAbexnPk7dM WZkFwGxcGreM0mLuWI8iOPYth0p6ikIl/uudQKHGxgHbdX/kNvdj8eDHj2F0GlLr yTsKiNmFVOP5qvZJIZJzIkloIogIAFHfJRBwN2J7VebEA7UTnU5sKA/qpIOfI0/v e1K8mwyMh9+b5anVvxC8vKNi9ouyMGxzOS41ZYx9ATUdvjJZVuTy+c10Cqu5QJhW R963qNeRuN2NJedhgqQJ/e+kU/O7eWXQEkwnjw89N/+Z3Y/EDt8= -----END CERTIFICATE-----Generated at Sat Mar 28 11:46:06 2026 by rpki-client