$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145818.roa File: AS145818.roa (raw, json) Hash identifier: yKv+JwPBo3wWqANXHspg1BowzpMVO5oHdNJkP3iYciI= Subject key identifier: 9C:DB:64:85:6C:9F:D4:98:A3:04:C5:49:6E:57:20:83:AE:33:F1:BF Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 2D27FBB832405CAE8BC06312F3085AD962303F47 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145818.roa Signing time: Wed 04 Mar 2026 06:30:28 +0000 ROA not before: Wed 04 Mar 2026 06:25:28 +0000 ROA not after: Wed 03 Mar 2027 06:30:28 +0000 asID: 145818 IP address blocks: 240a:ac60::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:27:fb:b8:32:40:5c:ae:8b:c0:63:12:f3:08:5a:d9:62:30:3f:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:25:28 2026 GMT Not After : Mar 3 06:30:28 2027 GMT Subject: CN=9CDB64856C9FD498A304C5496E572083AE33F1BF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:d3:72:93:b9:0d:f9:3f:65:a7:1e:e7:33:9a: e5:1d:66:91:c8:91:6e:9e:10:80:6a:a9:c1:35:77: 23:bd:16:cd:08:de:7b:1c:2a:95:74:67:16:fb:8b: 4a:3b:b4:47:31:7c:75:db:91:41:29:ce:e3:46:cb: bc:19:92:bd:c0:b4:ac:c0:b5:3b:ba:bc:96:af:d4: 26:7c:32:41:18:65:9f:81:97:86:4e:36:d7:43:16: 61:7b:3d:bb:81:f3:90:3b:cd:dc:6c:17:fc:42:90: 8e:f3:9b:36:cd:d4:df:0c:e3:0e:ef:a7:46:59:a5: f0:22:2f:19:fb:78:0d:27:ba:25:22:87:d3:e6:63: 48:5c:b1:f5:96:a3:4d:fc:c1:2f:8d:75:14:57:a9: 6d:33:68:20:2a:5f:86:90:76:2c:29:b3:61:3d:e3: 5c:39:65:ef:91:fe:cc:26:e7:bf:8b:73:d7:93:5d: d7:eb:c3:4d:c0:16:29:82:d2:4a:d2:78:e2:6e:d0: d4:ad:d7:6e:5a:8d:d6:cd:30:f5:20:ba:dd:db:1e: df:0d:84:e6:b1:ee:be:1e:bc:f1:0f:0a:cc:c6:ac: 71:41:22:19:7a:04:6d:ac:aa:41:1c:a6:a0:bc:d6: 46:cc:01:80:ac:c9:de:13:37:2c:8a:4f:08:87:57: 26:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:DB:64:85:6C:9F:D4:98:A3:04:C5:49:6E:57:20:83:AE:33:F1:BF X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145818.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:ac60::/32 Signature Algorithm: sha256WithRSAEncryption 50:20:7e:84:8e:2d:f2:2e:6a:63:8d:19:8f:7f:ab:48:72:4a: 90:63:3d:7d:79:55:62:d3:30:a9:91:b1:d2:a9:85:f4:ca:d5: 02:d3:de:23:9c:f8:dc:79:14:1f:a3:da:dd:cc:c3:4f:cd:bf: 93:ee:dc:c0:d6:2e:c9:49:d8:f6:7f:bb:39:1f:bb:d5:b9:d6: e9:82:16:a6:a2:66:3d:92:11:8f:04:88:1d:96:6b:e2:c0:55: 37:ae:9b:ec:a0:59:59:d2:6e:de:54:f4:39:99:45:42:7c:5c: 80:9d:ce:67:de:d1:af:f6:50:73:68:89:bc:7b:15:ef:5a:96: b3:88:06:39:13:59:88:08:7c:d0:7a:5b:8e:70:61:41:4b:cf: b3:bc:52:9d:9c:db:a1:ee:d6:f6:b4:88:86:66:d0:7f:c4:47: 32:ee:94:f9:09:fd:4c:15:0e:06:af:b5:91:32:d4:10:40:57: 40:06:7a:fc:33:e4:8b:64:6b:e1:8a:57:56:fe:d2:fb:a6:19: 13:ca:67:42:ff:3a:49:0e:c1:f9:9e:04:8d:1f:79:7c:f3:f6: c2:8d:50:dd:72:8a:5e:b8:66:aa:a9:53:a4:29:2e:e9:7e:56: 19:3c:18:33:4f:56:e3:6d:4e:e8:6f:99:b7:08:ad:b2:fe:e6: 5d:88:b8:6f -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIULSf7uDJAXK6LwGMS8wha2WIwP0cwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MjUyOFoX DTI3MDMwMzA2MzAyOFowMzExMC8GA1UEAxMoOUNEQjY0ODU2QzlGRDQ5OEEzMDRD NTQ5NkU1NzIwODNBRTMzRjFCRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAIbTcpO5Dfk/Zace5zOa5R1mkciRbp4QgGqpwTV3I70WzQjeexwqlXRnFvuL Sju0RzF8dduRQSnO40bLvBmSvcC0rMC1O7q8lq/UJnwyQRhln4GXhk4210MWYXs9 u4HzkDvN3GwX/EKQjvObNs3U3wzjDu+nRlml8CIvGft4DSe6JSKH0+ZjSFyx9Zaj TfzBL411FFepbTNoICpfhpB2LCmzYT3jXDll75H+zCbnv4tz15Nd1+vDTcAWKYLS StJ44m7Q1K3XblqN1s0w9SC63dse3w2E5rHuvh688Q8KzMascUEiGXoEbayqQRym oLzWRswBgKzJ3hM3LIpPCIdXJlsCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSc22SF bJ/UmKMExUluVyCDrjPxvzAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTgxOC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rGAwDQYJKoZIhvcNAQELBQADggEBAFAgfoSOLfIuamONGY9/q0hySpBjPX15VWLT MKmRsdKphfTK1QLT3iOc+Nx5FB+j2t3Mw0/Nv5Pu3MDWLslJ2PZ/uzkfu9W51umC FqaiZj2SEY8EiB2Wa+LAVTeum+ygWVnSbt5U9DmZRUJ8XICdzmfe0a/2UHNoibx7 Fe9alrOIBjkTWYgIfNB6W45wYUFLz7O8Up2c26Hu1va0iIZm0H/ERzLulPkJ/UwV DgavtZEy1BBAV0AGevwz5Itka+GKV1b+0vumGRPKZ0L/OkkOwfmeBI0feXzz9sKN UN1yil64ZqqpU6QpLul+Vhk8GDNPVuNtTuhvmbcIrbL+5l2IuG8= -----END CERTIFICATE-----Generated at Sat Mar 28 11:46:09 2026 by rpki-client