$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145819.roa File: AS145819.roa (raw, json) Hash identifier: aGqgyZW4aigZeeEqujwahiBxFnhNPBTv3+60oewRU/M= Subject key identifier: 62:1B:9D:FD:B2:ED:6D:E4:11:9D:EA:21:BD:FD:B2:CB:D3:ED:A8:8B Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 7461DB5B802C61EBFBCD274623297C90D1D20115 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145819.roa Signing time: Wed 04 Mar 2026 06:31:11 +0000 ROA not before: Wed 04 Mar 2026 06:26:11 +0000 ROA not after: Wed 03 Mar 2027 06:31:11 +0000 asID: 145819 IP address blocks: 240a:ac61::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:61:db:5b:80:2c:61:eb:fb:cd:27:46:23:29:7c:90:d1:d2:01:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:26:11 2026 GMT Not After : Mar 3 06:31:11 2027 GMT Subject: CN=621B9DFDB2ED6DE4119DEA21BDFDB2CBD3EDA88B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:ec:51:81:74:2c:67:8c:be:26:9f:5d:b3:16: 50:4a:a9:19:da:37:76:c8:4d:6a:24:b1:3b:0a:a5: 5d:d1:03:ee:5a:cb:c9:c2:79:44:b2:ba:7a:2b:a8: 55:81:06:39:7f:38:83:6d:8a:7a:10:c9:d8:f1:3d: c4:1a:51:0d:d4:af:88:00:83:16:82:ee:09:7f:8e: c2:df:79:f0:ed:a2:c4:3d:c8:eb:59:76:c5:83:5d: 06:cb:7b:0b:33:f5:0c:15:6b:d0:2e:e4:1e:fc:5e: 34:33:c8:95:55:64:ad:6a:5f:5a:50:55:83:b8:f1: d9:00:36:76:37:40:f8:2b:b8:db:ae:a6:cb:73:5f: 4a:ca:01:31:80:8b:c0:00:d1:77:77:d0:08:96:c7: 9f:f1:42:07:94:8e:3b:e8:73:4f:83:d4:c9:18:fd: 00:69:43:9a:a4:51:5e:9f:e1:c0:cd:62:7c:0b:1f: 39:36:a4:7b:04:5f:a7:2b:bf:c6:18:98:a1:02:29: 99:e2:45:31:37:25:fa:35:7d:ed:45:6e:e2:c6:f6: 5d:5b:71:0b:f0:09:4c:5b:56:52:3b:d4:9d:0d:12: 81:66:ca:e3:16:1c:1d:25:ea:61:d5:d1:f0:69:a7: 17:05:64:66:3d:cb:14:df:31:90:08:35:84:56:1a: 34:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:1B:9D:FD:B2:ED:6D:E4:11:9D:EA:21:BD:FD:B2:CB:D3:ED:A8:8B X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145819.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:ac61::/32 Signature Algorithm: sha256WithRSAEncryption 85:2f:a2:83:f6:86:8a:13:02:00:82:03:17:6d:ce:c7:9b:52: 16:b0:53:0d:9b:49:da:7b:56:e9:d8:16:98:f9:ec:a6:4e:23: a6:7f:56:8d:b5:56:3b:64:fe:ef:08:34:6d:25:f2:e6:74:07: 70:20:3d:25:a0:a9:06:4b:9a:2a:5a:ab:0e:bf:1d:16:84:98: d8:37:3c:81:eb:1c:cd:24:0c:1d:40:64:21:b4:7f:5d:06:94: 63:04:3e:f0:4e:d3:01:26:58:1b:ed:e2:c3:6b:c2:b2:cb:5b: 87:50:98:56:d5:49:eb:40:22:46:15:84:a1:52:f4:e1:d1:ca: 7d:cd:45:de:6f:c4:f0:58:d6:d5:f5:d6:d8:0b:86:44:2b:ab: 7d:6f:af:cb:e3:0c:0c:d7:17:ef:89:da:1f:cb:c9:32:85:92: bf:03:1d:f2:e8:b9:b3:1e:fc:b2:6e:9a:b4:97:88:cb:a7:69: 61:a9:30:e3:e1:80:d5:a8:38:92:04:ce:7d:3e:c0:d6:a2:52: 24:f1:54:2c:50:0c:e8:c8:1a:d9:19:42:8e:49:c9:9b:0b:5a: b9:ef:a1:a0:b2:be:07:b2:c3:6d:ff:b7:19:53:d4:9d:1a:c3: 4c:79:ba:a5:73:e6:ec:87:bf:27:7f:c8:73:25:e2:08:4e:b8: d5:69:f4:5a -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUdGHbW4AsYev7zSdGIyl8kNHSARUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MjYxMVoX DTI3MDMwMzA2MzExMVowMzExMC8GA1UEAxMoNjIxQjlERkRCMkVENkRFNDExOURF QTIxQkRGREIyQ0JEM0VEQTg4QjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKXsUYF0LGeMviafXbMWUEqpGdo3dshNaiSxOwqlXdED7lrLycJ5RLK6eiuo VYEGOX84g22KehDJ2PE9xBpRDdSviACDFoLuCX+Owt958O2ixD3I61l2xYNdBst7 CzP1DBVr0C7kHvxeNDPIlVVkrWpfWlBVg7jx2QA2djdA+Cu4266my3NfSsoBMYCL wADRd3fQCJbHn/FCB5SOO+hzT4PUyRj9AGlDmqRRXp/hwM1ifAsfOTakewRfpyu/ xhiYoQIpmeJFMTcl+jV97UVu4sb2XVtxC/AJTFtWUjvUnQ0SgWbK4xYcHSXqYdXR 8GmnFwVkZj3LFN8xkAg1hFYaNA0CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRiG539 su1t5BGd6iG9/bLL0+2oizAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTgxOS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rGEwDQYJKoZIhvcNAQELBQADggEBAIUvooP2hooTAgCCAxdtzsebUhawUw2bSdp7 VunYFpj57KZOI6Z/Vo21Vjtk/u8ING0l8uZ0B3AgPSWgqQZLmipaqw6/HRaEmNg3 PIHrHM0kDB1AZCG0f10GlGMEPvBO0wEmWBvt4sNrwrLLW4dQmFbVSetAIkYVhKFS 9OHRyn3NRd5vxPBY1tX11tgLhkQrq31vr8vjDAzXF++J2h/LyTKFkr8DHfLoubMe /LJumrSXiMunaWGpMOPhgNWoOJIEzn0+wNaiUiTxVCxQDOjIGtkZQo5JyZsLWrnv oaCyvgeyw23/txlT1J0aw0x5uqVz5uyHvyd/yHMl4ghOuNVp9Fo= -----END CERTIFICATE-----Generated at Sat Mar 28 11:46:09 2026 by rpki-client