$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145824.roa File: AS145824.roa (raw, json) Hash identifier: Xi9zQF+VoCrThoFAR0q97nw0SbN6onDkSL8ogHB8eL0= Subject key identifier: 16:34:0D:05:05:94:4C:FC:26:0F:85:F3:B4:98:56:82:0B:EC:38:D2 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 5F537B5EE042AE5B41AD3C6D6AE5475FD0403F12 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145824.roa Signing time: Wed 04 Mar 2026 06:29:38 +0000 ROA not before: Wed 04 Mar 2026 06:24:38 +0000 ROA not after: Wed 03 Mar 2027 06:29:38 +0000 asID: 145824 IP address blocks: 240a:ac66::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:53:7b:5e:e0:42:ae:5b:41:ad:3c:6d:6a:e5:47:5f:d0:40:3f:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:24:38 2026 GMT Not After : Mar 3 06:29:38 2027 GMT Subject: CN=16340D0505944CFC260F85F3B49856820BEC38D2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:03:e7:0f:f6:7e:0e:42:49:44:8f:f0:fc:3d: 7e:f9:5c:be:24:ea:df:ae:99:11:a1:05:0c:15:f8: c6:c1:16:8d:3c:56:26:01:3e:6a:be:b9:0d:04:d8: 3b:0f:de:51:87:bf:c8:7e:6e:47:33:d9:8d:6f:ea: 6e:08:82:be:c9:ce:76:47:6e:c1:08:9b:a3:f2:8e: d3:60:f7:11:1c:44:9d:3c:2c:3c:29:77:95:80:30: 70:c3:eb:60:09:18:94:a2:86:8b:e7:57:e1:20:4d: 66:42:75:14:36:83:69:51:d6:de:cb:f4:ec:d2:d2: a1:d6:8c:c6:3f:6e:6a:fe:1d:85:fa:48:f4:05:f8: ab:20:f6:9f:93:7f:96:99:25:3a:e1:57:84:10:17: 0c:f1:c0:47:ff:7c:bf:d0:98:9b:f0:a6:9f:d9:37: 3a:03:53:85:d5:3d:39:e6:db:7b:6b:c6:44:34:eb: 06:c2:5d:a6:05:da:87:51:89:41:c7:ee:00:6a:5f: 04:84:0b:07:15:fd:84:53:e5:e3:ad:e8:98:d4:80: 0c:42:33:57:e7:f5:28:25:db:ab:11:51:46:59:a7: b9:1e:40:cb:70:48:f0:d6:d0:ad:21:c2:d8:9e:12: c6:ea:7c:9f:25:4a:ad:d8:c1:ce:ba:ff:2f:df:5a: fc:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:34:0D:05:05:94:4C:FC:26:0F:85:F3:B4:98:56:82:0B:EC:38:D2 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145824.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:ac66::/32 Signature Algorithm: sha256WithRSAEncryption 71:d2:6a:e1:10:e4:24:5e:f3:16:41:2b:e9:20:fc:8e:cd:8f: 7b:55:65:06:8b:2e:75:2c:70:8e:20:e0:82:86:0d:c4:ea:1f: 42:53:04:b5:b6:f6:c3:f3:04:4f:df:ae:dc:1f:e6:df:62:91: c6:f0:a8:2c:d6:9f:c1:96:84:e2:fc:91:d4:1c:69:36:bd:8e: bc:03:ca:ab:51:8a:c0:c9:97:23:1b:e1:cc:a8:a9:f4:23:46: f2:21:05:ec:a4:37:7f:f2:13:6f:3f:ae:1c:1d:a7:5b:43:dc: 16:fe:a4:2c:2e:85:8b:f9:db:c5:dd:7d:4b:8f:21:a4:14:90: 41:41:d2:24:f6:f5:04:cb:f3:59:67:20:9f:23:9e:25:cc:ca: a0:73:0f:c0:35:8d:ac:99:c8:b2:b9:3a:7b:46:ab:cb:6d:43: 73:6e:bd:af:7e:4e:2e:cf:6c:d2:ff:7d:d1:3a:57:25:4c:36: 52:0a:e9:05:40:68:62:eb:e9:90:dd:e4:13:d0:0d:91:7f:b6: 92:37:67:42:f3:07:e8:39:40:20:99:78:69:de:1c:6f:0f:95: 9e:fb:50:25:a1:10:d4:e7:57:fc:e3:04:12:c2:35:8d:7b:f3: 38:2a:0d:3e:98:70:cd:4b:ea:8e:69:a8:3f:5b:6b:c3:e9:8d: fe:6c:41:a9 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUX1N7XuBCrltBrTxtauVHX9BAPxIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MjQzOFoX DTI3MDMwMzA2MjkzOFowMzExMC8GA1UEAxMoMTYzNDBEMDUwNTk0NENGQzI2MEY4 NUYzQjQ5ODU2ODIwQkVDMzhEMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK8D5w/2fg5CSUSP8Pw9fvlcviTq366ZEaEFDBX4xsEWjTxWJgE+ar65DQTY Ow/eUYe/yH5uRzPZjW/qbgiCvsnOdkduwQibo/KO02D3ERxEnTwsPCl3lYAwcMPr YAkYlKKGi+dX4SBNZkJ1FDaDaVHW3sv07NLSodaMxj9uav4dhfpI9AX4qyD2n5N/ lpklOuFXhBAXDPHAR/98v9CYm/Cmn9k3OgNThdU9Oebbe2vGRDTrBsJdpgXah1GJ QcfuAGpfBIQLBxX9hFPl463omNSADEIzV+f1KCXbqxFRRlmnuR5Ay3BI8NbQrSHC 2J4Sxup8nyVKrdjBzrr/L99a/MMCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQWNA0F BZRM/CYPhfO0mFaCC+w40jAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTgyNC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rGYwDQYJKoZIhvcNAQELBQADggEBAHHSauEQ5CRe8xZBK+kg/I7Nj3tVZQaLLnUs cI4g4IKGDcTqH0JTBLW29sPzBE/frtwf5t9ikcbwqCzWn8GWhOL8kdQcaTa9jrwD yqtRisDJlyMb4cyoqfQjRvIhBeykN3/yE28/rhwdp1tD3Bb+pCwuhYv528XdfUuP IaQUkEFB0iT29QTL81lnIJ8jniXMyqBzD8A1jayZyLK5OntGq8ttQ3Nuva9+Ti7P bNL/fdE6VyVMNlIK6QVAaGLr6ZDd5BPQDZF/tpI3Z0LzB+g5QCCZeGneHG8PlZ77 UCWhENTnV/zjBBLCNY178zgqDT6YcM1L6o5pqD9ba8Ppjf5sQak= -----END CERTIFICATE-----Generated at Sat Mar 28 11:46:00 2026 by rpki-client