$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145825.roa File: AS145825.roa (raw, json) Hash identifier: 4U/XDG9oBSCpKIOIhBJUnR541ScuMunyUWqqyug22X4= Subject key identifier: A3:0F:42:2D:7A:84:AB:42:F8:5F:94:CC:D6:CB:B6:BB:C1:CC:A6:14 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 1FB9B5202DE9310F5AD7612AC34C945118CE176D Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145825.roa Signing time: Wed 04 Mar 2026 06:30:50 +0000 ROA not before: Wed 04 Mar 2026 06:25:50 +0000 ROA not after: Wed 03 Mar 2027 06:30:50 +0000 asID: 145825 IP address blocks: 240a:ac67::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:b9:b5:20:2d:e9:31:0f:5a:d7:61:2a:c3:4c:94:51:18:ce:17:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:25:50 2026 GMT Not After : Mar 3 06:30:50 2027 GMT Subject: CN=A30F422D7A84AB42F85F94CCD6CBB6BBC1CCA614 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:e1:bc:80:c1:b2:ba:f4:76:50:69:b9:a0:c7: 6a:4a:23:42:bd:9f:d6:2e:9f:c6:2b:03:a0:12:47: 63:82:5f:7a:85:a3:35:06:4d:70:aa:49:f8:33:8a: 99:ae:e3:8e:6a:1c:76:88:78:a6:1c:37:10:8c:48: 22:f6:41:04:11:59:a6:05:d3:8b:1f:b9:24:d1:08: 3a:07:30:00:ca:f5:22:e1:39:d3:46:f3:4a:34:93: b5:6b:29:2c:7e:94:aa:e4:8a:bb:01:53:43:1b:6d: 8e:46:5c:fd:09:b8:ac:da:b6:f0:27:d9:e4:dc:e0: a5:54:d4:b9:bb:56:5c:3c:03:66:9a:df:26:12:db: df:d8:71:cf:a1:b1:57:16:9d:45:a5:a6:7c:01:2c: 09:4c:4c:09:08:9d:fa:b2:c6:45:8b:a6:77:80:89: 74:fb:c0:34:e4:6e:b6:d8:5a:0f:ad:28:28:6b:70: 81:88:51:16:7e:02:9a:6a:25:8f:9e:ff:07:80:fa: 66:1d:d4:26:58:df:b0:ea:6d:b2:2b:3c:f4:52:b3: 00:4f:3b:29:e1:a8:94:d3:f5:c1:2b:43:b9:90:38: a5:1c:dc:fc:bf:ea:dc:de:50:bf:09:e2:37:ce:6d: 6d:06:41:1c:6e:6c:e1:2a:5e:e1:4a:0d:b6:b9:f0: 15:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:0F:42:2D:7A:84:AB:42:F8:5F:94:CC:D6:CB:B6:BB:C1:CC:A6:14 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145825.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:ac67::/32 Signature Algorithm: sha256WithRSAEncryption 82:80:2f:b6:0f:e7:47:20:fc:96:07:dc:b9:d4:05:46:1f:da: c7:72:1c:02:54:8a:74:fa:64:0d:b5:a9:35:92:68:2d:07:68: d4:aa:85:91:77:2a:52:c9:c7:04:e0:32:0b:ad:2c:93:2a:2e: 0d:f9:17:ee:bc:bc:16:cd:a7:14:fa:1e:d2:bb:db:8d:9d:b8: 33:4f:5c:56:13:f8:2e:17:e7:70:97:c3:50:df:f8:49:68:7e: 15:05:86:cb:ff:b6:e2:cb:32:21:7c:b1:ee:3e:81:2f:8c:10: 7b:e0:48:9d:ce:c3:b1:42:59:5a:06:a9:fc:d5:fe:13:db:d1: ab:15:26:d4:11:a5:61:71:e6:ae:53:3b:d8:bc:35:52:d2:aa: e4:29:ee:33:b1:16:61:ce:43:25:f3:07:c1:ce:60:df:d8:f7: 51:0e:be:dc:e3:31:03:e2:53:10:b4:86:8d:38:dd:81:36:ab: 9b:e7:2b:37:f3:32:de:1d:b5:01:c2:18:84:0d:a5:36:b3:9d: fa:6e:b1:f5:1f:72:49:32:6c:89:e2:44:cd:5e:35:7e:d6:ed: 77:00:78:96:c4:20:51:b9:e3:e0:1b:4c:a6:14:e4:98:f3:d6: e8:64:ad:83:03:cc:f1:e0:fa:bf:e3:dc:60:03:05:2b:13:41: 98:46:df:37 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUH7m1IC3pMQ9a12Eqw0yUURjOF20wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MjU1MFoX DTI3MDMwMzA2MzA1MFowMzExMC8GA1UEAxMoQTMwRjQyMkQ3QTg0QUI0MkY4NUY5 NENDRDZDQkI2QkJDMUNDQTYxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALPhvIDBsrr0dlBpuaDHakojQr2f1i6fxisDoBJHY4JfeoWjNQZNcKpJ+DOK ma7jjmocdoh4phw3EIxIIvZBBBFZpgXTix+5JNEIOgcwAMr1IuE500bzSjSTtWsp LH6UquSKuwFTQxttjkZc/Qm4rNq28CfZ5NzgpVTUubtWXDwDZprfJhLb39hxz6Gx VxadRaWmfAEsCUxMCQid+rLGRYumd4CJdPvANORutthaD60oKGtwgYhRFn4Cmmol j57/B4D6Zh3UJljfsOptsis89FKzAE87KeGolNP1wStDuZA4pRzc/L/q3N5Qvwni N85tbQZBHG5s4Spe4UoNtrnwFaECAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSjD0It eoSrQvhflMzWy7a7wcymFDAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTgyNS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rGcwDQYJKoZIhvcNAQELBQADggEBAIKAL7YP50cg/JYH3LnUBUYf2sdyHAJUinT6 ZA21qTWSaC0HaNSqhZF3KlLJxwTgMgutLJMqLg35F+68vBbNpxT6HtK7242duDNP XFYT+C4X53CXw1Df+ElofhUFhsv/tuLLMiF8se4+gS+MEHvgSJ3Ow7FCWVoGqfzV /hPb0asVJtQRpWFx5q5TO9i8NVLSquQp7jOxFmHOQyXzB8HOYN/Y91EOvtzjMQPi UxC0ho043YE2q5vnKzfzMt4dtQHCGIQNpTaznfpusfUfckkybIniRM1eNX7W7XcA eJbEIFG54+AbTKYU5Jjz1uhkrYMDzPHg+r/j3GADBSsTQZhG3zc= -----END CERTIFICATE-----Generated at Sat Mar 28 11:45:56 2026 by rpki-client