$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145826.roa File: AS145826.roa (raw, json) Hash identifier: 9brz3yFZXnTpr2F1F6dE1vX4BGmDGuGDpbl8kL8i21o= Subject key identifier: 30:03:65:59:FF:70:55:13:EA:5B:2F:2D:E8:D6:AD:AD:F6:BE:90:2B Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 20A795A6FFE41B4B9A64246FBF77EF79067971AA Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145826.roa Signing time: Wed 04 Mar 2026 06:30:20 +0000 ROA not before: Wed 04 Mar 2026 06:25:20 +0000 ROA not after: Wed 03 Mar 2027 06:30:20 +0000 asID: 145826 IP address blocks: 240a:ac68::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:a7:95:a6:ff:e4:1b:4b:9a:64:24:6f:bf:77:ef:79:06:79:71:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:25:20 2026 GMT Not After : Mar 3 06:30:20 2027 GMT Subject: CN=30036559FF705513EA5B2F2DE8D6ADADF6BE902B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:83:61:23:76:9d:27:0d:98:70:93:fe:92:63: d5:f0:39:bc:a9:f0:b2:4a:4a:81:a2:7b:13:00:c8: 00:f2:a5:2d:b4:be:ba:d3:1b:ec:96:99:a4:4b:2b: 68:4c:eb:ca:65:3b:6d:ff:22:73:e5:a6:3a:01:ab: f5:09:c8:d9:a3:bf:d2:df:07:a1:ea:7d:93:9e:d1: 98:67:11:70:19:75:6c:32:c5:d3:da:9b:3c:3b:9b: 42:3b:cd:b0:ff:fc:1e:3a:db:19:c1:68:58:fd:74: 71:4d:ea:f5:2d:09:c0:06:22:eb:37:aa:ae:fa:5e: bc:9f:d8:67:51:39:b6:02:2d:00:99:2b:32:73:a9: 9e:de:0b:9b:28:9a:1e:b1:c6:15:c8:0f:92:06:54: d1:7a:db:9b:55:3c:a0:2a:9e:e9:6e:0a:c3:b2:df: a9:66:2f:54:38:20:e1:0a:bb:9e:c8:56:8e:79:e4: 3e:03:84:71:01:76:2e:d8:3f:c0:3e:2e:4f:4d:e9: 0e:4e:b6:42:c4:a6:16:64:c5:e3:25:9b:52:34:ca: 3d:49:7b:f7:2b:ce:1d:ef:a2:fb:87:b1:aa:bb:53: 46:5e:05:22:04:af:9d:cb:ef:0d:47:ae:6b:55:f9: 67:01:c5:f8:49:2f:e6:ec:5e:eb:a5:22:d2:08:86: cb:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:03:65:59:FF:70:55:13:EA:5B:2F:2D:E8:D6:AD:AD:F6:BE:90:2B X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145826.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:ac68::/32 Signature Algorithm: sha256WithRSAEncryption 00:b9:7b:71:23:90:cb:14:08:3a:60:ca:c0:ad:ed:14:2d:2c: 09:ad:49:11:57:db:e6:df:95:ea:cf:e5:49:79:d2:f5:4e:52: bb:01:a9:2f:d4:41:4b:58:99:81:3b:87:94:21:a2:16:27:23: f6:0f:bd:61:cd:54:ca:ff:db:ed:78:fc:45:4c:c0:f9:24:ac: 86:f7:e7:41:bd:dd:eb:7e:35:b8:a5:fc:f6:d3:aa:4b:81:56: dc:9d:8f:12:11:80:ad:10:27:26:cf:5f:17:33:8f:1a:c1:9b: 78:91:e3:ae:e7:ac:9a:15:85:e9:a6:eb:71:1e:20:53:7c:45: b6:90:eb:de:a7:5f:a0:bc:78:83:78:0c:a0:c2:8f:93:8d:f0: ad:f9:15:9a:71:f5:89:0a:95:40:29:d2:10:7a:83:34:77:b5: b1:79:d7:6b:68:7c:36:bf:5b:5d:f4:3e:4d:c9:90:7b:1c:53: c8:76:c8:cd:55:2d:e5:54:73:db:11:7c:9e:f8:42:c4:0f:97: 08:5f:b0:4b:10:7e:a7:d5:b1:65:23:84:e6:2e:ee:92:ae:7f: 5a:09:82:01:01:9b:70:78:f6:0f:b7:a6:b5:33:a1:07:2a:61: 47:58:8d:21:f8:80:f4:70:b6:b8:2e:7a:b9:8a:1c:90:f8:25: 6c:a0:55:b7 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUIKeVpv/kG0uaZCRvv3fveQZ5caowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MjUyMFoX DTI3MDMwMzA2MzAyMFowMzExMC8GA1UEAxMoMzAwMzY1NTlGRjcwNTUxM0VBNUIy RjJERThENkFEQURGNkJFOTAyQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALGDYSN2nScNmHCT/pJj1fA5vKnwskpKgaJ7EwDIAPKlLbS+utMb7JaZpEsr aEzrymU7bf8ic+WmOgGr9QnI2aO/0t8Hoep9k57RmGcRcBl1bDLF09qbPDubQjvN sP/8HjrbGcFoWP10cU3q9S0JwAYi6zeqrvpevJ/YZ1E5tgItAJkrMnOpnt4Lmyia HrHGFcgPkgZU0Xrbm1U8oCqe6W4Kw7LfqWYvVDgg4Qq7nshWjnnkPgOEcQF2Ltg/ wD4uT03pDk62QsSmFmTF4yWbUjTKPUl79yvOHe+i+4exqrtTRl4FIgSvncvvDUeu a1X5ZwHF+Ekv5uxe66Ui0giGy/UCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQwA2VZ /3BVE+pbLy3o1q2t9r6QKzAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTgyNi5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rGgwDQYJKoZIhvcNAQELBQADggEBAAC5e3EjkMsUCDpgysCt7RQtLAmtSRFX2+bf lerP5Ul50vVOUrsBqS/UQUtYmYE7h5QhohYnI/YPvWHNVMr/2+14/EVMwPkkrIb3 50G93et+Nbil/PbTqkuBVtydjxIRgK0QJybPXxczjxrBm3iR467nrJoVhemm63Ee IFN8RbaQ696nX6C8eIN4DKDCj5ON8K35FZpx9YkKlUAp0hB6gzR3tbF512tofDa/ W130Pk3JkHscU8h2yM1VLeVUc9sRfJ74QsQPlwhfsEsQfqfVsWUjhOYu7pKuf1oJ ggEBm3B49g+3prUzoQcqYUdYjSH4gPRwtrguermKHJD4JWygVbc= -----END CERTIFICATE-----Generated at Sat Mar 28 11:46:02 2026 by rpki-client