$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145835.roa File: AS145835.roa (raw, json) Hash identifier: H702lB5OIH1Ux16ozDApzQeU/nlGbBrp607RLjBrx3Q= Subject key identifier: 63:12:30:C8:83:FB:40:98:16:62:98:9D:58:46:8F:10:98:2D:2D:95 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 7ED13C278AA696BDF3AEAF76F5DBF481D5E21BD3 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145835.roa Signing time: Wed 04 Mar 2026 06:30:55 +0000 ROA not before: Wed 04 Mar 2026 06:25:55 +0000 ROA not after: Wed 03 Mar 2027 06:30:55 +0000 asID: 145835 IP address blocks: 240a:ac71::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:d1:3c:27:8a:a6:96:bd:f3:ae:af:76:f5:db:f4:81:d5:e2:1b:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:25:55 2026 GMT Not After : Mar 3 06:30:55 2027 GMT Subject: CN=631230C883FB40981662989D58468F10982D2D95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:36:0c:7d:7d:35:86:7b:66:b3:67:b7:ee:5a: c1:b4:ac:49:cb:d1:8e:1e:11:4a:d9:bc:f5:95:a2: 87:c1:7a:d4:76:89:c4:66:09:55:39:34:20:bf:e0: 03:ac:7f:81:4c:d9:17:6d:31:f8:21:89:f7:d6:6d: 10:6b:22:b2:f0:7c:05:78:0e:94:f4:f7:27:2a:80: 17:ae:5a:a6:b2:3b:48:0a:48:bd:a8:fd:6f:cb:b6: c1:46:b7:3d:14:c4:97:01:18:f4:71:e4:61:c3:67: 24:c6:96:3e:2d:1e:e7:6d:ce:e1:f6:80:ab:85:0d: d7:17:db:b2:22:a6:2d:57:04:a8:01:3f:10:75:9b: 02:d4:fd:a2:3f:7d:d6:04:56:e4:fc:ab:f6:69:9a: 4b:5a:8e:28:29:8a:07:f9:92:bf:ef:01:73:56:ed: 62:c0:08:2a:c3:ef:ec:42:5b:59:6b:7c:56:36:d0: 69:e6:50:de:ea:83:7f:f3:5d:89:68:e6:83:0c:06: ba:28:79:2d:a6:da:26:13:38:45:33:ff:9e:f6:13: d0:e1:0c:c8:1c:d3:b4:08:c1:65:1d:58:0b:90:c9: 30:2e:8e:71:41:45:73:6f:20:c9:ba:03:f4:15:12: 7e:14:f7:d9:11:63:d1:ff:2b:2c:a6:42:5d:95:0b: ad:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:12:30:C8:83:FB:40:98:16:62:98:9D:58:46:8F:10:98:2D:2D:95 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145835.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:ac71::/32 Signature Algorithm: sha256WithRSAEncryption 55:c9:84:85:43:2f:96:ca:f4:2b:56:c8:6e:46:c2:63:9c:c3: c1:56:68:b2:90:e3:c5:89:6f:8f:b6:9e:95:b2:ef:b3:23:66: 08:3e:18:eb:0b:06:8f:74:e5:ea:27:65:58:f2:59:48:ae:93: f6:d8:4c:0b:fd:95:95:26:d7:bd:66:b3:40:de:b4:00:33:a6: 66:35:b3:e9:95:ec:ce:5a:9d:9a:e8:4f:e5:35:e3:81:8e:8f: 6a:3f:06:90:6c:a4:0a:fa:d2:65:db:b8:ad:40:d4:67:03:0a: 9e:2c:bc:88:d2:02:5b:67:6b:c5:ab:cf:57:4a:8e:be:69:a4: cb:e8:8a:e5:14:59:23:3a:79:bd:20:1f:34:48:1e:01:c3:3f: 3f:83:4f:75:8e:87:87:f1:65:d7:5b:44:dd:ea:bb:d7:92:ad: 0e:7e:f0:d1:6a:3c:f7:f4:a3:1b:23:04:e6:39:c6:35:31:50: af:91:64:8d:c7:e1:fd:40:7c:67:a8:05:30:bc:5c:4e:fd:a5: 32:3f:56:7a:7f:2a:6e:93:01:6c:29:64:ed:dc:05:a8:3e:09: ef:31:01:8d:66:f5:50:eb:fe:e3:70:fd:f6:18:b0:90:e0:58: 1d:99:ef:e0:24:46:3a:88:64:bb:b8:a7:f9:f9:bc:3e:0c:dc: 13:a0:15:fe -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUftE8J4qmlr3zrq929dv0gdXiG9MwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MjU1NVoX DTI3MDMwMzA2MzA1NVowMzExMC8GA1UEAxMoNjMxMjMwQzg4M0ZCNDA5ODE2NjI5 ODlENTg0NjhGMTA5ODJEMkQ5NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAME2DH19NYZ7ZrNnt+5awbSsScvRjh4RStm89ZWih8F61HaJxGYJVTk0IL/g A6x/gUzZF20x+CGJ99ZtEGsisvB8BXgOlPT3JyqAF65aprI7SApIvaj9b8u2wUa3 PRTElwEY9HHkYcNnJMaWPi0e523O4faAq4UN1xfbsiKmLVcEqAE/EHWbAtT9oj99 1gRW5Pyr9mmaS1qOKCmKB/mSv+8Bc1btYsAIKsPv7EJbWWt8VjbQaeZQ3uqDf/Nd iWjmgwwGuih5LabaJhM4RTP/nvYT0OEMyBzTtAjBZR1YC5DJMC6OcUFFc28gyboD 9BUSfhT32RFj0f8rLKZCXZULrTcCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRjEjDI g/tAmBZimJ1YRo8QmC0tlTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTgzNS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rHEwDQYJKoZIhvcNAQELBQADggEBAFXJhIVDL5bK9CtWyG5GwmOcw8FWaLKQ48WJ b4+2npWy77MjZgg+GOsLBo905eonZVjyWUiuk/bYTAv9lZUm171ms0DetAAzpmY1 s+mV7M5anZroT+U144GOj2o/BpBspAr60mXbuK1A1GcDCp4svIjSAltna8Wrz1dK jr5ppMvoiuUUWSM6eb0gHzRIHgHDPz+DT3WOh4fxZddbRN3qu9eSrQ5+8NFqPPf0 oxsjBOY5xjUxUK+RZI3H4f1AfGeoBTC8XE79pTI/Vnp/Km6TAWwpZO3cBag+Ce8x AY1m9VDr/uNw/fYYsJDgWB2Z7+AkRjqIZLu4p/n5vD4M3BOgFf4= -----END CERTIFICATE-----Generated at Sat Mar 28 14:26:41 2026 by rpki-client