$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145851.roa File: AS145851.roa (raw, json) Hash identifier: og6liXK9H663ZaQV2Hjs/s6z4Ltw7YTCg+70p4kboEw= Subject key identifier: 3C:F3:F0:01:6E:EF:EE:D0:EA:EB:99:E8:E8:77:1E:AC:27:58:A9:D0 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 2E5534CC4828054B4220A8106A31081D70BC1D9D Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145851.roa Signing time: Wed 04 Mar 2026 06:31:10 +0000 ROA not before: Wed 04 Mar 2026 06:26:10 +0000 ROA not after: Wed 03 Mar 2027 06:31:10 +0000 asID: 145851 IP address blocks: 240a:ac81::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:55:34:cc:48:28:05:4b:42:20:a8:10:6a:31:08:1d:70:bc:1d:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:26:10 2026 GMT Not After : Mar 3 06:31:10 2027 GMT Subject: CN=3CF3F0016EEFEED0EAEB99E8E8771EAC2758A9D0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:94:32:3f:30:d8:ff:21:40:65:89:15:87:24: dc:ba:2a:4d:62:78:d6:95:c6:1d:c4:f2:8c:e8:d5: 83:77:20:12:d9:05:74:ae:8c:e1:bb:08:24:3d:88: b2:2f:a7:7f:77:19:5e:a2:b9:13:b3:6c:5f:d5:2a: b8:70:9c:3e:5c:d8:bd:48:c2:3d:40:e1:f3:43:f8: b2:2e:f5:af:d0:17:a6:69:cd:fc:1e:4d:12:52:9a: c6:93:c5:ce:86:2d:82:cc:cf:1e:3e:40:eb:7f:81: b3:1c:c6:eb:9a:9f:06:fb:51:49:05:f8:49:8b:c9: ea:17:a8:80:21:54:02:91:6c:fb:c3:92:a9:e7:d7: 9a:a3:3a:23:8c:04:6e:b2:9d:2d:c2:4c:1b:6b:98: c7:b4:8a:19:07:63:65:8e:35:e1:7e:19:34:37:29: 68:df:ff:d7:24:06:78:f4:61:17:8c:53:0b:94:4d: 1a:4c:bd:48:5b:57:78:bf:d1:77:0c:ed:bc:81:af: 1c:d6:fd:a9:89:63:eb:02:e0:25:e4:14:c8:0b:00: 90:f5:8e:23:a1:35:ac:83:cc:b2:1a:29:ff:11:40: 2d:66:d7:2f:75:f5:1f:bc:18:b5:66:1c:02:73:1e: 3f:5b:c3:7f:b6:d1:9c:c3:7e:e9:3d:ca:23:6c:2e: e1:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:F3:F0:01:6E:EF:EE:D0:EA:EB:99:E8:E8:77:1E:AC:27:58:A9:D0 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145851.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:ac81::/32 Signature Algorithm: sha256WithRSAEncryption 24:07:54:48:06:76:e5:56:c5:76:2f:9d:c1:01:5d:03:04:3d: e8:7a:2a:53:19:68:67:a9:cf:c5:c3:e3:45:ef:3b:06:66:03: 19:23:53:98:93:15:d1:52:7e:0d:ff:65:a0:7a:47:47:ed:32: 7e:dd:b9:ba:ff:4f:b8:42:a8:b6:91:62:39:d6:24:ff:36:35: a3:1a:0d:6b:40:e7:f0:04:e2:8f:a9:01:00:dc:05:7e:87:a5: 34:91:13:ac:4f:bf:41:bd:41:7c:b3:90:25:43:e7:ad:96:22: 9f:c2:1a:42:a1:ea:82:61:fe:90:02:36:55:ff:3b:14:c9:70: 6f:7c:d9:1b:86:ff:ce:1f:59:90:4b:dc:00:57:23:b5:2e:f8: 00:fd:0f:19:63:eb:e6:7e:ec:6d:c8:7a:2b:34:bd:ff:03:9a: 9a:a6:c4:e8:69:5c:05:b1:97:68:81:84:c1:d1:da:ec:7d:7f: 99:31:20:1d:a5:56:12:a6:ad:18:17:59:e2:38:d6:b3:c2:e5: c8:70:4f:d8:09:58:e0:a3:03:20:b6:38:35:60:5b:80:e3:da: 38:35:07:c6:16:3e:51:1d:27:d6:db:a6:3b:26:89:2e:b2:fa: a2:71:6f:cc:ad:5d:ed:2e:78:bf:fb:02:96:30:59:52:88:c8: d0:ff:4a:18 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIULlU0zEgoBUtCIKgQajEIHXC8HZ0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MjYxMFoX DTI3MDMwMzA2MzExMFowMzExMC8GA1UEAxMoM0NGM0YwMDE2RUVGRUVEMEVBRUI5 OUU4RTg3NzFFQUMyNzU4QTlEMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOyUMj8w2P8hQGWJFYck3LoqTWJ41pXGHcTyjOjVg3cgEtkFdK6M4bsIJD2I si+nf3cZXqK5E7NsX9UquHCcPlzYvUjCPUDh80P4si71r9AXpmnN/B5NElKaxpPF zoYtgszPHj5A63+BsxzG65qfBvtRSQX4SYvJ6heogCFUApFs+8OSqefXmqM6I4wE brKdLcJMG2uYx7SKGQdjZY414X4ZNDcpaN//1yQGePRhF4xTC5RNGky9SFtXeL/R dwztvIGvHNb9qYlj6wLgJeQUyAsAkPWOI6E1rIPMshop/xFALWbXL3X1H7wYtWYc AnMeP1vDf7bRnMN+6T3KI2wu4c0CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQ88/AB bu/u0Orrmejodx6sJ1ip0DAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTg1MS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rIEwDQYJKoZIhvcNAQELBQADggEBACQHVEgGduVWxXYvncEBXQMEPeh6KlMZaGep z8XD40XvOwZmAxkjU5iTFdFSfg3/ZaB6R0ftMn7dubr/T7hCqLaRYjnWJP82NaMa DWtA5/AE4o+pAQDcBX6HpTSRE6xPv0G9QXyzkCVD562WIp/CGkKh6oJh/pACNlX/ OxTJcG982RuG/84fWZBL3ABXI7Uu+AD9Dxlj6+Z+7G3Ieis0vf8DmpqmxOhpXAWx l2iBhMHR2ux9f5kxIB2lVhKmrRgXWeI41rPC5chwT9gJWOCjAyC2ODVgW4Dj2jg1 B8YWPlEdJ9bbpjsmiS6y+qJxb8ytXe0ueL/7ApYwWVKIyND/Shg= -----END CERTIFICATE-----Generated at Sat Mar 28 11:44:28 2026 by rpki-client