$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145861.roa File: AS145861.roa (raw, json) Hash identifier: JSrAqK/QG0Sb78hRCXfarx7AtZHYH3RZTp2JhXdfJpQ= Subject key identifier: 7C:12:02:D3:F9:3C:16:12:BF:AE:75:DF:0F:F2:8C:A0:E0:AB:96:E6 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 10D3472A81955BBA4ADA5E72404FE7A6A83C5E16 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145861.roa Signing time: Wed 04 Mar 2026 06:30:37 +0000 ROA not before: Wed 04 Mar 2026 06:25:37 +0000 ROA not after: Wed 03 Mar 2027 06:30:37 +0000 asID: 145861 IP address blocks: 240a:ac8b::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:d3:47:2a:81:95:5b:ba:4a:da:5e:72:40:4f:e7:a6:a8:3c:5e:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:25:37 2026 GMT Not After : Mar 3 06:30:37 2027 GMT Subject: CN=7C1202D3F93C1612BFAE75DF0FF28CA0E0AB96E6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:c2:c6:40:77:16:55:3c:db:fd:39:dc:00:0d: 2a:4d:33:6e:7c:0f:d0:8d:42:12:9a:e4:9e:36:bd: e7:59:00:ae:37:63:d2:6d:be:a2:cf:c3:46:94:ba: 02:08:e4:55:32:32:c8:5d:6a:dd:2d:ca:c6:df:ba: 7f:57:2d:23:06:46:dc:52:97:6c:1b:16:57:f4:6f: e1:06:e7:8b:8a:7b:da:96:9e:c6:9e:3a:31:e3:89: 92:06:84:16:ff:18:72:13:ba:52:c0:d6:50:ad:8f: 25:6f:43:a0:f2:07:1b:7e:ae:cc:42:ba:ae:98:a6: e8:e8:06:90:97:db:3d:09:3c:28:c4:d6:1c:16:64: 1a:d3:0c:4b:73:d0:c0:e2:d1:d9:fe:cf:a2:a8:59: d3:8f:5f:ca:35:70:56:56:7e:d6:29:be:9b:2b:10: 92:13:13:cc:b9:af:bc:ea:43:1f:cb:ea:db:4e:d1: f5:f9:51:e0:b6:90:df:f0:40:d8:3a:1e:a8:fb:82: f7:26:9f:14:0d:9c:42:3b:23:b0:29:ae:95:58:ad: 6e:57:59:74:f2:48:49:87:02:b6:0f:3e:a8:9d:1a: e1:74:be:c3:4f:79:61:f2:36:4c:7d:c9:e2:8d:46: 13:be:6a:80:dd:cf:06:e9:fd:02:94:ba:df:0f:c7: af:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:12:02:D3:F9:3C:16:12:BF:AE:75:DF:0F:F2:8C:A0:E0:AB:96:E6 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145861.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:ac8b::/32 Signature Algorithm: sha256WithRSAEncryption 6d:8d:75:bc:c3:6e:a4:b0:0d:ca:31:5c:a8:30:26:82:45:d9: 2d:4a:e6:d6:c6:cc:eb:d0:48:2f:85:43:f0:c1:70:5f:26:5b: 8a:be:f8:d8:08:bf:ab:23:ff:e9:c9:2b:52:fa:98:88:da:7a: 86:e9:7e:d5:1a:23:fa:f7:0c:9c:4e:66:78:c1:73:1a:0c:17: d3:58:f2:a4:4d:70:48:21:22:d9:01:ca:c9:30:2a:09:ec:d5: d1:3a:65:d6:c7:01:72:ba:5e:f2:a9:65:cc:55:5b:fc:90:d3: 0a:c0:78:2c:82:5e:bf:16:95:6b:38:21:ba:17:b9:4d:4d:cb: be:5a:58:ef:6c:93:fd:72:da:5e:35:51:5f:68:08:2b:db:a4: e7:2b:bf:5a:ad:5e:a6:67:5d:6b:cf:20:e5:ba:0c:e3:4d:4c: e1:eb:3f:37:c5:8c:60:5a:45:03:db:a2:00:13:2a:26:62:be: f1:9f:3d:86:3f:5f:bb:0e:90:ab:f1:61:30:b0:ea:08:5c:a1: 62:98:c7:75:2c:1e:30:5d:1e:f5:69:b4:ba:9e:bf:68:c9:25: 28:77:4b:f5:5a:e4:6c:e6:9b:cf:3b:6b:91:7e:6b:88:91:0a: 3e:ec:cb:1f:fc:a2:c2:da:f3:0e:f1:d6:04:73:c9:25:a4:c8: 7a:d3:41:7d -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUENNHKoGVW7pK2l5yQE/npqg8XhYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MjUzN1oX DTI3MDMwMzA2MzAzN1owMzExMC8GA1UEAxMoN0MxMjAyRDNGOTNDMTYxMkJGQUU3 NURGMEZGMjhDQTBFMEFCOTZFNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK7CxkB3FlU82/053AANKk0zbnwP0I1CEprknja951kArjdj0m2+os/DRpS6 AgjkVTIyyF1q3S3Kxt+6f1ctIwZG3FKXbBsWV/Rv4Qbni4p72paexp46MeOJkgaE Fv8YchO6UsDWUK2PJW9DoPIHG36uzEK6rpim6OgGkJfbPQk8KMTWHBZkGtMMS3PQ wOLR2f7PoqhZ049fyjVwVlZ+1im+mysQkhMTzLmvvOpDH8vq207R9flR4LaQ3/BA 2DoeqPuC9yafFA2cQjsjsCmulVitbldZdPJISYcCtg8+qJ0a4XS+w095YfI2TH3J 4o1GE75qgN3PBun9ApS63w/HrwcCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBR8EgLT +TwWEr+udd8P8oyg4KuW5jAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTg2MS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rIswDQYJKoZIhvcNAQELBQADggEBAG2NdbzDbqSwDcoxXKgwJoJF2S1K5tbGzOvQ SC+FQ/DBcF8mW4q++NgIv6sj/+nJK1L6mIjaeobpftUaI/r3DJxOZnjBcxoMF9NY 8qRNcEghItkByskwKgns1dE6ZdbHAXK6XvKpZcxVW/yQ0wrAeCyCXr8WlWs4IboX uU1Ny75aWO9sk/1y2l41UV9oCCvbpOcrv1qtXqZnXWvPIOW6DONNTOHrPzfFjGBa RQPbogATKiZivvGfPYY/X7sOkKvxYTCw6ghcoWKYx3UsHjBdHvVptLqev2jJJSh3 S/Va5Gzmm887a5F+a4iRCj7syx/8osLa8w7x1gRzySWkyHrTQX0= -----END CERTIFICATE-----Generated at Sat Mar 28 13:06:16 2026 by rpki-client