$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145863.roa File: AS145863.roa (raw, json) Hash identifier: BiALbRXjuTt/ZEWfxgrx2ds4hOuE/U4yskfZhNdmuHg= Subject key identifier: 61:B6:BB:2B:34:69:D5:85:C8:59:76:62:F1:F1:85:62:8C:6F:05:89 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 2739691BB5914B27506A8201D2B6B23B522075A9 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145863.roa Signing time: Wed 04 Mar 2026 06:31:14 +0000 ROA not before: Wed 04 Mar 2026 06:26:14 +0000 ROA not after: Wed 03 Mar 2027 06:31:14 +0000 asID: 145863 IP address blocks: 240a:ac8d::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:39:69:1b:b5:91:4b:27:50:6a:82:01:d2:b6:b2:3b:52:20:75:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:26:14 2026 GMT Not After : Mar 3 06:31:14 2027 GMT Subject: CN=61B6BB2B3469D585C8597662F1F185628C6F0589 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:ad:43:9c:62:fb:6b:1d:8f:f8:d4:a1:bf:ad: ff:45:48:a0:04:d6:ad:7a:81:2c:03:0c:76:a0:cc: 12:ca:9e:95:48:9a:ee:13:46:e2:7b:1d:75:68:9f: c8:cf:d6:cf:6f:9e:78:d1:10:69:86:88:b8:72:6d: 6c:89:47:e3:aa:9f:1f:d6:13:93:a4:33:ac:44:56: 9c:f3:4f:4f:1d:10:e2:38:49:a5:89:85:63:aa:db: d1:3c:a5:de:d2:03:2e:d1:1b:fe:76:35:0a:4f:26: a4:28:b9:6e:6d:da:e1:25:5e:2f:a0:57:99:a4:e0: 60:60:3b:82:27:b0:68:31:3e:19:f0:94:5b:f0:8f: 5b:11:ff:d5:30:ae:9c:14:56:d7:a8:25:05:c4:57: 0c:99:9f:7d:ca:d7:e4:94:6e:6e:3d:d5:91:7c:67: 23:0e:a9:86:8c:f8:96:44:95:d1:96:31:92:d6:4c: b2:5f:1b:d9:fc:b4:e6:84:a5:23:af:6b:ec:73:38: 7c:97:e3:4e:a4:db:dd:1c:1c:71:10:3e:40:3c:6d: a6:00:80:a2:01:e7:d1:04:f7:db:62:c4:ef:a7:bc: 55:18:f5:41:f0:23:61:80:9b:91:20:fc:46:21:e3: 05:b8:e0:ce:db:b0:af:e0:16:26:15:e5:b2:3e:7a: 61:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:B6:BB:2B:34:69:D5:85:C8:59:76:62:F1:F1:85:62:8C:6F:05:89 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145863.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:ac8d::/32 Signature Algorithm: sha256WithRSAEncryption 57:63:f6:76:a2:cc:4c:5d:a9:5a:88:23:26:b8:b5:38:44:fb: ec:52:5e:7d:83:8d:c7:b0:d0:5c:82:a2:bb:f8:41:be:66:00: f6:52:54:7c:33:94:1b:0c:20:29:3f:02:21:66:8e:31:7b:c5: 63:71:ed:c5:6d:cf:e3:53:6a:be:7c:59:8f:20:0a:19:06:af: 53:8f:73:1a:e5:50:4d:89:51:64:10:18:54:f7:6c:52:90:7e: d0:d9:1f:fa:97:e0:7d:6d:bc:64:d6:12:cb:6f:7f:f7:7a:45: 14:8c:1d:2f:74:3a:bb:b7:23:0f:fd:e6:14:7a:38:21:7c:5c: 3e:21:4a:a2:0d:b2:8c:2b:3f:e1:92:1b:e4:5c:6e:3d:c0:66: 3c:79:bc:17:87:9a:e9:ee:e1:9c:2f:84:cc:8a:ef:f8:a8:b9: db:c8:28:81:e3:ee:f4:60:8b:c6:ec:bf:2b:32:d6:3d:67:5a: 9e:89:e0:ad:04:a4:a9:ea:47:ff:f6:47:19:a4:da:bc:83:89: 40:b9:85:7a:4e:fc:f2:99:10:9e:1d:e0:c7:2e:31:7e:af:82: 3d:6c:64:32:1b:6f:24:94:ca:ef:90:74:ac:5f:4b:41:f2:3e: a2:6e:ba:1c:a4:f8:42:2c:98:ed:4e:72:d0:8a:ca:90:af:53: e4:6b:46:12 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUJzlpG7WRSydQaoIB0rayO1IgdakwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MjYxNFoX DTI3MDMwMzA2MzExNFowMzExMC8GA1UEAxMoNjFCNkJCMkIzNDY5RDU4NUM4NTk3 NjYyRjFGMTg1NjI4QzZGMDU4OTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJetQ5xi+2sdj/jUob+t/0VIoATWrXqBLAMMdqDMEsqelUia7hNG4nsddWif yM/Wz2+eeNEQaYaIuHJtbIlH46qfH9YTk6QzrERWnPNPTx0Q4jhJpYmFY6rb0Tyl 3tIDLtEb/nY1Ck8mpCi5bm3a4SVeL6BXmaTgYGA7giewaDE+GfCUW/CPWxH/1TCu nBRW16glBcRXDJmffcrX5JRubj3VkXxnIw6phoz4lkSV0ZYxktZMsl8b2fy05oSl I69r7HM4fJfjTqTb3RwccRA+QDxtpgCAogHn0QT322LE76e8VRj1QfAjYYCbkSD8 RiHjBbjgztuwr+AWJhXlsj56YWsCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRhtrsr NGnVhchZdmLx8YVijG8FiTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTg2My5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rI0wDQYJKoZIhvcNAQELBQADggEBAFdj9naizExdqVqIIya4tThE++xSXn2Djcew 0FyCorv4Qb5mAPZSVHwzlBsMICk/AiFmjjF7xWNx7cVtz+NTar58WY8gChkGr1OP cxrlUE2JUWQQGFT3bFKQftDZH/qX4H1tvGTWEstvf/d6RRSMHS90Oru3Iw/95hR6 OCF8XD4hSqINsowrP+GSG+Rcbj3AZjx5vBeHmunu4ZwvhMyK7/ioudvIKIHj7vRg i8bsvysy1j1nWp6J4K0EpKnqR//2Rxmk2ryDiUC5hXpO/PKZEJ4d4McuMX6vgj1s ZDIbbySUyu+QdKxfS0HyPqJuuhyk+EIsmO1OctCKypCvU+RrRhI= -----END CERTIFICATE-----Generated at Sat Mar 28 11:42:25 2026 by rpki-client