$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145879.roa File: AS145879.roa (raw, json) Hash identifier: XRAufsAuyI9DTiRrWdHhyDNntgcHY2/znp0DCXKnLYo= Subject key identifier: 0F:C0:69:93:D8:F7:06:0E:9C:15:42:13:94:15:28:0B:2A:E7:6D:87 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 7C39A2FEF5D1DADA4A2099EDB12A7586953D61AF Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145879.roa Signing time: Wed 04 Mar 2026 06:30:01 +0000 ROA not before: Wed 04 Mar 2026 06:25:01 +0000 ROA not after: Wed 03 Mar 2027 06:30:01 +0000 asID: 145879 IP address blocks: 240a:ac9d::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:39:a2:fe:f5:d1:da:da:4a:20:99:ed:b1:2a:75:86:95:3d:61:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:25:01 2026 GMT Not After : Mar 3 06:30:01 2027 GMT Subject: CN=0FC06993D8F7060E9C1542139415280B2AE76D87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:c6:53:77:34:ce:b9:66:2a:06:d4:14:83:0c: 51:c0:fb:26:1c:e0:51:64:88:a1:3f:0c:55:78:e3: 71:07:84:62:a5:a3:72:a0:ed:58:db:92:40:29:01: 17:98:46:17:4e:32:7d:ce:8f:43:ac:ab:26:87:89: df:0c:46:0f:63:53:a3:9f:8b:9c:d2:d3:e1:8c:86: 42:fe:88:a2:dd:ff:56:a6:ee:8c:67:37:78:e1:ed: 3d:89:2f:19:89:7f:84:58:81:4a:18:83:48:2e:f2: 8e:30:53:88:ee:3f:4a:97:35:0e:2e:ee:db:26:6d: f2:98:66:7a:64:eb:79:4a:4f:a8:9e:75:4f:c6:f7: 7a:7a:d7:64:c0:01:af:ef:16:83:94:9f:99:5e:e7: c1:7c:b7:7b:6b:fa:8b:84:0e:5c:7c:ec:3c:b5:4a: 8d:0b:30:1b:be:0c:64:1f:3b:06:03:f8:3f:1c:11: e9:ab:44:c4:33:f1:ac:1e:fa:af:5c:fd:c1:88:d8: 55:3f:cb:89:7a:25:87:ba:2e:7e:05:b5:c9:62:97: b8:22:ea:cf:61:b8:3f:08:4e:51:f0:45:dd:55:82: 6d:34:c9:ab:8d:82:19:63:cb:43:07:68:30:9a:60: 40:af:66:34:62:9e:9d:39:e9:74:89:d8:6f:09:fe: 33:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:C0:69:93:D8:F7:06:0E:9C:15:42:13:94:15:28:0B:2A:E7:6D:87 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145879.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:ac9d::/32 Signature Algorithm: sha256WithRSAEncryption 12:3c:6f:ef:1f:0c:d6:bf:08:dc:39:2a:47:bd:f3:1f:3c:25: 5d:60:18:a7:06:9a:bb:2b:f9:14:bf:a5:14:d5:d5:48:fe:2f: b0:71:a3:73:b0:56:85:22:d5:31:f9:59:e0:26:36:80:65:4c: 9d:12:71:ef:c2:d6:b8:7c:59:c7:ef:a3:69:f3:9d:7a:f0:f5: f6:ed:99:d6:04:11:93:1a:b3:02:a1:bc:94:51:82:c3:fa:a4: 2b:18:e9:02:ca:41:f4:73:aa:93:c4:e6:7c:94:f0:de:5a:c9: 49:b2:cf:be:84:fc:89:37:5b:b8:30:67:05:24:b7:d6:8d:c2: 38:9b:12:b0:4b:58:22:69:e9:e3:6e:01:7a:61:41:7f:8f:7e: be:cf:8f:0f:13:a9:80:68:fc:d3:b5:49:93:b6:cd:53:5b:0e: f6:6a:5e:e1:d0:34:a2:32:b4:53:fd:c7:b2:5e:f9:99:0b:57: c1:6c:25:09:84:29:4a:80:5c:db:22:59:0c:8e:59:d4:a8:a1: c1:a1:60:ad:10:d0:68:0d:fb:46:e6:4c:8e:63:34:55:07:7e: c9:a7:3e:ae:20:e9:d5:d2:ce:bf:7d:bc:80:91:5f:b4:56:d6: e2:42:78:94:e3:73:c1:49:29:b8:16:54:c8:a0:bd:c0:56:9e: d7:a5:44:1a -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUfDmi/vXR2tpKIJntsSp1hpU9Ya8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MjUwMVoX DTI3MDMwMzA2MzAwMVowMzExMC8GA1UEAxMoMEZDMDY5OTNEOEY3MDYwRTlDMTU0 MjEzOTQxNTI4MEIyQUU3NkQ4NzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJrGU3c0zrlmKgbUFIMMUcD7JhzgUWSIoT8MVXjjcQeEYqWjcqDtWNuSQCkB F5hGF04yfc6PQ6yrJoeJ3wxGD2NTo5+LnNLT4YyGQv6Iot3/VqbujGc3eOHtPYkv GYl/hFiBShiDSC7yjjBTiO4/Spc1Di7u2yZt8phmemTreUpPqJ51T8b3enrXZMAB r+8Wg5SfmV7nwXy3e2v6i4QOXHzsPLVKjQswG74MZB87BgP4PxwR6atExDPxrB76 r1z9wYjYVT/LiXolh7oufgW1yWKXuCLqz2G4PwhOUfBF3VWCbTTJq42CGWPLQwdo MJpgQK9mNGKenTnpdInYbwn+MysCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQPwGmT 2PcGDpwVQhOUFSgLKudthzAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTg3OS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rJ0wDQYJKoZIhvcNAQELBQADggEBABI8b+8fDNa/CNw5Kke98x88JV1gGKcGmrsr +RS/pRTV1Uj+L7Bxo3OwVoUi1TH5WeAmNoBlTJ0Sce/C1rh8Wcfvo2nznXrw9fbt mdYEEZMaswKhvJRRgsP6pCsY6QLKQfRzqpPE5nyU8N5ayUmyz76E/Ik3W7gwZwUk t9aNwjibErBLWCJp6eNuAXphQX+Pfr7Pjw8TqYBo/NO1SZO2zVNbDvZqXuHQNKIy tFP9x7Je+ZkLV8FsJQmEKUqAXNsiWQyOWdSoocGhYK0Q0GgN+0bmTI5jNFUHfsmn Pq4g6dXSzr99vICRX7RW1uJCeJTjc8FJKbgWVMigvcBWntelRBo= -----END CERTIFICATE-----Generated at Sat Mar 28 11:42:35 2026 by rpki-client