$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145891.roa File: AS145891.roa (raw, json) Hash identifier: 7UguT/tv4dt96O/LDrM7G6yDAJX00rQm0GdDqaUSNQQ= Subject key identifier: 5D:FF:E6:EC:B1:F2:D7:74:88:06:E8:8C:24:74:12:18:2C:85:F1:84 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 28F79AF1C5BCBE391AAAF9AA256034A718172CD0 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145891.roa Signing time: Wed 04 Mar 2026 06:30:20 +0000 ROA not before: Wed 04 Mar 2026 06:25:20 +0000 ROA not after: Wed 03 Mar 2027 06:30:20 +0000 asID: 145891 IP address blocks: 240a:aca9::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:f7:9a:f1:c5:bc:be:39:1a:aa:f9:aa:25:60:34:a7:18:17:2c:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:25:20 2026 GMT Not After : Mar 3 06:30:20 2027 GMT Subject: CN=5DFFE6ECB1F2D7748806E88C247412182C85F184 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:64:a5:62:ff:85:dc:6d:2e:9a:52:6d:c4:69: ff:8b:be:f5:34:47:df:62:66:fb:03:b2:2a:89:28: b3:79:81:47:c6:6b:16:ab:ea:36:07:37:f5:25:22: 7e:bf:9c:7f:2a:90:ac:e5:0b:21:b0:3e:61:0d:cf: e6:fe:a4:ba:fb:67:fb:20:c2:0c:87:29:7e:8f:3e: f4:0a:41:9b:31:e5:11:2a:c5:73:fb:ab:f6:6c:dc: ce:5d:f5:90:aa:56:f8:80:e8:36:13:c0:47:49:ff: 5b:a7:b5:43:74:ce:aa:32:a1:c9:4d:af:77:3d:ea: 28:72:ba:54:e3:13:51:4b:bb:9d:5d:4a:9a:c7:b3: cf:41:bf:45:2d:f1:9d:72:20:48:37:a5:d2:a1:14: 23:6e:c2:07:1a:25:f6:3b:19:43:66:9f:1c:4c:ff: 2e:f1:1c:a5:b8:07:63:93:f7:7d:38:25:2d:ff:e0: f2:41:2a:31:f9:03:d1:4f:cd:f7:f7:38:20:25:8e: 56:b0:b6:cb:d2:77:17:cd:38:9f:88:2d:04:22:cf: af:6a:e3:ea:a1:0e:fe:8f:1a:6a:35:57:83:a6:4e: 42:77:db:af:2a:23:ed:dd:8c:8e:a4:3d:f1:85:24: 56:d3:64:e7:c6:50:94:4c:f2:7d:90:c7:b4:66:7d: 31:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:FF:E6:EC:B1:F2:D7:74:88:06:E8:8C:24:74:12:18:2C:85:F1:84 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145891.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:aca9::/32 Signature Algorithm: sha256WithRSAEncryption 14:98:b3:8f:b6:2c:39:01:02:a7:d6:04:95:88:e6:f4:a9:3d: f1:8c:ec:fe:36:5e:1a:67:8e:a1:8a:ab:7f:6c:d3:65:07:5e: 41:41:b1:cb:a3:f9:61:b4:8d:95:92:73:3e:4e:15:35:06:69: 60:e4:49:6d:08:e4:31:92:6f:3d:84:91:56:bf:1d:b9:4b:36: 91:db:7c:26:97:29:1e:b5:aa:44:29:72:bc:b8:ca:da:99:89: 47:85:e3:6b:cf:b6:18:97:90:00:f1:eb:05:9c:af:0b:d7:86: 6b:3b:49:bd:eb:85:a7:ff:1b:bf:2d:fc:1a:44:52:59:94:d5: db:a6:85:d1:88:f2:27:eb:1f:5e:a0:51:79:3c:bd:a7:70:64: 02:3c:a7:d4:0a:0b:fc:f0:4a:bb:1f:6e:3c:d7:e4:f1:65:89: 6d:b7:54:40:46:ec:9d:e3:cc:20:85:d8:eb:3f:cc:27:1d:d1: cf:6a:49:db:f6:c9:06:88:c1:e5:d4:12:a1:4b:46:d9:73:c0: ac:12:8e:8e:4b:61:81:6a:91:df:58:f3:43:22:06:a4:c2:39: 17:c4:bc:9a:00:c3:fc:c0:6b:37:ef:10:86:40:a0:c4:28:58: a7:91:7b:f1:46:cc:bb:a0:1f:b3:d9:1d:ea:29:ae:f1:5b:e3: 3c:c7:78:4a -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUKPea8cW8vjkaqvmqJWA0pxgXLNAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MjUyMFoX DTI3MDMwMzA2MzAyMFowMzExMC8GA1UEAxMoNURGRkU2RUNCMUYyRDc3NDg4MDZF ODhDMjQ3NDEyMTgyQzg1RjE4NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALNkpWL/hdxtLppSbcRp/4u+9TRH32Jm+wOyKokos3mBR8ZrFqvqNgc39SUi fr+cfyqQrOULIbA+YQ3P5v6kuvtn+yDCDIcpfo8+9ApBmzHlESrFc/ur9mzczl31 kKpW+IDoNhPAR0n/W6e1Q3TOqjKhyU2vdz3qKHK6VOMTUUu7nV1Kmsezz0G/RS3x nXIgSDel0qEUI27CBxol9jsZQ2afHEz/LvEcpbgHY5P3fTglLf/g8kEqMfkD0U/N 9/c4ICWOVrC2y9J3F804n4gtBCLPr2rj6qEO/o8aajVXg6ZOQnfbryoj7d2MjqQ9 8YUkVtNk58ZQlEzyfZDHtGZ9MTkCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRd/+bs sfLXdIgG6IwkdBIYLIXxhDAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTg5MS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rKkwDQYJKoZIhvcNAQELBQADggEBABSYs4+2LDkBAqfWBJWI5vSpPfGM7P42Xhpn jqGKq39s02UHXkFBscuj+WG0jZWScz5OFTUGaWDkSW0I5DGSbz2EkVa/HblLNpHb fCaXKR61qkQpcry4ytqZiUeF42vPthiXkADx6wWcrwvXhms7Sb3rhaf/G78t/BpE UlmU1dumhdGI8ifrH16gUXk8vadwZAI8p9QKC/zwSrsfbjzX5PFliW23VEBG7J3j zCCF2Os/zCcd0c9qSdv2yQaIweXUEqFLRtlzwKwSjo5LYYFqkd9Y80MiBqTCORfE vJoAw/zAazfvEIZAoMQoWKeRe/FGzLugH7PZHeoprvFb4zzHeEo= -----END CERTIFICATE-----Generated at Sat Mar 28 11:42:37 2026 by rpki-client