$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145894.roa File: AS145894.roa (raw, json) Hash identifier: 7/8WukWYeIy1ozylhd+Fza4wP/EXUycpeqwBCa5u2rU= Subject key identifier: 6B:AC:B7:DD:D1:36:D7:46:1B:CD:28:46:A9:CA:C6:34:34:A9:E9:0D Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 41AB12126A216B95E9BFBC3408203BC3E76AFE89 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145894.roa Signing time: Wed 04 Mar 2026 06:30:03 +0000 ROA not before: Wed 04 Mar 2026 06:25:03 +0000 ROA not after: Wed 03 Mar 2027 06:30:03 +0000 asID: 145894 IP address blocks: 240a:acac::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:ab:12:12:6a:21:6b:95:e9:bf:bc:34:08:20:3b:c3:e7:6a:fe:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:25:03 2026 GMT Not After : Mar 3 06:30:03 2027 GMT Subject: CN=6BACB7DDD136D7461BCD2846A9CAC63434A9E90D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:ef:42:fe:95:88:65:82:c5:cc:1c:aa:66:1f: f0:ab:61:9a:c4:c8:d6:77:1c:b7:25:ae:5c:66:f7: e9:a4:02:dd:4d:c9:21:bc:8b:38:a2:fc:54:87:c7: 12:81:08:f6:74:fe:05:b3:13:6f:d2:be:90:6c:94: 98:88:45:4b:72:cf:14:55:11:57:5c:43:e8:e7:00: ac:be:cf:6f:25:0e:a5:d6:60:67:54:41:09:bd:6a: ae:96:c1:df:03:24:a3:00:20:49:6b:12:8f:d4:80: 5e:7d:02:c2:8a:9f:71:de:e3:86:30:ea:19:6b:c3: 1e:9d:17:51:1f:a1:f3:bb:91:19:d8:4d:02:3b:e1: d7:97:18:0d:f2:48:f4:bc:b8:03:45:5f:bb:42:29: 3e:dc:4b:16:74:a2:e2:8a:0e:40:30:0e:8b:df:0c: d8:da:92:9e:49:55:03:e6:7d:90:27:f3:9d:db:66: 71:22:fb:fc:4d:d2:18:5f:62:b9:a1:90:03:43:22: 9a:88:81:27:c7:36:6a:bb:4a:c5:20:8b:66:43:e0: 1b:2c:7b:eb:27:ef:5c:19:3f:c7:93:a3:be:1c:6f: e7:b6:6b:c4:7c:50:40:f4:06:f6:97:c3:1f:ea:0f: 3a:3e:f8:16:32:48:b1:fc:8d:b5:2c:ea:63:83:29: 85:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:AC:B7:DD:D1:36:D7:46:1B:CD:28:46:A9:CA:C6:34:34:A9:E9:0D X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145894.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:acac::/32 Signature Algorithm: sha256WithRSAEncryption 46:31:6d:3b:39:fe:21:e2:d6:30:71:fb:ae:26:05:9e:8c:ce: 52:65:df:97:bc:15:d8:c2:a0:d0:9a:77:3e:14:80:22:0d:56: c1:76:bc:9b:ed:26:07:06:e1:38:36:fb:75:8b:f9:7f:4a:d0: 34:36:be:80:24:04:b2:27:a8:84:cf:0d:62:62:f9:eb:83:01: c3:cf:b2:f3:ed:f8:be:a0:ac:12:76:80:01:20:9a:75:37:6b: b3:a1:32:06:bd:07:5c:28:3f:a5:a2:3c:e0:78:2a:24:85:ac: ca:3a:8c:f7:75:a3:ce:cb:37:02:f6:1e:81:b0:e3:ae:ad:25: d4:d3:ad:c7:f0:a4:5f:61:79:5a:a3:c6:31:09:23:4e:a4:ae: 5a:46:a9:1e:9b:fd:d0:2f:1f:c4:60:01:e7:c8:16:df:b9:be: 44:0b:48:a3:34:c7:11:3f:86:f0:0c:e5:18:64:b0:a4:69:08: 21:dd:c8:5d:8f:1c:d0:0a:ef:0b:09:e0:04:70:d5:e6:a4:cf: 85:a3:5a:b7:3a:5a:52:19:84:39:6d:1d:15:ca:d5:31:4c:5a: c4:e1:c6:a7:20:c3:04:cd:b7:a5:c4:3e:06:e9:41:19:ec:f3: 0d:15:e7:d5:b1:5a:0d:62:a4:1a:12:b9:03:ef:ca:c8:73:0b: 0a:69:cf:f7 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUQasSEmoha5Xpv7w0CCA7w+dq/okwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MjUwM1oX DTI3MDMwMzA2MzAwM1owMzExMC8GA1UEAxMoNkJBQ0I3REREMTM2RDc0NjFCQ0Qy ODQ2QTlDQUM2MzQzNEE5RTkwRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAPLvQv6ViGWCxcwcqmYf8KthmsTI1ncctyWuXGb36aQC3U3JIbyLOKL8VIfH EoEI9nT+BbMTb9K+kGyUmIhFS3LPFFURV1xD6OcArL7PbyUOpdZgZ1RBCb1qrpbB 3wMkowAgSWsSj9SAXn0Cwoqfcd7jhjDqGWvDHp0XUR+h87uRGdhNAjvh15cYDfJI 9Ly4A0Vfu0IpPtxLFnSi4ooOQDAOi98M2NqSnklVA+Z9kCfzndtmcSL7/E3SGF9i uaGQA0MimoiBJ8c2artKxSCLZkPgGyx76yfvXBk/x5Ojvhxv57ZrxHxQQPQG9pfD H+oPOj74FjJIsfyNtSzqY4MphccCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRrrLfd 0TbXRhvNKEapysY0NKnpDTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTg5NC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rKwwDQYJKoZIhvcNAQELBQADggEBAEYxbTs5/iHi1jBx+64mBZ6MzlJl35e8FdjC oNCadz4UgCINVsF2vJvtJgcG4Tg2+3WL+X9K0DQ2voAkBLInqITPDWJi+euDAcPP svPt+L6grBJ2gAEgmnU3a7OhMga9B1woP6WiPOB4KiSFrMo6jPd1o87LNwL2HoGw 466tJdTTrcfwpF9heVqjxjEJI06krlpGqR6b/dAvH8RgAefIFt+5vkQLSKM0xxE/ hvAM5RhksKRpCCHdyF2PHNAK7wsJ4ARw1eakz4WjWrc6WlIZhDltHRXK1TFMWsTh xqcgwwTNt6XEPgbpQRns8w0V59WxWg1ipBoSuQPvyshzCwppz/c= -----END CERTIFICATE-----Generated at Sat Mar 28 11:44:13 2026 by rpki-client