$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145903.roa File: AS145903.roa (raw, json) Hash identifier: YaQeMEu7hzdSXgyv6RLLyNLYzGSg5uriODmOm7DlcCM= Subject key identifier: 71:23:F1:11:8B:4B:9A:0B:2D:14:0E:91:D3:10:DF:25:A2:26:E7:09 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 0B4BFD4BADD6B81E74E34301B510ABEF480C50FE Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145903.roa Signing time: Wed 04 Mar 2026 06:30:24 +0000 ROA not before: Wed 04 Mar 2026 06:25:24 +0000 ROA not after: Wed 03 Mar 2027 06:30:24 +0000 asID: 145903 IP address blocks: 240a:acb5::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:4b:fd:4b:ad:d6:b8:1e:74:e3:43:01:b5:10:ab:ef:48:0c:50:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:25:24 2026 GMT Not After : Mar 3 06:30:24 2027 GMT Subject: CN=7123F1118B4B9A0B2D140E91D310DF25A226E709 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:a1:0b:2e:6b:6b:dd:30:10:d1:8c:45:59:e1: 74:e4:af:ec:f0:73:a5:18:00:1d:fe:db:21:c3:86: bc:ef:a6:58:b9:1b:98:9b:21:f1:52:06:e1:3d:66: 8a:4c:a0:82:25:47:f7:18:be:34:fa:b7:3b:aa:60: 48:8e:37:23:f9:12:aa:e3:25:54:38:d0:cd:a7:d0: 30:91:24:20:c1:96:3b:e9:3e:67:34:62:63:89:e3: 4c:df:7f:b9:1e:a3:70:c6:c1:c4:11:a7:8c:20:c0: 05:00:f0:74:a4:f6:47:a8:31:57:3a:c7:e7:ad:7e: b1:a3:b1:18:f1:da:41:19:27:b3:d3:37:89:2e:e9: da:4a:f2:f9:8e:86:46:fe:f2:55:5b:60:e8:ee:f5: 63:ca:fb:01:49:02:06:dc:33:15:a8:b6:07:b5:90: ce:40:f1:f8:38:51:51:8f:f6:f1:ef:c4:d5:29:e6: 41:0a:76:5f:03:8f:60:8f:7d:b5:51:d5:3b:b2:78: 37:45:a8:10:71:12:46:fe:0a:97:42:08:e1:35:b5: 59:9d:9a:ac:18:50:4e:75:8f:1c:cb:aa:b6:71:4d: d2:d5:64:87:43:31:b3:b8:b9:6a:92:e1:72:9a:04: 8c:02:4c:89:7b:41:da:ca:b1:25:49:fc:f1:04:94: fa:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:23:F1:11:8B:4B:9A:0B:2D:14:0E:91:D3:10:DF:25:A2:26:E7:09 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145903.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:acb5::/32 Signature Algorithm: sha256WithRSAEncryption ac:61:0f:7c:d5:66:ac:38:b0:53:b7:53:22:d6:35:93:d2:18: 7e:e6:2e:5e:52:48:ca:dc:09:4c:de:4f:53:47:c8:a5:3b:e9: 1c:f1:e0:7f:0b:43:23:3b:e1:c6:03:98:fd:7a:1b:ee:22:be: b9:34:e4:67:f8:0a:67:f7:81:47:2c:9b:7d:f2:47:9f:7e:80: f4:07:1b:ca:30:02:2f:21:17:12:b0:dd:04:7d:e5:2f:bf:c5: 0c:1e:fe:45:f7:c2:f7:67:f0:4e:cf:b3:ee:6c:25:a7:c4:fd: 6a:12:f9:4d:42:d0:df:60:cc:67:2c:18:d6:ee:1f:36:ba:63: 0a:2b:df:b5:93:9f:84:f3:54:b0:03:ff:8e:7d:16:22:b1:a0: 30:73:d6:4a:6f:e1:4f:1f:c1:f5:91:aa:2e:72:ae:33:63:b9: fe:eb:10:50:0b:ee:65:ce:cf:12:e6:2e:15:98:53:d5:a9:c2: eb:b0:72:dd:26:d5:60:40:10:ae:48:d1:dc:40:b5:76:14:5e: 38:2d:ac:b3:0e:2a:e7:ac:c1:33:b3:b3:a7:bc:d5:a4:d5:8a: 52:04:c1:17:32:ed:58:42:a1:63:65:3b:56:99:75:2d:1f:70: ee:30:5d:24:dc:34:7f:86:37:02:ce:d6:b9:68:c4:e8:a0:89: 03:7a:23:39 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUC0v9S63WuB5040MBtRCr70gMUP4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MjUyNFoX DTI3MDMwMzA2MzAyNFowMzExMC8GA1UEAxMoNzEyM0YxMTE4QjRCOUEwQjJEMTQw RTkxRDMxMERGMjVBMjI2RTcwOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJihCy5ra90wENGMRVnhdOSv7PBzpRgAHf7bIcOGvO+mWLkbmJsh8VIG4T1m ikyggiVH9xi+NPq3O6pgSI43I/kSquMlVDjQzafQMJEkIMGWO+k+ZzRiY4njTN9/ uR6jcMbBxBGnjCDABQDwdKT2R6gxVzrH561+saOxGPHaQRkns9M3iS7p2kry+Y6G Rv7yVVtg6O71Y8r7AUkCBtwzFai2B7WQzkDx+DhRUY/28e/E1SnmQQp2XwOPYI99 tVHVO7J4N0WoEHESRv4Kl0II4TW1WZ2arBhQTnWPHMuqtnFN0tVkh0Mxs7i5apLh cpoEjAJMiXtB2sqxJUn88QSU+lkCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRxI/ER i0uaCy0UDpHTEN8loibnCTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTkwMy5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rLUwDQYJKoZIhvcNAQELBQADggEBAKxhD3zVZqw4sFO3UyLWNZPSGH7mLl5SSMrc CUzeT1NHyKU76Rzx4H8LQyM74cYDmP16G+4ivrk05Gf4Cmf3gUcsm33yR59+gPQH G8owAi8hFxKw3QR95S+/xQwe/kX3wvdn8E7Ps+5sJafE/WoS+U1C0N9gzGcsGNbu Hza6Ywor37WTn4TzVLAD/459FiKxoDBz1kpv4U8fwfWRqi5yrjNjuf7rEFAL7mXO zxLmLhWYU9Wpwuuwct0m1WBAEK5I0dxAtXYUXjgtrLMOKueswTOzs6e81aTVilIE wRcy7VhCoWNlO1aZdS0fcO4wXSTcNH+GNwLO1rloxOigiQN6Izk= -----END CERTIFICATE-----Generated at Sat Mar 28 11:43:43 2026 by rpki-client