$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145905.roa File: AS145905.roa (raw, json) Hash identifier: tz6rJ58fZKmfWTD8gM7YwG4vCenklR1NpQeEUkl8FhM= Subject key identifier: 1E:E4:CD:A6:FC:18:A2:A4:53:65:A9:2C:41:04:C9:5B:86:2A:6B:C0 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 363B189429AE287B6D421705E5CCB2103B7E5BBB Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145905.roa Signing time: Wed 04 Mar 2026 06:31:09 +0000 ROA not before: Wed 04 Mar 2026 06:26:09 +0000 ROA not after: Wed 03 Mar 2027 06:31:09 +0000 asID: 145905 IP address blocks: 240a:acb7::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:3b:18:94:29:ae:28:7b:6d:42:17:05:e5:cc:b2:10:3b:7e:5b:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:26:09 2026 GMT Not After : Mar 3 06:31:09 2027 GMT Subject: CN=1EE4CDA6FC18A2A45365A92C4104C95B862A6BC0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:12:a7:a1:e1:b2:e3:95:5c:b7:9f:9a:a9:0b: 55:08:3c:e0:0c:dd:61:a0:7d:02:c5:ba:1b:eb:1a: 25:e3:ed:7b:82:f1:2e:f5:d4:d7:d4:b4:5c:72:a7: 57:68:4a:d2:29:c8:82:75:33:ee:33:e5:39:e2:b6: d2:78:7c:52:b5:64:3c:c7:96:80:52:d2:24:44:37: f1:30:07:8d:30:4f:c4:3e:e9:c2:68:2a:42:60:0c: 10:92:d2:5e:0b:4a:c3:4d:c5:a9:1d:d7:c8:a6:f9: 48:5d:68:69:6e:06:ec:51:c5:9c:41:71:6a:24:62: ac:94:cd:c2:4b:11:27:18:01:71:06:f1:4e:4c:3e: 22:07:99:65:16:4b:01:be:8f:59:64:3f:be:e4:ad: c5:01:eb:21:63:d5:14:c7:b1:15:3f:33:9a:87:f2: 95:af:d4:67:77:05:b2:76:d4:c1:f3:f2:aa:96:51: 2d:12:96:4c:d2:65:71:0c:6a:14:af:ab:2f:2c:71: 66:78:6a:da:9c:69:6f:40:c2:e0:db:d0:7a:db:53: 0b:72:f8:fa:2c:dc:06:48:b3:6a:39:70:e9:d5:a0: 15:17:a4:63:c3:b9:6e:e4:50:b7:e3:b9:40:70:1f: c1:5f:8b:8d:4e:1b:3c:5c:dd:7a:33:38:9e:ea:6a: 61:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:E4:CD:A6:FC:18:A2:A4:53:65:A9:2C:41:04:C9:5B:86:2A:6B:C0 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145905.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:acb7::/32 Signature Algorithm: sha256WithRSAEncryption b5:eb:c2:06:30:fc:56:32:33:45:97:ea:5a:f6:14:e6:82:43: d5:58:99:0b:7c:f2:2a:ab:92:c8:60:55:54:9f:c2:be:5a:40: 36:00:3d:6a:26:82:de:0e:d5:1f:23:e1:c0:b3:0f:d0:44:b0: 49:03:0b:3b:d3:15:eb:e7:92:b8:a2:fa:e7:e4:24:71:d3:21: e8:f4:ef:6d:77:a2:5f:83:7b:49:20:58:02:f7:50:3b:9d:d8: 42:ed:4d:c5:de:15:0a:8d:31:00:da:42:f0:bd:7d:c8:dd:88: ca:47:c1:c0:3b:f0:3b:ac:59:3e:dd:c7:1f:17:9d:0d:a0:2c: c4:12:13:51:46:16:24:51:d8:a6:84:49:51:b9:4e:1f:ab:cf: 55:1f:62:25:45:9f:bb:c8:f2:35:dc:6f:0d:cc:17:6a:3c:f4: 06:29:6e:7f:a5:c8:57:61:83:ff:da:a4:76:cd:fe:fb:e4:da: 54:1f:2b:1d:c6:99:ff:ce:b6:e9:68:b1:f9:05:83:5e:03:66: 75:27:09:6b:65:24:1f:41:7d:12:48:00:e4:a9:3e:fd:2c:3b: d4:10:f0:b7:b4:fd:ea:fd:1a:38:c5:fa:2d:c0:86:9b:11:25: 33:bd:03:b8:46:f7:8c:16:ea:79:85:67:bf:d7:b2:1d:67:61: 51:d7:f5:5e -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUNjsYlCmuKHttQhcF5cyyEDt+W7swDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MjYwOVoX DTI3MDMwMzA2MzEwOVowMzExMC8GA1UEAxMoMUVFNENEQTZGQzE4QTJBNDUzNjVB OTJDNDEwNEM5NUI4NjJBNkJDMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAPcSp6HhsuOVXLefmqkLVQg84AzdYaB9AsW6G+saJePte4LxLvXU19S0XHKn V2hK0inIgnUz7jPlOeK20nh8UrVkPMeWgFLSJEQ38TAHjTBPxD7pwmgqQmAMEJLS XgtKw03FqR3XyKb5SF1oaW4G7FHFnEFxaiRirJTNwksRJxgBcQbxTkw+IgeZZRZL Ab6PWWQ/vuStxQHrIWPVFMexFT8zmofyla/UZ3cFsnbUwfPyqpZRLRKWTNJlcQxq FK+rLyxxZnhq2pxpb0DC4NvQettTC3L4+izcBkizajlw6dWgFRekY8O5buRQt+O5 QHAfwV+LjU4bPFzdejM4nupqYVUCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQe5M2m /BiipFNlqSxBBMlbhiprwDAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTkwNS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rLcwDQYJKoZIhvcNAQELBQADggEBALXrwgYw/FYyM0WX6lr2FOaCQ9VYmQt88iqr kshgVVSfwr5aQDYAPWomgt4O1R8j4cCzD9BEsEkDCzvTFevnkrii+ufkJHHTIej0 7213ol+De0kgWAL3UDud2ELtTcXeFQqNMQDaQvC9fcjdiMpHwcA78DusWT7dxx8X nQ2gLMQSE1FGFiRR2KaESVG5Th+rz1UfYiVFn7vI8jXcbw3MF2o89AYpbn+lyFdh g//apHbN/vvk2lQfKx3Gmf/OtulosfkFg14DZnUnCWtlJB9BfRJIAOSpPv0sO9QQ 8Le0/er9GjjF+i3AhpsRJTO9A7hG94wW6nmFZ7/Xsh1nYVHX9V4= -----END CERTIFICATE-----Generated at Sat Mar 28 11:46:14 2026 by rpki-client