$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145933.roa File: AS145933.roa (raw, json) Hash identifier: i5g7/qvgKS28HMfb3icEqRbow4traz7k/3WTWw4a73g= Subject key identifier: 8D:E6:48:32:A1:5B:8C:D7:8A:B2:86:A5:0A:B3:94:32:50:25:57:62 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 363C2CBCB1EAE459BF45A630E1B5F4501BB8D736 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145933.roa Signing time: Wed 04 Mar 2026 06:30:47 +0000 ROA not before: Wed 04 Mar 2026 06:25:47 +0000 ROA not after: Wed 03 Mar 2027 06:30:47 +0000 asID: 145933 IP address blocks: 240a:acd3::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:3c:2c:bc:b1:ea:e4:59:bf:45:a6:30:e1:b5:f4:50:1b:b8:d7:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:25:47 2026 GMT Not After : Mar 3 06:30:47 2027 GMT Subject: CN=8DE64832A15B8CD78AB286A50AB3943250255762 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:3e:6e:12:ac:c0:ca:f6:3e:21:10:fa:a6:94: aa:d2:ec:48:62:6f:42:1c:ae:a3:98:8b:e6:8e:dd: ee:40:43:1d:08:1a:6e:2c:f0:42:c6:61:b1:59:3b: b2:c8:ed:31:14:91:58:9e:42:42:d4:53:3f:26:d6: e2:01:17:23:a7:dd:b0:a0:25:c6:8e:68:cf:76:b2: e7:48:b5:96:05:3f:d2:df:ea:3a:f3:3f:e9:76:29: 57:42:ae:0e:8b:e7:f0:98:b2:4a:c7:41:ce:68:17: 22:34:e0:cc:fc:26:0b:fa:7a:22:b9:e1:30:81:49: 1a:2a:3c:24:e3:8c:8e:20:50:75:f5:28:30:8d:fc: 7e:43:b2:f7:8e:34:87:0b:1b:9d:27:9f:c1:68:a8: 3c:58:2c:8e:db:5e:c1:73:ff:77:fe:48:db:38:b5: 39:fa:57:f4:ec:ed:ef:56:b5:4d:94:39:a5:64:29: 57:37:35:11:4f:ae:9a:ac:23:db:d3:66:01:52:66: 2c:8d:a6:3a:18:c9:90:ed:64:28:d1:25:6f:2f:fa: f6:30:b1:77:4e:dc:18:eb:66:82:f2:e3:3b:76:8b: 68:fc:51:e0:76:4f:ef:ee:1f:cc:8c:c8:59:c1:2a: 53:2c:3c:ac:02:a2:b3:b1:0c:1a:44:6c:5a:9d:4a: 3f:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:E6:48:32:A1:5B:8C:D7:8A:B2:86:A5:0A:B3:94:32:50:25:57:62 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145933.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:acd3::/32 Signature Algorithm: sha256WithRSAEncryption c9:4a:31:f3:b8:d0:2c:1a:c9:32:e0:03:ec:d4:23:06:fe:3f: 2c:9d:72:14:ee:fb:9b:58:2a:6c:b0:0d:83:3b:4b:55:ae:54: 15:e9:78:e9:6d:06:5c:9f:f0:65:f4:8b:66:4e:72:b4:da:28: 58:6b:7c:38:34:f1:a4:cf:fd:8d:53:de:d7:f9:89:29:9c:e0: db:28:fe:a0:d5:87:e2:b3:df:88:a7:af:52:fd:84:5d:1b:79: c9:a7:91:1f:12:a0:df:58:8e:53:ad:4d:1e:10:7b:14:f2:37: d2:4b:fb:43:64:ce:a9:91:9c:03:8c:ea:4d:85:74:ed:86:cd: e2:f1:73:48:67:62:3a:53:1a:11:c2:91:bf:b6:3f:50:91:8b: bc:7c:45:a7:bd:22:b3:a3:de:7f:83:12:7f:40:7c:cf:cf:7d: bf:6d:68:44:06:42:4e:93:9f:4d:d5:17:b9:08:c5:13:a6:f5: 5d:25:96:04:5c:ff:e9:b7:67:3c:91:40:8f:7a:6f:c3:29:19: 3b:59:37:61:51:c2:74:ca:49:22:57:c1:1e:1d:5e:cf:e6:d5: 21:bf:e0:2d:7c:ea:02:bc:21:97:05:f9:39:af:72:59:79:77: 14:2e:b8:3a:9a:d0:d8:fb:c6:9e:9e:74:21:0f:0a:46:13:55: 95:06:cd:d4 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUNjwsvLHq5Fm/RaYw4bX0UBu41zYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MjU0N1oX DTI3MDMwMzA2MzA0N1owMzExMC8GA1UEAxMoOERFNjQ4MzJBMTVCOENENzhBQjI4 NkE1MEFCMzk0MzI1MDI1NTc2MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL4+bhKswMr2PiEQ+qaUqtLsSGJvQhyuo5iL5o7d7kBDHQgabizwQsZhsVk7 ssjtMRSRWJ5CQtRTPybW4gEXI6fdsKAlxo5oz3ay50i1lgU/0t/qOvM/6XYpV0Ku Dovn8JiySsdBzmgXIjTgzPwmC/p6IrnhMIFJGio8JOOMjiBQdfUoMI38fkOy9440 hwsbnSefwWioPFgsjttewXP/d/5I2zi1OfpX9Ozt71a1TZQ5pWQpVzc1EU+umqwj 29NmAVJmLI2mOhjJkO1kKNElby/69jCxd07cGOtmgvLjO3aLaPxR4HZP7+4fzIzI WcEqUyw8rAKis7EMGkRsWp1KP1sCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSN5kgy oVuM14qyhqUKs5QyUCVXYjAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTkzMy5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rNMwDQYJKoZIhvcNAQELBQADggEBAMlKMfO40CwayTLgA+zUIwb+PyydchTu+5tY KmywDYM7S1WuVBXpeOltBlyf8GX0i2ZOcrTaKFhrfDg08aTP/Y1T3tf5iSmc4Nso /qDVh+Kz34inr1L9hF0becmnkR8SoN9YjlOtTR4QexTyN9JL+0NkzqmRnAOM6k2F dO2GzeLxc0hnYjpTGhHCkb+2P1CRi7x8Rae9IrOj3n+DEn9AfM/Pfb9taEQGQk6T n03VF7kIxROm9V0llgRc/+m3ZzyRQI96b8MpGTtZN2FRwnTKSSJXwR4dXs/m1SG/ 4C186gK8IZcF+Tmvcll5dxQuuDqa0Nj7xp6edCEPCkYTVZUGzdQ= -----END CERTIFICATE-----Generated at Sat Mar 28 13:18:14 2026 by rpki-client