$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145935.roa File: AS145935.roa (raw, json) Hash identifier: OMiHsIlwBXi6OBkvpmr5DOGEtERBfbxadrP/7fAf0B4= Subject key identifier: 8C:00:55:36:DC:91:C4:44:E8:CE:92:0E:5E:A3:4C:CE:5D:F7:21:9F Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 3A8AC81FA93C5E1198577DEBC2D6D1AF0CEC99AB Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145935.roa Signing time: Wed 04 Mar 2026 06:30:13 +0000 ROA not before: Wed 04 Mar 2026 06:25:13 +0000 ROA not after: Wed 03 Mar 2027 06:30:13 +0000 asID: 145935 IP address blocks: 240a:acd5::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:8a:c8:1f:a9:3c:5e:11:98:57:7d:eb:c2:d6:d1:af:0c:ec:99:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:25:13 2026 GMT Not After : Mar 3 06:30:13 2027 GMT Subject: CN=8C005536DC91C444E8CE920E5EA34CCE5DF7219F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:fd:76:a4:6b:14:5d:29:ac:78:ec:7a:db:5f: 9d:e9:34:e4:0c:3f:1d:42:f7:d7:33:70:53:7f:12: 89:12:55:02:66:87:f1:50:29:7f:9c:ed:4d:1b:18: 1d:b4:b7:ff:1e:19:95:4f:58:98:5c:e4:a0:c6:13: be:74:8a:2c:b2:74:56:68:00:85:a1:46:dc:a0:85: 9e:55:5d:c7:be:26:16:27:83:49:90:79:5c:12:c2: d0:5f:3b:3a:e5:2a:3b:8d:e2:14:db:c8:9d:ac:20: 76:34:2b:cc:20:5e:b2:44:39:0d:80:26:ec:4d:55: c9:31:c3:bb:83:54:19:e4:44:4e:7d:71:58:dc:8a: 30:29:a6:28:1b:49:e7:e0:7a:ba:b2:a9:73:30:89: a1:51:95:38:10:0f:2a:39:93:b7:09:1a:7b:37:c6: 71:23:af:0c:c8:46:8f:41:94:2b:7b:a6:20:0f:81: 59:1d:cd:f2:39:0b:89:67:6b:1d:81:e8:8a:a9:21: 8d:08:ad:18:e0:9e:74:2b:24:d2:55:3f:00:58:e3: 7a:a3:2a:dc:52:a1:9e:dd:4f:58:ea:f9:a6:01:01: d7:22:14:4c:a2:7c:e4:c8:61:c5:e9:4c:f3:c1:59: bc:f9:da:85:64:2e:11:52:77:8d:1e:6e:8e:3e:79: 7c:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:00:55:36:DC:91:C4:44:E8:CE:92:0E:5E:A3:4C:CE:5D:F7:21:9F X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145935.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:acd5::/32 Signature Algorithm: sha256WithRSAEncryption 82:51:11:23:27:d2:ac:40:7f:1e:e5:5d:03:45:1b:32:f9:70: c9:39:e5:06:6e:4f:4d:1f:3b:97:ed:ba:db:09:4a:7e:27:f1: 7c:be:79:3a:0b:c8:9a:70:dd:a9:91:3f:c0:9c:ac:d8:8e:17: a6:8d:89:8c:74:76:83:e6:3f:0c:7a:f8:ab:0b:e9:2a:16:78: 06:27:9b:a4:fd:58:41:61:a6:83:44:cd:9c:39:c2:03:22:eb: 95:5f:39:85:9e:7a:84:2d:ff:7b:50:13:0f:91:b3:6b:cc:ed: 22:84:46:7c:73:2a:23:d6:5e:7c:a7:7f:51:f3:21:16:12:43: 7a:35:ac:ca:4e:0a:75:35:6e:30:ca:92:2c:42:c0:27:c5:c1: aa:c7:94:4b:1e:69:45:a7:07:7f:59:6c:fd:93:e8:2e:e5:3e: b9:1a:9b:12:b2:f7:66:0e:b9:08:dd:ca:bb:0a:21:4a:44:5f: 07:02:83:b6:50:7c:df:98:68:f4:18:72:ac:8f:33:d3:5b:87: ff:d3:72:1a:7d:79:54:3e:07:9a:4d:8c:1f:50:43:2b:c1:21: bd:a3:7d:18:90:38:23:f8:4d:6b:b0:f8:5c:19:7e:dc:4c:8f: 86:ad:73:15:6c:80:10:df:cf:c9:9a:da:2c:b2:f4:27:bc:cd: f9:74:0d:53 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUOorIH6k8XhGYV33rwtbRrwzsmaswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MjUxM1oX DTI3MDMwMzA2MzAxM1owMzExMC8GA1UEAxMoOEMwMDU1MzZEQzkxQzQ0NEU4Q0U5 MjBFNUVBMzRDQ0U1REY3MjE5RjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOb9dqRrFF0prHjsettfnek05Aw/HUL31zNwU38SiRJVAmaH8VApf5ztTRsY HbS3/x4ZlU9YmFzkoMYTvnSKLLJ0VmgAhaFG3KCFnlVdx74mFieDSZB5XBLC0F87 OuUqO43iFNvInawgdjQrzCBeskQ5DYAm7E1VyTHDu4NUGeRETn1xWNyKMCmmKBtJ 5+B6urKpczCJoVGVOBAPKjmTtwkaezfGcSOvDMhGj0GUK3umIA+BWR3N8jkLiWdr HYHoiqkhjQitGOCedCsk0lU/AFjjeqMq3FKhnt1PWOr5pgEB1yIUTKJ85MhhxelM 88FZvPnahWQuEVJ3jR5ujj55fGcCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSMAFU2 3JHEROjOkg5eo0zOXfchnzAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTkzNS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rNUwDQYJKoZIhvcNAQELBQADggEBAIJRESMn0qxAfx7lXQNFGzL5cMk55QZuT00f O5ftutsJSn4n8Xy+eToLyJpw3amRP8CcrNiOF6aNiYx0doPmPwx6+KsL6SoWeAYn m6T9WEFhpoNEzZw5wgMi65VfOYWeeoQt/3tQEw+Rs2vM7SKERnxzKiPWXnynf1Hz IRYSQ3o1rMpOCnU1bjDKkixCwCfFwarHlEseaUWnB39ZbP2T6C7lPrkamxKy92YO uQjdyrsKIUpEXwcCg7ZQfN+YaPQYcqyPM9Nbh//Tchp9eVQ+B5pNjB9QQyvBIb2j fRiQOCP4TWuw+FwZftxMj4atcxVsgBDfz8ma2iyy9Ce8zfl0DVM= -----END CERTIFICATE-----Generated at Sat Mar 28 14:26:41 2026 by rpki-client