$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145941.roa File: AS145941.roa (raw, json) Hash identifier: jkXqV5574Rnzdms8u5SPVLsyarz0ZKuqOB+vR6J10PE= Subject key identifier: 3A:3D:D9:D1:00:E1:CC:3E:74:0F:F4:81:07:B6:71:03:F8:44:01:BA Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 63BD4BEB96274A6E91953D323677B7CC4C9C7EBC Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145941.roa Signing time: Wed 04 Mar 2026 06:30:12 +0000 ROA not before: Wed 04 Mar 2026 06:25:12 +0000 ROA not after: Wed 03 Mar 2027 06:30:12 +0000 asID: 145941 IP address blocks: 240a:acdb::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:bd:4b:eb:96:27:4a:6e:91:95:3d:32:36:77:b7:cc:4c:9c:7e:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:25:12 2026 GMT Not After : Mar 3 06:30:12 2027 GMT Subject: CN=3A3DD9D100E1CC3E740FF48107B67103F84401BA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:d6:0c:d9:e8:09:4a:de:0a:c3:0b:e6:91:40: ab:e8:59:82:de:00:b6:29:e1:bf:0b:d3:d3:ab:d4: 6f:9f:63:2f:91:07:a3:78:60:06:9d:37:fa:b2:c4: 52:60:66:91:13:48:6f:fe:ac:aa:a0:66:1b:f6:59: 29:60:30:d5:04:b2:78:02:40:ff:6d:6f:8c:0d:42: 05:61:f0:91:10:6f:eb:76:21:66:98:64:60:b2:4a: fa:34:98:41:29:40:a8:79:b5:a2:0d:3c:8d:40:d4: d3:2f:3b:28:fb:3d:82:9d:49:bf:42:88:11:4e:58: 23:be:91:f4:1c:02:59:ac:78:dc:64:f9:7a:79:02: 4f:76:9d:5e:9a:04:f0:9c:15:9c:e9:ef:03:62:63: ee:a4:48:59:db:50:db:aa:99:12:64:f8:2f:5b:08: 42:0f:b2:36:e1:8b:fd:b1:74:dc:80:9c:fd:f4:85: 19:87:6a:91:b2:a7:b1:49:13:89:ab:58:41:55:13: bf:db:6a:82:b5:17:af:f8:7e:67:a2:c6:49:2a:9f: 66:06:3c:d3:1c:4c:fa:ed:82:ab:b2:79:ee:d2:9a: 18:06:bc:9c:b1:3c:48:b3:1a:ce:83:b1:59:68:31: ec:88:5d:7b:7d:65:3c:73:2c:96:e8:69:46:ed:1c: 8b:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:3D:D9:D1:00:E1:CC:3E:74:0F:F4:81:07:B6:71:03:F8:44:01:BA X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145941.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:acdb::/32 Signature Algorithm: sha256WithRSAEncryption 92:07:90:9e:cf:d8:dd:e4:e4:3a:36:45:fb:5f:b1:4a:55:11: 25:49:14:28:50:d4:2c:f2:57:49:b0:ce:44:73:6d:10:04:3d: 83:29:e4:39:9c:a8:26:06:01:74:c8:12:4d:46:0e:71:18:75: 65:78:9b:38:65:ed:ca:ec:7e:5d:ad:78:a8:9b:be:03:ee:10: e2:e5:82:dd:75:bd:d7:8b:cf:6e:d5:87:b1:6c:f0:44:c4:1c: 7c:af:48:69:fc:76:db:d9:c5:9a:d0:84:ed:ee:27:b0:ab:bf: af:d7:3b:bc:38:89:4d:2b:55:15:5b:dc:47:aa:83:4b:a6:04: 08:c1:c1:0a:27:ad:b3:67:a1:7e:ba:5c:3f:12:a5:0c:9f:cd: da:66:8f:6c:ed:7e:11:9c:b5:7a:0b:01:eb:8d:79:be:99:42: ed:21:21:7d:c4:cb:75:b0:d6:5c:1f:a9:6d:6c:4c:de:62:1d: a3:2f:53:e3:4a:3a:6b:b9:61:ec:fb:49:40:8e:1b:35:a5:48: 31:c1:c1:07:59:00:d6:e4:f6:68:4d:bd:e4:c1:42:dd:4b:49: 3b:52:97:ff:a7:dd:6c:13:e5:97:de:13:2e:c5:80:03:f0:5f: 93:fd:85:4a:19:fc:49:5f:d1:bd:24:86:d4:05:22:2a:9b:2a: 07:e8:bd:a2 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUY71L65YnSm6RlT0yNne3zEycfrwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MjUxMloX DTI3MDMwMzA2MzAxMlowMzExMC8GA1UEAxMoM0EzREQ5RDEwMEUxQ0MzRTc0MEZG NDgxMDdCNjcxMDNGODQ0MDFCQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANvWDNnoCUreCsML5pFAq+hZgt4AtinhvwvT06vUb59jL5EHo3hgBp03+rLE UmBmkRNIb/6sqqBmG/ZZKWAw1QSyeAJA/21vjA1CBWHwkRBv63YhZphkYLJK+jSY QSlAqHm1og08jUDU0y87KPs9gp1Jv0KIEU5YI76R9BwCWax43GT5enkCT3adXpoE 8JwVnOnvA2Jj7qRIWdtQ26qZEmT4L1sIQg+yNuGL/bF03ICc/fSFGYdqkbKnsUkT iatYQVUTv9tqgrUXr/h+Z6LGSSqfZgY80xxM+u2Cq7J57tKaGAa8nLE8SLMazoOx WWgx7Ihde31lPHMsluhpRu0cizMCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQ6PdnR AOHMPnQP9IEHtnED+EQBujAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTk0MS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rNswDQYJKoZIhvcNAQELBQADggEBAJIHkJ7P2N3k5Do2RftfsUpVESVJFChQ1Czy V0mwzkRzbRAEPYMp5DmcqCYGAXTIEk1GDnEYdWV4mzhl7crsfl2teKibvgPuEOLl gt11vdeLz27Vh7Fs8ETEHHyvSGn8dtvZxZrQhO3uJ7Crv6/XO7w4iU0rVRVb3Eeq g0umBAjBwQonrbNnoX66XD8SpQyfzdpmj2ztfhGctXoLAeuNeb6ZQu0hIX3Ey3Ww 1lwfqW1sTN5iHaMvU+NKOmu5Yez7SUCOGzWlSDHBwQdZANbk9mhNveTBQt1LSTtS l/+n3WwT5ZfeEy7FgAPwX5P9hUoZ/Elf0b0khtQFIiqbKgfovaI= -----END CERTIFICATE-----Generated at Sat Mar 28 13:14:05 2026 by rpki-client