$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145947.roa File: AS145947.roa (raw, json) Hash identifier: ungSlTMTUtCOqjIkSh9bMmUFsbBNTeP0//7cjatVEO0= Subject key identifier: 69:DF:F2:AD:43:2A:2E:B9:54:46:3A:3E:16:E5:41:7A:4E:DF:3D:96 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 4842E13466313FDC1F887A286405FCDC22E9EC4B Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145947.roa Signing time: Wed 04 Mar 2026 06:30:39 +0000 ROA not before: Wed 04 Mar 2026 06:25:39 +0000 ROA not after: Wed 03 Mar 2027 06:30:39 +0000 asID: 145947 IP address blocks: 240a:ace1::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:42:e1:34:66:31:3f:dc:1f:88:7a:28:64:05:fc:dc:22:e9:ec:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:25:39 2026 GMT Not After : Mar 3 06:30:39 2027 GMT Subject: CN=69DFF2AD432A2EB954463A3E16E5417A4EDF3D96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:16:99:81:23:bc:1c:57:3f:9a:51:19:c3:79: cf:91:b1:2e:0f:be:9c:fb:61:8e:af:7a:ff:3f:87: cc:71:b0:f0:1b:69:8e:a1:ea:b0:10:3e:53:96:60: e4:09:7e:1b:31:ba:51:ea:45:2f:d3:db:74:58:5e: 98:23:8a:5a:a6:d3:f7:76:72:a9:5e:09:2c:dc:d8: 3e:dc:07:e6:7b:2e:84:3d:62:fb:6e:e7:4a:d5:ae: c7:87:39:7b:22:29:ac:87:31:3b:b8:27:2a:83:3d: 60:f9:84:0c:64:23:5e:10:08:49:8e:8d:e7:c5:b7: e1:e0:c4:0e:c5:a9:19:56:25:ec:d2:74:d4:f8:65: 6a:14:c4:fd:6b:3d:92:06:2a:cf:26:5f:71:19:c7: 88:01:ee:9b:f3:64:8d:b0:56:a9:aa:ee:28:17:85: 7f:5f:29:e9:be:7e:7e:3e:27:ad:e2:ba:c2:9b:79: 8d:62:6c:1c:4d:16:0b:b1:12:21:f3:7f:11:74:d5: b5:b4:be:f6:e6:4c:52:0d:a8:87:5a:e1:c7:b8:ee: 5e:9f:82:81:00:3a:39:0c:5d:16:ca:4a:a4:90:29: 34:27:6d:20:a3:86:72:2b:63:95:e0:28:85:e8:65: 1f:79:5d:6b:57:23:c7:59:d8:fe:25:6e:6d:17:28: bc:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:DF:F2:AD:43:2A:2E:B9:54:46:3A:3E:16:E5:41:7A:4E:DF:3D:96 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145947.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:ace1::/32 Signature Algorithm: sha256WithRSAEncryption 37:16:d5:18:18:68:b8:86:6b:f9:c7:34:03:4e:a4:0f:9d:ff: 3a:40:87:57:45:be:97:49:79:02:58:cf:a1:8e:2f:47:9a:38: e3:14:1d:43:99:6e:f3:95:3f:30:4d:49:53:b5:59:cf:45:39: c5:2a:c9:56:12:68:8f:cb:ef:ea:a2:33:06:d7:6b:1c:96:45: 5b:d2:86:44:4e:09:65:9d:b4:c4:9d:47:29:1d:53:03:5a:d5: fd:42:f3:08:fe:c3:78:7a:23:4d:83:70:12:c5:d7:b5:e6:fe: 57:76:89:7b:a2:66:ce:a7:99:7c:4a:ec:c6:1b:bd:aa:c0:9c: 40:4c:e0:ed:df:10:1c:a8:f5:b8:db:d0:05:f0:38:5a:e5:d5: 30:5a:f9:1a:2b:a5:b6:73:f2:3e:d7:7f:8a:0d:e3:e0:76:f8: 98:77:8a:47:6e:c6:c0:a8:87:c4:31:de:1c:2c:c1:59:40:f8: fe:ba:75:4f:9d:00:67:e8:02:3e:43:db:f4:a9:82:45:ed:24: f6:99:23:01:64:2b:b0:5a:97:c5:b6:e2:f5:d0:dc:41:02:37: e1:ad:88:ce:12:2e:9c:92:98:2e:03:64:ad:39:2d:b7:82:c7: 97:14:43:cd:bf:13:29:af:3a:bc:38:dc:d0:a3:53:44:af:86: f4:b7:3e:4f -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUSELhNGYxP9wfiHooZAX83CLp7EswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MjUzOVoX DTI3MDMwMzA2MzAzOVowMzExMC8GA1UEAxMoNjlERkYyQUQ0MzJBMkVCOTU0NDYz QTNFMTZFNTQxN0E0RURGM0Q5NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALsWmYEjvBxXP5pRGcN5z5GxLg++nPthjq96/z+HzHGw8BtpjqHqsBA+U5Zg 5Al+GzG6UepFL9PbdFhemCOKWqbT93ZyqV4JLNzYPtwH5nsuhD1i+27nStWux4c5 eyIprIcxO7gnKoM9YPmEDGQjXhAISY6N58W34eDEDsWpGVYl7NJ01PhlahTE/Ws9 kgYqzyZfcRnHiAHum/NkjbBWqaruKBeFf18p6b5+fj4nreK6wpt5jWJsHE0WC7ES IfN/EXTVtbS+9uZMUg2oh1rhx7juXp+CgQA6OQxdFspKpJApNCdtIKOGcitjleAo hehlH3lda1cjx1nY/iVubRcovG0CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRp3/Kt QyouuVRGOj4W5UF6Tt89ljAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTk0Ny5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rOEwDQYJKoZIhvcNAQELBQADggEBADcW1RgYaLiGa/nHNANOpA+d/zpAh1dFvpdJ eQJYz6GOL0eaOOMUHUOZbvOVPzBNSVO1Wc9FOcUqyVYSaI/L7+qiMwbXaxyWRVvS hkROCWWdtMSdRykdUwNa1f1C8wj+w3h6I02DcBLF17Xm/ld2iXuiZs6nmXxK7MYb varAnEBM4O3fEByo9bjb0AXwOFrl1TBa+RorpbZz8j7Xf4oN4+B2+Jh3ikduxsCo h8Qx3hwswVlA+P66dU+dAGfoAj5D2/SpgkXtJPaZIwFkK7Bal8W24vXQ3EECN+Gt iM4SLpySmC4DZK05LbeCx5cUQ82/EymvOrw43NCjU0SvhvS3Pk8= -----END CERTIFICATE-----Generated at Sat Mar 28 11:43:43 2026 by rpki-client