$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145948.roa File: AS145948.roa (raw, json) Hash identifier: bRWcyVLhXMmQvo0dJh3TOAoGyOzrKvS98iipeuA7sVs= Subject key identifier: E4:11:72:4B:67:22:13:C9:AA:DA:96:4A:E2:55:A4:FD:27:9D:6C:28 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 442254D5DD3AC3BDB102B01DEBD4911391227443 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145948.roa Signing time: Wed 04 Mar 2026 06:30:58 +0000 ROA not before: Wed 04 Mar 2026 06:25:58 +0000 ROA not after: Wed 03 Mar 2027 06:30:58 +0000 asID: 145948 IP address blocks: 240a:ace2::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:22:54:d5:dd:3a:c3:bd:b1:02:b0:1d:eb:d4:91:13:91:22:74:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:25:58 2026 GMT Not After : Mar 3 06:30:58 2027 GMT Subject: CN=E411724B672213C9AADA964AE255A4FD279D6C28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:ee:b0:df:0b:64:40:05:8b:6f:76:15:9a:c8: a0:cf:03:b6:c4:55:b1:1f:c5:e8:8a:a3:60:be:d8: a6:cf:9d:f8:c4:ba:34:af:b6:8f:3b:37:08:b0:6f: 45:89:16:1c:fa:c2:cb:34:ce:57:3b:76:03:82:a1: c9:e9:54:83:a6:f6:e2:02:39:f3:ac:93:d4:35:25: ba:55:cd:93:ba:37:6f:b7:15:63:7f:71:6a:eb:66: ad:24:88:f2:6c:92:bd:60:f3:90:da:90:c4:ad:41: 37:85:ee:3e:d5:60:da:91:7a:b0:77:4e:35:a3:20: da:31:fb:8a:88:fa:2b:3a:a2:38:78:89:54:4a:ff: 93:cd:48:59:66:ba:f5:0b:b5:e2:88:10:57:0d:a1: a4:72:92:c2:bc:a2:e7:1a:07:50:99:41:a9:57:fa: 25:c8:42:7e:e7:b3:40:cb:4b:0f:b4:45:e5:99:e0: be:d7:07:f4:75:0c:00:94:1e:d4:f9:1a:d2:d8:55: fe:f8:97:87:3e:c6:3d:d3:30:58:94:b3:95:49:39: 73:a9:f6:dc:dd:80:11:6e:9b:e9:e9:78:00:38:59: f8:d7:fe:4d:40:73:8b:e5:90:d9:09:39:b3:1e:bf: d7:1c:6d:cb:84:c9:fe:a2:2f:57:54:ea:55:cf:ec: 32:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:11:72:4B:67:22:13:C9:AA:DA:96:4A:E2:55:A4:FD:27:9D:6C:28 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145948.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:ace2::/32 Signature Algorithm: sha256WithRSAEncryption 11:f3:34:9c:9e:5d:ce:f4:b9:ff:06:d9:8f:dc:8d:ff:69:96: 3f:53:a1:81:37:18:a9:c2:85:30:ff:13:7c:0c:de:93:72:0d: ca:ca:22:8c:0d:95:d7:f6:81:f0:15:39:39:b2:43:9a:65:50: 73:6a:d8:f9:80:6e:cc:31:fd:bd:db:64:84:8f:43:6c:e6:d1: e9:46:81:ef:9f:0f:63:e8:97:84:c5:bd:30:8b:e2:72:06:f7: 01:7d:d9:5d:16:e7:41:06:c6:7a:96:11:56:1d:b7:09:cc:5f: b4:61:a7:83:c5:06:15:88:47:23:d3:e8:35:a0:be:7f:3b:04: 11:5e:4b:c0:ae:3c:32:50:c2:c7:19:3b:d1:ac:46:65:7c:7b: e3:d7:78:66:d2:35:8a:5c:01:13:2b:bb:0b:42:c8:67:0c:ce: 1e:49:48:eb:ea:bc:a1:d0:aa:90:a1:70:57:69:ae:9f:b7:53: 66:ba:56:e3:a0:e8:85:34:6a:af:9c:bf:02:fa:b2:7c:49:92: dc:a2:e6:ab:9e:60:e7:0d:33:73:f0:db:90:c1:38:6c:65:a4: 8b:b4:e4:02:88:49:b6:86:81:ec:91:d5:b8:65:f8:7b:e6:12: b4:75:5b:8b:e0:b7:9e:d2:02:5d:2f:3a:52:73:f9:52:de:8b: c7:b1:a6:95 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIURCJU1d06w72xArAd69SRE5EidEMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MjU1OFoX DTI3MDMwMzA2MzA1OFowMzExMC8GA1UEAxMoRTQxMTcyNEI2NzIyMTNDOUFBREE5 NjRBRTI1NUE0RkQyNzlENkMyODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANLusN8LZEAFi292FZrIoM8DtsRVsR/F6IqjYL7Yps+d+MS6NK+2jzs3CLBv RYkWHPrCyzTOVzt2A4KhyelUg6b24gI586yT1DUlulXNk7o3b7cVY39xautmrSSI 8mySvWDzkNqQxK1BN4XuPtVg2pF6sHdONaMg2jH7ioj6KzqiOHiJVEr/k81IWWa6 9Qu14ogQVw2hpHKSwryi5xoHUJlBqVf6JchCfuezQMtLD7RF5ZngvtcH9HUMAJQe 1Pka0thV/viXhz7GPdMwWJSzlUk5c6n23N2AEW6b6el4ADhZ+Nf+TUBzi+WQ2Qk5 sx6/1xxty4TJ/qIvV1TqVc/sMjsCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBTkEXJL ZyITyaralkriVaT9J51sKDAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTk0OC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rOIwDQYJKoZIhvcNAQELBQADggEBABHzNJyeXc70uf8G2Y/cjf9plj9ToYE3GKnC hTD/E3wM3pNyDcrKIowNldf2gfAVOTmyQ5plUHNq2PmAbswx/b3bZISPQ2zm0elG ge+fD2Pol4TFvTCL4nIG9wF92V0W50EGxnqWEVYdtwnMX7Rhp4PFBhWIRyPT6DWg vn87BBFeS8CuPDJQwscZO9GsRmV8e+PXeGbSNYpcARMruwtCyGcMzh5JSOvqvKHQ qpChcFdprp+3U2a6VuOg6IU0aq+cvwL6snxJktyi5queYOcNM3Pw25DBOGxlpIu0 5AKISbaGgeyR1bhl+HvmErR1W4vgt57SAl0vOlJz+VLei8exppU= -----END CERTIFICATE-----Generated at Sat Mar 28 11:43:46 2026 by rpki-client