$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145967.roa File: AS145967.roa (raw, json) Hash identifier: LqBY10b5Zp2cQai4tJYAFanMFerWXyHEPzys/Ep9qaw= Subject key identifier: FB:DB:E1:00:0A:C3:9E:E3:EE:2D:0F:1E:53:32:73:AA:58:5A:0C:46 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 23C47EF0CFB36EF9D2097FDEFB48316F0F36E5D2 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145967.roa Signing time: Wed 04 Mar 2026 06:30:13 +0000 ROA not before: Wed 04 Mar 2026 06:25:13 +0000 ROA not after: Wed 03 Mar 2027 06:30:13 +0000 asID: 145967 IP address blocks: 240a:acf5::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:c4:7e:f0:cf:b3:6e:f9:d2:09:7f:de:fb:48:31:6f:0f:36:e5:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:25:13 2026 GMT Not After : Mar 3 06:30:13 2027 GMT Subject: CN=FBDBE1000AC39EE3EE2D0F1E533273AA585A0C46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:f2:25:bb:c9:ce:e0:6b:47:55:eb:65:11:c8: 4c:03:a1:ee:22:ac:61:58:5a:82:a4:a1:78:a7:b4: c0:6c:1a:05:2f:c5:86:5e:48:49:b2:37:26:31:00: 17:64:9f:12:5d:98:fc:80:28:01:95:5c:77:45:3b: 13:10:33:0e:20:b1:5d:70:af:f3:b2:d2:29:9c:57: 0a:5e:cb:99:2a:79:78:9b:6b:8f:f8:bb:9b:94:1f: e7:65:20:c4:00:e3:ab:3a:bd:c0:63:82:ba:f3:06: a4:ff:ca:4b:46:30:39:95:76:ce:6f:ae:c3:ed:90: 44:f4:5a:da:02:c8:dd:58:fa:53:21:33:91:66:7b: 7c:a4:48:65:0e:28:51:2f:60:a2:e6:8e:22:3e:18: e9:ad:3e:1b:af:55:26:7e:d4:9a:33:32:e2:20:42: 37:97:51:4d:bc:43:56:1b:ef:07:63:f7:7a:7b:c4: b1:d5:f5:a9:9e:f3:80:02:3e:fb:65:4f:c1:95:8a: d3:f4:f8:0f:3a:e9:7f:15:eb:18:31:6a:7b:23:7f: b3:fc:71:a7:59:af:8c:92:45:df:99:e1:72:af:9a: f8:24:f4:47:84:c9:a3:0f:69:ac:c9:bd:43:32:43: d7:a6:0d:4d:48:3f:5d:64:af:33:77:1f:ad:f6:3a: 3a:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:DB:E1:00:0A:C3:9E:E3:EE:2D:0F:1E:53:32:73:AA:58:5A:0C:46 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145967.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:acf5::/32 Signature Algorithm: sha256WithRSAEncryption 3e:83:df:36:c0:06:ea:d7:f7:e6:5e:7e:be:87:7e:01:e2:48: 56:bf:9a:29:2a:91:b9:3e:86:e8:82:94:8f:f0:06:06:da:f1: c3:bd:7f:48:b5:cc:57:df:fa:ca:b9:85:30:55:51:49:6d:49: b5:a6:f1:95:75:3e:65:8f:15:68:2a:bd:0f:bf:48:68:4e:a0: fa:6f:dd:ac:ec:f0:17:db:66:fb:24:ce:02:5a:5a:7a:62:a0: eb:a8:db:46:b5:11:0f:c6:28:df:86:09:dc:3c:9e:6b:97:27: 5f:d8:aa:12:6e:3d:ec:5e:14:b7:76:03:53:da:82:57:e5:77: 47:04:c2:c9:e4:db:72:e8:d6:b6:58:db:82:69:55:18:99:01: 90:e1:f7:97:67:3d:97:cc:3c:3f:be:aa:ab:42:ac:52:e4:56: 9b:a5:f9:b5:b1:ba:29:e4:76:87:a9:7f:99:26:28:67:c5:3a: 14:bb:12:c9:cb:c8:65:18:d4:53:c9:65:21:d4:00:16:0d:4a: 2a:47:8d:f1:43:8e:ea:12:74:88:c8:07:d7:f2:d0:d7:b5:51: e5:6f:0c:91:26:69:8f:5a:6d:b4:26:ba:65:a8:c4:5d:84:1d: c5:af:f5:a0:c4:35:4b:12:0b:c3:91:5e:78:f0:91:bb:81:67: af:f1:62:22 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUI8R+8M+zbvnSCX/e+0gxbw825dIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MjUxM1oX DTI3MDMwMzA2MzAxM1owMzExMC8GA1UEAxMoRkJEQkUxMDAwQUMzOUVFM0VFMkQw RjFFNTMzMjczQUE1ODVBMEM0NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJTyJbvJzuBrR1XrZRHITAOh7iKsYVhagqSheKe0wGwaBS/Fhl5ISbI3JjEA F2SfEl2Y/IAoAZVcd0U7ExAzDiCxXXCv87LSKZxXCl7LmSp5eJtrj/i7m5Qf52Ug xADjqzq9wGOCuvMGpP/KS0YwOZV2zm+uw+2QRPRa2gLI3Vj6UyEzkWZ7fKRIZQ4o US9gouaOIj4Y6a0+G69VJn7UmjMy4iBCN5dRTbxDVhvvB2P3envEsdX1qZ7zgAI+ +2VPwZWK0/T4DzrpfxXrGDFqeyN/s/xxp1mvjJJF35nhcq+a+CT0R4TJow9prMm9 QzJD16YNTUg/XWSvM3cfrfY6OjUCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBT72+EA CsOe4+4tDx5TMnOqWFoMRjAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTk2Ny5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rPUwDQYJKoZIhvcNAQELBQADggEBAD6D3zbABurX9+Zefr6HfgHiSFa/mikqkbk+ huiClI/wBgba8cO9f0i1zFff+sq5hTBVUUltSbWm8ZV1PmWPFWgqvQ+/SGhOoPpv 3azs8BfbZvskzgJaWnpioOuo20a1EQ/GKN+GCdw8nmuXJ1/YqhJuPexeFLd2A1Pa glfld0cEwsnk23Lo1rZY24JpVRiZAZDh95dnPZfMPD++qqtCrFLkVpul+bWxuink doepf5kmKGfFOhS7EsnLyGUY1FPJZSHUABYNSipHjfFDjuoSdIjIB9fy0Ne1UeVv DJEmaY9abbQmumWoxF2EHcWv9aDENUsSC8ORXnjwkbuBZ6/xYiI= -----END CERTIFICATE-----Generated at Sat Mar 28 11:46:17 2026 by rpki-client