$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145969.roa File: AS145969.roa (raw, json) Hash identifier: ewG+zhPqRVPyqk3MQR8j+szdrY6Bsa3L+6SnI24iSqo= Subject key identifier: E4:0A:F0:04:77:A9:FB:FF:2E:CF:4B:B2:27:D8:2D:34:C3:1F:9E:BA Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 0128C017852445A8517B8D8307793C3196A329FF Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145969.roa Signing time: Wed 04 Mar 2026 06:30:46 +0000 ROA not before: Wed 04 Mar 2026 06:25:46 +0000 ROA not after: Wed 03 Mar 2027 06:30:46 +0000 asID: 145969 IP address blocks: 240a:acf7::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:28:c0:17:85:24:45:a8:51:7b:8d:83:07:79:3c:31:96:a3:29:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:25:46 2026 GMT Not After : Mar 3 06:30:46 2027 GMT Subject: CN=E40AF00477A9FBFF2ECF4BB227D82D34C31F9EBA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:32:c6:ee:b2:47:5b:6c:0b:02:d9:b3:3b:bf: c2:04:74:83:b9:48:1c:80:b9:89:30:2e:2e:e3:d4: 65:39:6e:84:3a:52:a0:e0:1e:2f:5b:cf:43:e9:25: 83:d1:75:0c:0e:24:5f:58:0f:fd:77:14:59:28:41: b2:21:9d:fb:60:a2:b8:10:52:b7:f1:be:11:88:a7: a2:11:4a:1e:b0:21:d0:d8:5c:bb:48:61:e0:40:ef: 5c:f6:30:57:34:f0:c1:f3:cb:98:74:32:f4:17:16: f7:22:18:93:52:63:d3:0e:39:9e:0e:63:74:83:80: 6b:b9:cf:94:82:54:60:81:b0:e0:4d:97:1a:82:c7: 69:e5:f3:1d:99:53:0b:6c:69:87:23:a4:90:7c:dc: 1c:56:a0:39:10:3f:eb:6a:5c:18:b4:d5:33:25:b8: 30:dd:b7:00:41:d1:2f:28:e9:c3:20:a5:7e:7b:87: 96:d4:3f:94:c9:f6:1c:b0:cf:b0:8f:c4:b1:12:bc: a4:e3:3d:ec:4e:f1:37:9d:a6:ba:22:08:17:61:c9: 26:11:e5:8e:2e:45:cb:08:eb:2e:a9:7d:4c:c2:fa: 48:42:0c:d6:0c:29:0e:97:60:2d:6f:35:c8:68:e2: 3a:82:5e:74:fd:7f:e1:c8:7b:b7:e9:37:f5:06:1d: 79:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:0A:F0:04:77:A9:FB:FF:2E:CF:4B:B2:27:D8:2D:34:C3:1F:9E:BA X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145969.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:acf7::/32 Signature Algorithm: sha256WithRSAEncryption d2:61:de:6f:06:46:64:59:31:57:42:c1:8c:cc:2c:32:42:60: 15:76:60:13:62:84:05:f2:e6:bd:77:dd:42:28:9a:82:d5:6a: 47:ad:c1:f8:ad:69:36:19:f2:5d:c1:83:e8:51:e4:c3:f5:5c: 77:08:94:a2:0a:0b:dd:76:29:41:e8:57:16:27:69:52:9f:e6: 80:c4:90:41:05:99:4f:d5:39:52:fc:a8:a0:18:02:a8:f2:00: 6a:cb:e9:7d:47:43:1b:28:20:7c:bb:a7:ee:94:84:a8:18:f5: d7:7c:bb:f0:56:a4:1f:3d:73:8e:f6:ed:cf:4e:a2:20:52:3e: 66:13:20:ae:1a:4e:75:8b:fd:81:d2:77:04:f5:8f:de:5b:44: 98:ce:63:31:bf:dd:25:d1:d1:e2:39:f7:cc:71:ad:94:ed:ab: 51:75:e3:c2:2c:e2:51:94:18:ed:79:11:71:20:2b:b4:26:f6: b9:ff:40:d3:c2:e8:e2:ac:43:5b:e7:2b:58:b0:7f:fe:7b:ce: 38:60:4f:db:29:35:31:25:65:ed:d7:4a:21:dc:ec:10:fc:7a: a4:57:5a:f0:c6:bb:22:60:a2:59:0e:97:89:37:c1:b2:db:4b: bb:d3:82:d5:04:dd:85:f7:d1:03:9d:81:9a:2d:14:c2:fd:d6: 2f:6f:35:26 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUASjAF4UkRahRe42DB3k8MZajKf8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MjU0NloX DTI3MDMwMzA2MzA0NlowMzExMC8GA1UEAxMoRTQwQUYwMDQ3N0E5RkJGRjJFQ0Y0 QkIyMjdEODJEMzRDMzFGOUVCQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALoyxu6yR1tsCwLZszu/wgR0g7lIHIC5iTAuLuPUZTluhDpSoOAeL1vPQ+kl g9F1DA4kX1gP/XcUWShBsiGd+2CiuBBSt/G+EYinohFKHrAh0Nhcu0hh4EDvXPYw VzTwwfPLmHQy9BcW9yIYk1Jj0w45ng5jdIOAa7nPlIJUYIGw4E2XGoLHaeXzHZlT C2xphyOkkHzcHFagORA/62pcGLTVMyW4MN23AEHRLyjpwyClfnuHltQ/lMn2HLDP sI/EsRK8pOM97E7xN52muiIIF2HJJhHlji5FywjrLql9TML6SEIM1gwpDpdgLW81 yGjiOoJedP1/4ch7t+k39QYdeX8CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBTkCvAE d6n7/y7PS7In2C00wx+eujAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTk2OS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rPcwDQYJKoZIhvcNAQELBQADggEBANJh3m8GRmRZMVdCwYzMLDJCYBV2YBNihAXy 5r133UIomoLVaketwfitaTYZ8l3Bg+hR5MP1XHcIlKIKC912KUHoVxYnaVKf5oDE kEEFmU/VOVL8qKAYAqjyAGrL6X1HQxsoIHy7p+6UhKgY9dd8u/BWpB89c4727c9O oiBSPmYTIK4aTnWL/YHSdwT1j95bRJjOYzG/3SXR0eI598xxrZTtq1F148Is4lGU GO15EXEgK7Qm9rn/QNPC6OKsQ1vnK1iwf/57zjhgT9spNTElZe3XSiHc7BD8eqRX WvDGuyJgolkOl4k3wbLbS7vTgtUE3YX30QOdgZotFML91i9vNSY= -----END CERTIFICATE-----Generated at Sat Mar 28 14:26:38 2026 by rpki-client