$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145984.roa File: AS145984.roa (raw, json) Hash identifier: AvTaA4CRl3wLf1XcIjUeCzy6adPDXnFkUyzcN2XZky8= Subject key identifier: 94:5B:53:93:38:31:2B:21:45:31:27:28:11:E1:79:13:C3:E6:7F:B5 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 7C931AE73206504F8A2F4B464BCD1F6904AE320F Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145984.roa Signing time: Wed 04 Mar 2026 06:31:08 +0000 ROA not before: Wed 04 Mar 2026 06:26:08 +0000 ROA not after: Wed 03 Mar 2027 06:31:08 +0000 asID: 145984 IP address blocks: 240a:ad06::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:93:1a:e7:32:06:50:4f:8a:2f:4b:46:4b:cd:1f:69:04:ae:32:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:26:08 2026 GMT Not After : Mar 3 06:31:08 2027 GMT Subject: CN=945B539338312B214531272811E17913C3E67FB5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:ec:05:7f:10:11:a5:d0:3f:3a:ed:28:a1:21: 9d:26:de:11:0b:f1:ad:1e:3d:93:80:0c:d6:fe:31: 14:b9:9a:d9:5e:01:4d:40:cb:2d:ef:63:0d:14:7c: 5e:85:77:58:99:07:06:77:7e:29:da:e5:b3:3d:4c: bb:d4:5f:9f:2b:5a:43:bd:68:3a:86:1b:8c:45:33: 4d:16:f0:78:b0:48:42:ff:4d:f1:9b:85:aa:b6:d3: 93:38:7a:da:e0:1c:d5:11:0f:dd:9c:0d:50:2f:0b: b9:aa:e9:10:be:c7:37:19:8a:ae:83:1b:8f:99:4e: c7:9e:2f:eb:fc:ce:2f:71:89:65:65:92:b5:32:61: 1b:68:5c:44:d8:b5:4e:70:46:00:bf:18:f3:57:75: 64:d8:d6:fa:92:a5:ec:0b:81:c4:74:4b:f4:28:8e: 9a:a2:8c:b3:81:73:35:67:b7:ce:12:96:a1:d8:1d: fd:de:cc:04:bc:37:07:63:cd:22:ec:88:17:c4:aa: 9d:94:2b:5b:08:ee:ab:ba:25:0a:f6:6c:68:44:51: 6f:28:8b:d4:c8:4a:b9:bf:40:c5:7b:12:5b:1f:86: 0c:1f:aa:1f:70:ec:45:99:cb:ec:a5:f2:52:2d:87: 31:74:f3:72:01:22:27:14:57:9c:c5:7b:6f:94:28: 53:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:5B:53:93:38:31:2B:21:45:31:27:28:11:E1:79:13:C3:E6:7F:B5 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145984.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:ad06::/32 Signature Algorithm: sha256WithRSAEncryption 05:7c:d3:cd:7d:c0:de:bc:82:0b:40:9a:d0:de:68:f9:a8:46: 87:05:18:84:0d:69:ce:92:66:58:a5:4e:bf:cc:72:36:d2:b5: c1:b8:05:f8:8c:8d:7c:08:f6:8c:06:37:c1:31:95:04:5d:ef: f7:7c:13:14:89:e8:2a:d5:56:4d:d9:19:3e:ca:0f:e1:45:02: c5:c8:d5:dd:a9:df:e8:74:ef:29:1d:fc:52:42:14:fa:67:f4: 45:23:5e:bb:6a:a9:42:14:1f:49:63:e5:2f:f8:29:2e:a0:02: 54:b3:c4:12:7e:2c:ef:92:c1:2d:50:05:60:94:bf:b3:b9:ae: e1:b3:d1:19:8c:5c:ca:61:92:a4:28:4a:cf:c2:42:4c:b8:d1: cb:7e:ae:d2:20:ba:57:47:78:e7:13:dd:dc:7f:35:d6:28:48: 5d:03:ad:ec:9c:8c:17:ae:2a:41:d5:93:b1:11:da:f3:f6:1d: fd:fd:f9:c7:18:c1:43:f4:cb:dd:0e:dc:d8:a2:96:91:fd:e0: 85:54:00:cf:84:4a:3c:57:73:02:89:c7:82:22:31:b9:4c:c7: 16:f0:5a:61:86:00:23:ca:7d:47:84:ed:d1:69:c7:61:29:a2: 1e:19:68:93:e7:bb:85:69:8e:33:b2:92:c3:e6:76:fe:23:85: c3:8c:75:bf -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUfJMa5zIGUE+KL0tGS80faQSuMg8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MjYwOFoX DTI3MDMwMzA2MzEwOFowMzExMC8GA1UEAxMoOTQ1QjUzOTMzODMxMkIyMTQ1MzEy NzI4MTFFMTc5MTNDM0U2N0ZCNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOLsBX8QEaXQPzrtKKEhnSbeEQvxrR49k4AM1v4xFLma2V4BTUDLLe9jDRR8 XoV3WJkHBnd+Kdrlsz1Mu9RfnytaQ71oOoYbjEUzTRbweLBIQv9N8ZuFqrbTkzh6 2uAc1REP3ZwNUC8LuarpEL7HNxmKroMbj5lOx54v6/zOL3GJZWWStTJhG2hcRNi1 TnBGAL8Y81d1ZNjW+pKl7AuBxHRL9CiOmqKMs4FzNWe3zhKWodgd/d7MBLw3B2PN IuyIF8SqnZQrWwjuq7olCvZsaERRbyiL1MhKub9AxXsSWx+GDB+qH3DsRZnL7KXy Ui2HMXTzcgEiJxRXnMV7b5QoU8UCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSUW1OT ODErIUUxJygR4XkTw+Z/tTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTk4NC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rQYwDQYJKoZIhvcNAQELBQADggEBAAV80819wN68ggtAmtDeaPmoRocFGIQNac6S ZlilTr/McjbStcG4BfiMjXwI9owGN8ExlQRd7/d8ExSJ6CrVVk3ZGT7KD+FFAsXI 1d2p3+h07ykd/FJCFPpn9EUjXrtqqUIUH0lj5S/4KS6gAlSzxBJ+LO+SwS1QBWCU v7O5ruGz0RmMXMphkqQoSs/CQky40ct+rtIguldHeOcT3dx/NdYoSF0DreycjBeu KkHVk7ER2vP2Hf39+ccYwUP0y90O3NiilpH94IVUAM+ESjxXcwKJx4IiMblMxxbw WmGGACPKfUeE7dFpx2Epoh4ZaJPnu4VpjjOyksPmdv4jhcOMdb8= -----END CERTIFICATE-----Generated at Sat Mar 28 11:45:00 2026 by rpki-client