$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145989.roa File: AS145989.roa (raw, json) Hash identifier: gFzCg8+g1zBR9PnQj9I4+K/8ddx9v9tQpmvK4Uy+zn8= Subject key identifier: 6D:92:8F:73:4C:01:F8:67:A7:CB:50:EB:85:BA:E8:18:52:FC:BE:F3 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 2E966B9A225715D63CB570897E2786BEFF5B11FD Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145989.roa Signing time: Wed 04 Mar 2026 06:29:59 +0000 ROA not before: Wed 04 Mar 2026 06:24:59 +0000 ROA not after: Wed 03 Mar 2027 06:29:59 +0000 asID: 145989 IP address blocks: 240a:ad0b::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:96:6b:9a:22:57:15:d6:3c:b5:70:89:7e:27:86:be:ff:5b:11:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:24:59 2026 GMT Not After : Mar 3 06:29:59 2027 GMT Subject: CN=6D928F734C01F867A7CB50EB85BAE81852FCBEF3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:e3:40:7b:b6:91:b3:b6:c1:b5:1d:f9:f6:2d: a8:ae:03:3e:ee:f4:29:8e:81:5a:73:3b:35:25:15: 70:79:44:bc:06:ac:f9:3e:02:0d:ef:6b:90:7c:02: 3e:a9:77:d7:b3:bf:5c:9a:64:ee:51:74:7c:d1:47: 67:9d:2d:dd:ec:fd:86:3a:5e:8b:5c:dc:bc:cb:cc: 79:e1:b4:12:2d:a1:cd:be:c3:20:60:03:b0:72:36: d8:58:c9:48:36:80:6e:c0:c5:71:0c:47:e4:d0:89: 16:a0:66:58:c5:b2:7c:61:08:df:e0:5b:e2:ba:4c: 1c:2a:40:65:4f:03:f3:21:61:a0:73:95:98:2b:62: e1:f7:60:e1:37:eb:fa:03:05:eb:05:fb:56:24:a0: aa:d1:bf:7d:01:64:dd:f2:cc:f6:88:c2:d1:4e:dd: 07:66:bf:1d:49:57:7b:0f:50:9b:72:f2:63:7d:a5: 20:4e:20:95:16:13:14:f1:d9:b2:29:08:5d:35:5d: 16:1a:45:db:14:e4:5a:78:bb:94:ba:8f:93:17:f1: ea:91:73:c6:63:44:e3:1d:66:20:65:d4:04:3a:69: 60:23:cb:f1:e5:cd:1a:c0:96:13:cf:c8:99:bd:a5: da:ad:e9:c6:7a:7c:62:5d:19:9b:96:7c:a2:c2:57: 83:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:92:8F:73:4C:01:F8:67:A7:CB:50:EB:85:BA:E8:18:52:FC:BE:F3 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145989.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:ad0b::/32 Signature Algorithm: sha256WithRSAEncryption 5f:b7:62:fd:af:e0:c0:14:60:8b:4a:14:03:fb:3e:4b:ea:21: 0f:21:dc:71:7f:7d:6f:b3:03:53:8d:1a:b6:6a:6a:9e:58:c8: a5:0c:f0:60:14:d8:b2:0b:c5:0a:6d:3e:c7:71:01:14:86:71: 64:eb:7c:64:0d:13:70:95:40:7b:a5:86:b0:ee:00:b1:a3:21: 35:b2:0c:fe:62:8f:80:8f:98:f6:d8:25:0c:c5:fd:dd:19:6a: 89:7a:73:f2:32:98:89:27:e2:4f:aa:ab:ea:bb:38:2e:39:15: 9a:b8:33:33:6f:82:f7:2f:ff:3f:c0:7a:df:02:93:22:48:14: 57:6a:ed:10:b6:5a:8a:90:e4:6c:b3:10:f5:12:14:c8:5b:31: d9:2f:65:7d:1c:ec:05:f7:09:8f:8b:a2:29:39:6d:4a:ed:0c: 65:cd:0d:5b:27:5c:3a:58:50:e5:e7:86:11:cd:70:b3:62:f9: 20:eb:ed:c3:81:be:4a:b0:ab:42:e3:39:37:a8:2a:36:f9:e3: db:ff:ce:4d:29:6f:59:13:cc:89:47:ac:14:21:49:0d:b3:1f: 16:25:76:57:ca:77:f3:e7:d4:59:83:a9:ef:62:9a:4d:f5:d8: d8:f3:30:9f:f0:15:3c:53:01:97:ed:10:b8:ae:29:f9:bb:a9: b9:ce:cf:e4 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIULpZrmiJXFdY8tXCJfieGvv9bEf0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MjQ1OVoX DTI3MDMwMzA2Mjk1OVowMzExMC8GA1UEAxMoNkQ5MjhGNzM0QzAxRjg2N0E3Q0I1 MEVCODVCQUU4MTg1MkZDQkVGMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMTjQHu2kbO2wbUd+fYtqK4DPu70KY6BWnM7NSUVcHlEvAas+T4CDe9rkHwC Pql317O/XJpk7lF0fNFHZ50t3ez9hjpei1zcvMvMeeG0Ei2hzb7DIGADsHI22FjJ SDaAbsDFcQxH5NCJFqBmWMWyfGEI3+Bb4rpMHCpAZU8D8yFhoHOVmCti4fdg4Tfr +gMF6wX7ViSgqtG/fQFk3fLM9ojC0U7dB2a/HUlXew9Qm3LyY32lIE4glRYTFPHZ sikIXTVdFhpF2xTkWni7lLqPkxfx6pFzxmNE4x1mIGXUBDppYCPL8eXNGsCWE8/I mb2l2q3pxnp8Yl0Zm5Z8osJXgzsCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRtko9z TAH4Z6fLUOuFuugYUvy+8zAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTk4OS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rQswDQYJKoZIhvcNAQELBQADggEBAF+3Yv2v4MAUYItKFAP7PkvqIQ8h3HF/fW+z A1ONGrZqap5YyKUM8GAU2LILxQptPsdxARSGcWTrfGQNE3CVQHulhrDuALGjITWy DP5ij4CPmPbYJQzF/d0Zaol6c/IymIkn4k+qq+q7OC45FZq4MzNvgvcv/z/Aet8C kyJIFFdq7RC2WoqQ5GyzEPUSFMhbMdkvZX0c7AX3CY+Loik5bUrtDGXNDVsnXDpY UOXnhhHNcLNi+SDr7cOBvkqwq0LjOTeoKjb549v/zk0pb1kTzIlHrBQhSQ2zHxYl dlfKd/Pn1FmDqe9imk312NjzMJ/wFTxTAZftELiuKfm7qbnOz+Q= -----END CERTIFICATE-----Generated at Sat Mar 28 11:43:07 2026 by rpki-client