$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145218.roa File: AS145218.roa (raw, json) Hash identifier: MaiWmRIujRuKW5i0tm7eLjE7E7iNCJ6M2g5gE+4m93s= Subject key identifier: 8C:E1:62:0F:A5:57:78:4C:7D:72:E9:90:77:5C:E2:95:EF:64:2E:D4 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 1AA709D82F8EE7B82831F2FE2B54776F50AF7064 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145218.roa Signing time: Wed 04 Mar 2026 06:19:43 +0000 ROA not before: Wed 04 Mar 2026 06:14:43 +0000 ROA not after: Wed 03 Mar 2027 06:19:43 +0000 asID: 145218 IP address blocks: 240a:aa08::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:a7:09:d8:2f:8e:e7:b8:28:31:f2:fe:2b:54:77:6f:50:af:70:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:14:43 2026 GMT Not After : Mar 3 06:19:43 2027 GMT Subject: CN=8CE1620FA557784C7D72E990775CE295EF642ED4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:f8:a8:e4:b6:5f:3f:ff:5a:be:1c:fb:fc:ba: 32:d0:bc:8c:32:af:b4:06:26:10:16:69:45:e9:0e: 40:85:0a:c3:25:d1:37:e6:54:2a:db:18:49:b4:d1: 80:e2:1d:1f:d9:5f:d6:2a:a1:56:66:49:7a:43:af: 3f:a9:0f:50:ae:e4:15:e3:cb:26:58:19:95:57:f8: 76:0a:a9:92:04:bf:15:fb:33:20:ad:49:17:e2:df: ce:c6:34:ef:e5:0a:5f:c5:8e:33:0b:49:7a:05:a2: 3b:9b:25:ca:a2:a1:32:63:5b:16:39:2d:fa:d6:d1: fa:24:cd:a5:fb:28:26:34:55:8c:9a:1c:50:92:66: 4e:6b:fe:23:2b:a6:00:e5:09:77:3c:6e:d4:ef:8d: 1d:3c:1b:cd:d6:0d:a7:a1:07:6c:9c:c7:65:d4:ea: 45:ca:bc:15:a2:8c:e1:65:7c:44:5b:8b:be:c9:17: 91:45:dc:8d:8e:1e:05:62:09:b6:04:18:cd:99:28: 7d:62:7f:3f:43:56:dc:95:32:69:1a:8a:78:cc:4f: 75:8a:10:cb:f4:2d:b1:f9:e2:2f:ee:2c:cb:d1:17: 40:f9:3e:92:0b:a9:8e:3d:b5:97:a9:f5:3c:87:52: 57:f7:71:23:30:59:ff:14:43:bf:ac:f3:fa:7a:34: d3:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:E1:62:0F:A5:57:78:4C:7D:72:E9:90:77:5C:E2:95:EF:64:2E:D4 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145218.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:aa08::/32 Signature Algorithm: sha256WithRSAEncryption 10:93:6f:54:5f:47:4f:2d:7f:ff:8a:3d:2c:c1:c7:4f:55:de: dc:50:6a:d2:15:a6:ed:6e:40:63:5a:b3:56:a2:e1:9a:38:aa: 84:4f:56:5d:de:e2:38:c4:91:f4:1b:5e:0d:9a:49:f2:d0:8f: 4c:ed:81:dd:2b:49:04:d6:cb:51:b5:29:b0:93:d7:4e:56:67: 66:8b:fb:b4:70:f7:65:07:c7:e4:6c:d7:19:82:56:d8:0e:24: 73:d1:08:01:38:4f:c7:42:45:87:7d:fb:61:b2:ad:ec:42:b8: f8:07:cb:0b:74:27:64:97:e8:32:0e:f1:2e:60:65:ff:22:b9: 3c:86:3c:a8:b5:c0:a1:a2:e4:3d:94:84:84:54:fe:52:ab:b2: f6:88:37:a0:1f:40:04:ec:73:36:65:7b:17:0b:67:9d:c9:bc: ec:01:69:77:ea:08:30:55:09:2d:bd:cd:4f:4b:77:41:9c:dc: f8:91:41:f6:8b:1f:9d:7a:a7:44:1d:69:5a:e2:81:51:35:3e: 57:21:37:c0:ca:80:fe:47:f0:01:6e:cf:1e:8d:95:8b:71:57: 46:37:57:4b:05:50:0c:9a:58:cb:b4:3d:5f:25:79:f1:27:48: 75:54:ef:39:1e:72:35:85:6b:84:6c:45:98:3b:be:89:85:bc: a9:b2:00:75 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUGqcJ2C+O57goMfL+K1R3b1CvcGQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTQ0M1oX DTI3MDMwMzA2MTk0M1owMzExMC8GA1UEAxMoOENFMTYyMEZBNTU3Nzg0QzdENzJF OTkwNzc1Q0UyOTVFRjY0MkVENDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALX4qOS2Xz//Wr4c+/y6MtC8jDKvtAYmEBZpRekOQIUKwyXRN+ZUKtsYSbTR gOIdH9lf1iqhVmZJekOvP6kPUK7kFePLJlgZlVf4dgqpkgS/FfszIK1JF+LfzsY0 7+UKX8WOMwtJegWiO5slyqKhMmNbFjkt+tbR+iTNpfsoJjRVjJocUJJmTmv+Iyum AOUJdzxu1O+NHTwbzdYNp6EHbJzHZdTqRcq8FaKM4WV8RFuLvskXkUXcjY4eBWIJ tgQYzZkofWJ/P0NW3JUyaRqKeMxPdYoQy/QtsfniL+4sy9EXQPk+kgupjj21l6n1 PIdSV/dxIzBZ/xRDv6zz+no000UCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSM4WIP pVd4TH1y6ZB3XOKV72Qu1DAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTIxOC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qggwDQYJKoZIhvcNAQELBQADggEBABCTb1RfR08tf/+KPSzBx09V3txQatIVpu1u QGNas1ai4Zo4qoRPVl3e4jjEkfQbXg2aSfLQj0ztgd0rSQTWy1G1KbCT105WZ2aL +7Rw92UHx+Rs1xmCVtgOJHPRCAE4T8dCRYd9+2GyrexCuPgHywt0J2SX6DIO8S5g Zf8iuTyGPKi1wKGi5D2UhIRU/lKrsvaIN6AfQATsczZlexcLZ53JvOwBaXfqCDBV CS29zU9Ld0Gc3PiRQfaLH516p0QdaVrigVE1PlchN8DKgP5H8AFuzx6NlYtxV0Y3 V0sFUAyaWMu0PV8lefEnSHVU7zkecjWFa4RsRZg7vomFvKmyAHU= -----END CERTIFICATE-----Generated at Sat Mar 28 11:43:09 2026 by rpki-client