$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145242.roa File: AS145242.roa (raw, json) Hash identifier: NKep6sTzfdlX4zOFyg6bs3m+jFTsK2zqdZuQZJKOoiM= Subject key identifier: 00:E6:81:EC:DB:20:6F:19:1D:FF:3B:D5:27:8C:0A:AB:EE:00:60:A9 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 04A75B47E36588C352C0382A627BE2B557FB4D2C Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145242.roa Signing time: Wed 04 Mar 2026 06:22:32 +0000 ROA not before: Wed 04 Mar 2026 06:17:32 +0000 ROA not after: Wed 03 Mar 2027 06:22:32 +0000 asID: 145242 IP address blocks: 240a:aa20::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:a7:5b:47:e3:65:88:c3:52:c0:38:2a:62:7b:e2:b5:57:fb:4d:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:17:32 2026 GMT Not After : Mar 3 06:22:32 2027 GMT Subject: CN=00E681ECDB206F191DFF3BD5278C0AABEE0060A9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:10:2e:0d:10:27:ca:1e:f4:39:27:3a:4a:91: a2:68:a8:bb:fe:d2:68:ff:46:50:13:4e:d6:a8:0d: 20:f7:99:da:0d:bd:26:c0:72:9b:a4:91:9f:70:42: cb:f7:6d:81:59:5d:97:3a:d7:3a:af:21:bf:8d:25: f9:24:64:f4:58:34:4a:67:c4:5f:21:83:49:67:c2: cc:51:c0:9a:02:99:05:a1:fc:96:de:d6:76:4c:b5: 22:46:b1:c2:77:5f:3f:0d:d3:fa:50:e3:3d:7e:82: bf:d5:6c:44:61:51:b1:a7:a9:8e:16:b2:42:85:66: ea:b8:a9:17:52:60:d2:bf:68:70:19:c5:1d:63:46: f6:db:68:e0:3e:73:87:e2:2b:d2:32:0b:12:94:07: 09:23:43:e7:d5:96:32:23:e3:ca:95:63:58:75:61: 03:5c:d5:30:05:8b:7d:39:06:6f:db:10:00:f7:87: 68:47:12:82:09:e5:d7:21:07:b5:81:6c:6c:66:63: a6:f0:a1:65:38:f4:04:72:09:53:f2:b2:a4:d8:2d: dd:c4:94:e3:31:71:59:bb:f8:ce:b2:68:f8:47:4b: 6d:0d:14:e1:a4:4a:1d:e4:c9:07:c5:fe:80:13:e2: 3c:4c:8d:84:a2:0d:5b:d1:b3:bb:ae:16:09:8f:78: fa:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:E6:81:EC:DB:20:6F:19:1D:FF:3B:D5:27:8C:0A:AB:EE:00:60:A9 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145242.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:aa20::/32 Signature Algorithm: sha256WithRSAEncryption 0f:f7:cc:07:9e:f2:6d:db:8b:60:f7:6a:78:19:22:20:68:da: d7:6e:a4:4d:63:62:3a:92:6e:b6:44:1b:ce:f9:d3:82:92:a8: 06:84:6f:0a:a5:73:36:f4:7c:db:03:34:d7:9e:33:7a:71:91: 55:50:17:dc:b8:fd:c5:a8:77:40:d9:c4:2a:70:03:60:89:01: a5:18:4c:25:16:b6:c8:1d:bf:06:f3:24:22:78:dc:fe:0f:d4: 79:a2:cc:ff:30:b1:4c:12:25:33:07:77:55:52:71:fc:b1:ed: d7:cb:26:37:e0:1b:78:86:db:29:6d:fa:90:66:de:cf:cb:fa: c0:d5:ad:a7:db:3c:a1:eb:33:d4:dd:22:9b:7e:a9:3f:9a:87: 87:f1:34:b4:67:ba:97:89:09:4c:47:bc:ee:b6:9f:33:89:97: a1:24:d8:b0:9e:41:a8:5d:3a:e0:a1:73:47:83:dd:de:2b:0a: 97:26:9e:a9:72:f9:60:06:19:14:4f:61:74:28:1f:46:4f:eb: 7e:c2:3d:9b:b5:71:44:4c:af:7c:63:62:71:83:23:af:c4:12: c2:c0:dc:2a:84:51:bd:ac:65:1f:ed:67:02:9e:76:e2:55:12: 46:7a:62:dd:9a:f7:66:15:6c:b0:18:cd:04:a0:0a:03:30:af: 1d:02:79:08 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUBKdbR+NliMNSwDgqYnvitVf7TSwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTczMloX DTI3MDMwMzA2MjIzMlowMzExMC8GA1UEAxMoMDBFNjgxRUNEQjIwNkYxOTFERkYz QkQ1Mjc4QzBBQUJFRTAwNjBBOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK4QLg0QJ8oe9DknOkqRomiou/7SaP9GUBNO1qgNIPeZ2g29JsBym6SRn3BC y/dtgVldlzrXOq8hv40l+SRk9Fg0SmfEXyGDSWfCzFHAmgKZBaH8lt7Wdky1Ikax wndfPw3T+lDjPX6Cv9VsRGFRsaepjhayQoVm6ripF1Jg0r9ocBnFHWNG9tto4D5z h+Ir0jILEpQHCSND59WWMiPjypVjWHVhA1zVMAWLfTkGb9sQAPeHaEcSggnl1yEH tYFsbGZjpvChZTj0BHIJU/KypNgt3cSU4zFxWbv4zrJo+EdLbQ0U4aRKHeTJB8X+ gBPiPEyNhKINW9Gzu64WCY94+i8CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQA5oHs 2yBvGR3/O9UnjAqr7gBgqTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTI0Mi5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qiAwDQYJKoZIhvcNAQELBQADggEBAA/3zAee8m3bi2D3angZIiBo2tdupE1jYjqS brZEG87504KSqAaEbwqlczb0fNsDNNeeM3pxkVVQF9y4/cWod0DZxCpwA2CJAaUY TCUWtsgdvwbzJCJ43P4P1HmizP8wsUwSJTMHd1VScfyx7dfLJjfgG3iG2ylt+pBm 3s/L+sDVrafbPKHrM9TdIpt+qT+ah4fxNLRnupeJCUxHvO62nzOJl6Ek2LCeQahd OuChc0eD3d4rCpcmnqly+WAGGRRPYXQoH0ZP637CPZu1cURMr3xjYnGDI6/EEsLA 3CqEUb2sZR/tZwKeduJVEkZ6Yt2a92YVbLAYzQSgCgMwrx0CeQg= -----END CERTIFICATE-----Generated at Sat Mar 28 11:42:32 2026 by rpki-client