$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145254.roa File: AS145254.roa (raw, json) Hash identifier: BJe0ddtARC9sJtTACbZKqoCb1RQUlapLnHoBrYNm3Rc= Subject key identifier: 84:32:21:DC:64:E6:91:62:E9:00:2C:01:05:C4:2D:07:47:96:CF:F2 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 36EA805BCBEF6D89225A7BCDBFDDE3947AA0474C Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145254.roa Signing time: Wed 04 Mar 2026 06:19:48 +0000 ROA not before: Wed 04 Mar 2026 06:14:48 +0000 ROA not after: Wed 03 Mar 2027 06:19:48 +0000 asID: 145254 IP address blocks: 240a:aa2c::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:ea:80:5b:cb:ef:6d:89:22:5a:7b:cd:bf:dd:e3:94:7a:a0:47:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:14:48 2026 GMT Not After : Mar 3 06:19:48 2027 GMT Subject: CN=843221DC64E69162E9002C0105C42D074796CFF2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:40:fe:33:83:6c:0a:be:a6:58:c7:f9:cf:c5: 8f:b2:79:ac:5c:26:78:1f:c7:98:a0:14:8e:9b:a6: 31:18:69:8b:62:a7:e9:5d:39:c2:18:59:37:68:36: c8:53:33:02:de:04:77:8f:ae:7a:ef:6b:85:b2:4b: 5d:ba:91:4f:a8:da:87:1d:b0:de:55:02:40:92:a2: 8f:23:20:6f:ca:2b:96:bb:ce:0f:7f:35:0a:37:81: 55:7f:5a:47:c7:a8:e9:7e:3a:65:a7:da:67:23:5c: a8:e1:9f:02:53:f2:f7:40:ff:bc:c3:34:0f:56:98: 37:34:50:11:9a:1e:03:6a:40:86:2c:f7:71:40:72: 58:d3:ee:62:da:fb:f2:2f:ae:16:ca:99:1a:33:d3: 7e:b2:d7:d0:af:bb:8b:a4:65:ab:a3:a8:13:27:3c: b6:88:21:42:32:f6:08:fe:bb:5d:43:94:09:76:5c: 9b:b9:b9:c7:2b:42:cd:c0:9d:07:c7:ac:85:b2:c9: 0d:97:e4:b3:04:e0:e6:33:59:1a:48:2b:3b:45:ee: 44:27:67:91:17:85:25:58:51:33:fb:cd:f8:93:ce: 59:bf:89:6d:09:9f:3f:05:43:e9:0f:b5:7b:32:46: 07:1d:9c:ec:31:a0:0c:4a:5a:0c:36:bf:6e:8c:41: ad:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:32:21:DC:64:E6:91:62:E9:00:2C:01:05:C4:2D:07:47:96:CF:F2 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145254.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:aa2c::/32 Signature Algorithm: sha256WithRSAEncryption c8:22:b5:e7:25:a1:87:a9:9c:cc:2b:e7:b2:29:98:50:80:ec: aa:10:85:25:f0:92:06:2d:35:18:67:1b:ac:39:65:b4:48:cc: 18:67:98:de:02:a7:4f:76:b5:45:86:be:c9:8a:1e:dc:09:95: a5:4a:3c:0f:af:23:75:5e:27:8d:08:34:a9:86:11:e9:f3:1c: 04:f8:60:f8:4b:75:61:02:90:eb:78:ed:b0:2c:80:c9:22:9f: a2:4e:43:4a:c4:e0:d5:42:c4:63:bc:2d:1f:da:08:12:b9:0f: 45:8a:c4:20:93:9f:20:65:32:9d:ef:b5:10:7f:5e:03:fa:a0: 25:dc:da:fa:f6:56:94:3d:ff:3e:72:23:45:45:ec:29:9b:9d: b8:05:e1:28:eb:23:e7:61:6d:8b:2a:f0:e7:93:d0:8b:02:b9: 03:2b:2b:09:a1:aa:66:01:69:fd:75:98:fe:57:f4:fe:33:d3: 39:04:15:c2:b7:67:99:c9:fd:45:f7:35:64:ae:d4:26:b8:b2: 34:ee:c7:2a:f6:6c:9e:c6:b6:d1:00:e2:b4:65:83:bf:cd:52: 74:9d:97:3a:fa:40:df:7d:25:da:b6:d0:76:0e:10:11:88:fb: af:b0:18:48:1b:99:69:43:bb:52:d7:e3:8a:0e:50:12:c3:ea: e6:49:14:9c -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUNuqAW8vvbYkiWnvNv93jlHqgR0wwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTQ0OFoX DTI3MDMwMzA2MTk0OFowMzExMC8GA1UEAxMoODQzMjIxREM2NEU2OTE2MkU5MDAy QzAxMDVDNDJEMDc0Nzk2Q0ZGMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALNA/jODbAq+pljH+c/Fj7J5rFwmeB/HmKAUjpumMRhpi2Kn6V05whhZN2g2 yFMzAt4Ed4+ueu9rhbJLXbqRT6jahx2w3lUCQJKijyMgb8orlrvOD381CjeBVX9a R8eo6X46ZafaZyNcqOGfAlPy90D/vMM0D1aYNzRQEZoeA2pAhiz3cUByWNPuYtr7 8i+uFsqZGjPTfrLX0K+7i6Rlq6OoEyc8toghQjL2CP67XUOUCXZcm7m5xytCzcCd B8eshbLJDZfkswTg5jNZGkgrO0XuRCdnkReFJVhRM/vN+JPOWb+JbQmfPwVD6Q+1 ezJGBx2c7DGgDEpaDDa/boxBrd0CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSEMiHc ZOaRYukALAEFxC0HR5bP8jAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTI1NC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qiwwDQYJKoZIhvcNAQELBQADggEBAMgitecloYepnMwr57IpmFCA7KoQhSXwkgYt NRhnG6w5ZbRIzBhnmN4Cp092tUWGvsmKHtwJlaVKPA+vI3VeJ40INKmGEenzHAT4 YPhLdWECkOt47bAsgMkin6JOQ0rE4NVCxGO8LR/aCBK5D0WKxCCTnyBlMp3vtRB/ XgP6oCXc2vr2VpQ9/z5yI0VF7CmbnbgF4SjrI+dhbYsq8OeT0IsCuQMrKwmhqmYB af11mP5X9P4z0zkEFcK3Z5nJ/UX3NWSu1Ca4sjTuxyr2bJ7GttEA4rRlg7/NUnSd lzr6QN99Jdq20HYOEBGI+6+wGEgbmWlDu1LX44oOUBLD6uZJFJw= -----END CERTIFICATE-----Generated at Sat Mar 28 11:41:20 2026 by rpki-client