$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145321.roa File: AS145321.roa (raw, json) Hash identifier: AXMM156zlVi1N/3kGiWXvhy4TvB8REsavwN4U3J3FWM= Subject key identifier: CC:AF:81:DD:D1:DD:DE:F2:7D:4E:2C:EB:42:90:C2:83:0B:DF:D0:27 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 4BAD40365C18CB6FB4489F84B3D9B59A81051E4F Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145321.roa Signing time: Wed 04 Mar 2026 06:22:37 +0000 ROA not before: Wed 04 Mar 2026 06:17:37 +0000 ROA not after: Wed 03 Mar 2027 06:22:37 +0000 asID: 145321 IP address blocks: 240a:aa6f::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:ad:40:36:5c:18:cb:6f:b4:48:9f:84:b3:d9:b5:9a:81:05:1e:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:17:37 2026 GMT Not After : Mar 3 06:22:37 2027 GMT Subject: CN=CCAF81DDD1DDDEF27D4E2CEB4290C2830BDFD027 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:f4:c2:da:dd:e7:04:70:a0:4b:c1:93:aa:18: 4d:b1:43:c0:b2:d5:de:97:6d:e0:25:f1:94:dd:41: 86:0c:0f:c4:bc:5f:73:60:44:a5:62:5c:45:ec:40: ed:02:30:b1:9b:8a:0b:c3:00:11:0b:d9:be:98:30: aa:0c:1b:95:67:66:63:8f:45:f7:0d:c2:00:bc:f3: e1:51:88:9c:89:2f:cd:5c:3d:9b:d9:d1:62:17:17: c0:82:a9:cb:cc:34:6b:f7:1d:97:9f:01:29:16:7d: fb:7a:dd:01:30:c1:4b:a5:ec:ad:cf:57:d2:b9:4b: 74:ba:46:7e:c9:65:4c:95:b3:b1:9c:5d:60:6a:a5: b0:36:c7:58:2f:84:d8:5e:0d:91:bc:e5:f7:7d:b6: c9:33:61:9c:c2:74:8e:38:4b:29:c2:0d:f7:64:20: 02:7b:bd:4d:43:52:39:78:22:b3:17:9e:42:3a:c2: a8:e1:77:e4:37:3f:ce:8e:70:d9:83:fe:8a:f5:a8: 8a:0c:a9:39:02:a1:36:0c:30:a9:3e:8f:e1:2e:9d: 63:39:45:c9:12:40:91:d4:35:d9:76:a1:ab:cb:cf: 25:84:9f:93:60:35:71:63:38:4c:bd:44:bb:49:0c: 03:a3:5c:fa:7a:30:16:67:3f:79:54:4d:a7:5c:b6: 0c:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:AF:81:DD:D1:DD:DE:F2:7D:4E:2C:EB:42:90:C2:83:0B:DF:D0:27 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145321.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:aa6f::/32 Signature Algorithm: sha256WithRSAEncryption ab:9c:f7:29:8e:8c:7a:36:fe:b1:94:16:64:a8:e6:b0:77:b8: a4:1c:e8:72:7d:0b:3c:57:8a:05:f0:d4:d3:f1:d1:34:68:f6: 60:0a:db:67:6e:db:08:8b:ff:f4:a8:cb:17:e5:f7:95:b8:49: 11:21:0f:db:00:e6:52:37:46:2e:cf:61:8e:0a:a6:6e:0f:a7: 36:e0:06:c8:6e:c3:79:78:b8:5a:4c:15:e4:41:63:28:5f:8f: 1c:b0:6f:53:4f:3c:4d:df:ea:99:1e:56:a6:60:60:00:5a:10: 6f:9c:68:bf:69:99:95:b8:1c:49:fe:a5:75:8c:5c:33:a8:e4: cf:7a:18:6c:16:38:78:dd:38:25:ba:75:fe:f0:67:21:bf:ac: cd:a9:37:f4:40:30:81:32:dd:6f:3e:3e:99:14:90:b5:21:a9: d2:7e:dc:ea:eb:b4:bc:3c:31:52:83:21:2d:3d:39:5f:cb:f2: fa:bf:77:42:1e:1b:80:46:8e:58:40:e0:ed:aa:10:76:94:17: 64:8e:c9:2d:98:0a:11:51:a2:3b:48:fd:33:68:03:fd:db:83: a2:0a:a2:43:65:68:c0:fb:da:03:9b:75:ab:12:b4:47:20:5e: e7:b1:44:93:a2:2b:35:5a:91:d0:d3:4f:8b:da:20:bc:da:3b: 89:5a:c5:71 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUS61ANlwYy2+0SJ+Es9m1moEFHk8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTczN1oX DTI3MDMwMzA2MjIzN1owMzExMC8GA1UEAxMoQ0NBRjgxREREMUREREVGMjdENEUy Q0VCNDI5MEMyODMwQkRGRDAyNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALr0wtrd5wRwoEvBk6oYTbFDwLLV3pdt4CXxlN1BhgwPxLxfc2BEpWJcRexA 7QIwsZuKC8MAEQvZvpgwqgwblWdmY49F9w3CALzz4VGInIkvzVw9m9nRYhcXwIKp y8w0a/cdl58BKRZ9+3rdATDBS6Xsrc9X0rlLdLpGfsllTJWzsZxdYGqlsDbHWC+E 2F4Nkbzl9322yTNhnMJ0jjhLKcIN92QgAnu9TUNSOXgisxeeQjrCqOF35Dc/zo5w 2YP+ivWoigypOQKhNgwwqT6P4S6dYzlFyRJAkdQ12Xahq8vPJYSfk2A1cWM4TL1E u0kMA6Nc+nowFmc/eVRNp1y2DIcCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBTMr4Hd 0d3e8n1OLOtCkMKDC9/QJzAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTMyMS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qm8wDQYJKoZIhvcNAQELBQADggEBAKuc9ymOjHo2/rGUFmSo5rB3uKQc6HJ9CzxX igXw1NPx0TRo9mAK22du2wiL//Soyxfl95W4SREhD9sA5lI3Ri7PYY4Kpm4Ppzbg Bshuw3l4uFpMFeRBYyhfjxywb1NPPE3f6pkeVqZgYABaEG+caL9pmZW4HEn+pXWM XDOo5M96GGwWOHjdOCW6df7wZyG/rM2pN/RAMIEy3W8+PpkUkLUhqdJ+3OrrtLw8 MVKDIS09OV/L8vq/d0IeG4BGjlhA4O2qEHaUF2SOyS2YChFRojtI/TNoA/3bg6IK okNlaMD72gObdasStEcgXuexRJOiKzVakdDTT4vaILzaO4laxXE= -----END CERTIFICATE-----Generated at Sat Mar 28 13:11:24 2026 by rpki-client