$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145336.roa File: AS145336.roa (raw, json) Hash identifier: 17edgYt1NF1CnTB8m2opMpYWqGX8Uk7J3m5PYmT11m8= Subject key identifier: E7:B7:00:36:D9:9C:88:8D:C7:47:1F:D3:14:ED:40:EC:CE:C5:51:96 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 291FF3B53F56594CD88E0F0DCD36361CCE7456D8 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145336.roa Signing time: Wed 04 Mar 2026 06:22:18 +0000 ROA not before: Wed 04 Mar 2026 06:17:18 +0000 ROA not after: Wed 03 Mar 2027 06:22:18 +0000 asID: 145336 IP address blocks: 240a:aa7e::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:1f:f3:b5:3f:56:59:4c:d8:8e:0f:0d:cd:36:36:1c:ce:74:56:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:17:18 2026 GMT Not After : Mar 3 06:22:18 2027 GMT Subject: CN=E7B70036D99C888DC7471FD314ED40ECCEC55196 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:84:9f:bb:57:6f:ba:13:40:65:11:61:14:4c: b2:0f:c3:ce:e1:5f:f8:00:d6:76:e2:69:2b:41:f6: 2f:e0:5f:67:20:3f:a0:8b:c3:13:01:19:0c:04:6b: 1c:53:bc:0b:68:b5:02:d0:98:5f:3b:96:92:65:65: c4:8d:17:e9:73:06:af:75:0a:3e:50:3c:f4:a1:78: f8:dc:80:1c:36:80:6f:e4:22:bc:f7:1b:12:bb:35: bc:e3:02:7c:28:81:c9:21:f5:56:2d:0d:95:a2:19: 4a:cc:13:5a:67:2f:c0:7a:43:41:f6:48:a1:f0:d0: cd:a8:8b:0e:2a:96:1c:5e:c6:75:d8:2f:b8:86:38: e3:12:ad:e6:a4:00:2b:0d:3e:2e:e8:e2:b0:c7:43: fd:b2:bf:38:0b:a2:b7:89:60:06:3a:a9:12:5e:e2: c6:b6:f0:a7:5d:f1:35:bc:2f:a1:b8:c3:5b:35:e6: 1e:6f:4a:09:75:f4:9d:94:66:e0:ae:78:cb:11:9c: 5e:ca:76:d4:ce:b1:0a:b6:aa:40:1d:6e:25:0f:08: 06:47:80:a8:7e:47:82:3c:c9:86:bf:fd:5f:f8:1a: ec:e8:7f:fe:65:ad:b1:cf:2e:da:fd:f3:a5:6d:f3: 6d:52:32:13:68:dc:de:1e:2a:f4:e6:c2:d8:4f:4f: 5c:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:B7:00:36:D9:9C:88:8D:C7:47:1F:D3:14:ED:40:EC:CE:C5:51:96 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145336.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:aa7e::/32 Signature Algorithm: sha256WithRSAEncryption c2:75:39:d5:1c:84:35:19:d7:2f:46:fc:28:db:9e:aa:6c:48: 3e:d4:1c:6f:50:3a:6c:87:07:ce:9f:cc:96:45:c7:60:04:c2: d7:67:c1:68:fb:1e:5a:ba:10:34:84:b2:0d:45:33:0c:ab:a4: ae:59:94:47:a7:7a:5d:25:3b:59:29:67:99:bd:db:ff:71:62: 77:95:fa:72:b1:75:28:5f:2f:3a:34:c1:a5:5a:9c:da:fc:3b: aa:30:1d:50:05:bb:d4:78:9d:a0:4d:b1:e9:1f:bc:c3:7a:5f: 12:47:12:68:58:4c:e8:d1:86:f4:8a:b5:11:68:e8:23:cc:ab: 02:2c:07:c2:d8:60:72:c6:5c:81:14:92:a3:ed:5d:b6:a2:07: ca:74:77:7b:5f:46:ab:7e:c6:0b:bb:0a:49:85:6d:28:32:b6: 9a:84:17:d6:af:5a:ea:78:3e:c8:04:63:7d:4a:b0:76:7d:f2: 59:19:e0:58:28:45:3d:d8:fd:6a:9e:3a:72:5e:dd:64:44:13: b7:40:6d:8f:90:6d:ca:92:bd:10:e7:ab:bc:e3:4a:77:4f:cb: 2c:d8:f4:11:de:d7:ae:16:ff:37:ca:32:09:13:46:80:bb:85: 53:07:6a:b2:03:ad:4b:ae:a4:a9:ed:c9:b6:72:e0:a0:ae:0a: ae:50:b2:54 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUKR/ztT9WWUzYjg8NzTY2HM50VtgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTcxOFoX DTI3MDMwMzA2MjIxOFowMzExMC8GA1UEAxMoRTdCNzAwMzZEOTlDODg4REM3NDcx RkQzMTRFRDQwRUNDRUM1NTE5NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL2En7tXb7oTQGURYRRMsg/DzuFf+ADWduJpK0H2L+BfZyA/oIvDEwEZDARr HFO8C2i1AtCYXzuWkmVlxI0X6XMGr3UKPlA89KF4+NyAHDaAb+QivPcbErs1vOMC fCiBySH1Vi0NlaIZSswTWmcvwHpDQfZIofDQzaiLDiqWHF7GddgvuIY44xKt5qQA Kw0+LujisMdD/bK/OAuit4lgBjqpEl7ixrbwp13xNbwvobjDWzXmHm9KCXX0nZRm 4K54yxGcXsp21M6xCraqQB1uJQ8IBkeAqH5HgjzJhr/9X/ga7Oh//mWtsc8u2v3z pW3zbVIyE2jc3h4q9ObC2E9PXGkCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBTntwA2 2ZyIjcdHH9MU7UDszsVRljAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTMzNi5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qn4wDQYJKoZIhvcNAQELBQADggEBAMJ1OdUchDUZ1y9G/CjbnqpsSD7UHG9QOmyH B86fzJZFx2AEwtdnwWj7Hlq6EDSEsg1FMwyrpK5ZlEenel0lO1kpZ5m92/9xYneV +nKxdShfLzo0waVanNr8O6owHVAFu9R4naBNsekfvMN6XxJHEmhYTOjRhvSKtRFo 6CPMqwIsB8LYYHLGXIEUkqPtXbaiB8p0d3tfRqt+xgu7CkmFbSgytpqEF9avWup4 PsgEY31KsHZ98lkZ4FgoRT3Y/WqeOnJe3WREE7dAbY+QbcqSvRDnq7zjSndPyyzY 9BHe164W/zfKMgkTRoC7hVMHarIDrUuupKntybZy4KCuCq5QslQ= -----END CERTIFICATE-----Generated at Sat Mar 28 11:50:01 2026 by rpki-client