$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145342.roa File: AS145342.roa (raw, json) Hash identifier: pj7J0YLJqdwqWMn5EZ+//VkFvvJMitGwd+2NysHj4P0= Subject key identifier: AA:62:63:67:69:F8:AA:58:0B:24:33:6F:32:25:1B:50:C8:CB:B3:D5 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 67498AEE024EED9F00B12EAB279C3259571F43F4 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145342.roa Signing time: Wed 04 Mar 2026 06:20:53 +0000 ROA not before: Wed 04 Mar 2026 06:15:53 +0000 ROA not after: Wed 03 Mar 2027 06:20:53 +0000 asID: 145342 IP address blocks: 240a:aa84::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:49:8a:ee:02:4e:ed:9f:00:b1:2e:ab:27:9c:32:59:57:1f:43:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:15:53 2026 GMT Not After : Mar 3 06:20:53 2027 GMT Subject: CN=AA62636769F8AA580B24336F32251B50C8CBB3D5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:e0:b0:7b:8f:31:25:a6:a2:bd:1f:86:05:ab: 8e:88:3e:49:3a:88:a6:52:57:b3:54:ac:0c:8b:b5: 73:67:76:5f:b6:fa:0b:53:b4:33:39:b3:c4:0e:69: f7:c4:5d:84:84:f5:72:51:31:32:d5:1d:2d:3d:60: 2e:f8:44:61:a1:99:65:4c:7a:84:43:71:ce:c4:6f: 70:b1:82:fa:d2:32:bb:89:a6:61:b0:1e:09:91:4b: 53:30:ad:6d:43:ce:0a:2b:48:24:f6:c0:8e:17:37: 69:ad:04:ca:4f:71:cc:58:6f:35:48:0d:c1:dd:db: 36:7c:03:73:75:9f:20:37:62:15:47:77:9d:c1:f0: c2:b5:1e:84:52:fb:d2:26:c4:45:e1:c8:00:2d:49: 22:53:7f:f8:ee:f9:af:64:74:b1:99:70:7c:09:04: 65:09:ac:ea:9a:c6:80:c3:f4:8e:c0:0a:0c:19:b5: d7:0a:05:47:b8:ca:9a:48:6c:07:00:0f:00:6d:69: dc:27:14:1e:83:5d:5c:27:e7:a0:cf:0e:37:55:b9: 00:34:5d:dc:1b:c8:49:db:47:c9:a3:06:d6:b1:8c: 62:e1:87:a3:39:b6:c0:eb:b0:37:18:c5:94:83:39: 96:4a:dd:ee:ef:e8:a9:49:19:b4:1e:2e:a8:35:3d: 39:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:62:63:67:69:F8:AA:58:0B:24:33:6F:32:25:1B:50:C8:CB:B3:D5 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145342.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:aa84::/32 Signature Algorithm: sha256WithRSAEncryption 63:47:b7:ff:0a:5d:72:96:47:f6:08:66:c4:6d:1f:5c:e2:f2: 45:b3:ad:34:c7:85:1d:3d:11:78:28:d8:a6:5b:a3:29:31:31: fc:2e:c2:b2:d5:0c:a6:7a:46:4b:0b:52:ad:9a:21:d9:3b:2b: 44:e1:f1:98:4b:58:d5:a6:f6:fb:73:7d:54:ef:da:bc:9f:c0: c7:6c:21:49:14:ac:98:86:33:3f:56:f9:d0:e1:5b:f3:d6:6e: a1:b9:3f:09:1d:b4:ea:17:a0:d6:c6:49:03:f5:fa:56:9a:17: 8f:63:e6:6a:b4:4a:5b:6f:6b:4b:e3:42:f0:71:8b:40:43:24: 04:8a:2a:36:67:a6:bc:49:e7:0c:4e:b0:f4:ea:66:d7:3a:dc: 32:3f:2d:99:fa:32:15:94:7d:94:11:f9:e5:ff:d7:bd:77:c6: 99:d6:41:ac:93:c1:96:d0:8b:e5:b2:a2:77:14:9d:7c:ce:40: d7:32:31:9f:f8:34:e7:9a:5a:8b:b8:8d:52:37:a5:e9:a3:9c: ab:92:0b:84:04:39:a6:1e:70:22:3d:b1:93:8d:c0:4b:e1:b3: 18:ee:f0:23:1c:88:c8:13:4e:16:d9:c4:e3:df:f5:82:da:52: f3:d4:f0:00:c6:72:17:8f:c4:56:49:9b:0a:28:31:87:31:44: d2:c6:f5:de -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUZ0mK7gJO7Z8AsS6rJ5wyWVcfQ/QwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTU1M1oX DTI3MDMwMzA2MjA1M1owMzExMC8GA1UEAxMoQUE2MjYzNjc2OUY4QUE1ODBCMjQz MzZGMzIyNTFCNTBDOENCQjNENTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAIbgsHuPMSWmor0fhgWrjog+STqIplJXs1SsDIu1c2d2X7b6C1O0MzmzxA5p 98RdhIT1clExMtUdLT1gLvhEYaGZZUx6hENxzsRvcLGC+tIyu4mmYbAeCZFLUzCt bUPOCitIJPbAjhc3aa0Eyk9xzFhvNUgNwd3bNnwDc3WfIDdiFUd3ncHwwrUehFL7 0ibEReHIAC1JIlN/+O75r2R0sZlwfAkEZQms6prGgMP0jsAKDBm11woFR7jKmkhs BwAPAG1p3CcUHoNdXCfnoM8ON1W5ADRd3BvISdtHyaMG1rGMYuGHozm2wOuwNxjF lIM5lkrd7u/oqUkZtB4uqDU9OVECAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSqYmNn afiqWAskM28yJRtQyMuz1TAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTM0Mi5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qoQwDQYJKoZIhvcNAQELBQADggEBAGNHt/8KXXKWR/YIZsRtH1zi8kWzrTTHhR09 EXgo2KZboykxMfwuwrLVDKZ6RksLUq2aIdk7K0Th8ZhLWNWm9vtzfVTv2ryfwMds IUkUrJiGMz9W+dDhW/PWbqG5PwkdtOoXoNbGSQP1+laaF49j5mq0Sltva0vjQvBx i0BDJASKKjZnprxJ5wxOsPTqZtc63DI/LZn6MhWUfZQR+eX/1713xpnWQayTwZbQ i+WyoncUnXzOQNcyMZ/4NOeaWou4jVI3pemjnKuSC4QEOaYecCI9sZONwEvhsxju 8CMciMgTThbZxOPf9YLaUvPU8ADGchePxFZJmwooMYcxRNLG9d4= -----END CERTIFICATE-----Generated at Sat Mar 28 15:53:29 2026 by rpki-client