$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145345.roa File: AS145345.roa (raw, json) Hash identifier: 9TcTIGdNJAXwDVFw42kfGZe8W6TKfLHP6HCWPb/l3tI= Subject key identifier: 3B:C6:F7:B7:09:2A:AB:76:86:D2:B7:27:37:CA:05:09:BE:48:9C:5C Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 2943FB23EF9A37456555504652D7C33C30ECD007 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145345.roa Signing time: Wed 04 Mar 2026 06:20:53 +0000 ROA not before: Wed 04 Mar 2026 06:15:53 +0000 ROA not after: Wed 03 Mar 2027 06:20:53 +0000 asID: 145345 IP address blocks: 240a:aa87::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:43:fb:23:ef:9a:37:45:65:55:50:46:52:d7:c3:3c:30:ec:d0:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:15:53 2026 GMT Not After : Mar 3 06:20:53 2027 GMT Subject: CN=3BC6F7B7092AAB7686D2B72737CA0509BE489C5C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:fd:23:f8:fd:0a:d8:80:c7:3f:6d:6e:98:65: b3:d2:d9:98:83:34:7a:55:61:d6:ba:4a:9e:2d:e6: 90:dd:f4:f8:6c:a4:38:1f:db:d7:15:83:bd:ed:4d: 2d:77:40:4a:5c:92:5a:6e:ed:33:bc:70:22:fb:bc: 95:b4:f9:67:4e:de:27:ba:36:72:fc:b3:8a:12:f0: 52:35:83:0e:77:f3:d9:ca:e4:8f:a6:ea:7e:02:da: 1e:9f:92:9d:94:67:d0:18:94:db:6d:5a:44:e8:77: 57:5e:b5:53:4b:8b:b7:ac:d5:73:82:5e:1e:ef:0e: b5:40:15:85:f9:9b:f5:ff:10:95:12:6d:26:d1:d3: ed:a7:b1:67:b8:ce:a6:74:c9:c8:96:2d:60:40:60: 05:af:56:80:5c:d8:ff:c5:b6:4c:b0:44:93:2d:9f: df:61:a0:79:68:d5:f7:da:93:54:8b:be:8d:45:fd: b2:1e:e4:b3:2c:f2:c1:f4:8a:d0:d7:85:6a:30:29: ff:68:7a:dc:cd:44:5a:3b:7a:ef:b7:71:fb:79:1b: 76:b1:8d:c2:62:6b:90:e2:60:d6:a7:1d:3d:7e:73: 2b:2a:6e:02:07:53:c4:2b:64:c2:44:d5:e9:5a:79: 50:aa:e2:6d:79:04:87:53:cb:e0:06:e6:26:c8:5c: b2:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:C6:F7:B7:09:2A:AB:76:86:D2:B7:27:37:CA:05:09:BE:48:9C:5C X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145345.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:aa87::/32 Signature Algorithm: sha256WithRSAEncryption 36:b0:1f:c1:95:1a:69:6e:1b:9e:7e:10:ec:05:e8:c1:22:96: bd:95:ca:7e:8a:c1:4f:7e:65:1a:8c:41:74:cf:cf:ac:a4:87: 08:bb:cb:36:d5:f6:4d:f5:d3:5e:13:45:5f:a9:6b:c7:41:6b: 59:3a:b2:41:ca:00:2a:e1:74:d5:26:cf:1e:8d:61:55:d3:b2: 60:f4:bb:91:a2:71:23:dc:d1:f0:ce:ab:77:d2:a5:b8:c6:62: 9b:90:a8:a6:87:27:13:d7:fd:76:a1:38:13:c6:8b:59:ac:f6: 43:48:36:9b:4b:c0:57:fa:a5:f9:cd:48:6b:12:f1:a9:6a:39: cc:cf:85:11:a6:60:56:e2:ec:2e:55:17:9c:b4:f1:a6:37:c8: b9:35:6a:42:84:65:90:98:0c:f5:48:01:82:f5:f9:d1:29:9a: e9:f3:7f:30:97:08:30:86:66:b3:d8:9c:70:4c:0d:2a:5a:33: 11:4b:a9:fe:cc:20:6d:d4:9c:4f:0a:bc:b2:e8:33:d0:80:61: 61:fb:39:83:f3:55:ed:6f:a1:0a:2e:2c:50:1a:9f:8a:15:e8: f5:8e:ce:43:b6:6c:01:99:8a:98:a3:7e:69:b4:1f:18:e6:8f: 5d:7d:31:8d:ea:29:dc:97:a2:54:5a:35:0c:f9:d5:02:44:16: 42:8c:e4:9c -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUKUP7I++aN0VlVVBGUtfDPDDs0AcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTU1M1oX DTI3MDMwMzA2MjA1M1owMzExMC8GA1UEAxMoM0JDNkY3QjcwOTJBQUI3Njg2RDJC NzI3MzdDQTA1MDlCRTQ4OUM1QzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAIf9I/j9CtiAxz9tbphls9LZmIM0elVh1rpKni3mkN30+GykOB/b1xWDve1N LXdASlySWm7tM7xwIvu8lbT5Z07eJ7o2cvyzihLwUjWDDnfz2crkj6bqfgLaHp+S nZRn0BiU221aROh3V161U0uLt6zVc4JeHu8OtUAVhfmb9f8QlRJtJtHT7aexZ7jO pnTJyJYtYEBgBa9WgFzY/8W2TLBEky2f32GgeWjV99qTVIu+jUX9sh7ksyzywfSK 0NeFajAp/2h63M1EWjt677dx+3kbdrGNwmJrkOJg1qcdPX5zKypuAgdTxCtkwkTV 6Vp5UKribXkEh1PL4AbmJshcso8CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQ7xve3 CSqrdobStyc3ygUJvkicXDAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTM0NS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qocwDQYJKoZIhvcNAQELBQADggEBADawH8GVGmluG55+EOwF6MEilr2Vyn6KwU9+ ZRqMQXTPz6ykhwi7yzbV9k31014TRV+pa8dBa1k6skHKACrhdNUmzx6NYVXTsmD0 u5GicSPc0fDOq3fSpbjGYpuQqKaHJxPX/XahOBPGi1ms9kNINptLwFf6pfnNSGsS 8alqOczPhRGmYFbi7C5VF5y08aY3yLk1akKEZZCYDPVIAYL1+dEpmunzfzCXCDCG ZrPYnHBMDSpaMxFLqf7MIG3UnE8KvLLoM9CAYWH7OYPzVe1voQouLFAan4oV6PWO zkO2bAGZipijfmm0Hxjmj119MY3qKdyXolRaNQz51QJEFkKM5Jw= -----END CERTIFICATE-----Generated at Sat Mar 28 11:42:07 2026 by rpki-client