$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145350.roa File: AS145350.roa (raw, json) Hash identifier: IcEY/uYbSvmke0IE9CB1eN05g4Qk+L5je5R/w8zPxf8= Subject key identifier: 3F:50:18:DF:FB:98:FE:E3:92:2D:5A:05:20:42:70:0E:EB:AF:62:FC Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 33453B5AAA250BE3E667E019AD219A9B462119AF Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145350.roa Signing time: Wed 04 Mar 2026 06:21:55 +0000 ROA not before: Wed 04 Mar 2026 06:16:55 +0000 ROA not after: Wed 03 Mar 2027 06:21:55 +0000 asID: 145350 IP address blocks: 240a:aa8c::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:45:3b:5a:aa:25:0b:e3:e6:67:e0:19:ad:21:9a:9b:46:21:19:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:16:55 2026 GMT Not After : Mar 3 06:21:55 2027 GMT Subject: CN=3F5018DFFB98FEE3922D5A052042700EEBAF62FC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:a5:85:8a:0f:68:a2:71:ab:25:01:d3:84:7c: 9c:08:4e:cc:17:e5:70:37:a4:e9:bd:62:b1:6b:df: 9c:cc:f9:9e:ec:87:f5:02:88:e2:74:c0:88:3d:da: 40:06:ee:91:cf:8e:83:26:dc:ca:51:a6:55:f0:da: dd:97:3e:ef:23:2c:e1:2b:52:47:bb:a0:2d:bd:46: f1:ef:59:5e:c1:7b:a9:97:a6:0a:31:a5:c2:90:e1: ac:9e:02:61:3c:f6:aa:d6:a4:dd:b9:a0:86:81:0d: f2:cb:1a:22:0c:01:10:a2:22:62:c3:e3:63:69:30: c4:03:3e:a1:38:9f:2c:53:2c:b2:a7:d4:7c:3b:13: 3f:08:0c:6f:46:f2:bd:ef:ab:5d:03:42:42:76:84: 9d:94:fa:af:5a:b6:01:0d:fc:37:01:2e:b8:88:bf: 59:52:2b:34:27:e2:85:65:10:58:ff:12:12:bd:9b: e1:81:de:b1:58:59:30:ff:30:0c:1e:31:16:7c:f4: aa:77:dd:87:2d:e2:54:a9:cc:19:eb:7e:66:cd:19: 0d:be:07:ff:57:c2:00:00:bc:90:e6:65:00:0d:93: 06:47:16:f0:f9:6e:56:9e:3f:04:91:78:20:39:51: b5:df:1c:3b:af:cd:b1:05:9e:59:84:58:f2:16:a9: 1e:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:50:18:DF:FB:98:FE:E3:92:2D:5A:05:20:42:70:0E:EB:AF:62:FC X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145350.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:aa8c::/32 Signature Algorithm: sha256WithRSAEncryption 01:39:74:01:ef:9d:06:8f:d4:40:1b:ef:7b:9a:cf:d9:79:84: b3:c1:34:71:f2:d8:a1:17:f5:ff:84:a5:bf:a5:7e:c5:6c:85: 3f:1e:a0:a1:2c:6e:27:e3:fb:72:89:e5:b4:7e:8e:58:e9:98: 15:ad:6c:1d:d4:f3:1c:c4:04:7a:ed:6b:c2:85:8f:69:49:4e: d8:08:12:1e:0b:95:df:9a:b4:87:b1:1d:91:fa:d6:88:80:cc: 4d:20:3f:d8:99:15:5b:fb:26:01:af:80:20:69:0a:ce:fd:36: a7:70:63:02:59:67:99:d0:7b:db:c6:b0:ea:89:6b:ee:c1:1a: 81:16:04:e8:0c:ef:0d:ba:dd:22:94:a4:ec:9e:99:89:ba:2f: 31:de:5e:8d:0d:c0:4d:33:e9:8c:61:d2:2a:47:0e:15:21:0c: ff:ad:88:be:02:d7:b8:61:40:49:89:0c:e9:21:80:13:14:31: 22:bd:6a:70:23:78:11:75:c3:78:3e:c5:e6:5a:b8:75:55:73: ed:a9:18:b7:bb:1e:66:77:ed:82:62:b0:d8:ed:d9:b7:e6:15: c6:52:53:c4:73:89:bf:16:2a:8c:a0:f4:50:0b:46:b5:db:81: 11:f8:65:60:b2:a8:3a:e6:99:25:11:2c:47:31:2e:90:3b:fe: d4:09:92:96 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUM0U7WqolC+PmZ+AZrSGam0YhGa8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTY1NVoX DTI3MDMwMzA2MjE1NVowMzExMC8GA1UEAxMoM0Y1MDE4REZGQjk4RkVFMzkyMkQ1 QTA1MjA0MjcwMEVFQkFGNjJGQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOmlhYoPaKJxqyUB04R8nAhOzBflcDek6b1isWvfnMz5nuyH9QKI4nTAiD3a QAbukc+OgybcylGmVfDa3Zc+7yMs4StSR7ugLb1G8e9ZXsF7qZemCjGlwpDhrJ4C YTz2qtak3bmghoEN8ssaIgwBEKIiYsPjY2kwxAM+oTifLFMssqfUfDsTPwgMb0by ve+rXQNCQnaEnZT6r1q2AQ38NwEuuIi/WVIrNCfihWUQWP8SEr2b4YHesVhZMP8w DB4xFnz0qnfdhy3iVKnMGet+Zs0ZDb4H/1fCAAC8kOZlAA2TBkcW8PluVp4/BJF4 IDlRtd8cO6/NsQWeWYRY8hapHu0CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQ/UBjf +5j+45ItWgUgQnAO669i/DAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTM1MC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qowwDQYJKoZIhvcNAQELBQADggEBAAE5dAHvnQaP1EAb73uaz9l5hLPBNHHy2KEX 9f+Epb+lfsVshT8eoKEsbifj+3KJ5bR+jljpmBWtbB3U8xzEBHrta8KFj2lJTtgI Eh4Lld+atIexHZH61oiAzE0gP9iZFVv7JgGvgCBpCs79NqdwYwJZZ5nQe9vGsOqJ a+7BGoEWBOgM7w263SKUpOyemYm6LzHeXo0NwE0z6Yxh0ipHDhUhDP+tiL4C17hh QEmJDOkhgBMUMSK9anAjeBF1w3g+xeZauHVVc+2pGLe7HmZ37YJisNjt2bfmFcZS U8Rzib8WKoyg9FALRrXbgRH4ZWCyqDrmmSURLEcxLpA7/tQJkpY= -----END CERTIFICATE-----Generated at Sat Mar 28 13:18:14 2026 by rpki-client