$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145364.roa File: AS145364.roa (raw, json) Hash identifier: +nP0c45UfUb19DMWDLkjekHJtpA6Uug18ztPp1G3vpw= Subject key identifier: 9F:74:FF:08:35:6A:B9:E1:E4:00:DD:F2:B6:41:04:28:59:78:1B:54 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 2076A81F152F27E71F7EA056563B3C2ABB3A895F Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145364.roa Signing time: Wed 04 Mar 2026 06:21:00 +0000 ROA not before: Wed 04 Mar 2026 06:16:00 +0000 ROA not after: Wed 03 Mar 2027 06:21:00 +0000 asID: 145364 IP address blocks: 240a:aa9a::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:76:a8:1f:15:2f:27:e7:1f:7e:a0:56:56:3b:3c:2a:bb:3a:89:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:16:00 2026 GMT Not After : Mar 3 06:21:00 2027 GMT Subject: CN=9F74FF08356AB9E1E400DDF2B641042859781B54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:78:bc:b6:2c:1f:73:1c:4f:6c:a4:1b:a5:67: d3:b5:39:b5:cf:48:86:b2:e1:69:95:d4:fd:15:9a: 3e:81:99:a2:c4:14:34:1b:41:cc:58:e9:47:cd:4a: fe:0e:fe:d9:2d:82:78:28:ec:ba:ee:73:e7:4b:c1: 9a:ba:86:98:bc:44:21:cf:cb:93:20:c4:8f:23:20: 17:71:41:b7:eb:f3:95:db:52:f0:c2:53:2e:c8:97: ed:a1:f9:59:10:d5:86:2b:4c:03:12:b6:8e:23:cf: 33:06:70:87:d8:13:66:c2:74:93:84:d0:b3:5f:1e: 7c:56:3e:28:77:90:4a:4b:fd:33:e9:3c:f3:79:27: 75:3e:6b:65:72:da:3f:18:64:e1:91:d5:fd:c2:75: 2b:2a:d0:e1:4e:37:15:d4:43:b9:5f:c6:ae:2e:07: 33:78:02:4a:38:90:82:a4:10:c1:b9:18:68:5a:c5: 18:65:92:a7:5c:c7:b1:b3:0f:b4:38:b1:87:1d:0a: 33:d0:00:d3:37:41:36:d1:65:11:12:46:aa:8a:2f: e2:43:1d:4a:1c:f3:28:22:6d:79:d0:52:3c:3d:58: 59:36:cf:92:54:9d:2e:8c:0a:4f:90:42:5a:24:63: ee:c3:eb:00:3a:d4:b8:9f:23:b8:64:6a:04:48:10: 6c:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:74:FF:08:35:6A:B9:E1:E4:00:DD:F2:B6:41:04:28:59:78:1B:54 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145364.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:aa9a::/32 Signature Algorithm: sha256WithRSAEncryption 4f:a2:2c:1a:6a:93:17:cb:64:bf:15:a0:e7:e1:c0:ac:fd:23: b6:54:6b:fb:1c:65:38:2f:9a:92:33:a8:92:ae:03:e8:ce:6d: b6:6b:a7:d4:ba:08:56:6e:1c:76:9f:e8:bc:00:b6:e6:38:71: ea:0b:56:08:23:31:fd:26:2c:65:ab:cc:fb:08:8b:28:16:3d: 33:a1:b3:d3:9b:28:1e:d7:ef:2a:ee:b2:b5:49:56:5d:af:d2: f5:cb:99:cf:e4:00:fe:5b:9d:26:62:aa:83:4e:77:4e:a0:41: fe:8c:a5:a9:56:78:80:93:39:e3:e9:c7:3e:d0:45:e4:d0:bf: 34:2a:b4:7d:7c:97:4c:8c:a8:39:46:6b:97:d1:02:de:59:e3: ff:60:1f:01:4a:04:84:51:07:0c:e7:71:cd:ad:1c:8d:ad:82: b2:26:df:14:d8:b2:07:f9:f1:3b:dd:81:52:32:13:22:19:91: b6:77:a1:25:20:3c:6d:cd:ed:0d:a3:c5:9b:70:1e:b4:f6:73: e6:3f:73:0d:cd:37:62:59:dc:27:94:7a:f5:e0:b7:fd:32:e9: b8:e1:33:c9:b9:ea:04:33:f1:39:01:7f:3f:cb:17:60:98:34: a6:0e:12:f5:b3:2c:03:fa:ea:6d:27:68:5a:a6:76:47:8e:27: 74:60:5c:ed -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUIHaoHxUvJ+cffqBWVjs8Krs6iV8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTYwMFoX DTI3MDMwMzA2MjEwMFowMzExMC8GA1UEAxMoOUY3NEZGMDgzNTZBQjlFMUU0MDBE REYyQjY0MTA0Mjg1OTc4MUI1NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAI94vLYsH3McT2ykG6Vn07U5tc9IhrLhaZXU/RWaPoGZosQUNBtBzFjpR81K /g7+2S2CeCjsuu5z50vBmrqGmLxEIc/LkyDEjyMgF3FBt+vzldtS8MJTLsiX7aH5 WRDVhitMAxK2jiPPMwZwh9gTZsJ0k4TQs18efFY+KHeQSkv9M+k883kndT5rZXLa Pxhk4ZHV/cJ1KyrQ4U43FdRDuV/Gri4HM3gCSjiQgqQQwbkYaFrFGGWSp1zHsbMP tDixhx0KM9AA0zdBNtFlERJGqoov4kMdShzzKCJtedBSPD1YWTbPklSdLowKT5BC WiRj7sPrADrUuJ8juGRqBEgQbN8CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSfdP8I NWq54eQA3fK2QQQoWXgbVDAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTM2NC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qpowDQYJKoZIhvcNAQELBQADggEBAE+iLBpqkxfLZL8VoOfhwKz9I7ZUa/scZTgv mpIzqJKuA+jObbZrp9S6CFZuHHaf6LwAtuY4ceoLVggjMf0mLGWrzPsIiygWPTOh s9ObKB7X7yrusrVJVl2v0vXLmc/kAP5bnSZiqoNOd06gQf6MpalWeICTOePpxz7Q ReTQvzQqtH18l0yMqDlGa5fRAt5Z4/9gHwFKBIRRBwzncc2tHI2tgrIm3xTYsgf5 8TvdgVIyEyIZkbZ3oSUgPG3N7Q2jxZtwHrT2c+Y/cw3NN2JZ3CeUevXgt/0y6bjh M8m56gQz8TkBfz/LF2CYNKYOEvWzLAP66m0naFqmdkeOJ3RgXO0= -----END CERTIFICATE-----Generated at Sat Mar 28 11:49:24 2026 by rpki-client