$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145379.roa File: AS145379.roa (raw, json) Hash identifier: ko1KEgSecZxV8c+73mqA49rg3lIbj0zX7AtlIf6YLdA= Subject key identifier: 20:D5:F3:28:49:03:05:00:E1:8B:BB:3A:55:2D:2F:6A:30:36:49:01 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 03784E180677510DC598C96A2BA09FA429633E34 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145379.roa Signing time: Wed 04 Mar 2026 06:19:20 +0000 ROA not before: Wed 04 Mar 2026 06:14:20 +0000 ROA not after: Wed 03 Mar 2027 06:19:20 +0000 asID: 145379 IP address blocks: 240a:aaa9::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:78:4e:18:06:77:51:0d:c5:98:c9:6a:2b:a0:9f:a4:29:63:3e:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:14:20 2026 GMT Not After : Mar 3 06:19:20 2027 GMT Subject: CN=20D5F32849030500E18BBB3A552D2F6A30364901 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:e2:29:c2:26:c4:80:e3:76:27:74:07:5b:2e: cf:79:60:86:a7:4c:79:f6:71:30:60:42:54:b6:4f: 73:1b:e7:9d:f1:25:35:5a:be:12:7e:4e:cf:e8:69: aa:49:96:74:38:d6:e8:5d:8a:3b:b0:56:45:a8:9d: 46:d5:b7:48:df:a1:35:5c:e0:44:9f:ca:7d:51:d7: 9e:ac:e5:ce:14:d2:a9:77:bc:32:15:67:82:5d:45: e1:27:af:17:ec:27:76:7a:fb:98:4f:8e:43:c8:c1: af:a7:81:2b:1c:c6:08:65:53:16:72:2e:0e:6f:b8: 50:87:77:15:15:35:27:0b:22:ca:47:93:9e:61:d3: 34:d2:74:93:02:f1:e3:33:7d:42:49:ff:fb:2d:80: 37:9e:d4:14:94:4f:1b:6a:49:0d:ff:e2:7b:f1:b2: b9:5f:2f:f3:a8:ec:d3:3e:bd:bb:dc:fa:0b:b8:f9: 77:71:09:5c:0d:db:e9:3a:81:30:7b:df:7d:f5:91: 4e:1c:04:fb:43:2a:22:cd:09:05:60:6e:50:e7:6a: c9:be:a5:0c:60:af:38:1a:1f:fc:fe:15:29:28:f1: 73:28:a9:cf:19:e1:6b:f8:6f:db:fd:02:e6:71:7a: a3:34:a1:7f:75:95:68:af:96:25:fd:93:9e:63:6c: fa:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:D5:F3:28:49:03:05:00:E1:8B:BB:3A:55:2D:2F:6A:30:36:49:01 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145379.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:aaa9::/32 Signature Algorithm: sha256WithRSAEncryption a5:d1:db:75:a4:2a:6f:c2:b8:bf:f1:b4:c9:e1:1c:37:d0:a9: d4:80:4b:50:ba:86:b6:ca:b7:ed:f1:5b:90:75:31:3c:37:42: c5:8b:f7:f6:cb:04:26:ec:0f:d3:b4:29:02:9e:98:29:31:46: 39:e2:9a:75:c9:02:a7:30:ea:28:60:e9:94:71:50:7c:6c:43: a2:1d:46:f2:1b:13:6c:38:b5:d6:bb:87:ad:58:b1:7d:1d:a6: ee:89:15:0a:a6:b8:17:8d:f6:5f:96:4a:65:ea:e2:ae:a8:f7: 94:0f:89:32:56:68:dc:0b:f5:e1:c2:74:47:c2:17:7f:14:f7: 7d:f0:0a:ff:c9:7b:d2:1b:6c:79:34:27:8a:f8:eb:92:e9:de: 3e:2d:c5:0e:40:b4:5c:63:26:25:21:b3:b6:82:13:d5:4b:03: 4c:7d:ec:d8:a2:db:40:c3:db:a9:57:b5:f5:3f:c9:08:ae:c5: e1:62:ea:22:d8:9e:20:ad:fd:3f:49:9e:9d:d2:d4:c7:7c:ab: ea:7e:2b:18:b7:d6:42:74:b7:59:9e:71:2d:d4:66:b5:38:71: 8a:a6:e9:15:ee:c5:14:f1:b4:c6:1b:a8:97:b8:f2:40:9f:d1: 27:f5:aa:fa:9d:fd:1c:45:3a:e9:7a:ae:2e:f7:36:34:cb:5a: ac:a9:ea:34 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUA3hOGAZ3UQ3FmMlqK6CfpCljPjQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTQyMFoX DTI3MDMwMzA2MTkyMFowMzExMC8GA1UEAxMoMjBENUYzMjg0OTAzMDUwMEUxOEJC QjNBNTUyRDJGNkEzMDM2NDkwMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKbiKcImxIDjdid0B1suz3lghqdMefZxMGBCVLZPcxvnnfElNVq+En5Oz+hp qkmWdDjW6F2KO7BWRaidRtW3SN+hNVzgRJ/KfVHXnqzlzhTSqXe8MhVngl1F4Sev F+wndnr7mE+OQ8jBr6eBKxzGCGVTFnIuDm+4UId3FRU1JwsiykeTnmHTNNJ0kwLx 4zN9Qkn/+y2AN57UFJRPG2pJDf/ie/GyuV8v86js0z69u9z6C7j5d3EJXA3b6TqB MHvfffWRThwE+0MqIs0JBWBuUOdqyb6lDGCvOBof/P4VKSjxcyipzxnha/hv2/0C 5nF6ozShf3WVaK+WJf2TnmNs+t8CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQg1fMo SQMFAOGLuzpVLS9qMDZJATAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTM3OS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qqkwDQYJKoZIhvcNAQELBQADggEBAKXR23WkKm/CuL/xtMnhHDfQqdSAS1C6hrbK t+3xW5B1MTw3QsWL9/bLBCbsD9O0KQKemCkxRjnimnXJAqcw6ihg6ZRxUHxsQ6Id RvIbE2w4tda7h61YsX0dpu6JFQqmuBeN9l+WSmXq4q6o95QPiTJWaNwL9eHCdEfC F38U933wCv/Je9IbbHk0J4r465Lp3j4txQ5AtFxjJiUhs7aCE9VLA0x97Nii20DD 26lXtfU/yQiuxeFi6iLYniCt/T9Jnp3S1Md8q+p+Kxi31kJ0t1mecS3UZrU4cYqm 6RXuxRTxtMYbqJe48kCf0Sf1qvqd/RxFOul6ri73NjTLWqyp6jQ= -----END CERTIFICATE-----Generated at Sat Mar 28 11:41:50 2026 by rpki-client