$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145381.roa File: AS145381.roa (raw, json) Hash identifier: 8X5sDeYJ9lb7T6J+vGT1Di/FrRvjwCww28U1FJAN6Bs= Subject key identifier: 2F:21:A7:06:10:BC:AC:29:40:71:76:94:F6:47:BF:73:5C:EB:C7:AC Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 787F7E7AD02742648B60CA750EDC5A591B655AD0 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145381.roa Signing time: Wed 04 Mar 2026 06:21:16 +0000 ROA not before: Wed 04 Mar 2026 06:16:16 +0000 ROA not after: Wed 03 Mar 2027 06:21:16 +0000 asID: 145381 IP address blocks: 240a:aaab::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:7f:7e:7a:d0:27:42:64:8b:60:ca:75:0e:dc:5a:59:1b:65:5a:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:16:16 2026 GMT Not After : Mar 3 06:21:16 2027 GMT Subject: CN=2F21A70610BCAC2940717694F647BF735CEBC7AC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:68:49:7a:53:1c:75:3a:e5:72:d0:22:b9:4b: f1:9b:7e:81:a3:5c:00:d1:4a:41:0e:7e:82:72:ba: ba:58:51:af:4a:36:c5:ae:d0:20:db:86:9b:1f:5d: b3:e1:af:ec:57:94:3b:28:b5:63:80:c3:84:7a:0c: 23:24:2d:aa:81:83:96:48:93:a7:cb:95:b2:ae:e2: 0f:a0:f0:17:ba:cc:86:72:7d:c6:70:be:27:a0:6c: da:aa:24:8d:ab:e3:82:e9:b2:4e:0f:d1:ce:2e:52: 6a:9c:fd:c2:90:a5:64:6d:f7:37:32:20:8b:c6:a5: 00:c4:06:38:ab:80:f5:1f:21:22:a9:87:87:fb:d6: 52:a8:a9:55:45:0d:9f:98:b1:6a:0f:70:45:be:88: 58:47:f6:e7:c2:ee:ed:93:d3:c6:aa:6d:94:de:ca: 86:85:f9:52:8b:c8:2f:1c:42:82:64:29:d7:eb:66: 70:c3:22:f7:3e:75:d9:35:01:51:c6:d8:9b:57:15: 74:92:d0:6f:6e:8f:cc:31:ea:88:8c:64:df:38:09: 83:6e:a0:c1:53:62:84:db:cd:ab:ad:1d:97:8b:24: c6:b0:ac:2c:6e:b5:19:a4:2b:19:96:83:7e:bf:ed: 37:43:f3:95:d0:c3:75:d3:86:1d:ef:e9:96:0b:92: 5d:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:21:A7:06:10:BC:AC:29:40:71:76:94:F6:47:BF:73:5C:EB:C7:AC X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145381.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:aaab::/32 Signature Algorithm: sha256WithRSAEncryption 18:ca:cc:18:07:70:dd:8e:a0:a1:7b:f8:81:76:0d:65:56:a3: 8a:84:5d:5c:b7:d1:1a:cb:1c:83:e1:2d:2c:a4:1e:c1:85:e9: f5:a0:36:6b:77:78:5c:cc:33:d1:f5:3f:64:3b:25:47:98:30: b7:86:18:50:b1:b0:ef:2c:33:f7:0e:04:ac:87:10:97:e3:26: 6d:74:f1:06:5d:45:6c:81:9d:12:48:1e:e7:23:a6:12:62:fc: 22:49:93:28:b5:49:80:89:6f:74:71:20:31:00:fb:b5:18:62: a1:2a:1c:b7:82:0f:63:1f:2f:1f:b8:82:ab:65:a7:df:4a:e0: f8:9d:c5:9c:37:a0:77:f3:ca:f7:c7:bb:a5:ab:4e:02:84:e6: a5:3d:a5:71:f1:f0:7d:c5:4f:4a:6b:4a:46:cf:a9:31:4f:d1: 73:cb:ab:25:cc:80:c7:15:34:69:2a:c1:87:4a:ff:4c:9b:f7: 8e:d8:6f:26:88:8c:28:c2:ac:5b:cd:87:d9:00:90:b7:5d:32: 23:7b:5f:10:9a:16:45:8b:9f:70:89:ab:bd:ba:c7:4f:cb:6d: f5:a6:0f:10:ee:40:1e:5d:c6:87:c8:8c:07:58:20:2c:be:e3: df:0f:4a:8d:5c:67:fa:cf:df:1c:0c:5f:83:f3:4c:37:00:76: 04:b9:e6:6c -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUeH9+etAnQmSLYMp1DtxaWRtlWtAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTYxNloX DTI3MDMwMzA2MjExNlowMzExMC8GA1UEAxMoMkYyMUE3MDYxMEJDQUMyOTQwNzE3 Njk0RjY0N0JGNzM1Q0VCQzdBQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMRoSXpTHHU65XLQIrlL8Zt+gaNcANFKQQ5+gnK6ulhRr0o2xa7QINuGmx9d s+Gv7FeUOyi1Y4DDhHoMIyQtqoGDlkiTp8uVsq7iD6DwF7rMhnJ9xnC+J6Bs2qok javjgumyTg/Rzi5Sapz9wpClZG33NzIgi8alAMQGOKuA9R8hIqmHh/vWUqipVUUN n5ixag9wRb6IWEf258Lu7ZPTxqptlN7KhoX5UovILxxCgmQp1+tmcMMi9z512TUB UcbYm1cVdJLQb26PzDHqiIxk3zgJg26gwVNihNvNq60dl4skxrCsLG61GaQrGZaD fr/tN0PzldDDddOGHe/plguSXQcCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQvIacG ELysKUBxdpT2R79zXOvHrDAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTM4MS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qqswDQYJKoZIhvcNAQELBQADggEBABjKzBgHcN2OoKF7+IF2DWVWo4qEXVy30RrL HIPhLSykHsGF6fWgNmt3eFzMM9H1P2Q7JUeYMLeGGFCxsO8sM/cOBKyHEJfjJm10 8QZdRWyBnRJIHucjphJi/CJJkyi1SYCJb3RxIDEA+7UYYqEqHLeCD2MfLx+4gqtl p99K4PidxZw3oHfzyvfHu6WrTgKE5qU9pXHx8H3FT0prSkbPqTFP0XPLqyXMgMcV NGkqwYdK/0yb947YbyaIjCjCrFvNh9kAkLddMiN7XxCaFkWLn3CJq726x0/LbfWm DxDuQB5dxofIjAdYICy+498PSo1cZ/rP3xwMX4PzTDcAdgS55mw= -----END CERTIFICATE-----Generated at Sat Mar 28 11:41:14 2026 by rpki-client