$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145403.roa File: AS145403.roa (raw, json) Hash identifier: qtL2zLpPkcjzKruXvaqIVthP3GcrwW1+KNbfGK6ORoY= Subject key identifier: AD:58:68:04:32:40:D5:F3:13:A3:5D:2D:AB:92:D6:5A:1F:78:01:12 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 71A621A26A9D81E3B5B52E61BEB989014DB0151A Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145403.roa Signing time: Wed 04 Mar 2026 06:19:56 +0000 ROA not before: Wed 04 Mar 2026 06:14:56 +0000 ROA not after: Wed 03 Mar 2027 06:19:56 +0000 asID: 145403 IP address blocks: 240a:aac1::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:a6:21:a2:6a:9d:81:e3:b5:b5:2e:61:be:b9:89:01:4d:b0:15:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:14:56 2026 GMT Not After : Mar 3 06:19:56 2027 GMT Subject: CN=AD5868043240D5F313A35D2DAB92D65A1F780112 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:09:57:93:70:8c:75:1f:26:0a:b8:87:64:7c: 80:e6:a2:14:40:f1:0a:d6:20:46:5c:c8:49:4f:03: c4:97:d6:b6:46:a9:ff:e1:e2:eb:1f:01:39:5b:d0: 63:5f:60:1a:0d:b4:f2:8a:d5:01:6a:2d:d3:69:86: 90:cf:27:69:03:5e:42:ab:51:eb:6e:11:9f:eb:11: 85:94:9d:89:85:b6:4e:9b:21:92:36:3e:9f:41:ec: 79:2e:3d:f0:f7:30:b6:04:ab:90:d9:ce:df:e3:25: 77:0c:04:67:23:d4:67:11:fe:24:b4:31:7e:95:9a: 66:a6:6f:cc:0e:1b:f5:e1:71:44:ee:be:f2:d4:95: 1c:05:48:38:8e:2c:ad:f7:01:b8:85:33:bb:44:26: ab:10:ed:94:53:58:8f:89:4a:b7:a8:0c:e8:8b:62: 9e:ad:cb:a1:7b:08:6e:9a:e3:c3:ef:9b:fe:c6:d1: 99:d2:8c:89:0e:bb:b7:69:62:99:68:c8:bc:d3:cc: bc:3e:13:80:a1:b2:c4:be:7c:3f:60:a7:64:98:76: de:c1:92:d3:2f:4e:72:1a:2f:1e:a8:93:72:47:45: 16:69:fc:80:5c:cf:23:6c:c7:cc:88:fe:59:a8:b3: 0c:2d:6a:0b:bb:33:b4:31:07:75:57:f1:5f:e8:03: e1:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:58:68:04:32:40:D5:F3:13:A3:5D:2D:AB:92:D6:5A:1F:78:01:12 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145403.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:aac1::/32 Signature Algorithm: sha256WithRSAEncryption 7d:e4:48:18:63:50:26:be:44:59:c0:68:1d:20:1e:7a:6f:dd: e3:d4:ac:30:af:ac:8e:b7:c9:c0:fb:bb:24:26:8f:2d:f5:f5: 62:ad:a5:92:4b:58:55:50:2e:31:2e:cb:6f:21:f5:70:44:9f: 61:32:32:81:05:82:21:6b:fd:af:6d:bd:7d:92:c2:60:ed:84: d7:fd:81:f2:ec:fc:bc:d8:cc:9f:b9:fd:8f:df:0a:b6:11:7b: 7c:a3:98:32:91:00:38:aa:26:c6:ce:61:4c:68:7d:a9:d4:d3: e6:21:7e:9b:0a:e7:ee:af:60:04:6d:08:24:1c:16:21:de:29: 6c:62:35:bc:59:25:44:e4:24:f6:53:60:2b:34:c8:31:05:5b: 55:04:a6:8d:f1:2e:d2:e9:7e:9b:90:35:18:3a:12:0f:13:4a: 3b:b7:5e:29:c8:70:fc:0f:23:d0:f4:1a:dd:e7:eb:d2:42:c0: c0:de:9c:3c:98:89:bd:46:07:62:d9:d8:92:67:da:90:c6:7c: ea:27:11:5d:3a:fa:46:cf:31:d9:4b:66:69:a5:d2:de:f4:11: 2f:c6:c4:98:6d:73:d9:f3:bb:68:e0:f8:08:bb:e5:ca:d9:57: 0a:eb:eb:73:9f:d8:60:81:a1:a4:90:bd:45:5c:ff:92:3b:9d: 06:68:d2:d3 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUcaYhomqdgeO1tS5hvrmJAU2wFRowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTQ1NloX DTI3MDMwMzA2MTk1NlowMzExMC8GA1UEAxMoQUQ1ODY4MDQzMjQwRDVGMzEzQTM1 RDJEQUI5MkQ2NUExRjc4MDExMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKcJV5NwjHUfJgq4h2R8gOaiFEDxCtYgRlzISU8DxJfWtkap/+Hi6x8BOVvQ Y19gGg208orVAWot02mGkM8naQNeQqtR624Rn+sRhZSdiYW2TpshkjY+n0HseS49 8PcwtgSrkNnO3+MldwwEZyPUZxH+JLQxfpWaZqZvzA4b9eFxRO6+8tSVHAVIOI4s rfcBuIUzu0QmqxDtlFNYj4lKt6gM6Itinq3LoXsIbprjw++b/sbRmdKMiQ67t2li mWjIvNPMvD4TgKGyxL58P2CnZJh23sGS0y9OchovHqiTckdFFmn8gFzPI2zHzIj+ WaizDC1qC7sztDEHdVfxX+gD4dcCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBStWGgE MkDV8xOjXS2rktZaH3gBEjAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTQwMy5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qsEwDQYJKoZIhvcNAQELBQADggEBAH3kSBhjUCa+RFnAaB0gHnpv3ePUrDCvrI63 ycD7uyQmjy319WKtpZJLWFVQLjEuy28h9XBEn2EyMoEFgiFr/a9tvX2SwmDthNf9 gfLs/LzYzJ+5/Y/fCrYRe3yjmDKRADiqJsbOYUxofanU0+YhfpsK5+6vYARtCCQc FiHeKWxiNbxZJUTkJPZTYCs0yDEFW1UEpo3xLtLpfpuQNRg6Eg8TSju3XinIcPwP I9D0Gt3n69JCwMDenDyYib1GB2LZ2JJn2pDGfOonEV06+kbPMdlLZmml0t70ES/G xJhtc9nzu2jg+Ai75crZVwrr63Of2GCBoaSQvUVc/5I7nQZo0tM= -----END CERTIFICATE-----Generated at Sat Mar 28 13:16:43 2026 by rpki-client