$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145407.roa File: AS145407.roa (raw, json) Hash identifier: BDykp/eFUt+f3y0s5wEKGoW7oItqe5Dx0UxuuCIbB+Q= Subject key identifier: F0:B8:F5:FB:63:21:74:6F:58:45:90:99:21:17:58:7D:7A:9E:0F:9B Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 16E04902FB22682729AD71D5610E22CDA4294E66 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145407.roa Signing time: Wed 04 Mar 2026 06:22:01 +0000 ROA not before: Wed 04 Mar 2026 06:17:01 +0000 ROA not after: Wed 03 Mar 2027 06:22:01 +0000 asID: 145407 IP address blocks: 240a:aac5::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:e0:49:02:fb:22:68:27:29:ad:71:d5:61:0e:22:cd:a4:29:4e:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:17:01 2026 GMT Not After : Mar 3 06:22:01 2027 GMT Subject: CN=F0B8F5FB6321746F584590992117587D7A9E0F9B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:45:62:6c:85:55:32:57:bf:a7:01:a1:03:3b: ca:66:2b:9e:11:64:e1:41:96:b7:56:e2:63:fc:4e: 5a:66:22:9f:66:87:02:eb:73:17:a1:f6:91:7b:69: a3:f6:79:99:cf:99:b5:5f:67:6f:5c:0c:2e:d9:fb: 0c:af:9f:df:13:e4:42:a6:ba:39:f3:04:85:5b:5c: 18:70:4c:21:2d:6e:01:df:12:12:e2:2c:d9:67:5e: 2f:66:c9:d4:d3:40:80:ea:2c:9b:83:25:23:57:64: eb:d5:e0:74:5e:22:01:b7:a2:9e:88:a7:12:7f:54: 26:9c:30:c2:bd:2b:8b:5e:b4:4f:9a:03:a6:38:7a: 19:d3:b6:01:a9:75:4a:5a:47:59:a7:c2:f6:1a:53: c3:16:08:7a:06:e0:a4:cd:16:b6:d1:ac:6b:7c:d1: 4a:b3:16:87:ad:35:4c:06:1e:8a:34:49:4a:d8:12: 64:6a:33:87:63:2f:01:b4:a7:c9:30:ec:b2:16:6e: 5d:d7:a6:d2:d7:65:b9:e9:97:52:4b:79:bf:fc:c8: f3:53:d4:7e:5d:71:05:18:72:56:c8:c4:d3:d4:12: 25:6d:5f:6e:a4:43:43:77:3d:0e:d3:8c:63:56:1a: 35:e4:d5:8f:3f:bd:c6:ce:a8:c2:4a:b5:8b:b4:38: 8a:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:B8:F5:FB:63:21:74:6F:58:45:90:99:21:17:58:7D:7A:9E:0F:9B X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145407.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:aac5::/32 Signature Algorithm: sha256WithRSAEncryption 21:5e:e4:a6:78:9c:32:bf:ba:9c:91:9c:b0:2a:4d:17:9a:68: 31:a3:d2:48:f6:b8:4f:18:c0:35:87:c4:d2:21:72:ab:10:58: ed:ba:4b:7d:89:11:50:dc:b0:17:d2:02:ea:3e:64:48:b8:2a: 2d:9b:ed:97:8e:ae:72:f6:3c:a4:f5:d8:80:fe:a3:ee:ba:ac: 04:c5:2e:1e:b0:36:5c:89:1c:b8:a5:61:5d:09:cb:20:b0:37: 52:83:68:73:56:3b:dc:c8:3d:de:7b:2c:b9:75:dc:0f:6d:1a: 2d:43:a1:c2:33:ce:c7:33:a2:29:c0:54:48:7b:cc:b7:a6:c3: f1:9d:de:35:20:8f:76:03:47:73:63:ed:95:b0:9d:eb:d1:5d: be:97:2a:b0:35:f5:82:63:7c:be:33:52:60:d0:07:33:c4:77: 25:26:16:a4:42:94:e3:1f:15:df:79:c5:5e:b4:6b:a4:c5:5d: 67:7c:17:a1:b5:c4:4a:06:f3:f7:31:4e:e1:ea:14:38:88:1c: 96:53:1c:c6:e2:9c:6c:e7:b9:47:5b:73:27:be:c9:aa:f0:b5: 0c:1e:90:93:ec:c6:16:be:e5:8f:77:ab:f1:bd:ac:6d:5b:68: ad:b5:1b:df:14:95:94:92:8a:6d:06:c0:65:b0:bc:ce:da:0a: 41:1f:e5:38 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUFuBJAvsiaCcprXHVYQ4izaQpTmYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTcwMVoX DTI3MDMwMzA2MjIwMVowMzExMC8GA1UEAxMoRjBCOEY1RkI2MzIxNzQ2RjU4NDU5 MDk5MjExNzU4N0Q3QTlFMEY5QjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJ5FYmyFVTJXv6cBoQM7ymYrnhFk4UGWt1biY/xOWmYin2aHAutzF6H2kXtp o/Z5mc+ZtV9nb1wMLtn7DK+f3xPkQqa6OfMEhVtcGHBMIS1uAd8SEuIs2WdeL2bJ 1NNAgOosm4MlI1dk69XgdF4iAbeinoinEn9UJpwwwr0ri160T5oDpjh6GdO2Aal1 SlpHWafC9hpTwxYIegbgpM0WttGsa3zRSrMWh601TAYeijRJStgSZGozh2MvAbSn yTDsshZuXdem0tdluemXUkt5v/zI81PUfl1xBRhyVsjE09QSJW1fbqRDQ3c9DtOM Y1YaNeTVjz+9xs6owkq1i7Q4isMCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBTwuPX7 YyF0b1hFkJkhF1h9ep4PmzAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTQwNy5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qsUwDQYJKoZIhvcNAQELBQADggEBACFe5KZ4nDK/upyRnLAqTReaaDGj0kj2uE8Y wDWHxNIhcqsQWO26S32JEVDcsBfSAuo+ZEi4Ki2b7ZeOrnL2PKT12ID+o+66rATF Lh6wNlyJHLilYV0JyyCwN1KDaHNWO9zIPd57LLl13A9tGi1DocIzzsczoinAVEh7 zLemw/Gd3jUgj3YDR3Nj7ZWwnevRXb6XKrA19YJjfL4zUmDQBzPEdyUmFqRClOMf Fd95xV60a6TFXWd8F6G1xEoG8/cxTuHqFDiIHJZTHMbinGznuUdbcye+yarwtQwe kJPsxha+5Y93q/G9rG1baK21G98UlZSSim0GwGWwvM7aCkEf5Tg= -----END CERTIFICATE-----Generated at Sat Mar 28 11:42:05 2026 by rpki-client