$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145412.roa File: AS145412.roa (raw, json) Hash identifier: 7mhA4+7HgNWs3711rI8+qiug6xdt+Ko916rWdwleqhY= Subject key identifier: 6A:E2:07:0F:F9:A7:C1:DE:43:F8:5A:DE:0C:12:D4:43:9A:9F:6E:12 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 7E2FA7DC807F567D58E5EE06231C839CF1527F25 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145412.roa Signing time: Wed 04 Mar 2026 06:20:51 +0000 ROA not before: Wed 04 Mar 2026 06:15:51 +0000 ROA not after: Wed 03 Mar 2027 06:20:51 +0000 asID: 145412 IP address blocks: 240a:aaca::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:2f:a7:dc:80:7f:56:7d:58:e5:ee:06:23:1c:83:9c:f1:52:7f:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:15:51 2026 GMT Not After : Mar 3 06:20:51 2027 GMT Subject: CN=6AE2070FF9A7C1DE43F85ADE0C12D4439A9F6E12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:2b:4e:f9:89:3d:6f:31:22:41:89:57:10:30: e0:f1:ff:e0:99:8e:c1:c9:b6:55:6b:4c:cb:9a:8d: ec:3c:df:e6:3d:eb:b2:21:38:3b:54:40:9d:5f:4e: da:b9:21:32:21:88:29:2b:77:45:86:f9:dd:c8:bd: d5:ac:d9:4a:91:28:aa:2a:09:63:46:13:7c:19:45: 30:00:34:ba:29:02:c2:a8:79:f8:dc:2d:ce:71:d6: 8c:fc:8d:a6:6e:cd:69:aa:1a:f0:af:36:09:97:c5: b9:81:22:e6:8c:ad:06:c6:83:31:85:91:0a:3a:ec: da:82:de:e6:cc:1c:01:02:0d:ae:0c:f2:4d:32:8e: 15:52:72:95:bf:0c:a6:e2:be:5e:59:9b:3f:78:e4: 4d:58:9c:11:cb:6c:3d:e6:8c:a4:02:22:88:7a:44: 14:73:1e:6e:f6:03:88:c7:11:aa:10:f9:d0:c1:db: 6c:53:db:0d:2a:63:e7:46:44:14:46:64:9b:9c:0b: 91:61:52:2b:4e:01:36:cc:30:78:63:f9:98:52:24: 06:51:68:98:66:70:e7:61:ad:04:56:9b:44:33:09: a0:0c:cb:93:ce:2f:e0:fd:6f:d9:ca:8e:00:52:3b: 03:4d:65:e5:aa:42:c4:d3:c2:8c:58:ce:7c:54:cb: ea:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:E2:07:0F:F9:A7:C1:DE:43:F8:5A:DE:0C:12:D4:43:9A:9F:6E:12 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145412.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:aaca::/32 Signature Algorithm: sha256WithRSAEncryption 2d:4e:28:2a:ca:c9:d0:d7:28:55:c5:76:37:98:1d:00:bf:ea: 4b:fa:3b:09:da:21:9e:54:9e:5a:3a:64:8b:68:e0:0a:a5:51: fa:ea:3d:97:40:74:a3:ea:66:a4:0f:6e:9f:b4:f1:45:80:46: 4a:aa:e8:c6:e5:bf:89:55:1b:2f:4f:36:03:81:55:aa:67:31: e5:4a:90:0e:a6:96:0a:45:95:5d:36:b5:90:7e:d5:fc:42:ef: 2c:fe:43:03:18:42:56:1a:69:e7:9e:e2:eb:8b:80:77:f3:53: 15:a6:04:b1:f3:62:e1:75:0a:6b:8c:2c:7a:83:6e:17:10:5d: ff:f9:a7:4b:a7:20:5d:5b:8b:58:ff:7d:bf:2a:33:88:7b:3f: 04:f5:21:24:36:c8:8d:2d:42:11:ca:93:7f:44:6c:47:eb:78: 5f:76:ff:ca:e2:91:82:13:f5:d9:e0:f1:c2:67:92:1b:22:75: 61:fa:f9:24:18:65:f4:de:09:ae:a8:2c:33:7f:0e:d2:15:fa: a7:03:13:bb:46:48:7e:4d:36:82:68:74:be:0d:28:c8:0e:4f: 24:b5:5f:68:c5:f0:46:c6:48:b8:9a:e2:00:e6:77:1f:3a:69: af:49:3b:54:7f:50:2c:b7:b4:17:c6:91:c5:12:e0:9c:2b:01: f8:1f:35:53 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUfi+n3IB/Vn1Y5e4GIxyDnPFSfyUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTU1MVoX DTI3MDMwMzA2MjA1MVowMzExMC8GA1UEAxMoNkFFMjA3MEZGOUE3QzFERTQzRjg1 QURFMEMxMkQ0NDM5QTlGNkUxMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAO4rTvmJPW8xIkGJVxAw4PH/4JmOwcm2VWtMy5qN7Dzf5j3rsiE4O1RAnV9O 2rkhMiGIKSt3RYb53ci91azZSpEoqioJY0YTfBlFMAA0uikCwqh5+NwtznHWjPyN pm7Naaoa8K82CZfFuYEi5oytBsaDMYWRCjrs2oLe5swcAQINrgzyTTKOFVJylb8M puK+XlmbP3jkTVicEctsPeaMpAIiiHpEFHMebvYDiMcRqhD50MHbbFPbDSpj50ZE FEZkm5wLkWFSK04BNswweGP5mFIkBlFomGZw52GtBFabRDMJoAzLk84v4P1v2cqO AFI7A01l5apCxNPCjFjOfFTL6psCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRq4gcP +afB3kP4Wt4MEtRDmp9uEjAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTQxMi5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qsowDQYJKoZIhvcNAQELBQADggEBAC1OKCrKydDXKFXFdjeYHQC/6kv6OwnaIZ5U nlo6ZIto4AqlUfrqPZdAdKPqZqQPbp+08UWARkqq6Mblv4lVGy9PNgOBVapnMeVK kA6mlgpFlV02tZB+1fxC7yz+QwMYQlYaaeee4uuLgHfzUxWmBLHzYuF1CmuMLHqD bhcQXf/5p0unIF1bi1j/fb8qM4h7PwT1ISQ2yI0tQhHKk39EbEfreF92/8rikYIT 9dng8cJnkhsidWH6+SQYZfTeCa6oLDN/DtIV+qcDE7tGSH5NNoJodL4NKMgOTyS1 X2jF8EbGSLia4gDmdx86aa9JO1R/UCy3tBfGkcUS4JwrAfgfNVM= -----END CERTIFICATE-----Generated at Sat Mar 28 13:10:33 2026 by rpki-client