$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145420.roa File: AS145420.roa (raw, json) Hash identifier: l3w9eVBnpXqU0UxCY96+toX+OO1y3i530mNJuAyZbiw= Subject key identifier: 1A:8C:F9:B5:A3:7D:14:8F:0A:40:25:8B:5B:A0:0F:DE:60:03:ED:9D Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 7D7FCC6340E74781BC657A9D7630D5C0FADD440C Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145420.roa Signing time: Wed 04 Mar 2026 06:20:37 +0000 ROA not before: Wed 04 Mar 2026 06:15:37 +0000 ROA not after: Wed 03 Mar 2027 06:20:37 +0000 asID: 145420 IP address blocks: 240a:aad2::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:7f:cc:63:40:e7:47:81:bc:65:7a:9d:76:30:d5:c0:fa:dd:44:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:15:37 2026 GMT Not After : Mar 3 06:20:37 2027 GMT Subject: CN=1A8CF9B5A37D148F0A40258B5BA00FDE6003ED9D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:63:f3:7c:69:be:7a:86:65:55:f3:00:55:17: 3b:92:28:5c:57:86:79:c0:69:f0:31:f5:fb:14:63: db:6e:f6:0f:29:93:ae:24:d4:92:f5:a7:0f:69:ac: b3:f8:fc:ce:ec:dd:19:89:87:e6:1f:fc:3d:f3:05: 60:e3:2d:4f:7a:b4:82:51:ad:79:c3:58:b7:09:58: 83:51:b1:b0:34:c9:00:4b:0a:c0:e2:83:80:7e:de: eb:bd:d9:7a:ef:38:0c:9d:01:d3:db:00:cd:a7:64: 94:be:32:7b:c7:32:56:41:64:ff:33:72:a5:f0:a6: 29:59:a5:3a:47:46:29:21:b1:11:1a:43:0b:31:df: d7:45:09:e4:94:e4:90:6a:c4:f9:00:e7:8d:81:b2: 85:be:87:4c:9a:be:0d:89:f2:11:e6:ab:18:b9:03: 42:aa:ac:0e:dd:0e:3d:5f:bd:41:b5:81:96:3e:98: fe:10:60:02:f1:c4:bf:4d:28:d3:25:3a:5a:dd:a3: 21:63:bf:19:f9:81:17:ce:a5:72:70:7e:83:21:50: fc:93:7e:49:94:1e:f7:b3:c7:bd:b1:62:79:00:07: 27:72:f6:de:cc:80:11:f4:a4:5c:aa:37:f3:23:35: 05:0a:5e:79:10:38:85:da:d3:50:29:35:ca:f9:ed: 31:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:8C:F9:B5:A3:7D:14:8F:0A:40:25:8B:5B:A0:0F:DE:60:03:ED:9D X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145420.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:aad2::/32 Signature Algorithm: sha256WithRSAEncryption c9:d4:3c:f5:d1:e4:1e:7c:9c:03:c1:79:c7:85:d9:ef:2a:1c: 35:f8:3e:7b:ca:b4:da:56:a6:a9:59:65:d0:01:39:d3:f1:9c: e5:75:a8:a0:47:6d:d6:61:55:e3:23:4f:8b:72:49:0b:df:60: 2d:aa:a6:16:d2:58:ef:a3:5a:1b:53:88:56:86:f1:be:44:d7: f5:c6:e1:5b:57:58:7c:51:8f:6a:c0:19:e1:cf:35:da:38:80: 3e:95:4b:07:b9:c5:67:dd:b9:3c:da:20:98:7c:a4:3e:1d:89: d8:dc:ab:f2:57:2b:cc:ad:79:1e:ae:da:58:59:99:5f:fb:d2: 42:68:69:78:99:35:e2:da:cc:4a:1f:f2:ef:f1:19:8a:cd:10: 9d:06:8d:ba:aa:84:43:fa:a2:f8:0d:d6:81:c4:57:3b:e4:0d: e4:3e:3f:d0:35:73:79:da:2a:e1:0a:4c:0f:13:0d:77:d7:b6: a1:da:d5:6a:a3:5f:0c:f7:8c:56:7f:0d:fc:a4:f2:35:54:44: b6:94:d6:1a:38:10:fe:9e:2d:f5:eb:bc:3e:19:d6:fe:a7:2c: c2:a1:65:8f:7b:85:a0:21:53:26:d5:67:d7:ab:9b:d3:e9:05: 51:ce:d1:f3:9f:5f:37:20:03:e0:ca:9a:2c:05:28:11:e8:52: 60:a8:32:e1 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUfX/MY0DnR4G8ZXqddjDVwPrdRAwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTUzN1oX DTI3MDMwMzA2MjAzN1owMzExMC8GA1UEAxMoMUE4Q0Y5QjVBMzdEMTQ4RjBBNDAy NThCNUJBMDBGREU2MDAzRUQ5RDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJ1j83xpvnqGZVXzAFUXO5IoXFeGecBp8DH1+xRj2272DymTriTUkvWnD2ms s/j8zuzdGYmH5h/8PfMFYOMtT3q0glGtecNYtwlYg1GxsDTJAEsKwOKDgH7e673Z eu84DJ0B09sAzadklL4ye8cyVkFk/zNypfCmKVmlOkdGKSGxERpDCzHf10UJ5JTk kGrE+QDnjYGyhb6HTJq+DYnyEearGLkDQqqsDt0OPV+9QbWBlj6Y/hBgAvHEv00o 0yU6Wt2jIWO/GfmBF86lcnB+gyFQ/JN+SZQe97PHvbFieQAHJ3L23syAEfSkXKo3 8yM1BQpeeRA4hdrTUCk1yvntMSkCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQajPm1 o30UjwpAJYtboA/eYAPtnTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTQyMC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qtIwDQYJKoZIhvcNAQELBQADggEBAMnUPPXR5B58nAPBeceF2e8qHDX4PnvKtNpW pqlZZdABOdPxnOV1qKBHbdZhVeMjT4tySQvfYC2qphbSWO+jWhtTiFaG8b5E1/XG 4VtXWHxRj2rAGeHPNdo4gD6VSwe5xWfduTzaIJh8pD4didjcq/JXK8yteR6u2lhZ mV/70kJoaXiZNeLazEof8u/xGYrNEJ0GjbqqhEP6ovgN1oHEVzvkDeQ+P9A1c3na KuEKTA8TDXfXtqHa1WqjXwz3jFZ/Dfyk8jVURLaU1ho4EP6eLfXrvD4Z1v6nLMKh ZY97haAhUybVZ9erm9PpBVHO0fOfXzcgA+DKmiwFKBHoUmCoMuE= -----END CERTIFICATE-----Generated at Sat Mar 28 13:10:43 2026 by rpki-client