$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145422.roa File: AS145422.roa (raw, json) Hash identifier: gWswcL6T21t/BL6A2PjTeJdxoGVKC9hU6WRvd6Kq+pg= Subject key identifier: 23:BC:A4:28:8F:B0:70:82:13:89:AB:5C:1F:32:1D:F4:41:30:8B:31 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 43D2FE3556DF24B6F1124FA0866D2D3B7E6FBE0B Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145422.roa Signing time: Wed 04 Mar 2026 06:21:06 +0000 ROA not before: Wed 04 Mar 2026 06:16:06 +0000 ROA not after: Wed 03 Mar 2027 06:21:06 +0000 asID: 145422 IP address blocks: 240a:aad4::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:d2:fe:35:56:df:24:b6:f1:12:4f:a0:86:6d:2d:3b:7e:6f:be:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:16:06 2026 GMT Not After : Mar 3 06:21:06 2027 GMT Subject: CN=23BCA4288FB070821389AB5C1F321DF441308B31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:b5:ac:ba:b9:02:49:c5:71:05:41:d7:de:c8: 08:b8:88:d2:a9:c8:fd:a6:ab:06:c5:44:0d:1a:2e: 27:e5:3a:83:a6:e3:25:5a:3e:9f:f1:6c:1c:7f:e1: 30:ef:7a:ef:c9:9c:cb:d1:76:1c:54:19:68:c5:46: 1d:27:32:d2:c4:9a:f6:a5:42:c3:90:2a:85:10:be: 77:61:45:7e:6a:ef:2a:b5:b4:71:0f:51:1f:5c:ca: fc:1a:b2:d7:05:dc:1c:9c:d6:6e:ed:7e:8d:9e:13: cc:6f:50:d7:0d:32:92:b8:34:a2:6c:d3:03:97:fa: 1b:35:4d:20:6e:36:d8:e8:e1:16:54:45:2c:5d:59: 9a:b2:70:35:5d:6e:61:02:db:7a:e5:5e:b7:25:02: 61:bc:f5:64:9e:e3:f3:26:20:c2:ee:bf:50:57:b8: 0a:82:f9:c1:07:26:f3:84:04:94:21:cc:6f:08:86: 54:27:00:17:98:2f:b3:c0:c1:60:74:75:f7:8d:8d: a0:3b:7d:57:4c:ad:94:36:fe:8d:23:1c:f7:29:eb: 76:ee:5c:51:43:49:84:a3:93:c8:28:bf:15:05:35: ac:f0:12:8a:a6:3d:0e:92:f5:a3:45:ef:ad:1e:57: 61:0c:52:8e:4d:e6:3d:7e:1f:30:33:23:6f:d1:73: b0:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:BC:A4:28:8F:B0:70:82:13:89:AB:5C:1F:32:1D:F4:41:30:8B:31 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145422.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:aad4::/32 Signature Algorithm: sha256WithRSAEncryption 99:43:88:b5:31:7c:e0:9b:ac:ff:cb:44:99:76:6b:59:7d:d9: b6:62:b9:20:34:6c:20:c4:75:cb:b7:50:08:18:3d:6f:fc:ec: b7:8d:c3:23:e6:fc:90:16:53:2f:b5:32:42:4c:dc:f6:b8:a2: c4:fc:96:a8:33:d6:7d:56:dd:7b:af:92:d2:db:fa:bb:e9:35: b8:6a:0a:e9:c2:86:b7:7d:05:18:be:aa:35:72:eb:89:2d:ad: 6e:8a:51:54:cb:07:d1:71:00:a0:40:cc:1d:43:96:f9:a7:bb: de:0b:56:f4:d5:45:71:7e:34:41:7f:cb:01:2a:f2:33:e3:05: ae:59:9c:8d:e2:40:44:12:3a:86:84:b5:91:7d:6f:8c:84:85: e1:0a:0a:a7:92:6e:19:46:54:52:3b:bf:27:f6:4c:d3:6c:e4: 2f:3f:32:a4:4e:ad:c4:47:a7:3a:02:1f:9c:02:08:8e:8f:5f: 98:19:45:38:58:de:47:5e:95:c6:6f:84:3c:bf:0c:7c:8f:2f: 09:fb:29:60:52:88:38:14:b2:99:1f:67:63:0c:28:ad:7d:d4: 9c:12:0c:31:33:9a:63:6d:86:98:fb:9c:0d:ef:0c:6d:1a:ac: 68:e9:3b:de:0a:fe:3e:85:53:39:09:83:e1:2f:5e:04:8b:0c: 37:ca:a2:b4 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUQ9L+NVbfJLbxEk+ghm0tO35vvgswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTYwNloX DTI3MDMwMzA2MjEwNlowMzExMC8GA1UEAxMoMjNCQ0E0Mjg4RkIwNzA4MjEzODlB QjVDMUYzMjFERjQ0MTMwOEIzMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMO1rLq5AknFcQVB197ICLiI0qnI/aarBsVEDRouJ+U6g6bjJVo+n/FsHH/h MO9678mcy9F2HFQZaMVGHScy0sSa9qVCw5AqhRC+d2FFfmrvKrW0cQ9RH1zK/Bqy 1wXcHJzWbu1+jZ4TzG9Q1w0ykrg0omzTA5f6GzVNIG422OjhFlRFLF1ZmrJwNV1u YQLbeuVetyUCYbz1ZJ7j8yYgwu6/UFe4CoL5wQcm84QElCHMbwiGVCcAF5gvs8DB YHR1942NoDt9V0ytlDb+jSMc9ynrdu5cUUNJhKOTyCi/FQU1rPASiqY9DpL1o0Xv rR5XYQxSjk3mPX4fMDMjb9FzsJMCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQjvKQo j7BwghOJq1wfMh30QTCLMTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTQyMi5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qtQwDQYJKoZIhvcNAQELBQADggEBAJlDiLUxfOCbrP/LRJl2a1l92bZiuSA0bCDE dcu3UAgYPW/87LeNwyPm/JAWUy+1MkJM3Pa4osT8lqgz1n1W3XuvktLb+rvpNbhq CunChrd9BRi+qjVy64ktrW6KUVTLB9FxAKBAzB1Dlvmnu94LVvTVRXF+NEF/ywEq 8jPjBa5ZnI3iQEQSOoaEtZF9b4yEheEKCqeSbhlGVFI7vyf2TNNs5C8/MqROrcRH pzoCH5wCCI6PX5gZRThY3kdelcZvhDy/DHyPLwn7KWBSiDgUspkfZ2MMKK191JwS DDEzmmNthpj7nA3vDG0arGjpO94K/j6FUzkJg+EvXgSLDDfKorQ= -----END CERTIFICATE-----Generated at Sat Mar 28 11:44:13 2026 by rpki-client