$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145478.roa File: AS145478.roa (raw, json) Hash identifier: KbXfDI+M33TjqGvq9NDcV2t99Xdksgg8ccROJSGRWt8= Subject key identifier: 82:F7:3F:A7:F2:4B:4D:9F:62:17:FF:C9:91:C6:80:C1:C1:2D:0B:B2 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 78691E8A1276AB88807738AAA9C59733CDFB045B Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145478.roa Signing time: Wed 04 Mar 2026 06:20:51 +0000 ROA not before: Wed 04 Mar 2026 06:15:51 +0000 ROA not after: Wed 03 Mar 2027 06:20:51 +0000 asID: 145478 IP address blocks: 240a:ab0c::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:69:1e:8a:12:76:ab:88:80:77:38:aa:a9:c5:97:33:cd:fb:04:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:15:51 2026 GMT Not After : Mar 3 06:20:51 2027 GMT Subject: CN=82F73FA7F24B4D9F6217FFC991C680C1C12D0BB2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:88:cf:2b:97:f7:c5:63:55:96:e9:b0:4c:69: ba:fd:1b:c6:b4:e1:14:ef:43:11:c8:6c:40:b0:c6: 7d:dd:b7:e4:ef:44:2a:d8:c1:aa:ef:cd:44:48:0b: b7:71:3b:f1:ce:52:c5:ad:59:d4:d8:37:ba:02:cb: ea:fe:02:14:04:da:cc:0f:be:39:26:1b:70:da:bb: d7:6f:3b:dd:91:7e:fa:8c:01:38:85:0a:de:8e:b7: 3a:61:97:e7:73:20:9b:d9:f3:8c:7c:22:d8:70:38: 82:43:ec:96:32:9f:48:fa:bb:e3:5c:1a:3b:55:33: 0e:ba:30:84:9d:a2:89:9e:69:de:87:17:62:9a:c0: d1:15:b0:8b:e5:fd:33:77:f1:50:14:9c:49:11:d5: 07:75:a4:0f:d1:a8:41:7d:de:48:64:b2:40:7f:42: 0c:12:cc:9a:ff:8f:db:67:c5:94:b7:70:43:8d:e6: d1:92:4f:cb:ff:03:9b:00:cb:16:e3:e2:41:e1:ac: 27:49:c0:e6:01:6a:9f:9d:ea:39:fb:9b:95:29:37: 5a:ee:c0:34:c9:f9:96:83:17:83:35:a8:5f:ef:5f: 06:7a:b6:a0:e7:69:5d:af:15:21:08:d1:72:58:83: 4a:51:e9:a6:92:59:f3:b4:f8:4a:2f:f9:35:3b:34: 1c:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:F7:3F:A7:F2:4B:4D:9F:62:17:FF:C9:91:C6:80:C1:C1:2D:0B:B2 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145478.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:ab0c::/32 Signature Algorithm: sha256WithRSAEncryption 0f:1d:74:16:dc:b1:10:b1:fe:94:d3:7e:ef:02:a6:32:be:3d: dd:93:85:1a:61:e9:3b:1d:26:a6:2f:ff:88:45:f0:be:ba:a8: 9f:ce:fc:ec:c7:e1:63:f0:43:b2:7a:d4:27:e4:5c:16:76:57: 6f:22:fb:a9:6c:17:44:09:99:54:97:8e:ab:5e:53:dc:7c:a4: 7d:08:ce:b8:b1:c2:b1:96:44:fd:fc:be:10:e8:e7:73:63:28: 5f:9a:e4:99:0d:66:3f:da:a5:72:81:cc:4e:9d:9a:6c:8e:8e: 48:b0:c6:e6:e4:25:23:df:36:1a:20:ad:be:35:a7:62:f2:6d: af:f8:52:00:8b:07:7d:51:2b:6b:f3:b7:71:b9:9f:d1:cf:c9: 75:be:57:0f:8d:19:48:4e:0d:cb:4a:93:6a:9b:3d:c2:bb:ee: 3c:0c:06:9e:ab:9f:4f:b6:96:22:b1:80:97:03:e1:ee:c2:72: a9:64:79:d0:31:49:6d:37:29:9d:f4:18:47:93:b4:b7:06:29: fb:02:a9:9b:21:25:d7:c6:75:56:e8:a7:43:31:cf:d6:ce:61: ac:21:8f:7d:54:ef:b1:c0:18:1b:b8:00:61:f9:63:3e:63:e5: d7:d0:0a:45:56:eb:dc:4b:b4:1c:32:24:d2:71:35:27:02:d4: bf:1d:94:6c -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUeGkeihJ2q4iAdziqqcWXM837BFswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTU1MVoX DTI3MDMwMzA2MjA1MVowMzExMC8GA1UEAxMoODJGNzNGQTdGMjRCNEQ5RjYyMTdG RkM5OTFDNjgwQzFDMTJEMEJCMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKqIzyuX98VjVZbpsExpuv0bxrThFO9DEchsQLDGfd235O9EKtjBqu/NREgL t3E78c5Sxa1Z1Ng3ugLL6v4CFATazA++OSYbcNq712873ZF++owBOIUK3o63OmGX 53Mgm9nzjHwi2HA4gkPsljKfSPq741waO1UzDrowhJ2iiZ5p3ocXYprA0RWwi+X9 M3fxUBScSRHVB3WkD9GoQX3eSGSyQH9CDBLMmv+P22fFlLdwQ43m0ZJPy/8DmwDL FuPiQeGsJ0nA5gFqn53qOfublSk3Wu7ANMn5loMXgzWoX+9fBnq2oOdpXa8VIQjR cliDSlHpppJZ87T4Si/5NTs0HOUCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSC9z+n 8ktNn2IX/8mRxoDBwS0LsjAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTQ3OC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qwwwDQYJKoZIhvcNAQELBQADggEBAA8ddBbcsRCx/pTTfu8CpjK+Pd2ThRph6Tsd JqYv/4hF8L66qJ/O/OzH4WPwQ7J61CfkXBZ2V28i+6lsF0QJmVSXjqteU9x8pH0I zrixwrGWRP38vhDo53NjKF+a5JkNZj/apXKBzE6dmmyOjkiwxubkJSPfNhogrb41 p2Lyba/4UgCLB31RK2vzt3G5n9HPyXW+Vw+NGUhODctKk2qbPcK77jwMBp6rn0+2 liKxgJcD4e7CcqlkedAxSW03KZ30GEeTtLcGKfsCqZshJdfGdVbop0Mxz9bOYawh j31U77HAGBu4AGH5Yz5j5dfQCkVW69xLtBwyJNJxNScC1L8dlGw= -----END CERTIFICATE-----Generated at Sat Mar 28 15:53:25 2026 by rpki-client