$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145674.roa File: AS145674.roa (raw, json) Hash identifier: R1aNY4CBJA830RXh/p9+ncnusGuk6fpN3IVj5vHvpg8= Subject key identifier: 9A:FC:76:44:46:97:F9:45:F3:19:05:A7:78:19:D8:2F:3F:F6:A5:02 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 1BB2AB3A14D6595303A4292E17A0B13A1DC65C1E Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145674.roa Signing time: Wed 04 Mar 2026 06:31:10 +0000 ROA not before: Wed 04 Mar 2026 06:26:10 +0000 ROA not after: Wed 03 Mar 2027 06:31:10 +0000 asID: 145674 IP address blocks: 240a:abd0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:b2:ab:3a:14:d6:59:53:03:a4:29:2e:17:a0:b1:3a:1d:c6:5c:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:26:10 2026 GMT Not After : Mar 3 06:31:10 2027 GMT Subject: CN=9AFC76444697F945F31905A77819D82F3FF6A502 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:3b:c5:9c:78:13:66:d4:eb:d8:a8:66:40:24: 3a:5e:30:c0:73:69:d7:95:08:3a:84:4e:18:7b:d9: c6:33:bd:88:4c:05:e0:61:45:19:a2:5c:5c:80:13: 10:4d:11:13:36:a3:12:2b:28:39:68:c0:91:2e:95: ea:ca:fa:76:fe:2d:36:46:5e:e9:af:54:8f:d0:2d: b5:04:f3:e7:62:89:58:61:55:f0:0e:04:d8:53:76: 64:3b:a0:49:5b:1c:42:bd:85:ea:16:1a:a4:ce:87: 0b:ad:63:17:28:9a:71:6d:3a:92:6d:ff:b9:24:2c: cd:33:c8:f7:05:a0:cb:a7:46:b0:72:2f:1f:0c:03: 4c:37:4a:15:e5:ba:ee:5d:1f:cb:3d:36:f2:81:37: be:aa:73:a0:0d:36:a4:51:9d:ec:a5:73:53:25:ba: 6d:8f:c4:b4:dd:97:00:18:ed:e4:bd:33:00:51:7a: 8e:6b:db:7a:70:92:a7:a8:69:cf:fc:0b:ad:09:f8: 66:63:13:b1:5e:72:57:6b:03:6a:c1:e3:32:32:65: f9:11:66:b6:ca:be:86:96:4a:cd:62:5b:84:47:57: 34:80:64:77:b4:90:64:8f:4c:09:01:f7:65:c8:05: 6d:f2:a6:f1:84:8c:8a:f6:50:06:db:56:e7:de:af: 61:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:FC:76:44:46:97:F9:45:F3:19:05:A7:78:19:D8:2F:3F:F6:A5:02 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145674.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:abd0::/32 Signature Algorithm: sha256WithRSAEncryption b0:17:6a:d9:86:1f:92:57:62:bd:24:33:d8:0c:0a:1f:1f:25: 20:db:c3:5d:f5:3e:1e:24:26:ce:ee:d7:ae:d5:6a:1e:a6:3a: dc:d4:7c:35:6d:36:20:2b:23:3d:c7:3f:54:be:15:4b:1c:56: ba:47:57:1b:5d:bf:23:ab:a5:b4:33:d5:98:ae:95:8e:51:ee: 9f:c3:94:b4:ae:8a:df:09:4c:a3:2e:85:4d:59:4f:0e:7a:03: 93:a8:69:4e:80:c0:5f:16:6b:b6:7c:76:3a:1e:7d:70:03:7b: d2:27:a8:cc:3b:36:be:3e:f2:11:f7:24:6e:e7:c6:bb:40:d9: 18:36:c3:43:f5:1b:2d:c1:b5:3a:c0:ec:c7:11:ee:39:77:a1: 12:2e:55:ea:0c:96:bd:5f:8e:15:90:36:81:4b:76:c8:9f:f2: 9e:7f:a5:06:83:36:43:66:57:85:83:5c:f7:c9:92:d4:db:f9: d9:1c:55:2e:a4:fa:e0:d8:5e:ca:fb:81:27:9c:44:3f:bc:eb: c0:b7:04:48:d8:e2:2d:13:58:d8:6b:ad:43:99:1b:b9:8d:7b: e2:db:a4:3c:41:66:d3:77:43:38:38:e4:e0:ef:75:0a:b4:2c: dc:1e:91:21:39:3b:a4:93:71:df:7f:4b:f9:76:17:96:72:1c: 46:77:00:6a -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUG7KrOhTWWVMDpCkuF6CxOh3GXB4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MjYxMFoX DTI3MDMwMzA2MzExMFowMzExMC8GA1UEAxMoOUFGQzc2NDQ0Njk3Rjk0NUYzMTkw NUE3NzgxOUQ4MkYzRkY2QTUwMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANo7xZx4E2bU69ioZkAkOl4wwHNp15UIOoROGHvZxjO9iEwF4GFFGaJcXIAT EE0REzajEisoOWjAkS6V6sr6dv4tNkZe6a9Uj9AttQTz52KJWGFV8A4E2FN2ZDug SVscQr2F6hYapM6HC61jFyiacW06km3/uSQszTPI9wWgy6dGsHIvHwwDTDdKFeW6 7l0fyz028oE3vqpzoA02pFGd7KVzUyW6bY/EtN2XABjt5L0zAFF6jmvbenCSp6hp z/wLrQn4ZmMTsV5yV2sDasHjMjJl+RFmtsq+hpZKzWJbhEdXNIBkd7SQZI9MCQH3 ZcgFbfKm8YSMivZQBttW596vYWsCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSa/HZE Rpf5RfMZBad4GdgvP/alAjAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTY3NC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK q9AwDQYJKoZIhvcNAQELBQADggEBALAXatmGH5JXYr0kM9gMCh8fJSDbw131Ph4k Js7u167Vah6mOtzUfDVtNiArIz3HP1S+FUscVrpHVxtdvyOrpbQz1ZiulY5R7p/D lLSuit8JTKMuhU1ZTw56A5OoaU6AwF8Wa7Z8djoefXADe9InqMw7Nr4+8hH3JG7n xrtA2Rg2w0P1Gy3BtTrA7McR7jl3oRIuVeoMlr1fjhWQNoFLdsif8p5/pQaDNkNm V4WDXPfJktTb+dkcVS6k+uDYXsr7gSecRD+868C3BEjY4i0TWNhrrUOZG7mNe+Lb pDxBZtN3Qzg45ODvdQq0LNwekSE5O6STcd9/S/l2F5ZyHEZ3AGo= -----END CERTIFICATE-----Generated at Sat Mar 28 11:42:21 2026 by rpki-client