$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145710.roa File: AS145710.roa (raw, json) Hash identifier: c1NCKt4d4MI6It/LFXztzDHpK1JT2HmHXKhzBr0M4eo= Subject key identifier: 4A:BC:0A:AA:32:6E:FE:37:CF:70:E3:DC:7A:9E:2F:1F:79:F4:89:67 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 2EC12920C713677FEDD8E3082C9DBCBE3016B557 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145710.roa Signing time: Wed 04 Mar 2026 06:30:33 +0000 ROA not before: Wed 04 Mar 2026 06:25:33 +0000 ROA not after: Wed 03 Mar 2027 06:30:33 +0000 asID: 145710 IP address blocks: 240a:abf4::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:c1:29:20:c7:13:67:7f:ed:d8:e3:08:2c:9d:bc:be:30:16:b5:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:25:33 2026 GMT Not After : Mar 3 06:30:33 2027 GMT Subject: CN=4ABC0AAA326EFE37CF70E3DC7A9E2F1F79F48967 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:59:3c:42:26:cd:31:c4:8a:a5:c7:1d:59:31: dc:0b:0a:5f:76:4c:fb:8b:34:19:55:94:73:1a:7f: 2c:3a:63:11:ec:35:63:43:0b:8a:cf:ae:3c:60:9a: 76:c3:8a:58:d7:f7:f8:10:b8:eb:58:47:52:31:a1: 94:46:da:07:9b:56:00:6a:68:ce:1c:06:00:04:53: 68:68:1b:6c:b8:40:de:a1:e9:71:70:89:9f:64:25: 3d:8a:30:0c:0e:aa:c6:e7:44:f4:d9:1b:fd:74:f2: a1:b3:13:0e:a1:a6:24:7d:e8:58:57:ba:14:10:80: f1:9b:e6:37:46:4e:d6:a5:91:be:ae:ea:21:ce:fa: 37:26:2c:20:f1:62:39:36:13:84:76:5c:db:1b:71: 98:78:b3:ee:ae:65:2f:ad:8b:24:3f:a9:00:7f:da: e4:63:5b:a9:60:58:43:63:6c:ce:8b:03:1a:6d:9c: dd:e9:33:af:e2:0c:1e:dd:fe:f2:9b:27:dc:0e:e1: 34:3a:73:b9:b6:c3:ca:5e:18:8b:b2:17:a7:da:42: a0:c0:43:28:40:9e:1d:f9:fd:2e:41:b7:3c:d6:4b: 2c:fb:0d:65:4f:74:82:c5:c0:1d:79:d5:87:d1:42: eb:9d:00:95:b9:d7:92:7c:29:bb:7b:a0:e4:c9:1a: f2:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:BC:0A:AA:32:6E:FE:37:CF:70:E3:DC:7A:9E:2F:1F:79:F4:89:67 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145710.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:abf4::/32 Signature Algorithm: sha256WithRSAEncryption 7e:fc:b5:17:75:c1:ff:ce:f3:72:5c:fd:27:16:08:93:03:9d: 27:f9:c3:5c:be:05:1d:ab:fd:30:62:b2:e4:2c:35:f4:ce:e8: d5:c7:d6:a9:8e:59:be:05:bf:87:86:e1:80:e0:d4:19:63:46: 36:4e:09:80:49:03:cc:73:ae:af:26:f7:6c:32:b7:2c:5e:79: 4a:0f:9f:60:a8:53:54:1d:a9:b3:9f:74:e8:1d:8a:13:7f:61: 68:d9:26:d6:6c:95:ab:ea:79:2b:b2:c8:33:55:8a:28:fe:4e: 08:2b:78:d0:d3:75:f4:14:5e:2f:39:0f:f4:5d:73:d1:f9:5d: 9d:4f:97:6f:fd:ce:ad:5f:07:62:c7:d9:ff:43:e5:ed:9f:e8: 72:63:a5:f2:b7:f0:a2:72:11:4f:25:06:fe:4a:08:2a:4b:05: f9:14:2b:53:92:46:c4:c0:87:cf:19:10:df:1d:93:52:13:ac: 7b:03:63:df:cb:fa:c7:92:0b:f0:ce:78:d8:84:a5:77:38:a9: 54:94:45:7e:1e:d3:69:6d:0a:e7:25:92:97:2f:b4:9e:e1:44: 59:b5:59:dd:86:02:ee:c8:ea:a4:10:0a:99:3e:a1:69:25:71: 86:c6:d0:e2:f1:74:9a:a3:bb:78:3e:ac:74:02:68:77:5b:e5: b3:74:ee:57 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIULsEpIMcTZ3/t2OMILJ28vjAWtVcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MjUzM1oX DTI3MDMwMzA2MzAzM1owMzExMC8GA1UEAxMoNEFCQzBBQUEzMjZFRkUzN0NGNzBF M0RDN0E5RTJGMUY3OUY0ODk2NzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJ5ZPEImzTHEiqXHHVkx3AsKX3ZM+4s0GVWUcxp/LDpjEew1Y0MLis+uPGCa dsOKWNf3+BC461hHUjGhlEbaB5tWAGpozhwGAARTaGgbbLhA3qHpcXCJn2QlPYow DA6qxudE9Nkb/XTyobMTDqGmJH3oWFe6FBCA8ZvmN0ZO1qWRvq7qIc76NyYsIPFi OTYThHZc2xtxmHiz7q5lL62LJD+pAH/a5GNbqWBYQ2NszosDGm2c3ekzr+IMHt3+ 8psn3A7hNDpzubbDyl4Yi7IXp9pCoMBDKECeHfn9LkG3PNZLLPsNZU90gsXAHXnV h9FC650AlbnXknwpu3ug5Mka8mMCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRKvAqq Mm7+N89w49x6ni8fefSJZzAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTcxMC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK q/QwDQYJKoZIhvcNAQELBQADggEBAH78tRd1wf/O83Jc/ScWCJMDnSf5w1y+BR2r /TBisuQsNfTO6NXH1qmOWb4Fv4eG4YDg1BljRjZOCYBJA8xzrq8m92wytyxeeUoP n2CoU1QdqbOfdOgdihN/YWjZJtZslavqeSuyyDNViij+TggreNDTdfQUXi85D/Rd c9H5XZ1Pl2/9zq1fB2LH2f9D5e2f6HJjpfK38KJyEU8lBv5KCCpLBfkUK1OSRsTA h88ZEN8dk1ITrHsDY9/L+seSC/DOeNiEpXc4qVSURX4e02ltCuclkpcvtJ7hRFm1 Wd2GAu7I6qQQCpk+oWklcYbG0OLxdJqju3g+rHQCaHdb5bN07lc= -----END CERTIFICATE-----Generated at Sat Mar 28 11:49:56 2026 by rpki-client