$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145739.roa File: AS145739.roa (raw, json) Hash identifier: 2IsxTWph5p2kcqXym3PzMZxE0SEH5PMFHGoQqrt2sbw= Subject key identifier: DA:3D:66:64:F2:1B:35:1D:23:DD:7A:C0:9C:B9:B9:D6:C2:23:8B:DA Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 0EEE4634E409C8D00E65EBA03A3233CC1D298F84 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145739.roa Signing time: Wed 04 Mar 2026 06:29:40 +0000 ROA not before: Wed 04 Mar 2026 06:24:40 +0000 ROA not after: Wed 03 Mar 2027 06:29:40 +0000 asID: 145739 IP address blocks: 240a:ac11::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:ee:46:34:e4:09:c8:d0:0e:65:eb:a0:3a:32:33:cc:1d:29:8f:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:24:40 2026 GMT Not After : Mar 3 06:29:40 2027 GMT Subject: CN=DA3D6664F21B351D23DD7AC09CB9B9D6C2238BDA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:73:cd:d3:77:10:6a:e1:4d:55:31:1d:ee:aa: 96:c0:3a:dc:92:f3:24:0f:04:67:1e:e0:54:d5:2d: c6:cc:a3:d5:ee:04:52:7e:55:ab:b3:61:67:c2:f6: f0:a0:da:00:d9:58:25:90:ef:51:bb:a3:30:4b:54: bd:ea:87:79:25:63:0f:ac:4f:b2:87:91:24:e3:ed: 27:78:d5:06:c5:69:d2:72:ec:18:45:59:c3:59:bc: f4:74:91:29:3a:4a:7d:46:f7:f3:84:12:be:39:05: 84:74:b3:a4:29:d1:a7:25:4b:fc:93:a0:49:d5:c1: 2d:7c:f5:3a:e5:4a:bd:0b:89:d5:72:ca:f7:78:56: fc:95:fc:a9:90:0e:98:02:a3:61:19:52:14:41:35: ee:ae:f5:72:83:59:3e:6a:62:6b:65:e4:b7:4c:5b: f9:69:f0:63:c3:ce:76:2b:01:30:49:21:26:a5:61: bb:17:1b:64:52:fd:3c:77:b9:5f:a5:b9:64:b1:36: bf:6e:c6:29:05:9e:83:41:e1:33:33:00:e8:b5:df: d1:e9:33:da:6c:6c:01:bb:00:e6:d1:e6:a4:92:13: a2:60:5f:a6:c2:79:cf:71:58:0a:95:4c:0e:91:99: 0f:53:a9:cf:5b:f5:1b:cb:e7:d9:9c:c0:5a:db:73: 9d:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:3D:66:64:F2:1B:35:1D:23:DD:7A:C0:9C:B9:B9:D6:C2:23:8B:DA X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145739.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:ac11::/32 Signature Algorithm: sha256WithRSAEncryption 21:6a:78:55:3a:32:73:9f:15:37:07:d9:c2:23:f5:4b:77:85: 94:90:01:45:52:5d:34:7f:49:21:4e:e1:6c:38:a5:c7:0e:db: 92:07:2b:4d:ff:46:74:c8:ed:f4:dd:84:b1:78:51:14:1b:81: db:8e:d5:fc:3b:e7:ed:1b:73:5e:78:b5:3d:0a:af:52:8b:eb: 1e:13:4b:3e:2b:7a:69:d0:e0:3b:59:67:e8:56:94:cc:ae:e5: 56:73:97:a0:f1:86:fe:a6:89:47:e9:17:a9:15:e7:20:b4:8f: 85:d2:0b:97:1d:26:bc:4b:69:22:a9:99:3e:c2:7b:70:ad:7d: d0:5b:c3:29:4d:7f:b7:18:dc:01:94:6e:44:a0:be:22:7c:bb: 63:37:10:b5:1a:a8:06:69:89:d9:e9:53:2d:ab:ec:ab:2e:0b: b7:ea:df:fe:cd:87:be:4f:65:8c:e2:77:75:68:31:78:98:4e: a8:29:57:59:bf:11:f5:74:70:e3:73:fa:76:e1:4f:80:7a:84: bc:88:0a:53:0b:e0:dc:24:8a:15:b9:07:18:fe:93:2b:b5:8a: eb:fd:c5:37:3e:51:1d:3d:96:27:22:8d:ac:a0:c1:e1:87:c4: d6:83:ef:ac:2a:97:b1:11:2a:0e:b7:3c:24:a3:21:65:05:89: ba:c6:a4:bc -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUDu5GNOQJyNAOZeugOjIzzB0pj4QwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MjQ0MFoX DTI3MDMwMzA2Mjk0MFowMzExMC8GA1UEAxMoREEzRDY2NjRGMjFCMzUxRDIzREQ3 QUMwOUNCOUI5RDZDMjIzOEJEQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJBzzdN3EGrhTVUxHe6qlsA63JLzJA8EZx7gVNUtxsyj1e4EUn5Vq7NhZ8L2 8KDaANlYJZDvUbujMEtUveqHeSVjD6xPsoeRJOPtJ3jVBsVp0nLsGEVZw1m89HSR KTpKfUb384QSvjkFhHSzpCnRpyVL/JOgSdXBLXz1OuVKvQuJ1XLK93hW/JX8qZAO mAKjYRlSFEE17q71coNZPmpia2Xkt0xb+WnwY8POdisBMEkhJqVhuxcbZFL9PHe5 X6W5ZLE2v27GKQWeg0HhMzMA6LXf0ekz2mxsAbsA5tHmpJITomBfpsJ5z3FYCpVM DpGZD1Opz1v1G8vn2ZzAWttzna8CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBTaPWZk 8hs1HSPdesCcubnWwiOL2jAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTczOS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rBEwDQYJKoZIhvcNAQELBQADggEBACFqeFU6MnOfFTcH2cIj9Ut3hZSQAUVSXTR/ SSFO4Ww4pccO25IHK03/RnTI7fTdhLF4URQbgduO1fw75+0bc154tT0Kr1KL6x4T Sz4remnQ4DtZZ+hWlMyu5VZzl6Dxhv6miUfpF6kV5yC0j4XSC5cdJrxLaSKpmT7C e3CtfdBbwylNf7cY3AGUbkSgviJ8u2M3ELUaqAZpidnpUy2r7KsuC7fq3/7Nh75P ZYzid3VoMXiYTqgpV1m/EfV0cONz+nbhT4B6hLyIClML4NwkihW5Bxj+kyu1iuv9 xTc+UR09licijaygweGHxNaD76wql7ERKg63PCSjIWUFibrGpLw= -----END CERTIFICATE-----Generated at Sat Mar 28 11:45:28 2026 by rpki-client