$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145740.roa File: AS145740.roa (raw, json) Hash identifier: HEbd7vdtgKdLxHjedeHejRrGG6Pttz5MSwc/cPQ9qhs= Subject key identifier: C2:1E:58:32:51:5C:4C:C7:5F:05:2B:57:2C:98:C8:33:07:64:58:02 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 7218C28FB9D11FB9F0EF6CBDD01E4E6AB3A89935 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145740.roa Signing time: Wed 04 Mar 2026 06:31:02 +0000 ROA not before: Wed 04 Mar 2026 06:26:02 +0000 ROA not after: Wed 03 Mar 2027 06:31:02 +0000 asID: 145740 IP address blocks: 240a:ac12::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:18:c2:8f:b9:d1:1f:b9:f0:ef:6c:bd:d0:1e:4e:6a:b3:a8:99:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:26:02 2026 GMT Not After : Mar 3 06:31:02 2027 GMT Subject: CN=C21E5832515C4CC75F052B572C98C83307645802 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:60:fe:49:99:c4:59:16:43:4d:19:65:36:05: b1:c3:a5:9f:23:67:c9:b3:ad:66:62:0c:0c:2e:1a: df:dc:34:5f:3b:eb:eb:c6:38:ae:f5:cc:3d:fb:5f: 54:f8:3b:50:3c:ba:68:d3:57:b7:b3:d4:50:65:6a: 80:43:ca:52:1e:23:36:b4:85:12:15:bd:7b:7c:f4: e1:a3:e3:35:f1:2b:8a:30:23:4a:09:d7:a9:5d:43: 80:05:7f:a6:c4:45:98:70:1d:ed:a4:3b:1f:c5:a6: 9d:06:5d:47:05:29:47:8c:99:78:4c:c6:1a:bd:4e: 21:7e:f6:23:7f:20:37:ec:2f:c3:66:89:2f:f6:dc: 8b:12:f1:ba:54:1a:15:84:b1:97:6d:bf:73:fb:2d: 61:0a:04:0e:7e:51:55:dd:dd:ad:82:9c:10:c9:4b: 1c:d7:b6:01:6a:3a:56:18:3f:c4:cf:ff:39:59:34: b9:5d:49:c6:ab:57:b3:8d:e4:39:d8:73:17:9b:41: 2d:1b:64:cd:bf:00:55:03:a3:17:59:8b:f8:fc:3c: 12:8d:76:a2:d9:99:c0:73:8e:31:a4:b5:6c:df:d1: f4:e7:5f:9b:38:ad:89:58:22:d0:11:38:6b:5c:d0: 7f:60:f3:6b:82:97:60:95:70:63:78:7c:cd:c9:77: 1d:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:1E:58:32:51:5C:4C:C7:5F:05:2B:57:2C:98:C8:33:07:64:58:02 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145740.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:ac12::/32 Signature Algorithm: sha256WithRSAEncryption ba:65:f2:af:57:74:2a:d5:ff:d1:a9:9c:c4:af:f1:a6:07:e3: 15:76:e6:0e:43:5c:9a:04:f5:48:86:a4:20:e8:cb:a7:60:15: 80:bd:85:a1:97:5e:09:9e:2b:f2:93:6b:6e:44:72:78:55:7c: 39:09:fa:7f:fe:c7:66:3d:95:cb:8b:cc:d9:0a:eb:9b:40:7e: d1:11:1e:dc:54:6a:cd:17:fa:66:29:16:81:9e:10:d9:90:3c: d3:2f:fd:87:4a:9e:0a:c2:1e:e5:44:33:fc:dc:bf:9b:88:f6: ae:27:58:09:9f:f5:f5:41:56:39:39:ff:f9:22:31:6b:8c:ea: 60:ef:da:a5:78:29:f2:eb:66:23:0e:8d:fa:c0:00:74:dc:f2: 3a:39:7d:06:e1:66:97:8b:89:3b:06:df:8f:fa:2c:4f:da:a7: db:63:ec:09:80:e6:d7:6a:c0:26:09:89:b1:8a:b2:44:2d:2a: 9c:73:25:93:e8:8b:16:ca:6e:9b:17:28:ec:fd:08:78:de:07: 86:33:4e:c4:7f:46:27:63:93:05:47:f6:8f:3c:c7:f7:0d:5b: 00:ec:0d:cc:d7:c5:36:d0:c3:92:6c:8a:4c:f7:08:c1:45:f2: 97:fe:a2:a2:f9:9e:d5:19:09:8f:4c:96:2a:a2:e9:0d:2d:eb: 67:8d:11:66 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUchjCj7nRH7nw72y90B5OarOomTUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MjYwMloX DTI3MDMwMzA2MzEwMlowMzExMC8GA1UEAxMoQzIxRTU4MzI1MTVDNENDNzVGMDUy QjU3MkM5OEM4MzMwNzY0NTgwMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKNg/kmZxFkWQ00ZZTYFscOlnyNnybOtZmIMDC4a39w0Xzvr68Y4rvXMPftf VPg7UDy6aNNXt7PUUGVqgEPKUh4jNrSFEhW9e3z04aPjNfErijAjSgnXqV1DgAV/ psRFmHAd7aQ7H8WmnQZdRwUpR4yZeEzGGr1OIX72I38gN+wvw2aJL/bcixLxulQa FYSxl22/c/stYQoEDn5RVd3drYKcEMlLHNe2AWo6Vhg/xM//OVk0uV1JxqtXs43k OdhzF5tBLRtkzb8AVQOjF1mL+Pw8Eo12otmZwHOOMaS1bN/R9OdfmzitiVgi0BE4 a1zQf2Dza4KXYJVwY3h8zcl3HfMCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBTCHlgy UVxMx18FK1csmMgzB2RYAjAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTc0MC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rBIwDQYJKoZIhvcNAQELBQADggEBALpl8q9XdCrV/9GpnMSv8aYH4xV25g5DXJoE 9UiGpCDoy6dgFYC9haGXXgmeK/KTa25EcnhVfDkJ+n/+x2Y9lcuLzNkK65tAftER HtxUas0X+mYpFoGeENmQPNMv/YdKngrCHuVEM/zcv5uI9q4nWAmf9fVBVjk5//ki MWuM6mDv2qV4KfLrZiMOjfrAAHTc8jo5fQbhZpeLiTsG34/6LE/ap9tj7AmA5tdq wCYJibGKskQtKpxzJZPoixbKbpsXKOz9CHjeB4YzTsR/RidjkwVH9o88x/cNWwDs DczXxTbQw5Jsikz3CMFF8pf+oqL5ntUZCY9Mliqi6Q0t62eNEWY= -----END CERTIFICATE-----Generated at Sat Mar 28 14:30:40 2026 by rpki-client