$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145742.roa File: AS145742.roa (raw, json) Hash identifier: uUxQ1CI4765j/1t2rhMMkHwLLkLZNHDWxjQ+t7Ou8xU= Subject key identifier: BE:24:F1:7D:B0:39:35:4F:41:EE:BF:5E:67:75:31:0F:15:61:D9:9D Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 62201641DED11BA7CC36A159E9848DA8C3ABFA44 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145742.roa Signing time: Wed 04 Mar 2026 06:30:34 +0000 ROA not before: Wed 04 Mar 2026 06:25:34 +0000 ROA not after: Wed 03 Mar 2027 06:30:34 +0000 asID: 145742 IP address blocks: 240a:ac14::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:20:16:41:de:d1:1b:a7:cc:36:a1:59:e9:84:8d:a8:c3:ab:fa:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:25:34 2026 GMT Not After : Mar 3 06:30:34 2027 GMT Subject: CN=BE24F17DB039354F41EEBF5E6775310F1561D99D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:01:42:dc:53:66:5c:f1:3e:3f:b1:5c:a7:d9: 6a:9b:5d:4f:e0:5f:6f:ed:4b:63:81:4c:dc:25:87: 6e:b5:b7:f1:1f:4a:1e:7f:e4:ab:c0:7a:c4:60:b9: 55:71:4b:6b:53:94:5b:87:5a:36:a3:e7:4f:09:73: 88:d0:e6:85:3a:a0:cd:b6:44:78:f3:18:01:09:3a: eb:fb:80:d5:18:fa:34:d6:00:f4:a7:d2:70:7c:2f: d0:27:4e:78:3b:9a:1a:4b:68:53:2b:07:0c:74:04: 1b:20:a6:0d:18:43:92:7a:bf:eb:88:21:a9:84:4e: 37:17:32:77:02:f2:10:4e:10:98:64:91:de:57:b1: 73:7a:ae:be:58:05:05:8b:c4:1b:35:fb:79:ab:72: a6:32:ad:5a:c8:4c:75:1b:4f:01:75:64:f0:a4:24: b9:5c:4f:74:7c:d0:ed:f5:7d:7b:58:27:aa:28:22: c8:2c:bf:a0:29:1a:aa:2a:d9:92:f3:be:20:16:ea: 7a:0e:0f:15:aa:cf:92:95:1b:78:ad:a3:5c:7b:fd: 09:17:c1:cb:42:8d:50:86:51:87:30:79:14:ea:19: d8:f8:6a:3f:02:c3:01:5f:e1:a5:43:40:69:84:85: f2:76:aa:0b:42:17:87:ea:4b:0f:37:8a:77:da:70: 1d:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:24:F1:7D:B0:39:35:4F:41:EE:BF:5E:67:75:31:0F:15:61:D9:9D X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145742.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:ac14::/32 Signature Algorithm: sha256WithRSAEncryption 2d:d1:e1:52:3b:65:fe:5b:da:e2:af:ff:d0:a3:f7:29:94:27: 70:37:0e:58:4b:29:8d:38:8c:8e:65:09:52:2d:be:1d:ff:2d: ae:fe:e6:a9:ce:09:eb:71:18:4b:58:4c:05:c8:56:d3:ce:8c: a9:65:29:71:0a:89:66:a1:b5:f8:db:72:fb:1e:a7:15:87:78: ca:bf:3a:49:33:26:0a:1d:05:fc:3d:a2:06:35:41:40:ca:ee: c1:ab:02:6e:52:1b:89:11:e7:7a:2b:1b:c4:2b:df:15:62:a9: b1:40:11:ed:dc:18:37:29:03:c7:e0:ba:f2:44:47:d8:5d:e3: 8f:ab:d2:c0:31:5f:e9:8f:13:d6:6c:55:b8:4e:6c:d5:f9:3b: 47:8a:4f:cc:23:4c:d8:87:2f:90:32:99:fc:bd:26:45:bc:27: 4f:34:6b:8d:ab:be:a9:b0:59:31:e9:91:99:54:00:98:25:39: 40:22:d0:12:23:fe:fd:8c:e5:1e:04:41:d4:5a:20:70:21:12: 9d:c2:be:93:0b:19:79:b4:b1:bd:55:c2:66:3f:bb:35:2d:9c: 7b:92:a1:50:29:c4:f7:ba:60:fa:52:2e:79:e6:46:d5:b6:ee: 97:19:cd:ac:ba:93:5b:00:48:23:46:9a:1a:97:ad:80:6e:74: 34:0f:a9:53 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUYiAWQd7RG6fMNqFZ6YSNqMOr+kQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MjUzNFoX DTI3MDMwMzA2MzAzNFowMzExMC8GA1UEAxMoQkUyNEYxN0RCMDM5MzU0RjQxRUVC RjVFNjc3NTMxMEYxNTYxRDk5RDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANkBQtxTZlzxPj+xXKfZaptdT+Bfb+1LY4FM3CWHbrW38R9KHn/kq8B6xGC5 VXFLa1OUW4daNqPnTwlziNDmhTqgzbZEePMYAQk66/uA1Rj6NNYA9KfScHwv0CdO eDuaGktoUysHDHQEGyCmDRhDknq/64ghqYRONxcydwLyEE4QmGSR3lexc3quvlgF BYvEGzX7eatypjKtWshMdRtPAXVk8KQkuVxPdHzQ7fV9e1gnqigiyCy/oCkaqirZ kvO+IBbqeg4PFarPkpUbeK2jXHv9CRfBy0KNUIZRhzB5FOoZ2PhqPwLDAV/hpUNA aYSF8naqC0IXh+pLDzeKd9pwHQMCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBS+JPF9 sDk1T0Huv15ndTEPFWHZnTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTc0Mi5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rBQwDQYJKoZIhvcNAQELBQADggEBAC3R4VI7Zf5b2uKv/9Cj9ymUJ3A3DlhLKY04 jI5lCVItvh3/La7+5qnOCetxGEtYTAXIVtPOjKllKXEKiWahtfjbcvsepxWHeMq/ OkkzJgodBfw9ogY1QUDK7sGrAm5SG4kR53orG8Qr3xViqbFAEe3cGDcpA8fguvJE R9hd44+r0sAxX+mPE9ZsVbhObNX5O0eKT8wjTNiHL5Aymfy9JkW8J080a42rvqmw WTHpkZlUAJglOUAi0BIj/v2M5R4EQdRaIHAhEp3CvpMLGXm0sb1VwmY/uzUtnHuS oVApxPe6YPpSLnnmRtW27pcZzay6k1sASCNGmhqXrYBudDQPqVM= -----END CERTIFICATE-----Generated at Sat Mar 28 11:44:32 2026 by rpki-client