$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145744.roa File: AS145744.roa (raw, json) Hash identifier: msmcUdDjG1GNtD4WLGPRDaWRw2TSMicZFn1DpvniCg8= Subject key identifier: 34:6D:FF:6A:4E:34:52:85:54:C1:8D:69:0A:D6:A7:39:CF:BC:63:F2 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 313D9F0E53BA30B0081BDE664920C7939CA14483 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145744.roa Signing time: Wed 04 Mar 2026 06:30:30 +0000 ROA not before: Wed 04 Mar 2026 06:25:30 +0000 ROA not after: Wed 03 Mar 2027 06:30:30 +0000 asID: 145744 IP address blocks: 240a:ac16::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:3d:9f:0e:53:ba:30:b0:08:1b:de:66:49:20:c7:93:9c:a1:44:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:25:30 2026 GMT Not After : Mar 3 06:30:30 2027 GMT Subject: CN=346DFF6A4E34528554C18D690AD6A739CFBC63F2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:a0:d4:61:d5:a8:bc:7d:5f:69:56:a5:cb:1b: 64:5c:bf:b8:05:4a:f4:ec:ee:8b:a0:ce:90:f6:ed: 56:40:cd:bb:3c:55:bb:a4:66:59:34:56:8d:11:4d: d8:11:16:37:06:c9:06:50:2a:f3:dd:0e:a3:7a:3a: c8:88:42:2d:53:d8:6b:0d:dc:d3:a1:02:11:32:21: d9:b2:bd:51:73:95:c7:a2:5a:5f:90:a9:c6:dd:f1: 94:a4:cf:2b:3d:e8:d7:a2:94:8b:94:0d:2c:c5:9f: 85:a5:65:7d:46:82:ff:4f:a0:a5:f7:fe:74:a4:14: e1:4e:9e:43:ba:42:c7:e2:59:06:c9:ca:84:6b:d5: eb:6a:0a:4f:da:85:cc:e8:2d:bf:fa:a8:9a:19:4c: bc:21:b1:c1:b5:0d:73:1c:3c:07:57:9f:dd:eb:ff: 4b:04:37:a8:4e:d4:a9:6b:8c:e6:f4:03:70:af:20: 65:00:eb:20:4e:56:a4:8a:31:2c:0d:de:51:93:e0: e5:c5:bf:a7:e6:4c:01:fd:76:52:ac:5b:6b:4c:c5: fe:0c:ea:7e:83:d8:04:ab:4a:b0:51:c8:93:f1:bd: d6:b9:2f:1a:2b:47:e7:04:46:04:c8:77:a2:12:af: ef:67:2e:cd:8b:9c:5c:2b:d1:2b:a5:03:de:bd:0a: 36:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:6D:FF:6A:4E:34:52:85:54:C1:8D:69:0A:D6:A7:39:CF:BC:63:F2 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145744.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:ac16::/32 Signature Algorithm: sha256WithRSAEncryption 7f:87:6b:d7:36:ac:ff:d1:3b:fc:78:b9:6c:94:81:97:1c:b2: 8a:85:05:c7:ab:b2:47:d6:30:06:4f:7b:2a:7b:d6:7f:47:cf: 31:a4:49:00:33:22:a9:82:b0:87:40:71:cb:d6:42:9f:80:6e: 36:73:e4:ef:83:c6:f0:a1:9b:42:0c:8e:fe:97:9f:c0:18:0d: 2d:88:16:f9:d1:19:87:82:80:4e:27:c2:59:45:6c:ce:43:87: d3:3b:87:83:2c:56:e8:9a:f3:4c:af:6e:8b:d0:f4:64:ed:47: 4c:0f:23:77:9b:92:22:0b:cc:21:3e:74:ec:04:ae:7d:ff:47: b0:dc:a7:a4:b5:f6:de:0d:6b:38:0e:58:c6:94:0f:36:09:4c: 20:90:f5:0b:97:58:77:ed:f9:b6:c2:d3:28:2a:cc:7c:c7:e9: ff:be:5a:ad:97:3f:f7:2e:72:30:f4:a0:cb:ac:e9:f7:66:04: 8c:d7:dd:05:7c:b2:bb:d9:f8:94:ff:ec:3e:49:38:14:8b:37: e3:91:64:5f:e7:0f:80:57:28:22:2a:37:b3:04:45:01:30:76: 87:d4:ce:38:ab:69:7b:ef:f9:1b:65:06:44:b5:71:3c:dd:e6: 91:d1:fd:12:b3:36:f8:00:b8:da:6a:8c:7f:84:03:5c:02:9b: fe:ee:f3:1c -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUMT2fDlO6MLAIG95mSSDHk5yhRIMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MjUzMFoX DTI3MDMwMzA2MzAzMFowMzExMC8GA1UEAxMoMzQ2REZGNkE0RTM0NTI4NTU0QzE4 RDY5MEFENkE3MzlDRkJDNjNGMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANSg1GHVqLx9X2lWpcsbZFy/uAVK9Ozui6DOkPbtVkDNuzxVu6RmWTRWjRFN 2BEWNwbJBlAq890Oo3o6yIhCLVPYaw3c06ECETIh2bK9UXOVx6JaX5Cpxt3xlKTP Kz3o16KUi5QNLMWfhaVlfUaC/0+gpff+dKQU4U6eQ7pCx+JZBsnKhGvV62oKT9qF zOgtv/qomhlMvCGxwbUNcxw8B1ef3ev/SwQ3qE7UqWuM5vQDcK8gZQDrIE5WpIox LA3eUZPg5cW/p+ZMAf12Uqxba0zF/gzqfoPYBKtKsFHIk/G91rkvGitH5wRGBMh3 ohKv72cuzYucXCvRK6UD3r0KNjsCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQ0bf9q TjRShVTBjWkK1qc5z7xj8jAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTc0NC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rBYwDQYJKoZIhvcNAQELBQADggEBAH+Ha9c2rP/RO/x4uWyUgZccsoqFBcerskfW MAZPeyp71n9HzzGkSQAzIqmCsIdAccvWQp+AbjZz5O+DxvChm0IMjv6Xn8AYDS2I FvnRGYeCgE4nwllFbM5Dh9M7h4MsVuia80yvbovQ9GTtR0wPI3ebkiILzCE+dOwE rn3/R7Dcp6S19t4NazgOWMaUDzYJTCCQ9QuXWHft+bbC0ygqzHzH6f++Wq2XP/cu cjD0oMus6fdmBIzX3QV8srvZ+JT/7D5JOBSLN+ORZF/nD4BXKCIqN7MERQEwdofU zjiraXvv+RtlBkS1cTzd5pHR/RKzNvgAuNpqjH+EA1wCm/7u8xw= -----END CERTIFICATE-----Generated at Sat Mar 28 11:42:58 2026 by rpki-client