$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145745.roa File: AS145745.roa (raw, json) Hash identifier: Z+TfPn0xWlZXn+4zYzftQwMaFXWGqCBY1MIr8//pyEM= Subject key identifier: DF:56:7B:A9:DF:E7:59:64:F2:2B:B6:96:E5:A8:16:09:53:28:B0:01 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 799919236C0485A844549018C17EA5E9843F9159 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145745.roa Signing time: Wed 04 Mar 2026 06:30:02 +0000 ROA not before: Wed 04 Mar 2026 06:25:02 +0000 ROA not after: Wed 03 Mar 2027 06:30:02 +0000 asID: 145745 IP address blocks: 240a:ac17::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:99:19:23:6c:04:85:a8:44:54:90:18:c1:7e:a5:e9:84:3f:91:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:25:02 2026 GMT Not After : Mar 3 06:30:02 2027 GMT Subject: CN=DF567BA9DFE75964F22BB696E5A816095328B001 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:10:2a:22:68:ec:fd:32:ca:63:4f:e0:30:98: 68:30:4b:96:4d:d9:bf:a7:c6:8b:ad:86:a2:96:09: 18:d6:ce:83:d1:7f:99:7b:7c:6b:f1:f6:27:53:ed: d2:8a:ff:87:9e:a5:e3:11:22:a1:79:64:44:7e:92: 93:4d:27:cc:60:b0:74:69:b2:dd:10:5e:f5:78:fb: c2:15:9b:de:36:8a:e1:ac:fa:02:78:42:dd:4a:2a: ff:6e:66:ea:e2:77:21:6b:59:61:65:d4:11:4d:4d: f1:8c:25:7b:7d:82:df:01:eb:31:11:5d:9b:c0:09: e6:63:42:e5:5e:9f:4b:3a:65:2b:16:c4:b6:b1:95: 9e:b9:38:53:de:2f:80:ef:85:68:02:99:d4:1b:40: 6b:5f:7a:fb:63:0f:d1:2f:dc:d7:6e:3b:ce:29:a7: 0d:66:0f:75:fa:bd:e8:53:0c:cb:28:8f:5e:ff:b1: ab:85:7c:d7:06:64:19:91:9a:12:cc:4d:23:a8:22: 46:aa:65:93:05:37:53:28:dd:79:6b:39:ff:d3:82: d5:a2:e0:65:70:d9:57:ec:70:8f:9f:8b:df:e9:98: 1f:56:8a:c3:12:c9:38:52:ab:75:f0:5d:b4:d7:10: 89:bf:6c:aa:32:56:fa:75:5f:9b:34:03:54:fa:ec: 8d:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:56:7B:A9:DF:E7:59:64:F2:2B:B6:96:E5:A8:16:09:53:28:B0:01 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145745.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:ac17::/32 Signature Algorithm: sha256WithRSAEncryption 5f:46:9a:a6:23:c0:7d:4f:7f:b1:00:55:05:03:9f:05:b8:b8: 9d:f4:93:62:74:e4:5c:f0:e7:d0:b3:8f:ee:32:f5:e7:be:64: f4:03:34:f9:e4:3d:95:dd:60:c4:2e:99:41:9e:21:62:9f:39: c3:05:76:26:30:49:05:84:18:ef:ae:6c:e6:b8:39:55:f0:35: c7:d4:d6:7e:70:76:be:fe:53:bf:e4:3b:22:5a:bb:a6:37:ea: d4:c2:52:7e:af:a0:07:99:a3:48:b3:1e:cc:03:d0:90:a8:b0: bd:47:0d:20:10:d9:24:8e:53:ae:39:d2:22:0c:59:ec:08:2c: da:de:f7:2f:7a:e5:55:55:20:75:f4:33:85:81:b7:7c:46:d5: ac:84:f8:36:07:e3:cb:8f:58:59:84:37:ad:6d:31:a6:0c:68: 65:99:d3:3c:e5:7d:51:61:61:8f:e5:11:ca:8b:89:3d:81:41: 99:45:ee:fc:60:7d:2c:24:f8:cf:57:70:84:ee:af:e0:10:24: 02:45:eb:aa:d1:b8:a0:69:17:49:69:53:f5:6c:9d:bd:f2:5e: 72:52:7c:cb:0b:f3:39:26:76:0c:35:e9:6b:fa:e6:2f:b3:31: 5e:f5:e2:25:b3:32:45:3e:ce:a6:74:82:6d:ed:ed:e7:da:5f: 4d:0d:64:9d -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUeZkZI2wEhahEVJAYwX6l6YQ/kVkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MjUwMloX DTI3MDMwMzA2MzAwMlowMzExMC8GA1UEAxMoREY1NjdCQTlERkU3NTk2NEYyMkJC Njk2RTVBODE2MDk1MzI4QjAwMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMYQKiJo7P0yymNP4DCYaDBLlk3Zv6fGi62GopYJGNbOg9F/mXt8a/H2J1Pt 0or/h56l4xEioXlkRH6Sk00nzGCwdGmy3RBe9Xj7whWb3jaK4az6AnhC3Uoq/25m 6uJ3IWtZYWXUEU1N8Ywle32C3wHrMRFdm8AJ5mNC5V6fSzplKxbEtrGVnrk4U94v gO+FaAKZ1BtAa196+2MP0S/c1247zimnDWYPdfq96FMMyyiPXv+xq4V81wZkGZGa EsxNI6giRqplkwU3UyjdeWs5/9OC1aLgZXDZV+xwj5+L3+mYH1aKwxLJOFKrdfBd tNcQib9sqjJW+nVfmzQDVPrsjb0CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBTfVnup 3+dZZPIrtpblqBYJUyiwATAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTc0NS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rBcwDQYJKoZIhvcNAQELBQADggEBAF9GmqYjwH1Pf7EAVQUDnwW4uJ30k2J05Fzw 59Czj+4y9ee+ZPQDNPnkPZXdYMQumUGeIWKfOcMFdiYwSQWEGO+ubOa4OVXwNcfU 1n5wdr7+U7/kOyJau6Y36tTCUn6voAeZo0izHswD0JCosL1HDSAQ2SSOU6450iIM WewILNre9y965VVVIHX0M4WBt3xG1ayE+DYH48uPWFmEN61tMaYMaGWZ0zzlfVFh YY/lEcqLiT2BQZlF7vxgfSwk+M9XcITur+AQJAJF66rRuKBpF0lpU/Vsnb3yXnJS fMsL8zkmdgw16Wv65i+zMV714iWzMkU+zqZ0gm3t7efaX00NZJ0= -----END CERTIFICATE-----Generated at Sat Mar 28 11:42:11 2026 by rpki-client