$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145746.roa File: AS145746.roa (raw, json) Hash identifier: 1aikFMnmNonZcPgcLQj8Ot+lzzQkthjq08Ndq7WL0zI= Subject key identifier: 4E:1C:DF:83:5A:B6:EB:69:C8:F6:65:E8:17:2C:6A:94:2E:A1:DB:FB Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 219046E57F35B1FB96FDE1FE5FF88F17F40F2AF2 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145746.roa Signing time: Wed 04 Mar 2026 06:29:43 +0000 ROA not before: Wed 04 Mar 2026 06:24:43 +0000 ROA not after: Wed 03 Mar 2027 06:29:43 +0000 asID: 145746 IP address blocks: 240a:ac18::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:90:46:e5:7f:35:b1:fb:96:fd:e1:fe:5f:f8:8f:17:f4:0f:2a:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:24:43 2026 GMT Not After : Mar 3 06:29:43 2027 GMT Subject: CN=4E1CDF835AB6EB69C8F665E8172C6A942EA1DBFB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:38:ec:45:70:47:9e:63:57:1d:6e:19:2d:64: 89:e3:5e:b6:1b:a0:3b:9c:d9:eb:d4:ae:92:8e:a3: 8d:e4:38:63:e4:f2:8f:f4:98:a1:8f:7d:8a:30:75: 60:05:4e:fd:f2:3d:cd:5e:45:51:72:f7:d3:6f:85: 1f:d0:ac:ee:67:b9:47:db:71:94:cb:9f:2e:68:f7: 96:d5:d5:66:c5:6c:02:a8:e4:00:3f:fd:da:70:a2: 5a:cf:db:84:75:5d:7e:63:3f:5c:2c:38:94:15:d0: 0e:8d:21:96:81:0e:f3:12:c3:53:f1:30:ad:a6:47: 34:84:74:fe:4e:a0:ad:28:46:d6:fa:29:29:18:36: 5c:c5:ea:b8:8c:4f:f5:b8:74:c4:60:7d:5a:33:07: 14:72:22:a0:59:16:42:9e:b6:68:d2:7c:27:a0:a1: d0:d0:4c:0b:23:69:af:11:a6:52:fb:26:d0:79:4f: a0:9e:30:aa:1d:06:40:c3:fd:a8:ee:7a:e4:d0:10: 9b:21:ce:3d:d7:f0:33:99:91:14:50:07:a3:4f:44: 86:11:cb:0b:9c:fa:69:38:af:12:b3:9e:3b:d4:1d: ec:aa:5f:34:0d:d5:5d:64:2a:9b:bd:ae:66:be:01: b4:39:0c:1c:60:35:25:14:31:21:86:af:dd:c6:2b: 89:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:1C:DF:83:5A:B6:EB:69:C8:F6:65:E8:17:2C:6A:94:2E:A1:DB:FB X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145746.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:ac18::/32 Signature Algorithm: sha256WithRSAEncryption 13:d9:e3:b0:b5:db:bf:fb:ee:51:84:0e:f4:b7:2e:46:c3:4d: 25:bd:da:a0:94:c0:26:8f:23:5a:97:77:34:d0:b5:00:45:1d: c3:30:b4:fa:74:a4:73:59:84:50:6a:37:31:4f:d3:58:c3:eb: 03:af:c3:22:35:7e:4f:54:c2:4b:e3:10:70:45:48:da:d9:85: 74:21:cd:93:38:f0:da:7f:15:59:81:7e:dd:52:4f:47:7d:f4: b4:67:17:2c:48:2c:f8:83:d8:07:f9:6f:00:41:7c:aa:48:87: 4a:d0:29:4b:ed:61:16:01:1a:08:92:bc:a6:f9:ae:e8:21:2e: 91:8d:d3:f2:c2:e8:7e:24:84:fd:37:b6:0f:35:93:63:65:eb: 45:6d:0a:7e:3c:ea:a1:12:4a:d5:95:62:24:2a:a3:78:a8:60: 57:83:4b:fd:d7:e5:07:9b:39:43:75:97:11:e6:93:7f:69:1d: 87:97:83:fa:57:15:57:c5:f9:69:dd:5b:57:c5:79:33:cf:45: 8a:6c:0e:22:60:2e:1d:2d:b2:bd:b2:9b:94:27:da:bc:f4:c1: 73:80:a6:f9:14:6c:3f:95:0f:19:64:51:c5:0c:a3:95:07:b1: 7d:90:e7:c4:d1:a0:41:f7:8a:4a:4e:1f:e9:2b:ff:f6:3f:ca: 1d:98:ee:ce -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUIZBG5X81sfuW/eH+X/iPF/QPKvIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MjQ0M1oX DTI3MDMwMzA2Mjk0M1owMzExMC8GA1UEAxMoNEUxQ0RGODM1QUI2RUI2OUM4RjY2 NUU4MTcyQzZBOTQyRUExREJGQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAO447EVwR55jVx1uGS1kieNethugO5zZ69Suko6jjeQ4Y+Tyj/SYoY99ijB1 YAVO/fI9zV5FUXL302+FH9Cs7me5R9txlMufLmj3ltXVZsVsAqjkAD/92nCiWs/b hHVdfmM/XCw4lBXQDo0hloEO8xLDU/EwraZHNIR0/k6grShG1vopKRg2XMXquIxP 9bh0xGB9WjMHFHIioFkWQp62aNJ8J6Ch0NBMCyNprxGmUvsm0HlPoJ4wqh0GQMP9 qO565NAQmyHOPdfwM5mRFFAHo09EhhHLC5z6aTivErOeO9Qd7KpfNA3VXWQqm72u Zr4BtDkMHGA1JRQxIYav3cYriRMCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBROHN+D Wrbracj2ZegXLGqULqHb+zAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTc0Ni5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rBgwDQYJKoZIhvcNAQELBQADggEBABPZ47C127/77lGEDvS3LkbDTSW92qCUwCaP I1qXdzTQtQBFHcMwtPp0pHNZhFBqNzFP01jD6wOvwyI1fk9UwkvjEHBFSNrZhXQh zZM48Np/FVmBft1ST0d99LRnFyxILPiD2Af5bwBBfKpIh0rQKUvtYRYBGgiSvKb5 rughLpGN0/LC6H4khP03tg81k2Nl60VtCn486qESStWVYiQqo3ioYFeDS/3X5Qeb OUN1lxHmk39pHYeXg/pXFVfF+WndW1fFeTPPRYpsDiJgLh0tsr2ym5Qn2rz0wXOA pvkUbD+VDxlkUcUMo5UHsX2Q58TRoEH3ikpOH+kr//Y/yh2Y7s4= -----END CERTIFICATE-----Generated at Sat Mar 28 11:43:46 2026 by rpki-client