$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145750.roa File: AS145750.roa (raw, json) Hash identifier: sNtszgatdvV08MVR76J8fF2nRF/EZ5mHZ8wkD7sSkHU= Subject key identifier: 41:41:84:7B:2B:33:63:CA:E4:9E:28:62:41:9A:E5:B0:93:10:CD:2D Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 79207AFBD0DB25E1CBC6363A51667BA9A8287FC6 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145750.roa Signing time: Wed 04 Mar 2026 06:30:16 +0000 ROA not before: Wed 04 Mar 2026 06:25:16 +0000 ROA not after: Wed 03 Mar 2027 06:30:16 +0000 asID: 145750 IP address blocks: 240a:ac1c::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:20:7a:fb:d0:db:25:e1:cb:c6:36:3a:51:66:7b:a9:a8:28:7f:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:25:16 2026 GMT Not After : Mar 3 06:30:16 2027 GMT Subject: CN=4141847B2B3363CAE49E2862419AE5B09310CD2D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:d6:8c:24:56:43:f9:66:ef:2b:e4:2e:5c:69: 9c:e4:42:c0:96:78:22:09:6f:25:c1:84:68:c9:41: a6:55:ab:0c:e4:2e:11:57:cc:54:f0:44:2a:1a:c1: 0b:13:42:29:72:19:1a:0e:d0:8f:f1:01:99:ad:5d: 14:20:c7:70:87:a1:b4:1b:64:69:5a:81:5e:a6:fe: b7:3c:c0:4f:7b:b7:cb:ef:49:26:6f:d3:f3:52:63: 3f:20:19:ff:16:ed:c5:51:51:e8:6c:5d:ae:8e:b8: cc:9f:4c:95:a2:22:5a:31:cb:93:f4:1e:1f:3b:29: fa:33:21:1c:ed:24:cb:68:5f:dd:db:0a:a2:ea:20: 6d:91:41:7e:bc:4a:1a:85:8e:4e:03:09:f8:94:14: 52:07:a4:ca:07:0d:57:ff:00:ae:d5:b4:4d:b0:a1: 1b:0e:de:84:7c:48:60:b0:b7:4c:ac:13:55:0e:cd: f5:27:b4:43:e8:87:e6:ce:4c:f6:3f:15:83:f6:f6: 93:00:6d:c7:2d:52:8d:98:dc:ec:70:47:1d:ae:e1: 2e:7e:c4:cb:56:a9:2c:11:5f:a4:5c:31:7e:38:8e: 20:37:11:2a:03:3b:13:bf:8e:be:d7:be:58:87:20: 8d:7a:90:da:41:bd:a2:26:c3:6f:6c:5c:bd:75:24: 51:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:41:84:7B:2B:33:63:CA:E4:9E:28:62:41:9A:E5:B0:93:10:CD:2D X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145750.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:ac1c::/32 Signature Algorithm: sha256WithRSAEncryption bc:a3:7c:51:e4:8b:33:de:db:2c:ac:4d:d9:70:b8:01:45:49: a3:e3:04:e4:3e:fe:78:92:47:3c:73:6b:5a:c3:f5:b2:96:fd: 15:6d:1e:0a:55:be:54:99:ed:a1:3e:75:c1:0c:cb:82:9d:89: 7a:39:48:a9:ab:7f:0c:16:6d:e2:5a:ea:34:0b:c8:a6:b3:d9: 40:3e:8a:bd:16:48:36:be:f6:a2:95:64:f0:ed:50:01:9f:88: 51:46:b0:7d:56:5d:6e:b2:27:f1:2f:e8:bd:3f:93:19:64:09: bc:1d:41:85:88:49:fc:1e:7a:31:69:9d:af:25:2e:ac:8a:e8: 07:1a:07:ec:dd:cc:4f:af:cb:97:aa:9a:67:4d:85:e8:bc:9c: 6a:0e:45:4d:14:5e:02:44:f0:6c:6b:a3:1b:e1:2c:01:76:37: 73:f3:d9:ff:2e:4d:2a:44:ab:ef:f6:8c:51:06:c3:73:5f:4e: b2:70:63:34:b9:99:0e:5f:df:46:f0:e8:a2:43:0a:0a:b5:40: 15:06:09:85:05:45:d2:c1:d3:ba:50:ef:8c:00:55:49:8b:e4: 80:93:25:02:75:ee:9c:0c:df:64:37:b2:b9:25:76:56:cc:94: c1:3f:2c:88:24:77:3d:a7:a1:09:02:16:79:9e:8b:80:46:68: 4a:ec:8d:3e -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUeSB6+9DbJeHLxjY6UWZ7qagof8YwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MjUxNloX DTI3MDMwMzA2MzAxNlowMzExMC8GA1UEAxMoNDE0MTg0N0IyQjMzNjNDQUU0OUUy ODYyNDE5QUU1QjA5MzEwQ0QyRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJXWjCRWQ/lm7yvkLlxpnORCwJZ4IglvJcGEaMlBplWrDOQuEVfMVPBEKhrB CxNCKXIZGg7Qj/EBma1dFCDHcIehtBtkaVqBXqb+tzzAT3u3y+9JJm/T81JjPyAZ /xbtxVFR6Gxdro64zJ9MlaIiWjHLk/QeHzsp+jMhHO0ky2hf3dsKouogbZFBfrxK GoWOTgMJ+JQUUgekygcNV/8ArtW0TbChGw7ehHxIYLC3TKwTVQ7N9Se0Q+iH5s5M 9j8Vg/b2kwBtxy1SjZjc7HBHHa7hLn7Ey1apLBFfpFwxfjiOIDcRKgM7E7+Ovte+ WIcgjXqQ2kG9oibDb2xcvXUkUUECAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRBQYR7 KzNjyuSeKGJBmuWwkxDNLTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTc1MC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rBwwDQYJKoZIhvcNAQELBQADggEBALyjfFHkizPe2yysTdlwuAFFSaPjBOQ+/niS Rzxza1rD9bKW/RVtHgpVvlSZ7aE+dcEMy4KdiXo5SKmrfwwWbeJa6jQLyKaz2UA+ ir0WSDa+9qKVZPDtUAGfiFFGsH1WXW6yJ/Ev6L0/kxlkCbwdQYWISfweejFpna8l LqyK6AcaB+zdzE+vy5eqmmdNhei8nGoORU0UXgJE8GxroxvhLAF2N3Pz2f8uTSpE q+/2jFEGw3NfTrJwYzS5mQ5f30bw6KJDCgq1QBUGCYUFRdLB07pQ74wAVUmL5ICT JQJ17pwM32Q3srkldlbMlME/LIgkdz2noQkCFnmei4BGaErsjT4= -----END CERTIFICATE-----Generated at Sat Mar 28 11:44:01 2026 by rpki-client