$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145751.roa File: AS145751.roa (raw, json) Hash identifier: OTbTRwmV3zzPGcBAmESyHT1yyklMhlJaxTAdE8Ljzk0= Subject key identifier: 3C:EB:15:42:F4:62:8A:77:BA:5F:69:83:5F:C8:AE:2B:EB:22:18:08 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 29CF14E9D7C4237BE8958CD36042CEEBC7AD6071 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145751.roa Signing time: Wed 04 Mar 2026 06:30:16 +0000 ROA not before: Wed 04 Mar 2026 06:25:16 +0000 ROA not after: Wed 03 Mar 2027 06:30:16 +0000 asID: 145751 IP address blocks: 240a:ac1d::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:cf:14:e9:d7:c4:23:7b:e8:95:8c:d3:60:42:ce:eb:c7:ad:60:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:25:16 2026 GMT Not After : Mar 3 06:30:16 2027 GMT Subject: CN=3CEB1542F4628A77BA5F69835FC8AE2BEB221808 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:8a:d1:ca:2e:21:16:c5:07:e8:d5:f0:94:9c: 39:fe:46:51:6f:a5:e8:f5:5b:d9:fd:6f:65:db:06: 2f:fc:d3:5f:3d:e5:86:88:0d:a5:82:ed:87:36:c1: 5b:5c:50:bb:4e:df:b3:25:0e:9b:9c:25:10:45:74: 9a:49:55:87:12:b3:18:ae:a5:3d:b8:fc:b6:08:f5: 7a:9a:53:f5:57:e7:cc:c7:d8:9e:ae:50:be:0d:62: 50:48:fe:db:01:2c:08:72:43:af:0b:9e:ce:5b:13: f5:36:b7:69:2f:5a:29:14:3d:d6:b9:0a:55:b4:d7: 76:b9:dd:04:33:b6:70:eb:b9:3e:63:f8:fc:71:ec: b0:d0:fe:04:7c:0c:b7:77:88:ef:36:97:73:8e:f0: ce:14:cb:5e:8d:58:99:3e:ed:55:2e:8b:cf:ea:80: 5d:44:4d:df:0b:cd:90:8f:e1:70:f8:82:06:d8:c7: f6:1f:ce:dc:9d:6a:ec:b9:f3:cf:3c:e2:10:64:75: e8:f8:36:a2:ba:63:28:4f:24:f6:19:09:28:65:c3: 57:0b:38:79:ef:f5:3b:4c:b9:15:f7:89:98:6a:8a: 89:de:df:44:a1:2d:a7:39:f0:70:f6:f8:6e:73:24: 96:1a:e9:7c:85:56:35:f2:d2:fe:ef:04:f2:0d:73: 58:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:EB:15:42:F4:62:8A:77:BA:5F:69:83:5F:C8:AE:2B:EB:22:18:08 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145751.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:ac1d::/32 Signature Algorithm: sha256WithRSAEncryption d1:1c:a6:22:80:3d:3c:ae:55:52:d0:a7:58:17:b8:08:8a:ab: 30:e1:95:4b:1b:13:c6:b1:cb:2f:8e:b9:6f:0e:fd:3d:e1:b1: 0a:69:f9:9b:90:fc:27:a4:1a:a1:be:a4:c8:93:f5:f6:fc:47: b2:f5:ad:82:86:98:7e:ac:7d:de:63:d2:47:da:aa:73:a0:00: 4c:9a:4e:46:a2:e6:90:91:8a:5b:8a:93:26:ab:40:1d:46:c5: b4:1c:45:29:07:f0:37:ac:c8:ed:c2:e4:10:66:35:13:1b:8d: 4d:52:a4:07:23:4e:90:2b:a8:f5:2d:07:cf:b9:93:7d:2b:55: 27:75:bb:7e:0b:0c:5d:03:44:07:fc:bf:ae:af:02:6b:a7:4a: 19:14:ea:13:ea:8f:45:cb:a2:5c:b8:d4:ad:8e:3d:ea:f6:95: c0:20:98:5f:3f:a6:5f:e7:60:82:33:44:02:73:7c:68:46:1d: 74:e4:a9:83:12:8e:ea:d6:78:5f:b9:5d:0e:9b:c0:85:6f:de: 0a:36:51:3f:82:27:55:e7:45:c2:7f:8b:e6:65:ab:3f:31:1b: a8:51:e5:68:fb:99:5a:26:95:2b:93:49:c6:68:d5:fb:6e:bb: f0:44:f0:40:5b:0f:62:44:d5:2c:2e:8e:ff:aa:5f:bc:b4:db: 32:43:ae:43 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUKc8U6dfEI3volYzTYELO68etYHEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MjUxNloX DTI3MDMwMzA2MzAxNlowMzExMC8GA1UEAxMoM0NFQjE1NDJGNDYyOEE3N0JBNUY2 OTgzNUZDOEFFMkJFQjIyMTgwODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALaK0couIRbFB+jV8JScOf5GUW+l6PVb2f1vZdsGL/zTXz3lhogNpYLthzbB W1xQu07fsyUOm5wlEEV0mklVhxKzGK6lPbj8tgj1eppT9VfnzMfYnq5Qvg1iUEj+ 2wEsCHJDrwuezlsT9Ta3aS9aKRQ91rkKVbTXdrndBDO2cOu5PmP4/HHssND+BHwM t3eI7zaXc47wzhTLXo1YmT7tVS6Lz+qAXURN3wvNkI/hcPiCBtjH9h/O3J1q7Lnz zzziEGR16Pg2orpjKE8k9hkJKGXDVws4ee/1O0y5FfeJmGqKid7fRKEtpznwcPb4 bnMklhrpfIVWNfLS/u8E8g1zWOcCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQ86xVC 9GKKd7pfaYNfyK4r6yIYCDAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTc1MS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rB0wDQYJKoZIhvcNAQELBQADggEBANEcpiKAPTyuVVLQp1gXuAiKqzDhlUsbE8ax yy+OuW8O/T3hsQpp+ZuQ/CekGqG+pMiT9fb8R7L1rYKGmH6sfd5j0kfaqnOgAEya Tkai5pCRiluKkyarQB1GxbQcRSkH8DesyO3C5BBmNRMbjU1SpAcjTpArqPUtB8+5 k30rVSd1u34LDF0DRAf8v66vAmunShkU6hPqj0XLoly41K2OPer2lcAgmF8/pl/n YIIzRAJzfGhGHXTkqYMSjurWeF+5XQ6bwIVv3go2UT+CJ1XnRcJ/i+Zlqz8xG6hR 5Wj7mVomlSuTScZo1ftuu/BE8EBbD2JE1Swujv+qX7y02zJDrkM= -----END CERTIFICATE-----Generated at Sat Mar 28 13:18:09 2026 by rpki-client