$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145755.roa File: AS145755.roa (raw, json) Hash identifier: pnDH9FsRw2MLsTl5/7oXrMX7r733+QTQec8oSTR4UOg= Subject key identifier: 49:BD:8E:63:D9:63:44:2D:46:FB:30:3C:F0:C1:61:8A:FF:4B:98:D2 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 6F2B90D6CB116316A3C80A92316C549A8C6559C3 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145755.roa Signing time: Wed 04 Mar 2026 06:30:35 +0000 ROA not before: Wed 04 Mar 2026 06:25:35 +0000 ROA not after: Wed 03 Mar 2027 06:30:35 +0000 asID: 145755 IP address blocks: 240a:ac21::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:2b:90:d6:cb:11:63:16:a3:c8:0a:92:31:6c:54:9a:8c:65:59:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:25:35 2026 GMT Not After : Mar 3 06:30:35 2027 GMT Subject: CN=49BD8E63D963442D46FB303CF0C1618AFF4B98D2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:5f:41:c1:dc:4c:e8:bd:6f:4a:db:13:01:2f: d4:6f:e7:f2:01:13:28:38:ef:1f:80:6b:29:b4:a3: 20:9e:2a:6b:84:64:cf:a8:8e:1b:15:74:e8:72:97: 75:b1:7d:f7:49:83:be:84:9d:2f:a5:77:95:b1:a1: 06:fb:69:8f:28:00:c7:25:d6:e7:b4:a6:13:c4:19: b5:53:39:30:cc:73:b4:8c:0b:1f:cc:d4:5b:a1:f0: b9:29:54:38:aa:60:9c:c5:70:4b:59:b7:42:1e:b7: ae:77:42:df:3b:37:e0:ac:fc:5d:56:52:48:22:3a: 99:ca:d0:df:2b:60:bc:3b:b6:f8:48:58:17:f9:aa: 02:4b:d0:13:dd:5a:ef:d5:4e:50:1f:79:08:6b:4d: ae:a3:d6:b9:46:17:8d:7c:9e:17:41:d9:25:9d:1b: df:d2:00:02:bb:06:4e:53:da:3d:63:a1:f6:d8:17: 7b:cb:52:60:d8:6d:a7:d0:c4:6e:db:9e:a7:f0:b6: 8b:8c:57:7f:03:2b:41:53:f3:be:eb:e7:50:72:01: 24:9c:87:e9:09:2c:c5:34:cc:6c:58:7b:db:8e:62: b3:91:fa:38:f7:85:34:8c:d2:81:5b:44:f0:75:c8: 4c:00:00:6b:b5:09:3f:03:93:af:0f:b4:cd:91:3a: 49:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:BD:8E:63:D9:63:44:2D:46:FB:30:3C:F0:C1:61:8A:FF:4B:98:D2 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145755.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:ac21::/32 Signature Algorithm: sha256WithRSAEncryption 13:71:7a:94:d4:ac:ca:2a:c4:aa:6c:dc:b3:12:be:1e:9e:f0: 36:d4:a3:71:0c:3c:c9:29:7c:82:4e:7a:18:79:f6:0d:3e:6f: 05:43:d2:33:df:48:59:b9:95:0a:33:69:ab:fd:d4:73:b3:f2: 97:d3:89:a6:47:44:7a:b6:4e:ed:99:e6:8c:c7:e6:bf:8b:84: af:01:45:89:60:c8:4f:e3:c7:52:67:e3:6e:7b:a2:21:82:91: a1:02:89:a2:21:cc:9b:35:92:fd:2f:41:a2:ec:c7:3d:10:96: b9:03:df:4f:c6:69:7b:05:3d:2f:5f:04:9a:d3:4e:2a:54:fc: 15:34:48:28:26:bb:db:7e:b0:1b:ef:1c:43:6f:2a:a6:ba:fd: 43:7b:28:8e:41:30:c7:80:61:2f:cb:5c:bb:9a:6b:eb:dc:e7: d8:4b:96:11:cd:8d:7a:14:e6:5a:c1:55:10:8a:06:fa:62:6e: aa:64:d6:3f:7a:89:3c:10:12:a6:7e:03:f6:70:55:7e:a9:b9: 0c:de:d7:96:66:d3:62:ad:3b:8e:e3:c8:47:09:2d:63:ed:df: 75:28:43:90:1b:42:61:11:44:ca:9d:f2:e0:17:3b:b6:9e:a8: 23:18:b2:6a:0b:1a:41:cb:aa:28:a2:15:c3:0c:43:4a:51:57: a6:57:50:42 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUbyuQ1ssRYxajyAqSMWxUmoxlWcMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MjUzNVoX DTI3MDMwMzA2MzAzNVowMzExMC8GA1UEAxMoNDlCRDhFNjNEOTYzNDQyRDQ2RkIz MDNDRjBDMTYxOEFGRjRCOThEMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALxfQcHcTOi9b0rbEwEv1G/n8gETKDjvH4BrKbSjIJ4qa4Rkz6iOGxV06HKX dbF990mDvoSdL6V3lbGhBvtpjygAxyXW57SmE8QZtVM5MMxztIwLH8zUW6HwuSlU OKpgnMVwS1m3Qh63rndC3zs34Kz8XVZSSCI6mcrQ3ytgvDu2+EhYF/mqAkvQE91a 79VOUB95CGtNrqPWuUYXjXyeF0HZJZ0b39IAArsGTlPaPWOh9tgXe8tSYNhtp9DE btuep/C2i4xXfwMrQVPzvuvnUHIBJJyH6QksxTTMbFh7245is5H6OPeFNIzSgVtE 8HXITAAAa7UJPwOTrw+0zZE6SfkCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRJvY5j 2WNELUb7MDzwwWGK/0uY0jAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTc1NS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rCEwDQYJKoZIhvcNAQELBQADggEBABNxepTUrMoqxKps3LMSvh6e8DbUo3EMPMkp fIJOehh59g0+bwVD0jPfSFm5lQozaav91HOz8pfTiaZHRHq2Tu2Z5ozH5r+LhK8B RYlgyE/jx1Jn4257oiGCkaECiaIhzJs1kv0vQaLsxz0QlrkD30/GaXsFPS9fBJrT TipU/BU0SCgmu9t+sBvvHENvKqa6/UN7KI5BMMeAYS/LXLuaa+vc59hLlhHNjXoU 5lrBVRCKBvpibqpk1j96iTwQEqZ+A/ZwVX6puQze15Zm02KtO47jyEcJLWPt33Uo Q5AbQmERRMqd8uAXO7aeqCMYsmoLGkHLqiiiFcMMQ0pRV6ZXUEI= -----END CERTIFICATE-----Generated at Sat Mar 28 15:54:36 2026 by rpki-client