$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145758.roa File: AS145758.roa (raw, json) Hash identifier: 9ldAnGaEKxKveSe1RH+Nbi85SGjROYBHm5rceDFg9SA= Subject key identifier: 78:00:D6:38:D6:7E:52:79:22:DB:EF:B1:93:1D:C8:10:DB:97:11:A1 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 6398C450ACAE8E8E40DEA745ABA5A5BB87793477 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145758.roa Signing time: Wed 04 Mar 2026 06:30:42 +0000 ROA not before: Wed 04 Mar 2026 06:25:42 +0000 ROA not after: Wed 03 Mar 2027 06:30:42 +0000 asID: 145758 IP address blocks: 240a:ac24::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:98:c4:50:ac:ae:8e:8e:40:de:a7:45:ab:a5:a5:bb:87:79:34:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:25:42 2026 GMT Not After : Mar 3 06:30:42 2027 GMT Subject: CN=7800D638D67E527922DBEFB1931DC810DB9711A1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:43:04:9c:d6:a6:21:2a:7d:07:e9:9c:e7:73: 30:ad:e5:a3:03:f1:1e:09:3a:be:46:22:73:ce:39: b4:2d:ca:59:2f:e0:7b:8b:fd:f3:6f:67:26:21:7c: b8:53:60:cc:21:67:60:3f:22:38:53:20:32:5b:59: 71:01:6f:22:35:a6:cf:f8:aa:ca:aa:00:66:44:f3: 14:9e:70:e5:8b:4a:bd:78:19:b9:02:a3:c1:25:16: 9b:38:68:a9:5b:22:15:f9:2f:b1:18:14:f3:f1:df: 24:0f:38:4a:53:36:9f:be:8a:77:41:67:14:03:0a: f3:9b:65:05:25:4c:94:07:13:da:cf:cc:0d:fc:bd: bc:1b:97:68:bf:b0:db:cf:fb:ad:46:f1:b6:a8:3d: 18:93:d8:23:9a:ed:8c:bf:a9:8c:69:dc:3f:cc:59: ee:71:ad:5b:2b:66:c2:3e:bf:b4:8a:69:34:20:c6: ff:84:15:66:29:e8:5a:45:fb:41:43:60:62:23:73: 09:d0:a5:0f:40:0f:f3:36:37:5b:97:3d:6b:ab:66: 6b:54:b7:a6:b1:2b:e4:c3:1f:f1:bc:e9:af:7b:04: bc:70:df:fa:bf:c9:ed:b6:5c:c1:e3:5b:f6:7f:f3: 89:79:ec:2d:8e:bc:71:e0:66:34:52:0b:74:af:2f: 3c:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:00:D6:38:D6:7E:52:79:22:DB:EF:B1:93:1D:C8:10:DB:97:11:A1 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145758.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:ac24::/32 Signature Algorithm: sha256WithRSAEncryption 08:32:26:c8:4c:56:b6:ea:0d:0e:8e:dd:17:8f:dd:0c:93:28: 35:36:b9:44:32:67:fb:55:83:e9:e8:b5:d5:d8:a4:0e:a4:2b: 2e:a5:73:2a:32:f6:26:20:0e:8c:58:ae:65:70:39:64:44:ab: 87:94:f0:72:2b:aa:75:2b:dc:2d:f5:c9:2c:97:ee:e2:9b:f1: a3:9e:9a:ae:70:ab:9e:6d:c9:22:52:e8:99:e0:4a:88:cb:61: 65:23:1a:fe:e5:71:32:ab:cf:33:79:91:77:69:16:05:c8:e2: 66:58:67:2f:83:84:aa:ca:37:b6:ef:76:fa:c9:40:90:f3:55: 63:c1:c1:11:59:5c:77:18:ac:da:a6:d8:0f:45:75:6b:c2:fa: 80:98:53:be:58:d8:0b:0e:c8:33:c5:0a:14:f4:36:d7:42:da: a8:a6:9b:6c:e7:54:d5:d7:b7:01:3d:34:3d:17:26:7b:84:e8: ff:cd:e2:4c:97:4f:32:b7:93:2f:c0:83:ff:89:7e:b1:98:cb: e3:d5:a7:d3:c5:13:8e:84:af:0b:dd:27:a6:87:49:60:e6:d7: 15:7d:fa:53:b6:bf:72:4e:1c:fd:61:28:d4:75:c9:b2:b3:3d: 7a:c9:c3:42:c4:4b:25:06:fd:be:ab:ac:2a:d5:f9:45:fb:ce: 2d:0a:71:96 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUY5jEUKyujo5A3qdFq6Wlu4d5NHcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MjU0MloX DTI3MDMwMzA2MzA0MlowMzExMC8GA1UEAxMoNzgwMEQ2MzhENjdFNTI3OTIyREJF RkIxOTMxREM4MTBEQjk3MTFBMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALpDBJzWpiEqfQfpnOdzMK3lowPxHgk6vkYic845tC3KWS/ge4v9829nJiF8 uFNgzCFnYD8iOFMgMltZcQFvIjWmz/iqyqoAZkTzFJ5w5YtKvXgZuQKjwSUWmzho qVsiFfkvsRgU8/HfJA84SlM2n76Kd0FnFAMK85tlBSVMlAcT2s/MDfy9vBuXaL+w 28/7rUbxtqg9GJPYI5rtjL+pjGncP8xZ7nGtWytmwj6/tIppNCDG/4QVZinoWkX7 QUNgYiNzCdClD0AP8zY3W5c9a6tma1S3prEr5MMf8bzpr3sEvHDf+r/J7bZcweNb 9n/ziXnsLY68ceBmNFILdK8vPE8CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBR4ANY4 1n5SeSLb77GTHcgQ25cRoTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTc1OC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rCQwDQYJKoZIhvcNAQELBQADggEBAAgyJshMVrbqDQ6O3ReP3QyTKDU2uUQyZ/tV g+notdXYpA6kKy6lcyoy9iYgDoxYrmVwOWREq4eU8HIrqnUr3C31ySyX7uKb8aOe mq5wq55tySJS6JngSojLYWUjGv7lcTKrzzN5kXdpFgXI4mZYZy+DhKrKN7bvdvrJ QJDzVWPBwRFZXHcYrNqm2A9FdWvC+oCYU75Y2AsOyDPFChT0NtdC2qimm2znVNXX twE9ND0XJnuE6P/N4kyXTzK3ky/Ag/+JfrGYy+PVp9PFE46ErwvdJ6aHSWDm1xV9 +lO2v3JOHP1hKNR1ybKzPXrJw0LESyUG/b6rrCrV+UX7zi0KcZY= -----END CERTIFICATE-----Generated at Sat Mar 28 11:42:11 2026 by rpki-client