$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145768.roa File: AS145768.roa (raw, json) Hash identifier: RKhpx0XAKpm3zSe7d/njP4i2vnjL8OJPDiCerMFMpVE= Subject key identifier: 7A:7D:DA:FC:09:8F:14:1E:C5:B9:25:86:72:5C:2B:12:AD:B7:DC:7C Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 5D16353D6088DD69CD108B48472B18F95DDA695C Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145768.roa Signing time: Wed 04 Mar 2026 06:30:24 +0000 ROA not before: Wed 04 Mar 2026 06:25:24 +0000 ROA not after: Wed 03 Mar 2027 06:30:24 +0000 asID: 145768 IP address blocks: 240a:ac2e::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:16:35:3d:60:88:dd:69:cd:10:8b:48:47:2b:18:f9:5d:da:69:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:25:24 2026 GMT Not After : Mar 3 06:30:24 2027 GMT Subject: CN=7A7DDAFC098F141EC5B92586725C2B12ADB7DC7C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:60:3b:5e:cb:86:fc:85:dd:ed:5c:01:19:d4: 7a:6f:ac:be:ed:59:7a:ff:b1:47:54:16:9b:d1:44: ae:90:8c:91:71:63:d6:91:51:08:1b:60:31:c2:ab: 42:22:8f:3d:47:87:87:5b:2a:d1:74:27:52:78:ee: 62:9a:56:ff:06:a1:31:59:bf:97:c2:0c:a2:6e:d8: 86:05:f0:8d:ec:7e:46:2a:d0:39:04:4c:3e:6d:28: 4b:1f:a3:4d:88:99:9f:4c:01:f9:3b:44:d1:ee:37: 11:e0:eb:50:37:07:56:45:ed:49:e1:c7:56:83:8c: 75:4a:56:6b:b3:29:01:8d:d1:db:ff:ab:21:26:29: ad:ae:bb:9c:6b:8d:d9:3c:8c:05:35:c6:60:59:b8: c1:af:b3:28:96:fe:d6:31:83:2a:e9:c9:9c:35:be: 69:a4:63:32:9f:33:b0:32:fe:26:24:2d:71:20:de: 9a:45:37:30:d8:99:62:64:22:fe:e3:82:e7:f0:81: 77:6a:02:3d:7d:55:38:10:d4:97:bb:f4:16:66:f3: a4:e7:fd:2b:bb:cf:f2:d2:d3:31:89:6b:ae:8b:2e: 69:68:e7:c5:10:ea:2d:3d:66:8a:44:77:12:d3:1d: 25:bc:bb:76:3d:af:82:ee:c5:25:bf:aa:6a:a2:64: ea:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:7D:DA:FC:09:8F:14:1E:C5:B9:25:86:72:5C:2B:12:AD:B7:DC:7C X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145768.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:ac2e::/32 Signature Algorithm: sha256WithRSAEncryption a9:04:57:8c:40:48:cb:b8:b8:9f:e4:16:10:00:38:1d:47:93: 78:60:64:87:6b:b8:e2:50:ed:cd:7b:a2:db:30:28:39:bf:41: e8:94:83:8e:54:ae:6c:2d:a3:ab:20:f4:e8:29:d2:2e:62:ea: 2d:29:3f:4b:ca:93:c2:7f:d7:50:06:c4:91:0b:b8:da:7e:a8: 30:a3:e2:c3:f3:5c:0c:05:dc:cf:82:fd:93:1b:85:db:30:6b: 43:89:53:45:d0:10:3e:1a:99:a0:14:df:51:07:d0:a5:42:f5: cc:a4:1a:b0:cb:f9:e7:37:2a:df:04:b5:34:f5:b2:01:da:12: 88:67:fc:75:d3:9b:38:61:ea:fa:04:b6:46:92:92:46:e1:95: 41:99:77:5a:f7:44:58:84:c0:17:21:6b:f3:0e:ef:4f:41:a2: ad:d4:a2:57:ad:3b:82:3d:0e:e9:75:03:fd:63:07:24:c5:a5: 75:15:06:2c:0f:71:c3:a9:94:71:ac:1f:bd:5e:e4:d5:00:0f: dd:ba:f5:af:b9:80:ac:f7:3b:00:37:9a:db:a0:5d:33:06:b7: a6:b9:73:e8:e7:da:17:1d:2b:6a:a7:d2:81:a8:78:f7:7d:38: 62:bc:42:d0:30:1d:32:86:aa:77:91:18:2d:60:66:89:13:bf: 24:5d:2a:c1 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUXRY1PWCI3WnNEItIRysY+V3aaVwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MjUyNFoX DTI3MDMwMzA2MzAyNFowMzExMC8GA1UEAxMoN0E3RERBRkMwOThGMTQxRUM1Qjky NTg2NzI1QzJCMTJBREI3REM3QzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALpgO17LhvyF3e1cARnUem+svu1Zev+xR1QWm9FErpCMkXFj1pFRCBtgMcKr QiKPPUeHh1sq0XQnUnjuYppW/wahMVm/l8IMom7YhgXwjex+RirQOQRMPm0oSx+j TYiZn0wB+TtE0e43EeDrUDcHVkXtSeHHVoOMdUpWa7MpAY3R2/+rISYpra67nGuN 2TyMBTXGYFm4wa+zKJb+1jGDKunJnDW+aaRjMp8zsDL+JiQtcSDemkU3MNiZYmQi /uOC5/CBd2oCPX1VOBDUl7v0FmbzpOf9K7vP8tLTMYlrrosuaWjnxRDqLT1mikR3 EtMdJby7dj2vgu7FJb+qaqJk6jcCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBR6fdr8 CY8UHsW5JYZyXCsSrbfcfDAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTc2OC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rC4wDQYJKoZIhvcNAQELBQADggEBAKkEV4xASMu4uJ/kFhAAOB1Hk3hgZIdruOJQ 7c17otswKDm/QeiUg45Urmwto6sg9Ogp0i5i6i0pP0vKk8J/11AGxJELuNp+qDCj 4sPzXAwF3M+C/ZMbhdswa0OJU0XQED4amaAU31EH0KVC9cykGrDL+ec3Kt8EtTT1 sgHaEohn/HXTmzhh6voEtkaSkkbhlUGZd1r3RFiEwBcha/MO709Boq3UoletO4I9 Dul1A/1jByTFpXUVBiwPccOplHGsH71e5NUAD9269a+5gKz3OwA3mtugXTMGt6a5 c+jn2hcdK2qn0oGoePd9OGK8QtAwHTKGqneRGC1gZokTvyRdKsE= -----END CERTIFICATE-----Generated at Sat Mar 28 11:46:19 2026 by rpki-client