$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145772.roa File: AS145772.roa (raw, json) Hash identifier: 45jEUC4F2XSFzAor2OnC8qT6wh4RGJa+DiPF/unRmsI= Subject key identifier: 07:8E:8A:10:74:23:99:FB:7F:74:D2:AE:59:AC:9D:52:4C:87:BC:11 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 597D08D96845917354B92566D34CA688E752A9AC Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145772.roa Signing time: Wed 04 Mar 2026 06:29:45 +0000 ROA not before: Wed 04 Mar 2026 06:24:45 +0000 ROA not after: Wed 03 Mar 2027 06:29:45 +0000 asID: 145772 IP address blocks: 240a:ac32::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:7d:08:d9:68:45:91:73:54:b9:25:66:d3:4c:a6:88:e7:52:a9:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:24:45 2026 GMT Not After : Mar 3 06:29:45 2027 GMT Subject: CN=078E8A10742399FB7F74D2AE59AC9D524C87BC11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:ad:51:81:3a:0e:83:ff:22:63:02:2b:d8:d8: 61:a0:c4:76:d5:0a:88:bf:88:4a:45:a5:3b:a8:d1: 13:79:85:49:3d:3d:7c:1c:7a:23:86:13:de:9f:f1: df:56:5e:9c:1d:aa:43:7d:f7:47:4f:4f:2d:91:66: 86:64:d8:c2:d4:65:d3:54:3b:24:78:4e:69:c3:d7: 50:8e:b5:21:2d:fe:63:05:e6:0b:3d:33:f5:71:4d: 8d:43:29:80:23:58:89:92:b7:57:4c:f3:01:bd:1b: ba:51:2d:45:58:f2:9c:13:77:70:7e:77:f3:22:39: 1f:e0:8b:84:3c:ad:18:cb:b1:8b:3b:00:84:b4:fc: cc:2c:7c:da:f4:e7:27:13:25:84:f2:f6:1c:43:62: c9:91:0b:b4:7c:b4:8a:dc:66:47:19:ec:76:00:7e: 27:92:3c:d9:b2:d0:39:e8:bc:65:73:d1:57:36:ce: 13:92:0b:5c:42:39:f5:31:9a:65:77:c6:39:73:ee: 41:7c:b7:87:84:9a:31:af:e6:1d:15:c5:f3:aa:8d: 76:bb:f4:8c:4a:bf:19:7e:47:bb:b9:b8:bd:ff:c5: 75:c9:80:69:fa:19:01:8c:8a:10:bf:0c:80:fd:96: 5f:7e:ff:d1:89:6c:44:6b:19:c4:7f:4f:e1:1d:c1: c3:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:8E:8A:10:74:23:99:FB:7F:74:D2:AE:59:AC:9D:52:4C:87:BC:11 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145772.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:ac32::/32 Signature Algorithm: sha256WithRSAEncryption 95:ee:0d:34:97:e4:0b:8b:59:85:c9:48:33:45:65:35:40:bb: b5:93:e1:14:13:ce:54:a0:44:41:8e:2e:b1:58:e7:8f:f2:5b: 48:ce:1a:9c:b7:4d:39:9d:af:7a:19:eb:19:b9:3b:01:8a:14: 56:cd:77:ad:32:55:f3:95:d2:09:25:c7:a3:35:96:1d:c2:63: 66:49:e4:c6:cc:f6:e7:81:37:c1:94:fb:65:bd:18:4a:a7:8f: 12:3a:e5:0a:3d:db:5c:b3:7c:8e:20:cb:24:6f:3c:62:b5:4b: 98:5c:c0:d8:7b:41:f7:fd:af:c8:e3:d7:04:28:d8:77:9c:8e: d7:8f:9b:fe:40:12:9a:02:52:41:13:61:4f:9f:f4:6c:04:46: f4:86:a4:8c:60:70:e2:f6:91:d9:c3:03:27:d3:91:1b:b6:3d: 40:35:10:b3:c1:1a:f1:c4:d6:a6:b5:c7:6a:17:b8:b4:36:41: 47:25:c5:f6:68:74:ec:58:ad:00:0d:e6:c8:27:dc:68:a9:ea: 6b:64:79:6a:14:bc:14:98:f8:c0:b8:5a:39:60:b0:6b:67:14: 5d:7a:06:f3:4b:ed:55:77:ad:1a:ed:f1:f6:f4:cf:e0:2d:4c: c0:99:07:08:04:2a:fa:50:f8:73:0e:21:7d:65:96:01:7f:c5: 58:a4:8a:d2 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUWX0I2WhFkXNUuSVm00ymiOdSqawwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MjQ0NVoX DTI3MDMwMzA2Mjk0NVowMzExMC8GA1UEAxMoMDc4RThBMTA3NDIzOTlGQjdGNzRE MkFFNTlBQzlENTI0Qzg3QkMxMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKCtUYE6DoP/ImMCK9jYYaDEdtUKiL+ISkWlO6jRE3mFST09fBx6I4YT3p/x 31ZenB2qQ333R09PLZFmhmTYwtRl01Q7JHhOacPXUI61IS3+YwXmCz0z9XFNjUMp gCNYiZK3V0zzAb0bulEtRVjynBN3cH538yI5H+CLhDytGMuxizsAhLT8zCx82vTn JxMlhPL2HENiyZELtHy0itxmRxnsdgB+J5I82bLQOei8ZXPRVzbOE5ILXEI59TGa ZXfGOXPuQXy3h4SaMa/mHRXF86qNdrv0jEq/GX5Hu7m4vf/FdcmAafoZAYyKEL8M gP2WX37/0YlsRGsZxH9P4R3BwwkCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQHjooQ dCOZ+3900q5ZrJ1STIe8ETAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTc3Mi5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rDIwDQYJKoZIhvcNAQELBQADggEBAJXuDTSX5AuLWYXJSDNFZTVAu7WT4RQTzlSg REGOLrFY54/yW0jOGpy3TTmdr3oZ6xm5OwGKFFbNd60yVfOV0gklx6M1lh3CY2ZJ 5MbM9ueBN8GU+2W9GEqnjxI65Qo921yzfI4gyyRvPGK1S5hcwNh7Qff9r8jj1wQo 2HecjtePm/5AEpoCUkETYU+f9GwERvSGpIxgcOL2kdnDAyfTkRu2PUA1ELPBGvHE 1qa1x2oXuLQ2QUclxfZodOxYrQAN5sgn3Gip6mtkeWoUvBSY+MC4WjlgsGtnFF16 BvNL7VV3rRrt8fb0z+AtTMCZBwgEKvpQ+HMOIX1llgF/xVikitI= -----END CERTIFICATE-----Generated at Sat Mar 28 13:18:06 2026 by rpki-client