$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145774.roa File: AS145774.roa (raw, json) Hash identifier: 8FUdv2em0sA/naEtKTxiQjhp+EhodZJ9Mnhh8Euzgng= Subject key identifier: 8F:E8:DE:14:B7:5E:F6:52:EB:41:2F:89:24:AA:B3:7E:E9:73:AB:DE Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 5883E72A678C666B54E954BCB53898B2517064C4 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145774.roa Signing time: Wed 04 Mar 2026 06:30:41 +0000 ROA not before: Wed 04 Mar 2026 06:25:41 +0000 ROA not after: Wed 03 Mar 2027 06:30:41 +0000 asID: 145774 IP address blocks: 240a:ac34::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:83:e7:2a:67:8c:66:6b:54:e9:54:bc:b5:38:98:b2:51:70:64:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:25:41 2026 GMT Not After : Mar 3 06:30:41 2027 GMT Subject: CN=8FE8DE14B75EF652EB412F8924AAB37EE973ABDE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:99:ae:b0:a4:14:fb:05:79:5b:e1:95:78:0e: 47:71:65:1f:d4:f1:cf:0d:c4:9a:bf:5b:c6:8f:ac: e1:7c:28:e3:00:e5:ec:98:1e:8f:10:47:2c:c4:c0: 30:9c:54:30:c0:64:0f:12:b9:4a:7b:b5:65:b5:a1: f5:e0:84:6f:11:2f:61:7d:d1:6d:3f:84:e6:d4:17: 3e:06:08:9e:a3:3b:92:f6:7b:14:90:9e:99:14:e4: 29:5a:e7:49:bd:48:f3:11:89:52:70:c9:0c:3c:16: 60:95:32:fe:0b:15:15:12:7a:ef:a4:7e:01:18:3f: 88:65:0e:99:53:67:96:02:30:d8:2b:04:bc:fd:a4: f7:3e:31:16:01:2e:4f:c7:e8:31:c8:ca:1b:47:f8: 26:67:f9:0b:84:85:5c:92:0f:38:df:1c:e1:f5:30: 01:cf:5b:c8:06:d4:c0:d9:8a:5e:00:bb:b9:18:9f: 78:d9:e3:85:16:c6:87:66:49:16:12:2b:63:9b:70: 8f:4c:8c:7b:49:40:fc:35:42:2e:6b:91:a4:c9:cb: f3:ee:3a:96:82:4c:57:0c:fe:10:7a:24:57:37:fa: 4d:84:3a:f9:2a:3c:f5:ec:5f:b7:12:55:b0:c6:ec: 78:cc:8b:86:1c:63:34:4e:6f:52:1a:3f:be:1f:33: fa:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:E8:DE:14:B7:5E:F6:52:EB:41:2F:89:24:AA:B3:7E:E9:73:AB:DE X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145774.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:ac34::/32 Signature Algorithm: sha256WithRSAEncryption a4:29:fa:ef:55:4c:01:63:55:ab:d0:bb:a4:e5:60:b9:43:82: 9d:35:e8:40:33:c3:66:8f:de:81:44:2a:6a:d8:0b:2b:8e:cc: c9:b5:e0:3b:d2:30:2a:f0:40:15:b2:99:ff:61:ee:e2:cb:bb: a5:da:26:aa:ad:6b:9d:41:4a:a2:6a:74:93:8a:8e:68:19:43: 85:a7:51:25:5d:15:59:3c:95:16:ea:ae:53:37:47:a1:e0:c6: 12:e4:c6:2d:cc:3a:e0:28:66:84:42:c8:3a:38:ab:32:a6:67: d4:e6:36:ba:19:07:81:4f:e3:c4:8c:32:f3:39:08:3d:69:b4: 9f:e9:ff:b1:93:1a:ca:92:15:d9:57:c7:c5:2c:c9:e5:bb:87: 7f:7d:db:63:43:50:19:f1:44:de:d7:10:f6:10:39:29:50:7a: e4:b9:60:da:30:34:d9:ce:3b:39:a1:83:16:21:c7:c4:ee:1c: af:f8:b3:4a:e3:e8:44:d6:fc:ce:29:d6:b7:a0:f8:44:5e:67: 56:a8:78:ff:08:0e:7f:c2:ef:ba:5c:89:2e:6e:59:12:32:07: 68:5b:d2:a5:08:ce:8c:92:4a:6d:4c:22:ab:68:2e:16:90:e8: c4:50:18:a6:c3:d7:ec:84:57:d7:4a:01:c5:de:e3:c1:05:2e: 6f:3d:dc:7c -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUWIPnKmeMZmtU6VS8tTiYslFwZMQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MjU0MVoX DTI3MDMwMzA2MzA0MVowMzExMC8GA1UEAxMoOEZFOERFMTRCNzVFRjY1MkVCNDEy Rjg5MjRBQUIzN0VFOTczQUJERTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAIqZrrCkFPsFeVvhlXgOR3FlH9Txzw3Emr9bxo+s4Xwo4wDl7JgejxBHLMTA MJxUMMBkDxK5Snu1ZbWh9eCEbxEvYX3RbT+E5tQXPgYInqM7kvZ7FJCemRTkKVrn Sb1I8xGJUnDJDDwWYJUy/gsVFRJ676R+ARg/iGUOmVNnlgIw2CsEvP2k9z4xFgEu T8foMcjKG0f4Jmf5C4SFXJIPON8c4fUwAc9byAbUwNmKXgC7uRifeNnjhRbGh2ZJ FhIrY5twj0yMe0lA/DVCLmuRpMnL8+46loJMVwz+EHokVzf6TYQ6+So89exftxJV sMbseMyLhhxjNE5vUho/vh8z+hsCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSP6N4U t172UutBL4kkqrN+6XOr3jAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTc3NC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rDQwDQYJKoZIhvcNAQELBQADggEBAKQp+u9VTAFjVavQu6TlYLlDgp016EAzw2aP 3oFEKmrYCyuOzMm14DvSMCrwQBWymf9h7uLLu6XaJqqta51BSqJqdJOKjmgZQ4Wn USVdFVk8lRbqrlM3R6HgxhLkxi3MOuAoZoRCyDo4qzKmZ9TmNroZB4FP48SMMvM5 CD1ptJ/p/7GTGsqSFdlXx8UsyeW7h39922NDUBnxRN7XEPYQOSlQeuS5YNowNNnO OzmhgxYhx8TuHK/4s0rj6ETW/M4p1reg+EReZ1aoeP8IDn/C77pciS5uWRIyB2hb 0qUIzoySSm1MIqtoLhaQ6MRQGKbD1+yEV9dKAcXe48EFLm893Hw= -----END CERTIFICATE-----Generated at Sat Mar 28 14:30:39 2026 by rpki-client