$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145776.roa File: AS145776.roa (raw, json) Hash identifier: XRPFyHNbA0xp8EE1PagtOPfTGDKSLpdHUw+kc6XhGe4= Subject key identifier: A1:26:41:22:EE:EE:E5:4E:B8:03:74:9C:32:33:9A:4F:C4:D9:4B:6E Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 5F46BD87D36F0CDD4F10E2023307C752CD39D059 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145776.roa Signing time: Wed 04 Mar 2026 06:30:40 +0000 ROA not before: Wed 04 Mar 2026 06:25:40 +0000 ROA not after: Wed 03 Mar 2027 06:30:40 +0000 asID: 145776 IP address blocks: 240a:ac36::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:46:bd:87:d3:6f:0c:dd:4f:10:e2:02:33:07:c7:52:cd:39:d0:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:25:40 2026 GMT Not After : Mar 3 06:30:40 2027 GMT Subject: CN=A1264122EEEEE54EB803749C32339A4FC4D94B6E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:03:6f:c2:22:f5:b2:e1:27:2c:6c:31:30:6f: 49:90:de:dd:95:41:09:04:85:eb:6c:6b:6a:f7:a0: 89:f6:3d:df:83:a4:b2:67:82:6f:93:2f:ff:97:21: 6a:90:a3:30:50:84:fb:d1:80:ec:35:38:4a:6b:05: 18:9f:75:ae:7b:30:bb:e2:f0:9a:c9:c5:5b:b4:89: cd:11:77:bd:67:c9:29:cc:69:f9:59:af:b6:34:39: 66:76:72:6c:84:f6:fd:57:f6:dd:d1:90:89:3e:3a: 1d:12:e5:2e:24:59:28:74:fb:67:f6:96:3f:4c:a0: 0f:a3:d8:e8:cf:c4:8c:ec:1e:05:5e:40:76:41:86: df:3c:60:65:b4:18:f5:63:b5:80:39:5a:e6:e1:3e: aa:ea:1f:20:e2:89:80:68:39:f9:8f:3b:ae:61:f9: f1:92:7c:4c:c3:3c:ed:e0:4f:ac:b6:34:37:37:f5: c3:e7:9d:89:35:f9:37:7a:c9:1a:eb:fe:97:34:86: db:96:bc:4b:e8:60:5f:4a:9a:7e:d0:f5:c4:0f:5e: c2:c0:ab:68:af:e7:1c:85:2b:5d:4f:27:64:c8:79: 4e:0a:ac:bb:8e:3e:05:8d:13:78:91:77:c1:09:35: 5d:61:8c:e2:42:15:f4:e1:7e:81:4b:93:26:77:8f: 4c:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:26:41:22:EE:EE:E5:4E:B8:03:74:9C:32:33:9A:4F:C4:D9:4B:6E X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145776.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:ac36::/32 Signature Algorithm: sha256WithRSAEncryption 2e:fc:49:57:ef:94:9b:c8:77:e1:2c:c5:d4:43:3a:bc:2a:90: dc:15:c2:55:b7:df:06:ca:a2:32:b9:53:6b:aa:2a:c2:9d:6c: ab:dc:15:90:6b:19:7a:d1:88:cd:16:76:7a:82:17:30:59:36: 72:bb:ea:5f:33:af:bd:f4:b8:72:e7:05:3f:45:cd:54:94:46: e4:fd:92:62:1b:4e:6a:d7:3c:f6:56:58:48:6f:0b:56:c2:29: 5e:86:ed:2a:99:cb:9a:7d:ba:05:2e:62:86:72:02:6a:1d:a2: 2d:14:94:82:8c:f8:92:81:1b:64:3b:9f:fe:3e:81:56:ba:6b: 5c:c8:dc:d6:94:04:48:90:8d:71:20:20:d8:59:dc:8c:87:23: f3:7f:98:d8:2a:4b:c3:ee:eb:76:65:16:31:3a:20:78:c3:02: 96:9e:09:2b:31:55:c5:b2:4b:0f:df:ec:65:0f:95:21:c2:77: 8c:e6:3b:96:9c:82:20:d8:aa:89:33:7c:bd:65:e1:dc:0a:8b: fd:31:1f:98:86:bb:b6:17:25:83:a9:c6:2e:d3:97:41:ba:e5: c6:32:d1:f6:d2:2d:99:40:e8:d6:95:10:e1:84:6b:bc:77:2c: fb:c6:e2:62:15:14:3e:8f:24:75:36:9d:9a:27:c8:e3:40:6a: fa:0d:fc:58 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUX0a9h9NvDN1PEOICMwfHUs050FkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MjU0MFoX DTI3MDMwMzA2MzA0MFowMzExMC8GA1UEAxMoQTEyNjQxMjJFRUVFRTU0RUI4MDM3 NDlDMzIzMzlBNEZDNEQ5NEI2RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALEDb8Ii9bLhJyxsMTBvSZDe3ZVBCQSF62xravegifY934OksmeCb5Mv/5ch apCjMFCE+9GA7DU4SmsFGJ91rnswu+LwmsnFW7SJzRF3vWfJKcxp+VmvtjQ5ZnZy bIT2/Vf23dGQiT46HRLlLiRZKHT7Z/aWP0ygD6PY6M/EjOweBV5AdkGG3zxgZbQY 9WO1gDla5uE+quofIOKJgGg5+Y87rmH58ZJ8TMM87eBPrLY0Nzf1w+ediTX5N3rJ Guv+lzSG25a8S+hgX0qaftD1xA9ewsCraK/nHIUrXU8nZMh5Tgqsu44+BY0TeJF3 wQk1XWGM4kIV9OF+gUuTJnePTMMCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBShJkEi 7u7lTrgDdJwyM5pPxNlLbjAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTc3Ni5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rDYwDQYJKoZIhvcNAQELBQADggEBAC78SVfvlJvId+EsxdRDOrwqkNwVwlW33wbK ojK5U2uqKsKdbKvcFZBrGXrRiM0WdnqCFzBZNnK76l8zr730uHLnBT9FzVSURuT9 kmIbTmrXPPZWWEhvC1bCKV6G7SqZy5p9ugUuYoZyAmodoi0UlIKM+JKBG2Q7n/4+ gVa6a1zI3NaUBEiQjXEgINhZ3IyHI/N/mNgqS8Pu63ZlFjE6IHjDApaeCSsxVcWy Sw/f7GUPlSHCd4zmO5acgiDYqokzfL1l4dwKi/0xH5iGu7YXJYOpxi7Tl0G65cYy 0fbSLZlA6NaVEOGEa7x3LPvG4mIVFD6PJHU2nZonyONAavoN/Fg= -----END CERTIFICATE-----Generated at Sat Mar 28 11:42:15 2026 by rpki-client