$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145784.roa File: AS145784.roa (raw, json) Hash identifier: j/Ni8HBPPvz5UNTtcKL+Za4AgYxQonzPRJpN1IpxsVs= Subject key identifier: BD:EA:D9:0D:13:A3:15:89:FC:43:FF:88:85:1E:41:EB:97:AD:4C:87 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 2986F78C8C3F592781AE177E0E1E25A6EA80DC27 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145784.roa Signing time: Wed 04 Mar 2026 06:30:31 +0000 ROA not before: Wed 04 Mar 2026 06:25:31 +0000 ROA not after: Wed 03 Mar 2027 06:30:31 +0000 asID: 145784 IP address blocks: 240a:ac3e::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:86:f7:8c:8c:3f:59:27:81:ae:17:7e:0e:1e:25:a6:ea:80:dc:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:25:31 2026 GMT Not After : Mar 3 06:30:31 2027 GMT Subject: CN=BDEAD90D13A31589FC43FF88851E41EB97AD4C87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:ac:ea:a9:23:16:ff:27:8d:c0:f1:ab:13:b2: ca:46:95:01:d6:4e:ff:da:4c:df:8e:0c:36:4e:be: c4:3f:f7:1a:73:ba:c3:f7:18:69:3f:75:0a:a2:e7: a7:f3:ac:ad:6e:fc:47:b0:da:91:d0:b8:0e:2c:6e: 6b:84:4e:29:39:7b:58:62:1f:cd:99:85:d7:69:ca: 7c:ee:6d:64:22:12:4e:46:a7:4e:51:21:f3:e5:5d: 82:6c:28:da:0f:30:d1:8f:f4:56:73:53:96:55:43: 00:42:88:ed:f1:0b:f4:9c:ce:d8:e3:70:4c:bc:9f: 57:48:62:b1:33:a5:e6:5f:9c:86:06:3f:93:e0:93: 37:ed:04:d2:d4:84:81:03:a6:c9:f9:bc:56:50:b5: b2:d8:e6:26:c0:7f:a4:1a:bd:b3:2f:0f:8e:14:36: 8f:2c:bd:b8:02:e6:43:6e:8b:d2:1e:3a:fb:47:b3: 6a:ef:1c:fd:ec:fe:30:f7:7d:de:a0:08:3a:15:58: e0:32:27:e3:bc:f6:cd:81:72:4f:29:0f:c4:6c:06: 83:2d:a1:1c:a4:83:82:6f:e0:71:71:6a:fb:d3:d9: d6:3e:31:8a:0d:b8:ab:2f:2a:7a:ff:4f:61:81:1e: 76:ea:04:cb:24:d3:04:42:1d:84:5c:a5:59:ce:92: 22:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:EA:D9:0D:13:A3:15:89:FC:43:FF:88:85:1E:41:EB:97:AD:4C:87 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145784.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:ac3e::/32 Signature Algorithm: sha256WithRSAEncryption 47:d1:39:d6:46:0a:db:51:7c:af:52:1d:3a:95:c7:a4:71:26: 89:95:75:af:52:67:32:16:01:69:76:53:a2:10:6f:42:c3:70: 0b:0b:be:59:40:84:60:12:05:e3:12:1b:ce:43:6a:9d:46:54: f2:b6:03:66:3f:bc:e9:5a:fb:48:5c:1c:2b:05:78:30:c0:89: dd:63:3a:cf:24:08:5e:ed:0b:17:b6:79:e6:1b:d0:f2:23:2d: d5:16:f8:88:68:18:00:4e:de:94:b9:8c:d1:fa:23:ec:0a:2e: 9f:bf:83:ff:b9:a4:b8:3e:22:e0:95:8a:41:9e:49:ee:ab:9a: c0:d3:f3:a1:96:28:a1:ac:06:57:33:e0:ed:a0:d0:11:25:69: 40:28:f3:6a:b0:48:13:2e:91:d3:5c:58:0d:27:19:de:c4:ef: bb:a1:dc:6e:a3:7b:7a:53:7e:04:cd:e2:55:d2:d8:a6:a6:42: 73:40:85:70:c0:33:e2:02:3c:8d:35:76:37:e4:38:52:34:a4: 9c:cd:1c:90:a1:64:d8:2e:ed:93:ef:c4:59:1f:57:2a:d5:ce: 64:34:1b:9d:14:0f:9f:c5:58:1e:28:80:8b:d4:cd:2c:f2:2d: 35:35:13:0f:cd:45:ed:fe:ff:da:51:e7:22:84:d3:3e:5e:7f: 12:a9:53:63 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUKYb3jIw/WSeBrhd+Dh4lpuqA3CcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MjUzMVoX DTI3MDMwMzA2MzAzMVowMzExMC8GA1UEAxMoQkRFQUQ5MEQxM0EzMTU4OUZDNDNG Rjg4ODUxRTQxRUI5N0FENEM4NzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKms6qkjFv8njcDxqxOyykaVAdZO/9pM344MNk6+xD/3GnO6w/cYaT91CqLn p/OsrW78R7DakdC4Dixua4ROKTl7WGIfzZmF12nKfO5tZCISTkanTlEh8+Vdgmwo 2g8w0Y/0VnNTllVDAEKI7fEL9JzO2ONwTLyfV0hisTOl5l+chgY/k+CTN+0E0tSE gQOmyfm8VlC1stjmJsB/pBq9sy8PjhQ2jyy9uALmQ26L0h46+0ezau8c/ez+MPd9 3qAIOhVY4DIn47z2zYFyTykPxGwGgy2hHKSDgm/gcXFq+9PZ1j4xig24qy8qev9P YYEeduoEyyTTBEIdhFylWc6SIpECAwEAAaOCAcUwggHBMB0GA1UdDgQWBBS96tkN E6MVifxD/4iFHkHrl61MhzAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTc4NC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rD4wDQYJKoZIhvcNAQELBQADggEBAEfROdZGCttRfK9SHTqVx6RxJomVda9SZzIW AWl2U6IQb0LDcAsLvllAhGASBeMSG85Dap1GVPK2A2Y/vOla+0hcHCsFeDDAid1j Os8kCF7tCxe2eeYb0PIjLdUW+IhoGABO3pS5jNH6I+wKLp+/g/+5pLg+IuCVikGe Se6rmsDT86GWKKGsBlcz4O2g0BElaUAo82qwSBMukdNcWA0nGd7E77uh3G6je3pT fgTN4lXS2KamQnNAhXDAM+ICPI01djfkOFI0pJzNHJChZNgu7ZPvxFkfVyrVzmQ0 G50UD5/FWB4ogIvUzSzyLTU1Ew/NRe3+/9pR5yKE0z5efxKpU2M= -----END CERTIFICATE-----Generated at Sat Mar 28 11:44:04 2026 by rpki-client