$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145798.roa File: AS145798.roa (raw, json) Hash identifier: 4KvlXLPCbsxyDIOC4AF7Rc0EAEygB20H4ifzLvlGNkU= Subject key identifier: 74:1B:D5:64:FC:85:65:92:62:B0:AC:21:05:F6:A2:FC:20:25:60:B1 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 16A7DAD8A6F7AB3213D5B12E44D671727CD4D33D Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145798.roa Signing time: Wed 04 Mar 2026 06:29:54 +0000 ROA not before: Wed 04 Mar 2026 06:24:54 +0000 ROA not after: Wed 03 Mar 2027 06:29:54 +0000 asID: 145798 IP address blocks: 240a:ac4c::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:a7:da:d8:a6:f7:ab:32:13:d5:b1:2e:44:d6:71:72:7c:d4:d3:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:24:54 2026 GMT Not After : Mar 3 06:29:54 2027 GMT Subject: CN=741BD564FC85659262B0AC2105F6A2FC202560B1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:42:5b:bc:0f:b2:b7:7a:07:89:7b:27:d5:fc: 1c:98:de:92:5e:db:1c:af:69:37:fc:59:fd:9e:f3: a6:b5:a1:73:c0:a4:23:ec:14:eb:f0:86:24:d5:d2: 99:a7:50:fc:77:e6:fa:92:cc:58:ca:87:1b:34:22: 89:8c:71:20:56:19:aa:fd:8d:57:8e:18:72:61:db: af:21:42:48:09:38:b1:18:8b:14:a5:2f:aa:3f:60: 65:7f:b7:eb:c6:d3:a0:59:4b:0d:b6:e5:86:83:cb: 15:56:8e:4a:75:dc:b3:51:31:a5:2e:de:b7:db:5e: 87:6a:74:16:f6:76:e0:05:f0:72:5f:19:db:43:f0: d7:44:9f:d3:f5:78:09:19:76:ba:36:a3:48:f4:91: 58:68:36:10:93:57:8f:da:8e:20:7a:0e:57:05:74: e5:f8:93:15:6b:5e:0a:e0:c6:21:dd:6c:08:e7:c3: a2:17:92:12:c5:95:ce:4f:ba:a2:20:c6:35:3e:af: 39:d2:9c:9f:0d:25:d0:0d:44:ec:35:29:31:c0:c1: 2c:06:64:08:b9:d7:7a:b4:e1:0b:8e:94:77:b9:19: 7d:a4:08:84:6b:7e:01:3f:1c:67:51:88:c5:ba:3d: d3:11:83:50:58:36:d7:61:92:09:c2:50:f7:f6:73: cf:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:1B:D5:64:FC:85:65:92:62:B0:AC:21:05:F6:A2:FC:20:25:60:B1 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145798.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:ac4c::/32 Signature Algorithm: sha256WithRSAEncryption 53:98:49:81:27:e8:8e:74:6d:1e:33:45:c8:eb:c5:f8:fe:77: 16:44:c2:a3:f4:a8:08:cc:59:c7:b9:d8:20:3f:84:4d:6b:6c: a3:86:ea:cb:08:3c:82:61:3e:ef:ce:ef:de:bb:22:e9:6f:b6: 0a:92:1e:3f:6a:45:7c:dd:24:d0:be:92:1a:d1:2e:7d:9b:77: c0:07:80:81:a9:68:8e:4d:25:54:c3:b8:fa:a6:be:46:5d:27: ad:e7:96:1e:10:03:d7:4c:bc:6c:4c:c5:0d:77:02:16:4d:99: 62:8e:98:65:c5:f2:b7:fa:62:09:1a:bc:fb:0e:cf:dd:85:44: 01:f6:5a:2e:c1:18:55:1a:bd:d6:39:e6:2b:ae:67:60:6d:fa: 45:8e:59:f7:0d:0c:06:0f:8e:6b:00:50:9b:a6:9f:3e:1a:ca: 1b:c3:ad:ad:e6:f3:63:41:e6:4e:57:0b:77:e7:b2:2a:b7:9f: 94:81:6a:c8:87:55:b3:fe:bd:be:13:1f:23:35:ad:5b:44:73: c0:57:f9:ae:1a:f9:20:16:48:46:49:f7:ea:f4:7e:01:0a:6e: c1:1f:07:46:7a:d9:0e:47:bb:ac:a0:8a:34:0d:c7:5d:cf:67: 07:d2:d7:86:a7:e1:d1:79:4c:b7:72:21:60:d0:8a:b6:0b:34: 17:80:4e:89 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUFqfa2Kb3qzIT1bEuRNZxcnzU0z0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MjQ1NFoX DTI3MDMwMzA2Mjk1NFowMzExMC8GA1UEAxMoNzQxQkQ1NjRGQzg1NjU5MjYyQjBB QzIxMDVGNkEyRkMyMDI1NjBCMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMJCW7wPsrd6B4l7J9X8HJjekl7bHK9pN/xZ/Z7zprWhc8CkI+wU6/CGJNXS madQ/Hfm+pLMWMqHGzQiiYxxIFYZqv2NV44YcmHbryFCSAk4sRiLFKUvqj9gZX+3 68bToFlLDbblhoPLFVaOSnXcs1ExpS7et9teh2p0FvZ24AXwcl8Z20Pw10Sf0/V4 CRl2ujajSPSRWGg2EJNXj9qOIHoOVwV05fiTFWteCuDGId1sCOfDoheSEsWVzk+6 oiDGNT6vOdKcnw0l0A1E7DUpMcDBLAZkCLnXerThC46Ud7kZfaQIhGt+AT8cZ1GI xbo90xGDUFg212GSCcJQ9/ZzzxcCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBR0G9Vk /IVlkmKwrCEF9qL8ICVgsTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTc5OC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rEwwDQYJKoZIhvcNAQELBQADggEBAFOYSYEn6I50bR4zRcjrxfj+dxZEwqP0qAjM Wce52CA/hE1rbKOG6ssIPIJhPu/O7967IulvtgqSHj9qRXzdJNC+khrRLn2bd8AH gIGpaI5NJVTDuPqmvkZdJ63nlh4QA9dMvGxMxQ13AhZNmWKOmGXF8rf6YgkavPsO z92FRAH2Wi7BGFUavdY55iuuZ2Bt+kWOWfcNDAYPjmsAUJumnz4ayhvDra3m82NB 5k5XC3fnsiq3n5SBasiHVbP+vb4THyM1rVtEc8BX+a4a+SAWSEZJ9+r0fgEKbsEf B0Z62Q5Hu6ygijQNx13PZwfS14an4dF5TLdyIWDQirYLNBeATok= -----END CERTIFICATE-----Generated at Sat Mar 28 11:44:10 2026 by rpki-client