$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145001.roa File: AS145001.roa (raw, json) Hash identifier: A+jxcjVfSbY4WR5CYKSxbv29xIemEOKOreDV6lL6Gxo= Subject key identifier: 53:80:9A:9E:B3:36:22:DD:24:2B:48:C0:14:24:93:94:0C:01:48:AA Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 6749E0833A286B66EAC9DB719F3BBDC0D8BFCF15 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145001.roa Signing time: Wed 04 Mar 2026 06:21:45 +0000 ROA not before: Wed 04 Mar 2026 06:16:45 +0000 ROA not after: Wed 03 Mar 2027 06:21:45 +0000 asID: 145001 IP address blocks: 240a:a92f::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:49:e0:83:3a:28:6b:66:ea:c9:db:71:9f:3b:bd:c0:d8:bf:cf:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:16:45 2026 GMT Not After : Mar 3 06:21:45 2027 GMT Subject: CN=53809A9EB33622DD242B48C0142493940C0148AA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:c0:e5:93:36:97:c2:d1:20:14:cd:8f:e6:8b: c8:02:e9:cd:f8:38:57:6b:87:3a:a1:92:38:11:2d: f9:50:12:27:64:32:49:1f:6a:3b:94:1b:b7:09:92: c4:32:c4:ab:3a:4b:b3:88:54:a1:bb:ff:18:af:3c: 57:ad:3d:98:c2:36:e7:96:5d:d6:54:9b:70:ca:61: 01:b8:03:f2:8f:14:0b:bd:27:65:29:83:e4:95:b8: 75:0e:7e:4a:f6:0c:9b:c7:ab:f6:0d:fa:ab:27:0a: e7:7d:6d:bd:6e:f3:15:92:39:b6:f5:c0:c8:31:39: 79:31:5a:09:5d:35:8f:26:68:c0:62:44:c4:07:8e: d4:25:ae:4d:bd:a6:98:01:ff:7f:2c:eb:79:39:21: f2:a3:b1:af:c6:f8:60:bc:f1:1c:51:78:0e:85:ad: 20:c1:42:d7:6d:98:69:27:2f:96:a7:ef:61:db:33: 81:77:05:b3:83:45:c0:3a:54:37:87:74:d3:73:60: f7:09:9f:7f:4a:8f:49:51:05:84:3e:75:b2:bf:1d: a5:cb:23:4f:07:9f:ab:03:01:57:f9:ba:a1:60:98: b1:70:d0:5a:44:6a:e6:5f:7b:b1:5d:c3:4e:0b:66: 73:e7:7c:4e:70:13:fd:98:85:17:cc:bd:77:35:53: ac:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:80:9A:9E:B3:36:22:DD:24:2B:48:C0:14:24:93:94:0C:01:48:AA X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145001.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a92f::/32 Signature Algorithm: sha256WithRSAEncryption ce:d9:18:17:8d:b0:be:fc:71:cf:a8:c7:de:cd:bd:d0:6f:fb: 78:35:34:c9:65:f8:4f:34:83:b7:2d:48:cf:ac:0e:8c:19:0d: ac:9a:f9:27:13:28:7b:7d:af:8f:55:39:b6:06:29:69:64:83: ac:39:fd:c9:3f:ab:73:4a:e2:55:b3:7e:b4:7c:ec:af:49:e4: 23:2e:cb:fa:60:b2:e6:5d:2f:54:52:53:b7:f2:a1:85:c8:5b: 9a:35:5a:5b:33:5c:34:5a:12:5b:57:1f:d4:17:62:d0:60:d5: 2e:68:d9:2e:d3:e9:bc:8d:91:7d:90:7c:fd:33:72:02:16:de: 8c:3e:11:45:52:5e:b3:b6:f0:0e:f7:a5:3b:6a:eb:b5:d6:29: 07:1c:e8:74:2c:c7:66:dc:0c:5c:29:15:aa:77:f8:de:f9:02: ca:72:9f:65:0a:6c:fb:c3:d8:6a:81:76:b6:41:60:9b:8f:56: a6:e1:1f:5c:16:3f:5d:51:bf:8f:4f:79:98:fa:1f:76:85:77: 43:93:ae:9b:f6:ea:6a:4b:b6:96:bf:71:33:41:21:d7:f0:84: 46:3f:6a:7a:a9:23:39:1f:4a:97:3d:ae:8f:97:9d:01:5f:bf: b7:bb:d1:91:15:b2:29:e9:78:d6:a3:c0:3d:fe:2e:d3:02:2f: 22:b7:94:a1 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUZ0nggzooa2bqydtxnzu9wNi/zxUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTY0NVoX DTI3MDMwMzA2MjE0NVowMzExMC8GA1UEAxMoNTM4MDlBOUVCMzM2MjJERDI0MkI0 OEMwMTQyNDkzOTQwQzAxNDhBQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALjA5ZM2l8LRIBTNj+aLyALpzfg4V2uHOqGSOBEt+VASJ2QySR9qO5QbtwmS xDLEqzpLs4hUobv/GK88V609mMI255Zd1lSbcMphAbgD8o8UC70nZSmD5JW4dQ5+ SvYMm8er9g36qycK531tvW7zFZI5tvXAyDE5eTFaCV01jyZowGJExAeO1CWuTb2m mAH/fyzreTkh8qOxr8b4YLzxHFF4DoWtIMFC122YaScvlqfvYdszgXcFs4NFwDpU N4d003Ng9wmff0qPSVEFhD51sr8dpcsjTwefqwMBV/m6oWCYsXDQWkRq5l97sV3D Tgtmc+d8TnAT/ZiFF8y9dzVTrD0CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRTgJqe szYi3SQrSMAUJJOUDAFIqjAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTAwMS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qS8wDQYJKoZIhvcNAQELBQADggEBAM7ZGBeNsL78cc+ox97NvdBv+3g1NMll+E80 g7ctSM+sDowZDaya+ScTKHt9r49VObYGKWlkg6w5/ck/q3NK4lWzfrR87K9J5CMu y/pgsuZdL1RSU7fyoYXIW5o1WlszXDRaEltXH9QXYtBg1S5o2S7T6byNkX2QfP0z cgIW3ow+EUVSXrO28A73pTtq67XWKQcc6HQsx2bcDFwpFap3+N75Aspyn2UKbPvD 2GqBdrZBYJuPVqbhH1wWP11Rv49PeZj6H3aFd0OTrpv26mpLtpa/cTNBIdfwhEY/ anqpIzkfSpc9ro+XnQFfv7e70ZEVsinpeNajwD3+LtMCLyK3lKE= -----END CERTIFICATE-----Generated at Sat Mar 28 11:44:29 2026 by rpki-client