$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145002.roa File: AS145002.roa (raw, json) Hash identifier: rsedpTz1hNiwJfGZ6H+dEvCyTI45SJkaJ46c0f86qek= Subject key identifier: AD:BF:B4:D4:3E:7C:50:DF:3D:77:F7:85:98:22:A1:6C:ED:EB:A3:9B Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 0EE6F6049AA9F23F296357D5E92226FA7A158D3D Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145002.roa Signing time: Wed 04 Mar 2026 06:19:48 +0000 ROA not before: Wed 04 Mar 2026 06:14:48 +0000 ROA not after: Wed 03 Mar 2027 06:19:48 +0000 asID: 145002 IP address blocks: 240a:a930::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:e6:f6:04:9a:a9:f2:3f:29:63:57:d5:e9:22:26:fa:7a:15:8d:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:14:48 2026 GMT Not After : Mar 3 06:19:48 2027 GMT Subject: CN=ADBFB4D43E7C50DF3D77F7859822A16CEDEBA39B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:70:d2:80:72:e6:3e:00:43:b4:63:29:a5:f4: 75:92:5b:76:0c:62:29:b7:46:22:fd:d4:83:97:fc: 8d:63:6f:1a:b1:ea:21:5a:02:50:81:c7:e0:c7:47: 46:f8:57:cf:2b:d1:47:f1:54:c2:89:9c:6e:30:8f: 0b:49:c2:a9:7f:83:c8:d2:49:c5:98:fa:a7:e1:63: b9:9b:87:6f:ee:9a:e5:76:fe:ac:94:28:fa:8e:6c: e1:8e:db:d7:49:9c:ac:9a:00:02:7e:31:8c:a3:0f: 55:55:ca:69:25:50:a3:e0:ce:1e:c7:0f:63:d3:5d: 4f:39:e1:08:8d:26:8c:b5:78:93:99:6a:3a:ed:17: ea:64:48:77:ab:c1:4f:3c:6f:cf:ab:4d:0f:5a:57: 08:99:2a:4b:4d:54:73:00:c9:21:60:18:40:47:6c: 76:48:0e:ec:3c:a7:fb:c2:ec:df:47:71:07:51:ee: db:4a:07:9b:53:c2:9f:b0:57:6a:b2:5f:c7:5c:5a: 70:0c:1e:20:ce:91:ca:cc:a1:ce:86:06:14:ea:83: b0:59:fe:fe:25:0c:73:16:c4:c4:91:83:35:f4:87: 9f:33:b8:52:4a:78:4e:a5:46:dd:4a:72:31:e5:d4: 6f:62:06:12:04:87:57:12:64:81:f0:ab:c1:43:19: cf:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:BF:B4:D4:3E:7C:50:DF:3D:77:F7:85:98:22:A1:6C:ED:EB:A3:9B X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145002.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a930::/32 Signature Algorithm: sha256WithRSAEncryption 33:86:7f:81:a3:29:ae:23:d2:28:77:bf:8a:ed:2a:18:33:26: 51:6d:d5:1a:1f:c5:28:be:53:67:8b:59:44:ec:34:81:2b:b6: 12:c5:aa:65:16:c3:b8:66:e2:6f:d7:41:4b:f8:58:89:9a:71: 4c:86:d3:43:f7:11:e1:a4:c7:cd:27:c6:c8:2f:95:01:66:bf: f7:5f:d8:be:39:8b:a0:a2:4a:4a:45:ed:d6:b9:0a:fb:ed:12: ac:ca:ea:1d:61:b1:88:7c:c3:26:cb:5b:e5:f6:f9:71:46:c0: 3b:8a:df:43:4e:e9:fd:5f:2e:eb:3c:8d:24:24:46:de:19:7b: 3f:b0:bb:1b:18:66:c9:c3:60:26:dd:27:2c:12:6f:2e:c4:f7: a9:b0:77:50:11:ba:d1:f3:12:72:8b:fa:fb:65:62:85:0b:48: c1:de:18:dc:7b:b6:14:e9:0c:6f:c5:a7:c0:7a:6d:8f:24:aa: 71:c0:02:fa:c6:db:70:96:71:82:58:88:a9:62:7e:cb:2a:d4: bb:82:ba:de:30:b0:cb:11:1f:4c:d5:29:83:c7:c6:0b:29:78: 0c:73:4f:14:cb:43:7e:43:7a:04:14:38:8f:86:99:8b:58:da: 3f:68:0f:e9:69:ef:ee:8d:9e:bd:31:c5:55:32:66:f5:d5:cf: 16:1d:ee:e2 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUDub2BJqp8j8pY1fV6SIm+noVjT0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTQ0OFoX DTI3MDMwMzA2MTk0OFowMzExMC8GA1UEAxMoQURCRkI0RDQzRTdDNTBERjNENzdG Nzg1OTgyMkExNkNFREVCQTM5QjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMRw0oBy5j4AQ7RjKaX0dZJbdgxiKbdGIv3Ug5f8jWNvGrHqIVoCUIHH4MdH RvhXzyvRR/FUwomcbjCPC0nCqX+DyNJJxZj6p+FjuZuHb+6a5Xb+rJQo+o5s4Y7b 10mcrJoAAn4xjKMPVVXKaSVQo+DOHscPY9NdTznhCI0mjLV4k5lqOu0X6mRId6vB Tzxvz6tND1pXCJkqS01UcwDJIWAYQEdsdkgO7Dyn+8Ls30dxB1Hu20oHm1PCn7BX arJfx1xacAweIM6RysyhzoYGFOqDsFn+/iUMcxbExJGDNfSHnzO4Ukp4TqVG3Upy MeXUb2IGEgSHVxJkgfCrwUMZzwsCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBStv7TU PnxQ3z1394WYIqFs7eujmzAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTAwMi5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qTAwDQYJKoZIhvcNAQELBQADggEBADOGf4GjKa4j0ih3v4rtKhgzJlFt1RofxSi+ U2eLWUTsNIErthLFqmUWw7hm4m/XQUv4WImacUyG00P3EeGkx80nxsgvlQFmv/df 2L45i6CiSkpF7da5CvvtEqzK6h1hsYh8wybLW+X2+XFGwDuK30NO6f1fLus8jSQk Rt4Zez+wuxsYZsnDYCbdJywSby7E96mwd1ARutHzEnKL+vtlYoULSMHeGNx7thTp DG/Fp8B6bY8kqnHAAvrG23CWcYJYiKlifssq1LuCut4wsMsRH0zVKYPHxgspeAxz TxTLQ35DegQUOI+GmYtY2j9oD+lp7+6Nnr0xxVUyZvXVzxYd7uI= -----END CERTIFICATE-----Generated at Sat Mar 28 15:54:35 2026 by rpki-client