$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145003.roa File: AS145003.roa (raw, json) Hash identifier: 2dQ2nlETuaEYhC2vOjfbDDXtCL2sg1E0PDlLM70VhpQ= Subject key identifier: 29:A4:54:3F:B8:2E:7F:3D:18:4C:6D:33:FC:72:B9:61:C5:49:4C:34 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 7B2D7A11CBA6C6ED69B457C384E55E66308461E2 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145003.roa Signing time: Wed 04 Mar 2026 06:20:38 +0000 ROA not before: Wed 04 Mar 2026 06:15:38 +0000 ROA not after: Wed 03 Mar 2027 06:20:38 +0000 asID: 145003 IP address blocks: 240a:a931::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:2d:7a:11:cb:a6:c6:ed:69:b4:57:c3:84:e5:5e:66:30:84:61:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:15:38 2026 GMT Not After : Mar 3 06:20:38 2027 GMT Subject: CN=29A4543FB82E7F3D184C6D33FC72B961C5494C34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:dc:62:61:fe:e0:86:46:61:fa:8b:ab:08:ec: aa:a0:b7:ef:7f:79:9a:e5:c6:c8:ff:b9:3a:c1:0e: c6:33:7a:a6:93:52:dd:df:9f:b5:ca:e1:22:aa:80: f8:1f:3c:fb:88:66:04:e7:95:c8:31:c8:1f:a6:75: 88:6e:0c:22:00:b5:55:b3:22:9c:3b:0a:9b:85:f6: 24:0e:1a:fb:f1:2f:c8:fc:53:8e:08:45:10:10:52: c6:dd:ec:96:ac:a3:1c:bc:11:9b:e1:02:40:30:28: 4c:b2:4c:34:0f:d0:c0:12:41:33:52:02:b4:cf:fa: 30:45:5a:cc:2d:c0:af:19:58:c2:75:35:b3:db:94: 43:5a:d3:d8:4f:c7:c2:aa:9e:af:e8:5e:4f:ee:f2: 2d:c8:98:d2:41:00:e0:99:bf:76:47:6c:78:52:83: e5:0d:ac:eb:fa:99:5a:67:20:4e:65:4d:f2:c0:3f: 75:e8:73:07:7c:60:6a:1a:57:79:a3:92:d7:81:db: 75:93:78:20:87:03:2b:81:b2:59:5c:14:a2:58:5c: d6:0b:5a:7b:26:c2:f0:f4:c8:0b:65:cb:d3:2d:df: 15:52:d8:4c:ac:a1:91:00:60:9b:d0:04:6b:87:18: 2f:5a:9a:a5:f3:52:0e:5d:ec:26:ed:4e:8a:33:78: 02:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:A4:54:3F:B8:2E:7F:3D:18:4C:6D:33:FC:72:B9:61:C5:49:4C:34 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145003.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a931::/32 Signature Algorithm: sha256WithRSAEncryption 0b:c6:57:7f:c8:6c:a8:6b:07:07:22:26:c4:f6:71:fa:1c:ad: 04:20:ce:b0:63:51:99:6e:ea:ff:6e:c7:2d:4b:84:d0:05:b8: f0:7d:fb:38:ec:bc:f0:d8:d4:20:8c:57:fb:56:21:0c:72:e5: b2:29:14:c4:ed:5d:99:ad:f8:d3:62:fa:45:d5:15:e3:da:ec: fe:3c:4b:90:4a:e5:67:5e:9c:7e:8b:0b:bb:93:bf:52:b7:15: 62:27:bc:7a:94:73:02:b8:c4:0e:0f:97:7b:08:39:d1:e4:81: 7d:1d:b2:2e:f1:2a:9c:2a:f7:cc:3a:37:bc:06:2a:b6:07:7f: 91:cb:5b:cf:bd:ce:04:c1:99:31:2d:de:ef:76:6d:66:ee:73: 01:de:fe:80:9c:3b:72:7b:6d:24:a1:76:49:79:29:95:98:0b: 4e:dc:91:b2:bc:49:b8:ef:24:a1:df:36:57:13:d2:64:cc:14: 2f:e7:73:8d:c3:19:1d:fb:df:ec:72:29:28:24:a4:bd:ce:fb: e5:e5:c3:5b:47:87:65:90:d8:97:4d:d0:74:9c:29:89:09:ea: e9:0c:54:4f:8e:77:c4:b7:59:af:a8:1e:a5:9b:7c:26:46:b9: fb:83:30:81:23:c1:f3:11:fa:7a:df:c2:25:a3:89:91:47:1e: 6d:ba:98:d8 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUey16Ecumxu1ptFfDhOVeZjCEYeIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTUzOFoX DTI3MDMwMzA2MjAzOFowMzExMC8GA1UEAxMoMjlBNDU0M0ZCODJFN0YzRDE4NEM2 RDMzRkM3MkI5NjFDNTQ5NEMzNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALHcYmH+4IZGYfqLqwjsqqC37395muXGyP+5OsEOxjN6ppNS3d+ftcrhIqqA +B88+4hmBOeVyDHIH6Z1iG4MIgC1VbMinDsKm4X2JA4a+/EvyPxTjghFEBBSxt3s lqyjHLwRm+ECQDAoTLJMNA/QwBJBM1ICtM/6MEVazC3ArxlYwnU1s9uUQ1rT2E/H wqqer+heT+7yLciY0kEA4Jm/dkdseFKD5Q2s6/qZWmcgTmVN8sA/dehzB3xgahpX eaOS14HbdZN4IIcDK4GyWVwUolhc1gtaeybC8PTIC2XL0y3fFVLYTKyhkQBgm9AE a4cYL1qapfNSDl3sJu1OijN4AsECAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQppFQ/ uC5/PRhMbTP8crlhxUlMNDAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTAwMy5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qTEwDQYJKoZIhvcNAQELBQADggEBAAvGV3/IbKhrBwciJsT2cfocrQQgzrBjUZlu 6v9uxy1LhNAFuPB9+zjsvPDY1CCMV/tWIQxy5bIpFMTtXZmt+NNi+kXVFePa7P48 S5BK5WdenH6LC7uTv1K3FWInvHqUcwK4xA4Pl3sIOdHkgX0dsi7xKpwq98w6N7wG KrYHf5HLW8+9zgTBmTEt3u92bWbucwHe/oCcO3J7bSShdkl5KZWYC07ckbK8Sbjv JKHfNlcT0mTMFC/nc43DGR373+xyKSgkpL3O++Xlw1tHh2WQ2JdN0HScKYkJ6ukM VE+Od8S3Wa+oHqWbfCZGufuDMIEjwfMR+nrfwiWjiZFHHm26mNg= -----END CERTIFICATE-----Generated at Sat Mar 28 11:49:23 2026 by rpki-client