$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145006.roa File: AS145006.roa (raw, json) Hash identifier: BIbKU3LDsWP+NAKXfYiCaZqDNHiocMv1hteHpUsnV+4= Subject key identifier: CD:C7:5A:74:D8:04:96:B8:9B:E1:C3:96:A3:9C:22:DE:90:7E:71:55 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 5868CE16B86C996F8EC728441E1BE90AA3599BE4 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145006.roa Signing time: Wed 04 Mar 2026 06:20:08 +0000 ROA not before: Wed 04 Mar 2026 06:15:08 +0000 ROA not after: Wed 03 Mar 2027 06:20:08 +0000 asID: 145006 IP address blocks: 240a:a934::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:68:ce:16:b8:6c:99:6f:8e:c7:28:44:1e:1b:e9:0a:a3:59:9b:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:15:08 2026 GMT Not After : Mar 3 06:20:08 2027 GMT Subject: CN=CDC75A74D80496B89BE1C396A39C22DE907E7155 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:b6:de:4a:47:cf:ea:ca:b8:85:62:93:3a:2d: 03:0d:39:21:98:fe:69:e0:e4:fb:33:ea:d9:f0:4a: f3:c0:c0:ce:19:c9:a4:65:46:6a:fa:2d:0b:83:14: 25:28:11:db:15:f2:6a:97:90:34:ff:af:90:6c:f6: 1c:f7:aa:ee:d7:0d:26:31:8a:f7:fc:f4:69:61:ec: 99:e7:55:e2:61:12:0f:2f:c2:06:6e:35:ed:3c:e6: da:63:55:29:9b:d1:84:ca:b4:11:ff:f8:2b:70:1b: 98:91:7f:15:db:3d:13:28:e3:dc:09:a7:50:61:ce: 7d:b9:da:cc:a4:f7:57:8d:bb:83:9a:9b:6f:af:22: 97:f9:18:2f:1e:b2:ec:67:29:66:44:9f:83:7c:ef: 7e:1a:af:7e:6f:f5:09:5d:cd:ab:25:3a:b0:90:38: 94:59:85:97:72:e8:2a:5f:ec:ae:3d:7a:7a:b6:f3: a4:4a:a6:fc:87:0d:cc:50:47:a3:bb:4b:cd:7b:e5: 65:d5:e1:80:5f:89:0a:3e:a7:e7:78:68:e9:da:65: 9f:96:09:64:f6:b1:d8:46:81:6f:18:87:24:bb:5d: 0a:88:d9:e0:03:42:9d:01:cd:4b:8e:25:ba:ba:4d: f7:da:ba:90:3b:9e:26:a1:98:d3:03:b1:ef:2a:cd: 00:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:C7:5A:74:D8:04:96:B8:9B:E1:C3:96:A3:9C:22:DE:90:7E:71:55 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145006.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a934::/32 Signature Algorithm: sha256WithRSAEncryption c7:94:7e:77:66:fb:4f:b4:4c:5c:10:a6:58:dc:d1:aa:59:22: 48:1a:03:a6:32:74:84:bd:5c:09:d3:4d:97:ea:08:a9:cc:63: 7c:93:4c:12:38:93:6b:7c:b4:7a:37:2a:13:81:6e:74:82:d4: 91:13:6e:17:6b:11:5d:53:b0:28:02:7b:5f:e5:7c:90:7c:0c: 4f:7f:f4:c7:05:b5:96:dc:c2:10:56:50:f7:43:62:aa:5f:11: df:fe:80:9b:63:1b:31:13:66:a6:82:1e:96:13:3c:20:90:44: 80:b8:20:2e:8d:81:55:3f:bb:3b:ca:0b:c2:65:33:69:cf:08: f7:e2:cc:30:13:b3:f6:4d:da:ae:07:47:7b:d3:f3:48:e9:b2: 61:28:99:d1:a5:1c:bb:e5:4f:42:f5:2c:4a:37:7c:67:eb:8f: a8:b4:ab:54:11:88:9c:a3:48:99:b6:b3:e1:48:9c:22:d8:f0: 02:f3:66:a0:b8:c0:66:e2:ff:9c:52:49:05:6d:a8:33:ff:63: 85:7c:62:67:b8:ea:c2:09:22:25:21:76:f7:2e:7a:ea:80:f5: e4:fd:6e:f3:81:17:74:7a:f5:51:11:a0:80:e7:93:c1:90:a2: c6:b4:ec:1f:34:e1:1f:de:98:3f:b5:e9:b5:f2:c2:01:0e:56: a7:0f:7c:b0 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUWGjOFrhsmW+OxyhEHhvpCqNZm+QwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTUwOFoX DTI3MDMwMzA2MjAwOFowMzExMC8GA1UEAxMoQ0RDNzVBNzREODA0OTZCODlCRTFD Mzk2QTM5QzIyREU5MDdFNzE1NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMq23kpHz+rKuIVikzotAw05IZj+aeDk+zPq2fBK88DAzhnJpGVGavotC4MU JSgR2xXyapeQNP+vkGz2HPeq7tcNJjGK9/z0aWHsmedV4mESDy/CBm417Tzm2mNV KZvRhMq0Ef/4K3AbmJF/Fds9Eyjj3AmnUGHOfbnazKT3V427g5qbb68il/kYLx6y 7GcpZkSfg3zvfhqvfm/1CV3NqyU6sJA4lFmFl3LoKl/srj16erbzpEqm/IcNzFBH o7tLzXvlZdXhgF+JCj6n53ho6dpln5YJZPax2EaBbxiHJLtdCojZ4ANCnQHNS44l urpN99q6kDueJqGY0wOx7yrNANUCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBTNx1p0 2ASWuJvhw5ajnCLekH5xVTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTAwNi5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qTQwDQYJKoZIhvcNAQELBQADggEBAMeUfndm+0+0TFwQpljc0apZIkgaA6YydIS9 XAnTTZfqCKnMY3yTTBI4k2t8tHo3KhOBbnSC1JETbhdrEV1TsCgCe1/lfJB8DE9/ 9McFtZbcwhBWUPdDYqpfEd/+gJtjGzETZqaCHpYTPCCQRIC4IC6NgVU/uzvKC8Jl M2nPCPfizDATs/ZN2q4HR3vT80jpsmEomdGlHLvlT0L1LEo3fGfrj6i0q1QRiJyj SJm2s+FInCLY8ALzZqC4wGbi/5xSSQVtqDP/Y4V8Yme46sIJIiUhdvcueuqA9eT9 bvOBF3R69VERoIDnk8GQosa07B804R/emD+16bXywgEOVqcPfLA= -----END CERTIFICATE-----Generated at Sat Mar 28 11:44:39 2026 by rpki-client