$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145013.roa File: AS145013.roa (raw, json) Hash identifier: yeFGD8RbqnHE7EwuNUYvG4eCVIDYLHkHKdmhY7G+UH0= Subject key identifier: EB:47:3E:00:67:81:DF:3D:42:0B:E9:2A:F1:9F:05:98:96:BC:54:D2 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 22531EC8ED550BB636494E3B47CE62C5525DB1FE Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145013.roa Signing time: Wed 04 Mar 2026 06:22:03 +0000 ROA not before: Wed 04 Mar 2026 06:17:03 +0000 ROA not after: Wed 03 Mar 2027 06:22:03 +0000 asID: 145013 IP address blocks: 240a:a93b::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:53:1e:c8:ed:55:0b:b6:36:49:4e:3b:47:ce:62:c5:52:5d:b1:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:17:03 2026 GMT Not After : Mar 3 06:22:03 2027 GMT Subject: CN=EB473E006781DF3D420BE92AF19F059896BC54D2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:5a:02:c1:dc:e1:66:c7:da:e1:a7:c9:7a:76: a8:45:26:0e:35:c9:9a:bd:f4:45:2e:e6:db:d5:89: 5e:a5:4d:55:9c:39:fc:f8:40:f7:af:1b:0f:ce:ce: 7d:3a:cd:f1:e8:40:e2:2d:c8:a2:a0:79:1a:9b:20: 89:4b:4c:bb:11:ed:72:32:dd:b6:df:c1:bf:0a:f0: 42:0e:fc:76:a5:50:46:ae:75:59:09:df:f2:02:4f: 94:9b:74:22:e3:fe:1e:91:1b:99:55:5b:77:78:70: 30:fb:2c:ee:11:71:64:85:6e:15:00:0b:7e:20:a8: ff:ca:92:a0:02:d5:a2:90:58:b0:cb:f6:60:21:ee: 7a:21:42:c2:66:49:46:24:ec:fc:ad:78:82:16:18: 2a:c0:bc:86:d9:12:ef:2c:b1:cc:bc:e3:45:be:c9: 1c:a1:1c:a8:1f:96:e5:c3:d4:c3:80:70:ae:be:b7: 76:35:8f:1d:ba:3e:45:12:8a:a3:14:a1:59:2f:91: 91:c9:12:29:30:be:fb:b8:83:9f:20:48:5c:35:19: 02:72:b2:4f:70:75:6d:89:c5:30:29:61:73:84:8b: 0d:07:ae:99:be:e9:c6:4f:6e:27:51:87:76:a5:64: e4:04:56:47:40:53:86:e9:41:cb:59:d7:49:69:69: 37:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:47:3E:00:67:81:DF:3D:42:0B:E9:2A:F1:9F:05:98:96:BC:54:D2 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145013.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a93b::/32 Signature Algorithm: sha256WithRSAEncryption d2:73:92:95:07:f8:73:11:92:b1:2b:4d:49:13:74:23:d3:98: 62:7f:81:0d:11:00:9c:db:a3:c2:52:a0:8f:9d:a6:bf:a6:c5: 66:d8:5a:13:05:28:03:12:98:da:b7:54:6d:e3:e5:9b:5b:89: d3:a6:5a:dc:09:ab:c2:9c:85:da:96:75:b5:45:62:b2:e9:07: 66:4a:cf:09:5d:fb:bc:69:da:b0:9b:0a:53:16:dd:c1:f8:68: fa:a4:f4:f7:71:8f:52:86:fa:ea:ef:0b:ac:b2:33:b6:33:99: d3:5a:b5:cb:55:89:a5:10:53:b0:3e:0a:91:27:a7:82:71:73: 48:4b:e9:01:8b:a7:fd:da:cc:80:52:71:b2:40:d2:7f:ad:1b: b0:81:b2:3e:c9:03:95:86:9c:18:b4:9d:3b:44:fa:29:aa:32: b1:9b:e0:b1:77:ca:94:e4:b9:1e:db:55:02:f1:92:d2:cd:d4: 9f:16:5e:36:75:67:c5:bc:b2:d5:99:d1:36:29:8f:a6:d9:c7: 0e:1f:c8:df:a6:38:4a:5e:13:a9:2e:81:42:3f:d2:cc:71:6b: 0d:47:2e:e9:19:ac:c1:76:c6:3c:43:04:86:55:77:de:f5:92: 99:6a:88:14:2e:2b:68:9d:2e:05:b3:b7:9e:68:d9:09:96:14: 57:f4:c8:4f -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUIlMeyO1VC7Y2SU47R85ixVJdsf4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTcwM1oX DTI3MDMwMzA2MjIwM1owMzExMC8GA1UEAxMoRUI0NzNFMDA2NzgxREYzRDQyMEJF OTJBRjE5RjA1OTg5NkJDNTREMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJ9aAsHc4WbH2uGnyXp2qEUmDjXJmr30RS7m29WJXqVNVZw5/PhA968bD87O fTrN8ehA4i3IoqB5GpsgiUtMuxHtcjLdtt/BvwrwQg78dqVQRq51WQnf8gJPlJt0 IuP+HpEbmVVbd3hwMPss7hFxZIVuFQALfiCo/8qSoALVopBYsMv2YCHueiFCwmZJ RiTs/K14ghYYKsC8htkS7yyxzLzjRb7JHKEcqB+W5cPUw4Bwrr63djWPHbo+RRKK oxShWS+RkckSKTC++7iDnyBIXDUZAnKyT3B1bYnFMClhc4SLDQeumb7pxk9uJ1GH dqVk5ARWR0BThulBy1nXSWlpN00CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBTrRz4A Z4HfPUIL6SrxnwWYlrxU0jAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTAxMy5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qTswDQYJKoZIhvcNAQELBQADggEBANJzkpUH+HMRkrErTUkTdCPTmGJ/gQ0RAJzb o8JSoI+dpr+mxWbYWhMFKAMSmNq3VG3j5ZtbidOmWtwJq8KchdqWdbVFYrLpB2ZK zwld+7xp2rCbClMW3cH4aPqk9Pdxj1KG+urvC6yyM7YzmdNatctViaUQU7A+CpEn p4Jxc0hL6QGLp/3azIBScbJA0n+tG7CBsj7JA5WGnBi0nTtE+imqMrGb4LF3ypTk uR7bVQLxktLN1J8WXjZ1Z8W8stWZ0TYpj6bZxw4fyN+mOEpeE6kugUI/0sxxaw1H LukZrMF2xjxDBIZVd971kplqiBQuK2idLgWzt55o2QmWFFf0yE8= -----END CERTIFICATE-----Generated at Sat Mar 28 13:15:13 2026 by rpki-client