$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145015.roa File: AS145015.roa (raw, json) Hash identifier: HP5zKCZwSnComoldJfOIRaLr9VhR/mwQpS7Af12qqAs= Subject key identifier: FB:81:C3:A8:28:BB:66:A7:0B:68:9D:62:FA:57:78:D4:B2:D4:82:16 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 7B889502EACF5396AE20A8AA060383680CC6D012 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145015.roa Signing time: Wed 04 Mar 2026 06:21:09 +0000 ROA not before: Wed 04 Mar 2026 06:16:09 +0000 ROA not after: Wed 03 Mar 2027 06:21:09 +0000 asID: 145015 IP address blocks: 240a:a93d::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:88:95:02:ea:cf:53:96:ae:20:a8:aa:06:03:83:68:0c:c6:d0:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:16:09 2026 GMT Not After : Mar 3 06:21:09 2027 GMT Subject: CN=FB81C3A828BB66A70B689D62FA5778D4B2D48216 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:e8:0b:21:34:29:1f:34:dc:04:11:88:ab:92: 70:14:d3:64:68:47:7d:99:e2:67:26:60:b0:6c:a3: 0f:f6:27:91:83:a1:f1:8b:65:bf:66:5e:d0:7d:a3: c9:40:c1:0e:01:91:57:83:ff:c5:54:60:56:71:1e: d5:6f:28:9f:99:95:67:9e:61:44:3b:82:08:bc:d0: b8:23:ac:e9:35:13:1e:49:bd:59:ff:c2:01:97:42: d6:3f:d8:ef:00:9d:94:df:28:1d:53:f6:66:b7:06: 10:3d:0f:70:ff:0b:71:d5:2a:b5:04:e6:ff:fe:ae: 54:fb:b2:aa:9c:81:b3:b4:ae:ac:09:42:48:fe:d0: 89:ec:7e:0d:b8:0e:63:16:46:5b:06:b3:be:32:07: 70:61:f0:07:c6:71:8a:12:a2:70:f2:28:22:92:fc: 7a:26:f0:5f:cd:fc:61:9d:8c:4f:be:29:0f:ca:df: 18:6c:26:64:fd:46:3e:36:f0:84:4f:02:9a:3c:ab: d2:4f:93:3d:2e:b6:a3:2c:f2:2a:2c:51:5a:d0:ea: f7:6c:1d:f4:88:e3:c3:de:07:5a:46:21:8a:00:0c: ac:c5:b9:18:d9:a2:55:6d:aa:c8:d0:e0:41:d0:a3: 1a:c4:1f:9c:18:26:99:86:d3:36:0f:b7:28:f2:ef: b6:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:81:C3:A8:28:BB:66:A7:0B:68:9D:62:FA:57:78:D4:B2:D4:82:16 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145015.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a93d::/32 Signature Algorithm: sha256WithRSAEncryption 94:cd:1b:52:ad:23:f8:53:43:bb:e4:72:8d:6d:4f:8e:cd:dc: ff:35:24:c2:71:f7:5c:73:b2:1e:54:b6:67:c2:a8:ee:b1:15: d9:68:fe:81:6b:ae:99:12:02:58:67:0e:f0:f2:96:f3:7b:6f: d2:f6:f9:fe:14:d8:21:dc:51:f9:d1:af:2b:94:76:2b:9f:e0: cf:4c:74:5d:e5:95:81:37:65:20:90:dd:9c:40:4e:6f:6a:8c: 27:6a:56:21:db:94:27:51:88:d8:67:3b:1a:4d:d3:5a:9c:19: 49:45:e4:f9:9d:43:45:cf:7a:fe:ac:af:e9:43:60:28:23:27: c6:c1:86:b2:ed:55:25:34:ce:28:9d:bf:03:d7:d8:7a:12:59: 94:83:04:db:82:e2:3b:49:8d:56:fe:a0:54:cb:0b:d4:5e:8a: 9a:c1:37:2c:0a:f6:83:3f:f8:43:a2:55:89:30:51:51:45:f4: 44:dd:20:36:93:cf:9e:91:5d:0f:08:b9:61:20:75:9b:cb:c7: af:4f:68:fd:bf:6b:6c:50:a3:19:91:62:6d:92:58:40:57:00: 22:09:49:a2:6c:70:15:8b:7d:c4:fb:92:1c:43:4c:cb:2f:93: b5:ab:f2:11:02:e5:76:8e:d4:ff:12:73:17:a1:3d:04:d2:56: 68:53:b9:3f -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUe4iVAurPU5auIKiqBgODaAzG0BIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTYwOVoX DTI3MDMwMzA2MjEwOVowMzExMC8GA1UEAxMoRkI4MUMzQTgyOEJCNjZBNzBCNjg5 RDYyRkE1Nzc4RDRCMkQ0ODIxNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM7oCyE0KR803AQRiKuScBTTZGhHfZniZyZgsGyjD/YnkYOh8Ytlv2Ze0H2j yUDBDgGRV4P/xVRgVnEe1W8on5mVZ55hRDuCCLzQuCOs6TUTHkm9Wf/CAZdC1j/Y 7wCdlN8oHVP2ZrcGED0PcP8LcdUqtQTm//6uVPuyqpyBs7SurAlCSP7Qiex+DbgO YxZGWwazvjIHcGHwB8ZxihKicPIoIpL8eibwX838YZ2MT74pD8rfGGwmZP1GPjbw hE8Cmjyr0k+TPS62oyzyKixRWtDq92wd9Ijjw94HWkYhigAMrMW5GNmiVW2qyNDg QdCjGsQfnBgmmYbTNg+3KPLvtusCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBT7gcOo KLtmpwtonWL6V3jUstSCFjAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTAxNS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qT0wDQYJKoZIhvcNAQELBQADggEBAJTNG1KtI/hTQ7vkco1tT47N3P81JMJx91xz sh5UtmfCqO6xFdlo/oFrrpkSAlhnDvDylvN7b9L2+f4U2CHcUfnRryuUdiuf4M9M dF3llYE3ZSCQ3ZxATm9qjCdqViHblCdRiNhnOxpN01qcGUlF5PmdQ0XPev6sr+lD YCgjJ8bBhrLtVSU0ziidvwPX2HoSWZSDBNuC4jtJjVb+oFTLC9ReiprBNywK9oM/ +EOiVYkwUVFF9ETdIDaTz56RXQ8IuWEgdZvLx69PaP2/a2xQoxmRYm2SWEBXACIJ SaJscBWLfcT7khxDTMsvk7Wr8hEC5XaO1P8ScxehPQTSVmhTuT8= -----END CERTIFICATE-----Generated at Sat Mar 28 13:13:23 2026 by rpki-client