$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145026.roa File: AS145026.roa (raw, json) Hash identifier: +BtinA5nDlZyNKVifJEa+2RjKVk5oTI5wrGwZH8JFyQ= Subject key identifier: 91:C4:F2:E7:91:74:09:D0:1F:A3:F7:59:D9:3C:D3:4B:5A:F5:21:E0 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 7C361C9FADDB1233740795CBE4B47F70BEB7D8C8 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145026.roa Signing time: Wed 04 Mar 2026 06:20:56 +0000 ROA not before: Wed 04 Mar 2026 06:15:56 +0000 ROA not after: Wed 03 Mar 2027 06:20:56 +0000 asID: 145026 IP address blocks: 240a:a948::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:36:1c:9f:ad:db:12:33:74:07:95:cb:e4:b4:7f:70:be:b7:d8:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:15:56 2026 GMT Not After : Mar 3 06:20:56 2027 GMT Subject: CN=91C4F2E7917409D01FA3F759D93CD34B5AF521E0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:b0:c7:21:f4:82:5d:f4:26:08:21:d2:a7:53: 69:40:a3:c4:12:90:ba:ad:0b:66:b3:84:8c:ca:00: 2e:ff:64:25:81:5d:36:52:1f:7f:db:bc:a8:cc:79: 3b:3e:0b:6c:ce:6a:f9:5f:74:5c:8a:7f:ee:aa:7e: 6d:45:aa:35:27:7a:4a:2d:b2:e2:be:f2:e5:6b:1e: 11:2f:68:6e:6a:d8:20:db:78:cd:71:52:ba:4b:1a: 70:9d:2b:d5:73:e7:e8:9d:c9:a4:8b:ea:6d:7d:b8: 8e:06:3b:45:df:ea:1c:73:b6:5c:60:45:3d:76:4c: 2d:94:43:dc:35:2f:c7:6d:85:17:67:be:01:02:95: b0:be:81:13:4c:b2:54:c1:e7:12:25:ca:5e:8e:9c: 31:ac:f0:a6:52:93:26:ea:e6:f9:49:ed:f6:14:80: d9:34:bf:e3:55:d6:a9:df:f3:16:03:71:20:93:e7: 37:60:9e:48:19:86:ca:c0:b7:e2:5c:6a:e1:ec:23: 81:c6:5a:97:e0:09:b8:ca:3a:c1:34:32:3c:69:af: 97:cc:6c:4d:4d:89:d0:9e:5e:ef:4a:ae:cf:ed:04: b7:e5:92:52:c1:07:ed:26:80:36:13:3a:8b:de:14: 81:c6:75:2a:a9:b2:9b:33:ee:0b:b1:c6:24:f4:55: 48:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:C4:F2:E7:91:74:09:D0:1F:A3:F7:59:D9:3C:D3:4B:5A:F5:21:E0 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145026.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a948::/32 Signature Algorithm: sha256WithRSAEncryption 4e:59:30:51:62:ff:f6:81:48:dc:b4:e7:ba:9c:2a:02:a6:71: 5b:21:b4:c9:10:a5:9e:7c:95:d9:63:7e:e9:e5:bb:66:53:20: 23:cf:59:e8:52:1d:14:af:d4:3b:45:4b:d6:2e:06:ea:7c:3e: 36:2b:ea:a2:f9:5d:99:b6:a1:46:3a:be:46:f8:55:c0:f5:e5: a1:55:d4:35:9d:5a:79:f3:d5:4b:fe:38:30:be:ba:63:3c:b6: 5c:fb:24:14:21:b0:cb:0d:4d:64:68:30:91:b6:f0:24:d3:2b: 1a:4c:35:cd:8b:da:0d:fc:63:d8:d5:10:19:0d:31:7f:f0:64: a7:39:77:30:d6:42:70:43:cd:be:dd:3e:aa:e0:45:05:23:0b: 02:a7:ae:2f:ac:b0:d5:5e:2a:f8:81:ff:a5:1a:6f:26:9d:22: 96:71:b1:8f:3f:7f:d5:1b:f8:12:1e:70:49:94:14:fd:1e:1c: cc:27:0a:a5:05:6d:9d:41:0a:1c:02:fc:d0:a3:26:8b:01:ff: a0:ce:a0:c5:42:ac:ec:41:a3:d9:9e:f7:ce:df:1d:5c:71:db: cf:d8:e1:dd:ce:de:4b:7e:90:9f:6b:bb:da:c5:e4:92:b5:fa: 8e:d3:42:48:bd:87:7a:d0:48:e5:68:ca:6e:ec:2a:ff:1a:fe: 61:8e:b4:a1 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUfDYcn63bEjN0B5XL5LR/cL632MgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTU1NloX DTI3MDMwMzA2MjA1NlowMzExMC8GA1UEAxMoOTFDNEYyRTc5MTc0MDlEMDFGQTNG NzU5RDkzQ0QzNEI1QUY1MjFFMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALKwxyH0gl30Jggh0qdTaUCjxBKQuq0LZrOEjMoALv9kJYFdNlIff9u8qMx5 Oz4LbM5q+V90XIp/7qp+bUWqNSd6Si2y4r7y5WseES9obmrYINt4zXFSuksacJ0r 1XPn6J3JpIvqbX24jgY7Rd/qHHO2XGBFPXZMLZRD3DUvx22FF2e+AQKVsL6BE0yy VMHnEiXKXo6cMazwplKTJurm+Unt9hSA2TS/41XWqd/zFgNxIJPnN2CeSBmGysC3 4lxq4ewjgcZal+AJuMo6wTQyPGmvl8xsTU2J0J5e70quz+0Et+WSUsEH7SaANhM6 i94UgcZ1KqmymzPuC7HGJPRVSHcCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSRxPLn kXQJ0B+j91nZPNNLWvUh4DAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTAyNi5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qUgwDQYJKoZIhvcNAQELBQADggEBAE5ZMFFi//aBSNy057qcKgKmcVshtMkQpZ58 ldljfunlu2ZTICPPWehSHRSv1DtFS9YuBup8PjYr6qL5XZm2oUY6vkb4VcD15aFV 1DWdWnnz1Uv+ODC+umM8tlz7JBQhsMsNTWRoMJG28CTTKxpMNc2L2g38Y9jVEBkN MX/wZKc5dzDWQnBDzb7dPqrgRQUjCwKnri+ssNVeKviB/6UabyadIpZxsY8/f9Ub +BIecEmUFP0eHMwnCqUFbZ1BChwC/NCjJosB/6DOoMVCrOxBo9me987fHVxx28/Y 4d3O3kt+kJ9ru9rF5JK1+o7TQki9h3rQSOVoym7sKv8a/mGOtKE= -----END CERTIFICATE-----Generated at Sat Mar 28 11:45:59 2026 by rpki-client