$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145028.roa File: AS145028.roa (raw, json) Hash identifier: A/s4uDTYGDL0jNdJ75lRj4rFH6TTOQdnEpNcrduSJNs= Subject key identifier: 39:0D:21:AF:78:21:AE:CF:31:BF:39:6D:0B:46:E3:5B:C2:8B:68:71 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 46E17C0AB34A685810AADD5EE07A9030F2C2C391 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145028.roa Signing time: Wed 04 Mar 2026 06:21:45 +0000 ROA not before: Wed 04 Mar 2026 06:16:45 +0000 ROA not after: Wed 03 Mar 2027 06:21:45 +0000 asID: 145028 IP address blocks: 240a:a94a::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:e1:7c:0a:b3:4a:68:58:10:aa:dd:5e:e0:7a:90:30:f2:c2:c3:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:16:45 2026 GMT Not After : Mar 3 06:21:45 2027 GMT Subject: CN=390D21AF7821AECF31BF396D0B46E35BC28B6871 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:7f:2e:6a:98:f5:05:bf:e9:ab:a5:3f:cb:85: fe:5c:4d:a0:78:35:87:c5:07:6b:8a:01:53:81:8c: 11:d6:31:17:58:1d:4d:8d:2d:2b:f3:48:60:75:3a: c6:fa:25:df:91:6e:7f:9d:d8:de:3e:e3:c0:62:6a: 59:cd:a7:5b:56:40:87:28:7e:fb:03:02:94:96:8a: 4e:85:8b:ec:4d:fd:34:70:ee:36:98:a4:03:ab:21: 35:de:21:f2:d7:7d:ba:5e:c1:1a:63:a4:f2:dd:38: 47:af:ce:2b:3a:e2:0c:72:08:24:bf:96:91:ba:33: 05:b8:4b:dc:dd:f5:5c:6f:67:90:c9:01:3b:c8:90: a0:b2:39:4f:ff:f8:2a:bf:82:61:4b:e0:4b:5d:dc: f5:97:d7:07:c5:26:7a:20:73:89:7c:c5:93:04:5c: 4d:74:c7:58:02:ca:16:49:48:bf:6a:50:b2:5e:2d: 66:ce:43:80:d8:f4:0d:47:fd:fc:3c:9e:b8:50:fa: b7:f1:8e:6b:ac:a8:d6:90:58:93:d4:fe:f9:dc:ae: 33:ae:1f:24:9f:23:b5:a1:2b:ce:18:ef:9c:3c:33: fd:37:53:e6:c6:b1:60:e0:5c:5a:8b:21:54:89:33: 95:2e:54:bc:66:38:82:e9:58:83:9c:87:53:52:da: a8:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:0D:21:AF:78:21:AE:CF:31:BF:39:6D:0B:46:E3:5B:C2:8B:68:71 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145028.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a94a::/32 Signature Algorithm: sha256WithRSAEncryption b3:80:30:bd:85:5d:e2:e5:20:91:3c:67:dd:db:17:70:8f:17: 05:fb:de:d5:f6:fc:68:ac:9b:93:7c:4c:92:e3:c6:b1:10:1c: 83:97:09:97:44:5b:00:9c:0d:34:a1:66:0f:53:d4:65:73:cf: 8f:67:d5:7a:d8:25:38:50:86:17:1d:00:34:dc:dc:1d:b6:fa: 22:c7:12:64:e9:45:a0:b2:6f:5e:b5:b5:ad:a4:e1:3a:96:8c: 7f:19:06:88:c1:15:9b:a4:48:27:08:e4:b3:f9:91:d1:7b:62: ba:6b:1f:91:48:04:4a:33:fb:2b:b6:fc:db:f8:71:8a:29:5e: 49:2b:d2:95:1b:80:f7:b8:b0:3c:f5:8a:b1:78:3e:fe:a7:f3: 9e:14:cf:8f:46:05:ea:41:53:69:f4:a1:9c:b7:67:45:11:9b: 41:90:6d:f9:a4:e4:56:14:a3:3d:a0:4c:4a:bb:01:96:d3:7b: 04:e9:94:c6:5e:28:1f:77:d5:8e:fb:90:ad:43:d5:90:88:bc: 34:ed:dc:80:60:ea:0c:99:d5:a2:d5:e1:5e:a6:4f:b6:1f:41: d6:7f:92:40:01:f5:86:53:d2:93:1c:c6:00:6f:da:2b:22:87: 48:b3:f9:cb:8a:b4:e6:10:d9:00:bd:ce:42:77:c9:a4:72:4f: 9c:65:9a:9e -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIURuF8CrNKaFgQqt1e4HqQMPLCw5EwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTY0NVoX DTI3MDMwMzA2MjE0NVowMzExMC8GA1UEAxMoMzkwRDIxQUY3ODIxQUVDRjMxQkYz OTZEMEI0NkUzNUJDMjhCNjg3MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOR/LmqY9QW/6aulP8uF/lxNoHg1h8UHa4oBU4GMEdYxF1gdTY0tK/NIYHU6 xvol35Fuf53Y3j7jwGJqWc2nW1ZAhyh++wMClJaKToWL7E39NHDuNpikA6shNd4h 8td9ul7BGmOk8t04R6/OKzriDHIIJL+WkbozBbhL3N31XG9nkMkBO8iQoLI5T//4 Kr+CYUvgS13c9ZfXB8UmeiBziXzFkwRcTXTHWALKFklIv2pQsl4tZs5DgNj0DUf9 /DyeuFD6t/GOa6yo1pBYk9T++dyuM64fJJ8jtaErzhjvnDwz/TdT5saxYOBcWosh VIkzlS5UvGY4gulYg5yHU1LaqL8CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQ5DSGv eCGuzzG/OW0LRuNbwotocTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTAyOC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qUowDQYJKoZIhvcNAQELBQADggEBALOAML2FXeLlIJE8Z93bF3CPFwX73tX2/Gis m5N8TJLjxrEQHIOXCZdEWwCcDTShZg9T1GVzz49n1XrYJThQhhcdADTc3B22+iLH EmTpRaCyb161ta2k4TqWjH8ZBojBFZukSCcI5LP5kdF7YrprH5FIBEoz+yu2/Nv4 cYopXkkr0pUbgPe4sDz1irF4Pv6n854Uz49GBepBU2n0oZy3Z0URm0GQbfmk5FYU oz2gTEq7AZbTewTplMZeKB931Y77kK1D1ZCIvDTt3IBg6gyZ1aLV4V6mT7YfQdZ/ kkAB9YZT0pMcxgBv2isih0iz+cuKtOYQ2QC9zkJ3yaRyT5xlmp4= -----END CERTIFICATE-----Generated at Sat Mar 28 13:14:04 2026 by rpki-client