$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145036.roa File: AS145036.roa (raw, json) Hash identifier: tUGHpv5hY/rGWA/gPSbgplgNcomZCTjacaUHFGq/794= Subject key identifier: 03:77:95:5F:D8:17:8F:35:2D:C2:BE:60:3A:BB:D4:C8:14:3E:F1:06 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 71E79C44BCA944B25AA5854EA237AE59B96CC434 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145036.roa Signing time: Wed 04 Mar 2026 06:20:31 +0000 ROA not before: Wed 04 Mar 2026 06:15:31 +0000 ROA not after: Wed 03 Mar 2027 06:20:31 +0000 asID: 145036 IP address blocks: 240a:a952::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:e7:9c:44:bc:a9:44:b2:5a:a5:85:4e:a2:37:ae:59:b9:6c:c4:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:15:31 2026 GMT Not After : Mar 3 06:20:31 2027 GMT Subject: CN=0377955FD8178F352DC2BE603ABBD4C8143EF106 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:f9:4f:bb:ff:d6:32:29:a3:8e:b6:ee:99:80: 91:0a:8a:0e:37:a7:54:4f:1f:b9:99:94:20:34:c4: 3d:b6:8d:e1:6a:ee:d7:e2:65:8e:5e:85:f5:19:3a: 3e:8b:91:d2:4b:1e:00:a0:7b:33:bd:50:d2:11:b2: 96:02:4c:d1:9f:ed:56:24:eb:3b:46:3c:7b:bc:15: 97:49:85:42:9e:b4:f0:4b:36:c1:dc:fd:f9:97:a7: 73:4b:32:58:9d:82:21:19:72:c8:ef:76:fc:e3:27: c1:e3:d1:d1:75:41:b4:44:99:65:a1:4e:d3:14:86: 74:ff:ed:9c:63:fe:9b:1c:41:60:c1:a5:a4:a4:0d: d7:6d:63:5b:72:e7:88:d9:55:e4:83:36:63:bd:8e: db:c2:10:f2:ed:4e:1b:74:e9:f4:b7:af:35:99:ec: d6:9a:2e:35:82:ae:63:d8:63:de:04:ba:2c:ec:a1: 13:78:21:03:31:41:86:bc:69:fa:4f:de:0e:8a:1c: d5:7c:ea:ef:07:87:3b:29:be:ef:0e:2b:d7:3f:31: 59:75:10:31:c7:32:6c:f7:e6:71:64:a1:1a:eb:0a: 7f:ce:31:9f:f4:d1:24:32:23:94:4a:2d:c1:c3:8f: 8f:82:37:cf:9d:7a:99:16:f5:bd:54:cd:6c:13:e2: a0:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:77:95:5F:D8:17:8F:35:2D:C2:BE:60:3A:BB:D4:C8:14:3E:F1:06 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145036.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a952::/32 Signature Algorithm: sha256WithRSAEncryption c1:fb:d6:d4:34:87:2d:fb:32:94:ed:a6:12:97:a3:b9:6d:37: 07:62:50:2d:1c:cf:a0:b6:3c:4c:4a:63:e4:e0:4d:56:06:b7: 67:f3:35:ff:cb:fd:93:1e:a4:4e:e2:19:df:da:3c:dd:2e:47: c8:10:74:a0:0d:eb:7c:e5:de:11:b4:0a:c1:2e:a8:d3:2f:ac: 55:33:03:fb:bd:b7:93:8c:05:61:1f:96:9e:92:17:f4:1b:30: 00:56:5e:38:2b:0b:c2:80:d4:42:92:25:63:b1:11:d1:8a:ab: 18:a1:c3:46:3b:73:58:54:12:6b:ea:be:fc:db:70:51:d5:5d: 4f:54:e5:80:63:82:b8:da:10:e9:ee:7b:db:02:29:c6:12:bc: ea:10:09:61:fa:2d:0d:ff:fc:2e:08:2c:e9:0a:3b:05:35:e9: 82:c4:1d:72:0b:8d:de:73:8b:5f:55:10:f9:2f:8a:fa:92:ca: 95:db:df:33:a2:88:91:0c:ec:a5:4d:d0:96:65:b7:f3:80:b9: ce:f5:fa:ba:27:0e:42:10:02:fa:0a:b9:d2:37:c9:0f:36:95: 79:37:7c:54:b4:c5:86:9a:02:f9:61:f1:73:4f:95:6a:f2:71: 84:1c:68:e0:9e:f9:7d:ac:77:d7:3d:24:4b:b5:11:b1:80:1f: 85:66:08:d3 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUceecRLypRLJapYVOojeuWblsxDQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTUzMVoX DTI3MDMwMzA2MjAzMVowMzExMC8GA1UEAxMoMDM3Nzk1NUZEODE3OEYzNTJEQzJC RTYwM0FCQkQ0QzgxNDNFRjEwNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALP5T7v/1jIpo4627pmAkQqKDjenVE8fuZmUIDTEPbaN4Wru1+Jljl6F9Rk6 PouR0kseAKB7M71Q0hGylgJM0Z/tViTrO0Y8e7wVl0mFQp608Es2wdz9+Zenc0sy WJ2CIRlyyO92/OMnwePR0XVBtESZZaFO0xSGdP/tnGP+mxxBYMGlpKQN121jW3Ln iNlV5IM2Y72O28IQ8u1OG3Tp9LevNZns1pouNYKuY9hj3gS6LOyhE3ghAzFBhrxp +k/eDooc1Xzq7weHOym+7w4r1z8xWXUQMccybPfmcWShGusKf84xn/TRJDIjlEot wcOPj4I3z516mRb1vVTNbBPioLUCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQDd5Vf 2BePNS3CvmA6u9TIFD7xBjAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTAzNi5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qVIwDQYJKoZIhvcNAQELBQADggEBAMH71tQ0hy37MpTtphKXo7ltNwdiUC0cz6C2 PExKY+TgTVYGt2fzNf/L/ZMepE7iGd/aPN0uR8gQdKAN63zl3hG0CsEuqNMvrFUz A/u9t5OMBWEflp6SF/QbMABWXjgrC8KA1EKSJWOxEdGKqxihw0Y7c1hUEmvqvvzb cFHVXU9U5YBjgrjaEOnue9sCKcYSvOoQCWH6LQ3//C4ILOkKOwU16YLEHXILjd5z i19VEPkvivqSypXb3zOiiJEM7KVN0JZlt/OAuc71+ronDkIQAvoKudI3yQ82lXk3 fFS0xYaaAvlh8XNPlWrycYQcaOCe+X2sd9c9JEu1EbGAH4VmCNM= -----END CERTIFICATE-----Generated at Sat Mar 28 11:43:41 2026 by rpki-client