$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145037.roa File: AS145037.roa (raw, json) Hash identifier: FafVj4nm//Bui7FCpCC3lgbX/YMDT3jkqWb8aropfN0= Subject key identifier: 16:F9:85:BE:37:15:FC:81:05:8F:7F:65:3A:96:7B:EA:C2:D5:EB:07 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 4990BCCA17C6CA9FC9747D3525D9D7D85EA509D9 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145037.roa Signing time: Wed 04 Mar 2026 06:22:23 +0000 ROA not before: Wed 04 Mar 2026 06:17:23 +0000 ROA not after: Wed 03 Mar 2027 06:22:23 +0000 asID: 145037 IP address blocks: 240a:a953::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:90:bc:ca:17:c6:ca:9f:c9:74:7d:35:25:d9:d7:d8:5e:a5:09:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:17:23 2026 GMT Not After : Mar 3 06:22:23 2027 GMT Subject: CN=16F985BE3715FC81058F7F653A967BEAC2D5EB07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:38:2c:27:53:c9:bd:9e:d8:2b:9a:b4:8f:c7: 57:38:cd:84:a0:f1:5e:16:50:20:91:f7:ba:af:9e: 61:08:8d:d2:95:2d:c4:ee:b2:39:9b:e9:51:79:b3: a2:af:07:80:61:f4:53:d6:ee:53:5c:eb:ee:d4:07: 7f:d5:b8:11:31:db:f2:f7:64:69:a8:83:19:7b:7c: e5:26:9e:a0:b9:81:a6:1c:48:82:87:ce:41:be:a0: 1f:f8:9e:91:e2:b5:8e:01:91:66:d6:58:d1:e9:5e: dc:ee:96:b2:87:23:ff:71:d2:16:07:2a:eb:38:ef: bb:d5:db:c1:5d:d3:25:17:5c:ca:9e:3f:91:aa:13: e7:40:38:6e:bb:e2:a3:d7:61:75:79:69:44:7e:e4: 1c:68:dc:e1:05:49:d7:86:b2:92:2f:4f:5c:7e:0f: f7:a4:15:14:be:e1:08:ba:68:8e:91:62:5d:2e:9a: 71:04:c4:c4:37:33:db:99:4c:e5:b6:50:95:c7:50: 0d:a5:7f:45:81:48:f6:0f:69:11:27:91:93:f8:97: e0:cf:e9:09:cb:0e:e3:d9:45:15:f6:65:7d:96:76: a0:18:e9:95:55:3b:2d:ec:e7:f0:6b:17:72:2b:09: c5:de:a4:d9:99:a1:93:df:67:cb:fd:b7:87:9d:b6: bb:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:F9:85:BE:37:15:FC:81:05:8F:7F:65:3A:96:7B:EA:C2:D5:EB:07 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145037.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a953::/32 Signature Algorithm: sha256WithRSAEncryption 39:d3:4e:25:89:b0:89:0d:d1:92:a4:f3:c0:5f:5a:70:49:4f: 13:cc:8e:51:a6:1a:12:6f:be:59:0c:ab:7a:cb:95:5d:32:10: 4f:fe:99:a4:a9:be:38:74:7a:c2:2f:5e:05:fc:f5:dc:9a:b9: 92:c0:f1:8e:ff:2f:59:81:a1:34:72:9d:dc:27:80:db:1b:6e: 63:f2:42:69:22:aa:52:0d:2c:ba:8f:8d:99:a3:7a:54:b8:fc: 72:c0:4c:9f:7c:f7:25:b1:31:7e:1f:21:05:a3:be:9f:6a:dc: 35:78:cc:0e:ad:03:91:aa:1d:e3:be:2e:28:9f:8d:9b:93:66: 9e:b7:1d:54:d5:78:55:72:4a:3d:a8:a3:c6:bc:da:22:0c:44: 4e:22:4c:67:32:f5:0c:41:c3:e1:84:73:8a:4f:f7:28:ee:86: 94:80:5c:0c:b0:9d:6e:bd:98:d3:31:e4:c0:6b:bf:b9:52:c7: ed:98:e8:be:4b:1b:d2:4c:46:7c:4b:28:55:1a:89:14:e8:98: 48:a7:99:4e:e1:c6:83:d5:b4:55:3e:7e:51:18:e4:ab:ce:e7: 73:7c:2b:76:9e:1a:5c:1e:b2:f5:4b:0a:51:af:6a:9c:61:9e: ae:68:bb:f1:f0:57:92:e6:cc:56:54:07:47:4c:de:08:57:88: 86:83:ca:55 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUSZC8yhfGyp/JdH01JdnX2F6lCdkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTcyM1oX DTI3MDMwMzA2MjIyM1owMzExMC8GA1UEAxMoMTZGOTg1QkUzNzE1RkM4MTA1OEY3 RjY1M0E5NjdCRUFDMkQ1RUIwNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAIs4LCdTyb2e2CuatI/HVzjNhKDxXhZQIJH3uq+eYQiN0pUtxO6yOZvpUXmz oq8HgGH0U9buU1zr7tQHf9W4ETHb8vdkaaiDGXt85SaeoLmBphxIgofOQb6gH/ie keK1jgGRZtZY0ele3O6Wsocj/3HSFgcq6zjvu9XbwV3TJRdcyp4/kaoT50A4brvi o9dhdXlpRH7kHGjc4QVJ14ayki9PXH4P96QVFL7hCLpojpFiXS6acQTExDcz25lM 5bZQlcdQDaV/RYFI9g9pESeRk/iX4M/pCcsO49lFFfZlfZZ2oBjplVU7Lezn8GsX cisJxd6k2Zmhk99ny/23h522u/kCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQW+YW+ NxX8gQWPf2U6lnvqwtXrBzAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTAzNy5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qVMwDQYJKoZIhvcNAQELBQADggEBADnTTiWJsIkN0ZKk88BfWnBJTxPMjlGmGhJv vlkMq3rLlV0yEE/+maSpvjh0esIvXgX89dyauZLA8Y7/L1mBoTRyndwngNsbbmPy QmkiqlINLLqPjZmjelS4/HLATJ989yWxMX4fIQWjvp9q3DV4zA6tA5GqHeO+Liif jZuTZp63HVTVeFVySj2oo8a82iIMRE4iTGcy9QxBw+GEc4pP9yjuhpSAXAywnW69 mNMx5MBrv7lSx+2Y6L5LG9JMRnxLKFUaiRTomEinmU7hxoPVtFU+flEY5KvO53N8 K3aeGlwesvVLClGvapxhnq5ou/HwV5LmzFZUB0dM3ghXiIaDylU= -----END CERTIFICATE-----Generated at Sat Mar 28 11:43:13 2026 by rpki-client