$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145041.roa File: AS145041.roa (raw, json) Hash identifier: 1/KudWYmtutWdVnSnC7OV54ZzAUK35sZ2apPIOwJJVo= Subject key identifier: 04:7B:8D:F6:BE:86:29:94:DF:64:09:2E:97:C9:98:A3:DA:C6:72:BD Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 604B919DD261974F4A39BBD69753D0F95F485056 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145041.roa Signing time: Wed 04 Mar 2026 06:20:10 +0000 ROA not before: Wed 04 Mar 2026 06:15:10 +0000 ROA not after: Wed 03 Mar 2027 06:20:10 +0000 asID: 145041 IP address blocks: 240a:a957::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:4b:91:9d:d2:61:97:4f:4a:39:bb:d6:97:53:d0:f9:5f:48:50:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:15:10 2026 GMT Not After : Mar 3 06:20:10 2027 GMT Subject: CN=047B8DF6BE862994DF64092E97C998A3DAC672BD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:e1:ba:07:23:1a:6b:b9:40:73:49:25:5b:45: 0f:e4:c3:e0:62:3f:0a:e6:19:38:cd:ea:b0:08:01: 68:12:1a:43:6a:28:af:92:f3:50:d9:f8:d4:65:00: 20:60:d0:1d:f9:63:3b:dd:95:74:d4:f9:f6:ac:8b: 13:81:fc:93:58:e9:11:b1:ff:ea:42:3f:53:97:f5: c9:89:a3:2b:02:b3:64:88:02:c6:c2:61:19:79:ef: a0:fa:c8:c8:86:a3:8c:bb:61:f4:fa:0b:b4:ee:41: 76:25:a3:34:a0:bd:f2:8e:2c:70:0b:12:fa:cd:12: 03:02:74:ef:6c:33:e8:a3:ff:5e:1e:d9:48:63:f1: ad:1d:29:ff:f5:89:15:92:b4:3d:0e:ce:8d:f0:c2: f3:b6:9b:fc:e9:7d:cd:5d:ad:bf:16:85:e9:62:7d: 2f:7b:c7:0d:23:bb:13:59:3f:c4:a9:bc:e0:20:82: 82:16:0b:98:4c:c9:80:2e:cc:42:66:9a:44:09:64: 5e:1c:ac:9b:8a:cb:d7:58:1e:d5:a3:8f:18:4e:79: 23:70:68:71:fb:e0:2d:c1:9a:c9:8c:62:5c:7b:7a: 8e:16:a6:4e:53:f5:5e:bc:74:4d:59:48:de:8c:bf: 11:33:c4:33:38:1f:82:1e:34:dd:dd:1e:11:f5:9b: f4:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:7B:8D:F6:BE:86:29:94:DF:64:09:2E:97:C9:98:A3:DA:C6:72:BD X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145041.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a957::/32 Signature Algorithm: sha256WithRSAEncryption 72:f8:19:1c:70:9f:9f:58:66:73:29:83:eb:4d:88:8b:8b:91: 3a:db:96:8d:48:8a:06:e9:6c:09:b0:62:21:d1:ce:5a:1c:09: 72:dc:4f:fd:cc:e4:37:3b:ab:19:e9:03:6c:6a:55:e8:a8:1c: a1:74:18:e5:e7:a0:4f:b8:21:d5:35:fd:f0:c3:74:c1:0c:2d: a9:7c:71:f5:9c:b9:07:26:e1:54:d0:51:69:38:cd:70:36:36: 61:23:6b:81:51:75:37:f0:2d:38:7d:b8:f1:0c:63:c9:47:77: de:f2:e2:e9:94:2d:a6:6c:30:75:77:82:bf:45:d9:31:7c:2b: 92:c1:d1:39:f3:0e:1e:88:de:f0:c6:21:98:60:b3:6b:0c:91: d4:2d:7d:54:a5:f4:57:dd:3a:f1:7b:99:6c:e3:88:1e:88:5b: be:38:7e:f3:10:31:05:12:57:b2:77:6a:ce:66:72:ae:e9:e9: fc:4b:bc:0d:65:f5:6f:6a:ec:1a:27:cb:08:39:2b:80:c9:db: 40:05:0f:87:0d:9d:d5:ea:10:37:9c:e4:79:7c:51:ac:41:c3: a9:99:94:b8:62:53:b9:1e:c5:9a:d7:5e:ad:7e:ea:87:80:c4: 96:4f:4f:75:5a:97:6e:8d:5d:ee:3a:5b:dd:e5:77:12:e7:4f: b5:f2:db:78 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUYEuRndJhl09KObvWl1PQ+V9IUFYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTUxMFoX DTI3MDMwMzA2MjAxMFowMzExMC8GA1UEAxMoMDQ3QjhERjZCRTg2Mjk5NERGNjQw OTJFOTdDOTk4QTNEQUM2NzJCRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAObhugcjGmu5QHNJJVtFD+TD4GI/CuYZOM3qsAgBaBIaQ2oor5LzUNn41GUA IGDQHfljO92VdNT59qyLE4H8k1jpEbH/6kI/U5f1yYmjKwKzZIgCxsJhGXnvoPrI yIajjLth9PoLtO5BdiWjNKC98o4scAsS+s0SAwJ072wz6KP/Xh7ZSGPxrR0p//WJ FZK0PQ7OjfDC87ab/Ol9zV2tvxaF6WJ9L3vHDSO7E1k/xKm84CCCghYLmEzJgC7M QmaaRAlkXhysm4rL11ge1aOPGE55I3BocfvgLcGayYxiXHt6jhamTlP1Xrx0TVlI 3oy/ETPEMzgfgh403d0eEfWb9IMCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQEe432 voYplN9kCS6XyZij2sZyvTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTA0MS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qVcwDQYJKoZIhvcNAQELBQADggEBAHL4GRxwn59YZnMpg+tNiIuLkTrblo1Iigbp bAmwYiHRzlocCXLcT/3M5Dc7qxnpA2xqVeioHKF0GOXnoE+4IdU1/fDDdMEMLal8 cfWcuQcm4VTQUWk4zXA2NmEja4FRdTfwLTh9uPEMY8lHd97y4umULaZsMHV3gr9F 2TF8K5LB0TnzDh6I3vDGIZhgs2sMkdQtfVSl9FfdOvF7mWzjiB6IW744fvMQMQUS V7J3as5mcq7p6fxLvA1l9W9q7Bonywg5K4DJ20AFD4cNndXqEDec5Hl8UaxBw6mZ lLhiU7kexZrXXq1+6oeAxJZPT3Val26NXe46W93ldxLnT7Xy23g= -----END CERTIFICATE-----Generated at Sat Mar 28 11:41:42 2026 by rpki-client