$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145045.roa File: AS145045.roa (raw, json) Hash identifier: PpKv/MIrVolvgekjL15uvOZHmrTpSVATuNcbh0q+UoE= Subject key identifier: BB:7A:4D:2D:9C:B0:4D:8B:A9:E3:9D:AA:BB:D0:DA:F4:3D:4A:CF:C5 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 7C5D35ECB7F998E947C87E9CCF204F002AB438F6 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145045.roa Signing time: Wed 04 Mar 2026 06:22:21 +0000 ROA not before: Wed 04 Mar 2026 06:17:21 +0000 ROA not after: Wed 03 Mar 2027 06:22:21 +0000 asID: 145045 IP address blocks: 240a:a95b::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:5d:35:ec:b7:f9:98:e9:47:c8:7e:9c:cf:20:4f:00:2a:b4:38:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:17:21 2026 GMT Not After : Mar 3 06:22:21 2027 GMT Subject: CN=BB7A4D2D9CB04D8BA9E39DAABBD0DAF43D4ACFC5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:d1:1d:1f:76:56:ae:26:3e:de:f3:09:5d:76: 29:d2:00:11:4d:92:1e:fb:69:3f:52:73:20:d1:4e: 60:d9:ac:62:68:9d:5d:29:f5:23:fa:c0:3e:be:13: db:06:83:c4:8c:43:e4:9f:16:42:84:d9:cd:46:93: 1e:2f:52:37:63:77:25:84:44:de:31:31:0e:33:08: 54:63:dc:34:bb:cc:3b:96:b5:7a:dc:50:ea:f2:34: 14:31:08:b2:02:60:51:48:69:16:f5:74:9b:a1:21: 50:d8:b5:ef:36:ec:30:4a:6e:20:1d:01:2b:ee:b9: 09:85:e3:11:05:c9:6c:9d:7b:b4:83:22:62:b1:fd: 92:a0:93:6e:ed:35:6f:f0:0e:74:6e:97:7b:40:ee: 94:d9:0e:81:f9:c1:f2:c1:3a:8a:ef:56:bb:b7:e3: 65:98:cf:82:2c:cd:21:da:ab:85:20:7d:ae:ef:b9: 22:39:64:46:42:8c:f4:a8:82:2d:48:2b:82:40:8f: 72:78:a8:60:72:14:ee:62:cd:77:6d:19:9a:2b:18: be:2f:0d:c8:a8:13:c0:db:44:b6:48:b8:49:16:f7: 61:38:80:51:b1:bd:c2:ba:48:e0:d8:69:15:36:d1: ec:56:59:08:18:bf:64:10:78:2d:04:df:7e:ed:be: a9:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:7A:4D:2D:9C:B0:4D:8B:A9:E3:9D:AA:BB:D0:DA:F4:3D:4A:CF:C5 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145045.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a95b::/32 Signature Algorithm: sha256WithRSAEncryption bc:73:5e:e6:a5:93:eb:17:9d:c0:22:9a:23:ef:71:4e:e6:18: f4:2c:7f:de:84:37:9d:ad:b5:3f:76:71:f9:b6:7c:34:2e:c2: 5c:f9:cc:75:bc:62:8c:f2:c4:c4:ee:6d:a7:51:9b:99:b5:f9: af:57:b9:c3:ab:ec:e0:e7:57:47:96:0e:b7:52:8f:60:36:5f: 4e:dc:a7:04:2b:63:65:86:d6:4f:6c:f6:94:fa:2c:60:80:0c: 46:b7:c8:7a:1e:4d:e7:bf:6a:e6:70:ab:3b:e3:f1:31:97:25: 83:15:2e:6f:10:7a:a0:c5:9f:ad:1f:4c:b1:68:62:70:2e:fa: 09:84:0f:79:9f:e0:1d:61:90:f5:4d:ae:8f:44:09:18:70:f1: 87:cc:69:d4:a8:37:21:51:d1:8e:bf:ab:5f:4f:96:99:50:64: 05:f7:6d:ec:d1:28:01:2c:ec:61:4c:59:f9:40:28:80:17:cb: c5:5f:a3:19:9b:26:9d:41:25:68:8b:10:5e:e1:b7:8a:02:ce: d4:e5:62:cf:87:41:f6:9e:68:91:d2:01:df:f7:8f:7c:47:b5: 62:45:e8:41:47:9b:9a:27:3e:bc:44:86:da:a6:f7:ed:cc:95: 50:3f:02:74:1a:99:da:32:1e:c2:b0:4e:aa:a7:31:91:2c:9c: a6:76:3e:e3 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUfF017Lf5mOlHyH6czyBPACq0OPYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTcyMVoX DTI3MDMwMzA2MjIyMVowMzExMC8GA1UEAxMoQkI3QTREMkQ5Q0IwNEQ4QkE5RTM5 REFBQkJEMERBRjQzRDRBQ0ZDNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALPRHR92Vq4mPt7zCV12KdIAEU2SHvtpP1JzINFOYNmsYmidXSn1I/rAPr4T 2waDxIxD5J8WQoTZzUaTHi9SN2N3JYRE3jExDjMIVGPcNLvMO5a1etxQ6vI0FDEI sgJgUUhpFvV0m6EhUNi17zbsMEpuIB0BK+65CYXjEQXJbJ17tIMiYrH9kqCTbu01 b/AOdG6Xe0DulNkOgfnB8sE6iu9Wu7fjZZjPgizNIdqrhSB9ru+5IjlkRkKM9KiC LUgrgkCPcnioYHIU7mLNd20ZmisYvi8NyKgTwNtEtki4SRb3YTiAUbG9wrpI4Nhp FTbR7FZZCBi/ZBB4LQTffu2+qTMCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBS7ek0t nLBNi6njnaq70Nr0PUrPxTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTA0NS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qVswDQYJKoZIhvcNAQELBQADggEBALxzXualk+sXncAimiPvcU7mGPQsf96EN52t tT92cfm2fDQuwlz5zHW8YozyxMTubadRm5m1+a9XucOr7ODnV0eWDrdSj2A2X07c pwQrY2WG1k9s9pT6LGCADEa3yHoeTee/auZwqzvj8TGXJYMVLm8QeqDFn60fTLFo YnAu+gmED3mf4B1hkPVNro9ECRhw8YfMadSoNyFR0Y6/q19PlplQZAX3bezRKAEs 7GFMWflAKIAXy8VfoxmbJp1BJWiLEF7ht4oCztTlYs+HQfaeaJHSAd/3j3xHtWJF 6EFHm5onPrxEhtqm9+3MlVA/AnQamdoyHsKwTqqnMZEsnKZ2PuM= -----END CERTIFICATE-----Generated at Sat Mar 28 11:41:20 2026 by rpki-client