$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145048.roa File: AS145048.roa (raw, json) Hash identifier: K7kWnvjBeUA7HtYJ4nswKXAOD7Kfny7dJPKM0us8lfQ= Subject key identifier: A7:69:79:DA:B3:73:50:6E:30:BD:99:D9:A5:B1:C3:A0:9E:03:A6:2E Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 3226644D429A28AF599EE9AF99E35C7D3679445F Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145048.roa Signing time: Wed 04 Mar 2026 06:21:15 +0000 ROA not before: Wed 04 Mar 2026 06:16:15 +0000 ROA not after: Wed 03 Mar 2027 06:21:15 +0000 asID: 145048 IP address blocks: 240a:a95e::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:26:64:4d:42:9a:28:af:59:9e:e9:af:99:e3:5c:7d:36:79:44:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:16:15 2026 GMT Not After : Mar 3 06:21:15 2027 GMT Subject: CN=A76979DAB373506E30BD99D9A5B1C3A09E03A62E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:b4:3a:f6:ae:83:eb:2c:64:f0:0e:eb:6d:00: 1b:07:55:2a:35:e1:7c:ba:e1:46:7b:94:a5:de:50: 50:b5:a5:fd:6a:e3:bb:92:fd:8c:be:b0:22:f5:57: aa:bc:db:de:10:e3:dd:f8:07:9c:9f:e2:61:f2:57: 02:97:26:04:fc:d3:21:82:2f:9c:b8:29:22:8b:22: 6e:12:05:15:1d:55:a2:2d:c7:7d:87:d0:64:b5:af: a5:cb:a3:94:9c:0e:a1:35:7d:9e:ed:21:7b:bd:4f: 0e:4c:c3:6d:66:e1:62:a5:ac:54:0c:06:bf:e2:96: 64:aa:57:66:67:4a:db:b1:8a:b1:7c:19:85:7f:75: 34:62:c6:db:30:da:1f:e0:0a:95:5b:43:da:d7:ca: 54:57:cc:43:0a:15:aa:b0:5b:50:03:58:d3:e2:e6: 67:31:0e:17:de:73:8d:7b:3c:9f:d2:f2:05:e4:85: cc:d0:ca:d3:03:60:ac:94:5a:f6:27:a9:39:a5:80: 95:97:d8:49:25:e2:9c:b0:d2:62:1e:fd:98:37:c7: 95:71:94:8f:2a:ad:fb:39:0f:5a:99:c0:a3:5f:c7: 81:53:74:52:b5:2a:b9:c6:f0:b7:4c:9c:c0:c0:e7: a6:04:af:b9:38:01:98:cf:a3:d5:a3:c4:cb:f8:2d: cc:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:69:79:DA:B3:73:50:6E:30:BD:99:D9:A5:B1:C3:A0:9E:03:A6:2E X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145048.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a95e::/32 Signature Algorithm: sha256WithRSAEncryption d5:7b:b0:d6:38:c1:fd:a9:b5:d1:95:92:7d:36:17:33:4b:e3: d4:a3:75:bd:f8:02:4c:3d:ea:4f:4a:7d:f4:ef:02:12:1f:1a: 24:32:5e:72:7e:60:3b:e5:2b:7f:4b:b2:c0:d0:fc:36:b8:0e: d7:d4:70:5b:48:bc:95:a6:04:44:78:bf:3a:c5:84:2a:fb:fa: 32:7e:0c:19:f1:6c:c7:9a:7c:2e:53:cb:d7:21:26:f7:16:d3: 8a:ac:ba:38:3d:c6:b8:98:87:b2:b4:94:df:a6:65:13:f1:fa: d6:c6:02:19:37:5d:76:ee:3d:ac:ec:4b:03:07:c7:67:7c:3e: dc:53:7e:e2:da:3b:c5:7c:54:40:99:ca:3f:4b:92:f3:0f:df: b6:d6:65:d7:b0:19:d6:60:b7:e1:f4:87:d7:a8:c0:0e:1a:31: 95:89:b7:83:e6:a5:32:55:51:1d:37:79:e4:32:a6:e6:34:89: 12:46:23:f9:53:b3:0e:a4:3b:cc:1b:1a:5a:ee:e7:4d:81:67: a5:85:a2:0d:f0:90:ad:e4:11:3f:a7:77:f1:8b:f2:fd:e6:04: 9e:22:7f:e4:47:50:0c:9a:a1:ef:8d:af:e2:9e:70:ed:97:f3: 47:31:3e:e0:11:5b:26:fd:d2:28:ec:96:5b:32:79:5d:de:6c: 2b:00:98:88 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUMiZkTUKaKK9ZnumvmeNcfTZ5RF8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTYxNVoX DTI3MDMwMzA2MjExNVowMzExMC8GA1UEAxMoQTc2OTc5REFCMzczNTA2RTMwQkQ5 OUQ5QTVCMUMzQTA5RTAzQTYyRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALG0Ovaug+ssZPAO620AGwdVKjXhfLrhRnuUpd5QULWl/Wrju5L9jL6wIvVX qrzb3hDj3fgHnJ/iYfJXApcmBPzTIYIvnLgpIosibhIFFR1Voi3HfYfQZLWvpcuj lJwOoTV9nu0he71PDkzDbWbhYqWsVAwGv+KWZKpXZmdK27GKsXwZhX91NGLG2zDa H+AKlVtD2tfKVFfMQwoVqrBbUANY0+LmZzEOF95zjXs8n9LyBeSFzNDK0wNgrJRa 9iepOaWAlZfYSSXinLDSYh79mDfHlXGUjyqt+zkPWpnAo1/HgVN0UrUqucbwt0yc wMDnpgSvuTgBmM+j1aPEy/gtzCsCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSnaXna s3NQbjC9mdmlscOgngOmLjAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTA0OC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qV4wDQYJKoZIhvcNAQELBQADggEBANV7sNY4wf2ptdGVkn02FzNL49Sjdb34Akw9 6k9KffTvAhIfGiQyXnJ+YDvlK39LssDQ/Da4DtfUcFtIvJWmBER4vzrFhCr7+jJ+ DBnxbMeafC5Ty9chJvcW04qsujg9xriYh7K0lN+mZRPx+tbGAhk3XXbuPazsSwMH x2d8PtxTfuLaO8V8VECZyj9LkvMP37bWZdewGdZgt+H0h9eowA4aMZWJt4PmpTJV UR03eeQypuY0iRJGI/lTsw6kO8wbGlru502BZ6WFog3wkK3kET+nd/GL8v3mBJ4i f+RHUAyaoe+Nr+KecO2X80cxPuARWyb90ijsllsyeV3ebCsAmIg= -----END CERTIFICATE-----Generated at Sat Mar 28 11:49:26 2026 by rpki-client