$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145054.roa File: AS145054.roa (raw, json) Hash identifier: d2sVPGei84LHG+JtTJhydK+1uBR6JyeoiVJjEhNHWho= Subject key identifier: EA:A4:45:7F:74:A0:74:FC:99:2D:50:AB:F1:1D:23:A6:3B:89:AA:05 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 2CF42753F3D665E31478A288BA235541F5153147 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145054.roa Signing time: Wed 04 Mar 2026 06:21:23 +0000 ROA not before: Wed 04 Mar 2026 06:16:23 +0000 ROA not after: Wed 03 Mar 2027 06:21:23 +0000 asID: 145054 IP address blocks: 240a:a964::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:f4:27:53:f3:d6:65:e3:14:78:a2:88:ba:23:55:41:f5:15:31:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:16:23 2026 GMT Not After : Mar 3 06:21:23 2027 GMT Subject: CN=EAA4457F74A074FC992D50ABF11D23A63B89AA05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:dd:94:c4:ae:37:48:88:a3:7d:bc:af:76:35: a2:34:28:1b:df:d9:50:e0:0a:c3:3e:ba:da:53:94: 69:c9:a1:2a:aa:db:bd:1d:1a:a3:e1:f4:b6:f7:7d: 4d:22:85:46:92:3f:89:c4:8d:75:24:36:41:96:50: e8:4e:5c:59:3b:f8:27:8f:ec:ad:50:3c:dd:1e:91: 1f:75:f4:da:72:aa:31:b7:36:79:e5:67:1c:54:16: 59:ca:6c:d4:84:c8:c7:5e:2e:6f:f2:3c:74:fc:44: 6e:af:36:63:88:f2:79:53:42:3c:4e:4d:c3:b0:5c: 6f:9c:6d:46:db:21:18:26:9f:18:1e:18:8e:91:b3: 60:c6:93:05:80:3b:a5:3f:35:c0:62:65:00:82:37: 5c:03:ae:1a:1b:d0:ed:aa:44:05:06:75:67:28:bb: f8:b5:c4:a8:77:76:c8:4d:84:44:b9:01:d0:7e:f6: c6:47:51:5a:5c:32:0c:11:6a:ed:87:a3:ae:66:24: 30:3a:88:3b:40:d4:e1:4e:ea:2e:12:a2:aa:c8:dc: fd:27:0a:58:e2:d4:a2:fe:73:52:b3:e0:cf:58:d0: 59:3d:8e:c3:34:4d:f4:67:12:bd:ea:54:57:c3:40: d4:19:8b:c9:2f:8c:1f:7f:ca:56:42:fc:fc:1d:2a: b7:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:A4:45:7F:74:A0:74:FC:99:2D:50:AB:F1:1D:23:A6:3B:89:AA:05 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145054.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a964::/32 Signature Algorithm: sha256WithRSAEncryption 36:f3:7b:f7:33:38:07:8c:0c:37:19:79:1f:71:f1:7f:a6:2d: 09:f4:fa:1b:d2:5a:8a:3e:78:c4:7f:e4:a8:47:51:2f:c7:ac: 9c:86:f8:26:22:a3:d0:64:5d:08:b0:c3:93:bb:26:00:29:b7: 5a:42:8f:ba:df:a8:39:c9:b6:52:0c:03:ca:19:d3:75:7d:29: d3:af:00:83:9e:9a:05:f6:28:e2:d0:98:2c:ee:82:08:f8:ac: fb:e4:30:df:0a:94:c9:63:3c:a8:14:d9:20:b1:07:5f:f2:8b: e2:f7:db:67:01:1a:65:6a:82:54:79:fd:40:d4:25:6e:55:c7: 94:c8:b4:f0:52:cf:ce:bf:5c:75:ff:8d:56:7e:58:72:27:74: 3a:b9:a8:b1:e6:79:36:c5:26:60:7d:58:b3:7e:3c:b7:bb:ff: e0:50:c5:86:13:08:69:16:07:86:8d:50:ca:00:14:c6:26:f8: 8e:b7:62:88:8c:0f:ba:19:6a:67:11:f4:c0:43:f3:17:02:f8: 5e:83:bd:7a:2e:fd:7f:23:82:1c:f0:cf:96:28:22:3f:4f:a4: a8:9b:95:8e:67:0b:ed:b9:dc:76:9b:4b:46:b9:11:67:ce:06: a9:ac:94:0b:0a:fe:d1:5a:a4:50:00:02:eb:c3:a6:ad:c0:d9: db:47:d4:78 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIULPQnU/PWZeMUeKKIuiNVQfUVMUcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTYyM1oX DTI3MDMwMzA2MjEyM1owMzExMC8GA1UEAxMoRUFBNDQ1N0Y3NEEwNzRGQzk5MkQ1 MEFCRjExRDIzQTYzQjg5QUEwNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALTdlMSuN0iIo328r3Y1ojQoG9/ZUOAKwz662lOUacmhKqrbvR0ao+H0tvd9 TSKFRpI/icSNdSQ2QZZQ6E5cWTv4J4/srVA83R6RH3X02nKqMbc2eeVnHFQWWcps 1ITIx14ub/I8dPxEbq82Y4jyeVNCPE5Nw7Bcb5xtRtshGCafGB4YjpGzYMaTBYA7 pT81wGJlAII3XAOuGhvQ7apEBQZ1Zyi7+LXEqHd2yE2ERLkB0H72xkdRWlwyDBFq 7YejrmYkMDqIO0DU4U7qLhKiqsjc/ScKWOLUov5zUrPgz1jQWT2OwzRN9GcSvepU V8NA1BmLyS+MH3/KVkL8/B0qt8sCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBTqpEV/ dKB0/JktUKvxHSOmO4mqBTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTA1NC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qWQwDQYJKoZIhvcNAQELBQADggEBADbze/czOAeMDDcZeR9x8X+mLQn0+hvSWoo+ eMR/5KhHUS/HrJyG+CYio9BkXQiww5O7JgApt1pCj7rfqDnJtlIMA8oZ03V9KdOv AIOemgX2KOLQmCzuggj4rPvkMN8KlMljPKgU2SCxB1/yi+L322cBGmVqglR5/UDU JW5Vx5TItPBSz86/XHX/jVZ+WHIndDq5qLHmeTbFJmB9WLN+PLe7/+BQxYYTCGkW B4aNUMoAFMYm+I63YoiMD7oZamcR9MBD8xcC+F6DvXou/X8jghzwz5YoIj9PpKib lY5nC+253HabS0a5EWfOBqmslAsK/tFapFAAAuvDpq3A2dtH1Hg= -----END CERTIFICATE-----Generated at Sat Mar 28 11:44:30 2026 by rpki-client