$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145057.roa File: AS145057.roa (raw, json) Hash identifier: ByI82ITDIE8VLEZCIFJs6lCI3IyVxt0ddPnSP2cKqCo= Subject key identifier: 81:E2:76:EA:41:AA:1D:8C:41:A0:16:28:CE:4E:C5:18:ED:ED:61:4A Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 64C6ADA03B54DBAB97228057D058520104027446 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145057.roa Signing time: Wed 04 Mar 2026 06:22:35 +0000 ROA not before: Wed 04 Mar 2026 06:17:35 +0000 ROA not after: Wed 03 Mar 2027 06:22:35 +0000 asID: 145057 IP address blocks: 240a:a967::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:c6:ad:a0:3b:54:db:ab:97:22:80:57:d0:58:52:01:04:02:74:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:17:35 2026 GMT Not After : Mar 3 06:22:35 2027 GMT Subject: CN=81E276EA41AA1D8C41A01628CE4EC518EDED614A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:05:81:eb:a4:2a:d5:86:cb:45:03:a4:3b:97: 5c:a8:d7:80:d0:84:9a:9b:ab:1d:ed:ba:a4:d5:64: ba:14:83:4f:7e:ef:6b:73:d2:af:7d:99:f0:9f:2e: 35:8c:56:b8:bd:67:86:d7:6b:54:40:49:ba:00:01: dd:fd:46:34:61:e7:ef:f3:c0:a9:08:d8:05:3b:9c: 2d:24:5f:4f:66:3c:7f:8a:91:ef:48:21:56:6b:75: da:79:c9:62:f6:21:e7:3e:b3:db:ad:fb:29:bf:68: b1:3e:87:46:3b:fd:52:b8:48:5a:48:e0:bd:7a:d9: a7:d0:ba:de:27:da:cf:1b:5a:e4:5a:3e:8c:d2:7a: 05:eb:96:69:a7:cc:d7:ed:0f:6b:32:16:40:0e:34: 5c:9b:97:f1:68:07:63:37:62:b1:16:a7:b6:c3:60: 2b:40:ff:8f:83:f4:19:b2:ec:8f:2d:94:14:5f:8a: c1:36:83:5f:d3:8e:30:0b:e3:10:b7:7d:b3:63:07: 72:c1:9e:88:00:47:32:2c:13:20:00:78:e1:64:99: 84:33:69:77:c4:b3:a9:5b:2e:ee:6f:73:59:b0:c9: 42:ab:bf:37:4d:ca:52:98:4e:b3:dd:26:b6:c3:d2: ab:f4:78:54:22:ab:36:83:37:95:4c:d4:ab:64:0e: 32:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:E2:76:EA:41:AA:1D:8C:41:A0:16:28:CE:4E:C5:18:ED:ED:61:4A X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145057.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a967::/32 Signature Algorithm: sha256WithRSAEncryption 10:50:0a:b2:c1:d0:04:2d:25:2a:d4:6b:7f:f2:84:86:17:43: 2b:47:0d:f2:e0:27:c2:65:a5:33:0a:60:56:62:33:7c:14:ac: 9d:fd:d5:5f:b9:8e:bb:df:79:df:6f:bf:ef:9a:c3:f3:a7:6b: f5:c7:07:b0:bd:46:10:fc:90:54:59:99:84:8b:b0:cd:f4:52: 04:b0:5d:0c:34:72:9d:1b:20:18:e2:ae:42:67:1e:08:b8:f4: 5d:f9:95:ea:24:06:06:0f:3b:66:cc:fb:bf:d7:cd:6f:57:07: 50:9b:87:f2:36:cc:ef:74:1a:2f:98:59:b5:d2:ba:5f:2d:49: 2b:24:68:ee:3d:a3:e4:6b:56:26:33:b5:81:a0:53:77:80:6f: fe:0e:c5:d7:2c:09:2e:f0:c4:b1:b5:cf:ab:b4:b6:67:23:91: 9a:1b:e1:5b:a3:73:d9:ff:32:b3:86:f1:d7:7e:19:76:72:a8: 16:05:31:bc:8c:84:58:0b:91:a3:f6:6c:a8:2b:f8:5f:62:27: 34:30:72:5e:b0:21:09:42:d3:ed:a9:b1:9b:75:36:6d:5d:cd: b7:a0:2a:c5:f5:23:99:60:83:0b:9e:2a:e4:41:c1:1c:57:03: c2:cf:33:f0:1c:59:7b:d4:56:ce:b9:d0:21:76:29:00:41:5d: 53:73:11:64 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUZMatoDtU26uXIoBX0FhSAQQCdEYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTczNVoX DTI3MDMwMzA2MjIzNVowMzExMC8GA1UEAxMoODFFMjc2RUE0MUFBMUQ4QzQxQTAx NjI4Q0U0RUM1MThFREVENjE0QTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJkFgeukKtWGy0UDpDuXXKjXgNCEmpurHe26pNVkuhSDT37va3PSr32Z8J8u NYxWuL1nhtdrVEBJugAB3f1GNGHn7/PAqQjYBTucLSRfT2Y8f4qR70ghVmt12nnJ YvYh5z6z2637Kb9osT6HRjv9UrhIWkjgvXrZp9C63ifazxta5Fo+jNJ6BeuWaafM 1+0PazIWQA40XJuX8WgHYzdisRantsNgK0D/j4P0GbLsjy2UFF+KwTaDX9OOMAvj ELd9s2MHcsGeiABHMiwTIAB44WSZhDNpd8SzqVsu7m9zWbDJQqu/N03KUphOs90m tsPSq/R4VCKrNoM3lUzUq2QOMvMCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSB4nbq QaodjEGgFijOTsUY7e1hSjAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTA1Ny5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qWcwDQYJKoZIhvcNAQELBQADggEBABBQCrLB0AQtJSrUa3/yhIYXQytHDfLgJ8Jl pTMKYFZiM3wUrJ391V+5jrvfed9vv++aw/Ona/XHB7C9RhD8kFRZmYSLsM30UgSw XQw0cp0bIBjirkJnHgi49F35leokBgYPO2bM+7/XzW9XB1Cbh/I2zO90Gi+YWbXS ul8tSSskaO49o+RrViYztYGgU3eAb/4OxdcsCS7wxLG1z6u0tmcjkZob4Vujc9n/ MrOG8dd+GXZyqBYFMbyMhFgLkaP2bKgr+F9iJzQwcl6wIQlC0+2psZt1Nm1dzbeg KsX1I5lggwueKuRBwRxXA8LPM/AcWXvUVs650CF2KQBBXVNzEWQ= -----END CERTIFICATE-----Generated at Sat Mar 28 11:44:01 2026 by rpki-client