$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145066.roa File: AS145066.roa (raw, json) Hash identifier: vDiKkjPuHGgiGxebqwSwHjFRlKMBU6CVlizQm0lx6zE= Subject key identifier: 90:8F:E4:5D:93:6A:50:28:FA:C8:B0:88:0F:E9:C3:46:06:0E:00:6D Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 69D530AEBEDC50EF45CE30EB05F67B83BD21CEC6 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145066.roa Signing time: Wed 04 Mar 2026 06:19:40 +0000 ROA not before: Wed 04 Mar 2026 06:14:40 +0000 ROA not after: Wed 03 Mar 2027 06:19:40 +0000 asID: 145066 IP address blocks: 240a:a970::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:d5:30:ae:be:dc:50:ef:45:ce:30:eb:05:f6:7b:83:bd:21:ce:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:14:40 2026 GMT Not After : Mar 3 06:19:40 2027 GMT Subject: CN=908FE45D936A5028FAC8B0880FE9C346060E006D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:fc:34:5f:05:00:b3:39:b2:98:50:1e:6e:f7: 9a:5f:2e:9f:ea:d7:70:10:16:4a:9d:71:8f:3e:f9: 0c:f3:85:43:ab:6a:a8:18:d9:a6:7a:b6:41:bb:b3: 31:a8:33:da:47:7e:ed:47:44:8f:7f:9d:4e:e4:47: 7a:76:87:27:ad:8e:2a:5d:da:0b:c8:1e:80:d2:b2: f8:75:88:e1:83:a2:ae:58:bc:ca:be:87:e4:44:5c: 90:29:72:1f:e7:9b:40:06:31:16:8a:15:aa:19:8a: 8f:48:22:ff:79:6e:dc:55:d7:7b:2e:b3:94:7f:3e: 58:bc:1d:fd:5c:37:08:38:25:19:ee:e0:84:b9:07: 3d:25:9e:4c:23:0c:fa:00:a1:90:8f:3f:66:ad:7b: a4:bd:29:ef:a7:84:b0:12:a1:53:14:f6:44:02:19: b5:67:2f:cf:83:7e:12:0f:bc:30:39:c3:1b:a0:6b: 40:90:a3:df:bc:bc:0b:24:14:10:96:8b:f8:b0:36: 33:2c:ef:fb:f3:58:9d:f7:55:17:70:a1:02:90:fb: ac:c5:3e:24:46:e4:12:d2:ba:2e:16:a5:bb:26:85: c6:03:72:0a:ba:09:06:91:f0:2d:b5:84:2f:88:c4: d6:cb:0c:61:80:e3:4c:ea:2d:e5:88:0d:77:54:ab: 8a:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:8F:E4:5D:93:6A:50:28:FA:C8:B0:88:0F:E9:C3:46:06:0E:00:6D X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145066.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a970::/32 Signature Algorithm: sha256WithRSAEncryption 85:d5:f7:80:76:e7:ce:4c:13:a8:e6:7c:4b:c5:02:58:2e:24: 9c:7a:a8:aa:b8:e4:20:39:46:21:5e:93:48:c5:46:26:07:db: e2:63:28:2f:af:8b:07:08:28:e6:b9:5e:bb:47:29:da:9d:7a: 5f:89:92:5e:ac:36:29:fe:83:10:d0:ad:f1:17:aa:95:e7:e6: 58:01:25:52:21:9d:13:e7:cb:95:ee:1c:2e:6e:5e:78:73:a1: 51:69:b8:09:31:92:f9:35:33:30:44:c3:93:e3:06:41:67:d4: 06:f7:92:72:c5:6f:48:f6:97:8b:4c:4a:ca:03:9f:63:1b:21: 5e:d6:38:76:b2:de:73:3b:ec:b0:36:0a:1c:8f:aa:cc:77:cc: f9:3f:47:81:45:fe:c7:50:f1:79:a9:40:82:93:39:b8:0e:7d: 38:c8:dc:d9:a4:0f:7a:cf:44:31:ea:75:ab:46:be:48:9b:e5: 93:82:5d:f6:75:88:20:1d:f6:e6:b9:57:8a:a0:2e:46:d3:a5: cc:30:e3:4e:47:df:40:bb:fe:66:4f:60:3d:b6:01:8c:64:e4: 8d:6a:1d:75:d6:c1:e5:86:98:ee:3a:ce:74:65:4c:21:ee:31: 97:73:9f:03:01:e1:07:6f:c6:6e:fe:a1:6f:bf:fa:4b:43:44: 14:79:aa:52 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUadUwrr7cUO9FzjDrBfZ7g70hzsYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTQ0MFoX DTI3MDMwMzA2MTk0MFowMzExMC8GA1UEAxMoOTA4RkU0NUQ5MzZBNTAyOEZBQzhC MDg4MEZFOUMzNDYwNjBFMDA2RDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANn8NF8FALM5sphQHm73ml8un+rXcBAWSp1xjz75DPOFQ6tqqBjZpnq2Qbuz Magz2kd+7UdEj3+dTuRHenaHJ62OKl3aC8gegNKy+HWI4YOirli8yr6H5ERckCly H+ebQAYxFooVqhmKj0gi/3lu3FXXey6zlH8+WLwd/Vw3CDglGe7ghLkHPSWeTCMM +gChkI8/Zq17pL0p76eEsBKhUxT2RAIZtWcvz4N+Eg+8MDnDG6BrQJCj37y8CyQU EJaL+LA2Myzv+/NYnfdVF3ChApD7rMU+JEbkEtK6LhaluyaFxgNyCroJBpHwLbWE L4jE1ssMYYDjTOot5YgNd1Srin8CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSQj+Rd k2pQKPrIsIgP6cNGBg4AbTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTA2Ni5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qXAwDQYJKoZIhvcNAQELBQADggEBAIXV94B2585ME6jmfEvFAlguJJx6qKq45CA5 RiFek0jFRiYH2+JjKC+viwcIKOa5XrtHKdqdel+Jkl6sNin+gxDQrfEXqpXn5lgB JVIhnRPny5XuHC5uXnhzoVFpuAkxkvk1MzBEw5PjBkFn1Ab3knLFb0j2l4tMSsoD n2MbIV7WOHay3nM77LA2ChyPqsx3zPk/R4FF/sdQ8XmpQIKTObgOfTjI3NmkD3rP RDHqdatGvkib5ZOCXfZ1iCAd9ua5V4qgLkbTpcww405H30C7/mZPYD22AYxk5I1q HXXWweWGmO46znRlTCHuMZdznwMB4Qdvxm7+oW+/+ktDRBR5qlI= -----END CERTIFICATE-----Generated at Sat Mar 28 11:46:10 2026 by rpki-client