$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145067.roa File: AS145067.roa (raw, json) Hash identifier: ZwKHrqdJ9zQTPFYqPsqO2QyBBPUa8ipGeQq7bRAFCD8= Subject key identifier: 33:F9:D2:43:ED:15:BB:F0:69:2C:5C:F0:AE:8F:CB:D8:FE:E0:0E:F4 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 5D991011D83A89F4E648FBEF160E5C2C90999EC9 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145067.roa Signing time: Wed 04 Mar 2026 06:19:58 +0000 ROA not before: Wed 04 Mar 2026 06:14:58 +0000 ROA not after: Wed 03 Mar 2027 06:19:58 +0000 asID: 145067 IP address blocks: 240a:a971::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:99:10:11:d8:3a:89:f4:e6:48:fb:ef:16:0e:5c:2c:90:99:9e:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:14:58 2026 GMT Not After : Mar 3 06:19:58 2027 GMT Subject: CN=33F9D243ED15BBF0692C5CF0AE8FCBD8FEE00EF4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:c6:3b:9a:0d:fc:e8:cc:85:0b:d0:94:0e:91: ef:78:26:f1:23:f1:be:03:55:46:88:5d:0d:dd:93: 41:6c:4e:88:1c:bf:ae:26:53:f2:95:10:7c:32:ac: 84:83:f2:b2:26:75:83:6a:a9:d5:db:92:f7:40:70: 50:8c:d8:06:b4:44:2b:3e:c0:55:91:9c:a1:65:61: b0:a2:fe:12:d1:2e:d4:88:aa:84:1c:cf:d1:37:45: 4f:94:41:ce:3a:b2:5d:e7:15:89:52:02:4b:60:f9: f2:e4:39:6a:95:5f:fb:5e:a2:04:52:d2:c5:09:3f: 9d:62:5d:d4:75:1d:39:2f:73:60:ed:93:99:3f:9f: 09:9a:f3:6d:5d:5e:fe:85:b5:b4:e6:7b:31:77:25: ca:bb:fe:43:60:5c:a5:3d:90:6c:bd:0c:c8:21:16: d2:6a:9c:d5:40:af:27:fd:bc:f6:f7:5f:43:c4:cd: 7e:98:e6:0f:46:09:9f:9d:15:0a:2c:73:94:23:e4: 92:b2:6d:6c:59:5b:a0:74:a9:18:75:bb:0e:55:e8: 61:a1:9e:31:a0:3f:d6:8d:d5:35:12:03:27:0a:a3: dc:14:1a:12:9c:50:74:40:2c:13:52:f2:f9:d8:81: a7:4a:80:91:3c:cd:65:c2:88:67:d5:34:d3:20:92: 20:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:F9:D2:43:ED:15:BB:F0:69:2C:5C:F0:AE:8F:CB:D8:FE:E0:0E:F4 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145067.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a971::/32 Signature Algorithm: sha256WithRSAEncryption 55:63:01:c8:c1:d3:7c:32:b7:27:8c:9e:53:89:54:46:c9:27: aa:bd:fb:10:a8:3b:2f:06:44:9c:b7:51:88:13:ed:a2:39:56: fe:12:77:cb:5e:ee:da:af:59:aa:b0:22:d5:50:e9:ed:a9:80: 10:8d:a4:56:e2:45:f2:df:3e:49:7c:b0:a2:bb:82:ba:c4:62: d1:43:8d:6f:16:5d:c3:0b:9c:c7:00:5e:f8:23:0c:38:a0:74: b2:f0:9c:d3:05:08:03:60:72:c6:34:4a:3c:b7:bc:4b:b3:22: 67:32:10:ff:aa:30:0d:b6:59:56:41:d6:4f:fb:e4:0b:95:ee: 7f:4f:6e:55:f1:b0:34:40:ed:23:44:a9:3d:86:a8:73:c6:0f: 04:62:35:5e:c2:fd:ee:5d:c0:1e:ea:3c:f5:f7:ae:72:05:55: d6:85:2c:da:1d:f9:e2:4a:9e:35:12:6d:f7:ca:8b:59:27:ff: 1f:e1:ff:5f:e2:0b:56:91:70:4a:77:a9:84:78:69:58:38:20: 36:53:58:35:b7:3b:fc:9f:25:6f:6b:a5:10:a9:4f:dc:fa:d4: bd:02:89:ab:a5:2d:f3:9d:fc:2a:c3:eb:96:a1:c8:bf:35:3f: 1a:98:87:82:df:5b:70:2c:d2:b9:2d:01:d5:e7:b7:64:33:6b: 4b:41:25:9d -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUXZkQEdg6ifTmSPvvFg5cLJCZnskwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTQ1OFoX DTI3MDMwMzA2MTk1OFowMzExMC8GA1UEAxMoMzNGOUQyNDNFRDE1QkJGMDY5MkM1 Q0YwQUU4RkNCRDhGRUUwMEVGNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANbGO5oN/OjMhQvQlA6R73gm8SPxvgNVRohdDd2TQWxOiBy/riZT8pUQfDKs hIPysiZ1g2qp1duS90BwUIzYBrREKz7AVZGcoWVhsKL+EtEu1IiqhBzP0TdFT5RB zjqyXecViVICS2D58uQ5apVf+16iBFLSxQk/nWJd1HUdOS9zYO2TmT+fCZrzbV1e /oW1tOZ7MXclyrv+Q2BcpT2QbL0MyCEW0mqc1UCvJ/289vdfQ8TNfpjmD0YJn50V CixzlCPkkrJtbFlboHSpGHW7DlXoYaGeMaA/1o3VNRIDJwqj3BQaEpxQdEAsE1Ly +diBp0qAkTzNZcKIZ9U00yCSIOcCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQz+dJD 7RW78GksXPCuj8vY/uAO9DAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTA2Ny5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qXEwDQYJKoZIhvcNAQELBQADggEBAFVjAcjB03wytyeMnlOJVEbJJ6q9+xCoOy8G RJy3UYgT7aI5Vv4Sd8te7tqvWaqwItVQ6e2pgBCNpFbiRfLfPkl8sKK7grrEYtFD jW8WXcMLnMcAXvgjDDigdLLwnNMFCANgcsY0Sjy3vEuzImcyEP+qMA22WVZB1k/7 5AuV7n9PblXxsDRA7SNEqT2GqHPGDwRiNV7C/e5dwB7qPPX3rnIFVdaFLNod+eJK njUSbffKi1kn/x/h/1/iC1aRcEp3qYR4aVg4IDZTWDW3O/yfJW9rpRCpT9z61L0C iaulLfOd/CrD65ahyL81PxqYh4LfW3As0rktAdXnt2Qza0tBJZ0= -----END CERTIFICATE-----Generated at Sat Mar 28 13:18:22 2026 by rpki-client