$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145070.roa File: AS145070.roa (raw, json) Hash identifier: 0JEzH62s7m3iySFHQ/SV/J07uEIeqSNHP/SeGtNfq8I= Subject key identifier: 3B:A8:1D:87:BA:E8:8B:98:64:E0:3F:51:E6:14:AE:A3:3F:DC:FF:7A Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 0B878F896BBA1B662445A57F228A4E7EFB3CCCB6 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145070.roa Signing time: Wed 04 Mar 2026 06:19:45 +0000 ROA not before: Wed 04 Mar 2026 06:14:45 +0000 ROA not after: Wed 03 Mar 2027 06:19:45 +0000 asID: 145070 IP address blocks: 240a:a974::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:87:8f:89:6b:ba:1b:66:24:45:a5:7f:22:8a:4e:7e:fb:3c:cc:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:14:45 2026 GMT Not After : Mar 3 06:19:45 2027 GMT Subject: CN=3BA81D87BAE88B9864E03F51E614AEA33FDCFF7A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:01:4e:b8:02:19:bf:51:2e:0c:a9:d4:0c:1e: 72:78:31:e2:d7:4c:9e:7b:69:44:b9:03:59:76:01: bd:0e:5d:89:24:eb:0c:95:6a:d1:0b:b4:a4:10:06: 90:f4:ea:9e:0a:e1:0e:26:ad:a6:d2:da:f0:a0:bb: 8b:75:7a:01:d3:83:99:b5:0b:46:86:13:7d:68:52: 9c:d2:b2:57:b5:e1:9b:f9:2b:dd:3d:5b:9a:bb:3b: f9:04:56:5a:ff:40:01:ab:9c:d2:dc:c9:be:00:24: 85:85:88:49:52:8e:b5:72:f6:28:cb:73:13:f0:4a: 9f:ac:48:c6:e9:a9:8d:f3:ed:e1:e9:4e:a2:b9:9b: 53:b8:aa:14:e9:d6:17:73:02:b3:6e:a6:59:72:67: 84:6d:aa:e2:aa:37:bb:b5:b8:f8:2d:d5:2a:cf:61: 6e:75:e3:21:77:86:63:11:ee:cc:5d:03:78:76:da: e4:b5:47:e3:99:93:3e:ec:f8:60:12:eb:e0:53:64: 18:0f:a1:5e:ff:10:e1:6f:e2:58:bc:c0:b6:a9:51: 59:80:ec:9e:54:c7:d4:df:cf:3d:f6:af:3c:2a:5c: 86:71:42:40:c3:58:3d:b9:38:2c:24:8e:69:02:27: b3:f5:61:7a:d2:60:10:a5:59:e5:1c:71:3a:82:ad: d3:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:A8:1D:87:BA:E8:8B:98:64:E0:3F:51:E6:14:AE:A3:3F:DC:FF:7A X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145070.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a974::/32 Signature Algorithm: sha256WithRSAEncryption 03:1a:ea:ee:4f:43:b5:79:18:09:2d:64:d7:6a:9b:2e:92:76: 64:94:82:11:1a:ec:1f:86:0c:dd:7a:92:07:c6:14:33:cf:5d: 55:70:e6:88:46:13:c2:78:86:4b:ef:cb:db:30:ec:84:f3:ea: b8:7b:d3:5b:a4:0d:ba:b5:97:21:db:28:12:20:69:ab:ce:18: 13:a1:7a:f3:22:16:b8:f7:fc:03:ac:e4:d1:89:70:62:de:16: 8f:6b:0c:40:fc:36:35:ef:a4:2b:7d:43:6f:c6:3f:45:41:40: ca:fb:e6:7b:9c:a2:d1:72:14:08:2c:98:74:05:36:8a:a4:d0: ec:f4:31:31:85:fd:5f:7e:c3:ce:9d:05:73:b7:55:3b:44:6d: 00:65:a0:4d:41:30:16:03:fb:66:be:f9:a2:4f:c6:3f:ae:95: 51:0a:4e:98:f0:a6:ee:24:b5:f7:06:af:af:1b:0f:b1:af:89: c9:d0:e7:33:5a:34:76:24:62:ee:6a:8f:63:5e:2b:e2:55:62: a6:95:a1:a7:22:c8:ed:ae:5a:56:75:3a:28:13:15:1b:28:15: 66:e2:57:52:6f:3e:bc:66:b6:f7:23:e4:e7:d0:72:de:09:de: 07:6e:30:5b:1e:7a:66:25:20:4f:d3:77:ae:84:99:4a:9b:ad: 45:e7:a9:fa -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUC4ePiWu6G2YkRaV/IopOfvs8zLYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTQ0NVoX DTI3MDMwMzA2MTk0NVowMzExMC8GA1UEAxMoM0JBODFEODdCQUU4OEI5ODY0RTAz RjUxRTYxNEFFQTMzRkRDRkY3QTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAN8BTrgCGb9RLgyp1Awecngx4tdMnntpRLkDWXYBvQ5diSTrDJVq0Qu0pBAG kPTqngrhDiatptLa8KC7i3V6AdODmbULRoYTfWhSnNKyV7Xhm/kr3T1bmrs7+QRW Wv9AAauc0tzJvgAkhYWISVKOtXL2KMtzE/BKn6xIxumpjfPt4elOormbU7iqFOnW F3MCs26mWXJnhG2q4qo3u7W4+C3VKs9hbnXjIXeGYxHuzF0DeHba5LVH45mTPuz4 YBLr4FNkGA+hXv8Q4W/iWLzAtqlRWYDsnlTH1N/PPfavPCpchnFCQMNYPbk4LCSO aQIns/VhetJgEKVZ5RxxOoKt0yMCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQ7qB2H uuiLmGTgP1HmFK6jP9z/ejAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTA3MC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qXQwDQYJKoZIhvcNAQELBQADggEBAAMa6u5PQ7V5GAktZNdqmy6SdmSUghEa7B+G DN16kgfGFDPPXVVw5ohGE8J4hkvvy9sw7ITz6rh701ukDbq1lyHbKBIgaavOGBOh evMiFrj3/AOs5NGJcGLeFo9rDED8NjXvpCt9Q2/GP0VBQMr75nucotFyFAgsmHQF Noqk0Oz0MTGF/V9+w86dBXO3VTtEbQBloE1BMBYD+2a++aJPxj+ulVEKTpjwpu4k tfcGr68bD7GvicnQ5zNaNHYkYu5qj2NeK+JVYqaVoaciyO2uWlZ1OigTFRsoFWbi V1JvPrxmtvcj5OfQct4J3gduMFseemYlIE/Td66EmUqbrUXnqfo= -----END CERTIFICATE-----Generated at Sat Mar 28 11:45:03 2026 by rpki-client