$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145078.roa File: AS145078.roa (raw, json) Hash identifier: 69k9vF370j3Wc953vVSTwXQhttglX1+34F6Fl/dRT2w= Subject key identifier: 90:A6:14:87:B8:8B:3A:98:72:19:FC:41:74:40:EF:BC:6D:2B:FD:4C Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 6F608B6FEA3DBA428A5D19160C8A3FDDDD0F59F4 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145078.roa Signing time: Wed 04 Mar 2026 06:21:31 +0000 ROA not before: Wed 04 Mar 2026 06:16:31 +0000 ROA not after: Wed 03 Mar 2027 06:21:31 +0000 asID: 145078 IP address blocks: 240a:a97c::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:60:8b:6f:ea:3d:ba:42:8a:5d:19:16:0c:8a:3f:dd:dd:0f:59:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:16:31 2026 GMT Not After : Mar 3 06:21:31 2027 GMT Subject: CN=90A61487B88B3A987219FC417440EFBC6D2BFD4C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:00:2c:45:b4:f8:a2:b3:b0:2f:e9:37:18:ca: 71:60:c5:a1:de:5e:b9:64:f3:ea:22:dd:13:fc:6d: 3c:8f:e2:73:77:fb:09:0f:50:09:a3:07:8f:08:0b: c9:20:51:8d:1a:3d:5f:49:66:9b:fe:ab:97:af:48: 9b:a3:ef:3f:d1:d4:f6:d6:10:d1:23:b8:75:68:b4: 6b:70:e0:e0:98:a7:29:9b:86:e9:1f:ea:b2:35:90: b2:dc:a7:30:6d:f1:d6:12:46:f8:4f:8f:87:1b:6b: 7c:a4:c2:54:e7:66:28:c4:c6:2b:9f:dc:72:48:9a: d7:5d:74:bf:d5:db:c7:68:8c:42:96:33:c9:fb:ed: 1e:bc:5b:28:05:31:75:ca:4e:78:1b:88:d1:94:17: 1a:04:22:2d:07:fc:88:87:25:d4:0d:63:d7:1c:51: 65:c9:d3:7e:64:35:d3:fe:36:43:16:f4:d0:e7:23: ea:3a:a1:54:9e:b7:cd:4f:df:bb:6b:cc:8f:ed:e1: dd:3e:f5:3f:63:d8:25:58:36:65:12:18:f9:8d:0c: 49:02:96:9a:7b:39:c0:5b:1f:7a:c1:72:37:15:36: 07:67:23:fa:60:fe:d1:56:f3:f5:0b:f2:33:23:54: 5c:7f:43:8a:7d:67:cb:03:ed:14:56:a9:97:05:6a: ae:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:A6:14:87:B8:8B:3A:98:72:19:FC:41:74:40:EF:BC:6D:2B:FD:4C X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145078.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a97c::/32 Signature Algorithm: sha256WithRSAEncryption 4d:c0:d2:9c:39:b5:cd:d3:a6:91:48:3a:bd:4c:6d:f9:07:1f: 0c:9d:e7:4e:29:47:c8:bf:96:7e:7b:4c:14:d0:08:da:2d:f6: f8:58:49:2c:be:46:81:ca:9b:7d:95:77:f5:e2:4f:dd:82:fb: 17:14:bd:0d:18:04:59:fe:57:68:58:b0:be:e7:1f:ad:45:1f: 97:88:fc:9c:8e:02:97:cb:8c:03:91:94:9a:83:eb:4b:35:72: e7:b1:88:ac:f6:d3:2d:95:dc:4d:7a:70:f5:d8:d3:88:82:d9: 5a:0e:23:84:97:cb:57:ab:c1:f2:95:a1:b6:e5:e1:9f:8f:03: b8:76:29:e4:9b:4f:86:af:94:bd:6e:5d:7e:0f:60:5a:b5:51: f8:85:13:e7:e9:2f:9e:64:b1:42:8b:09:70:3d:14:c9:0e:6a: f5:e2:b7:48:87:40:db:ef:53:47:96:b9:d7:28:d3:e5:91:5b: b8:38:cb:82:65:53:e9:49:00:36:bc:f4:6c:67:af:16:2f:6f: 0c:8e:e1:b3:46:49:14:7e:81:f3:06:c2:1a:f4:85:a3:6d:31: 13:b2:f3:05:df:93:a5:a0:ea:b0:ed:65:be:2a:f3:8b:3e:14: 3c:ea:f9:40:90:85:8b:61:ba:93:88:65:2c:44:03:96:b3:d1: df:6e:5a:8c -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUb2CLb+o9ukKKXRkWDIo/3d0PWfQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTYzMVoX DTI3MDMwMzA2MjEzMVowMzExMC8GA1UEAxMoOTBBNjE0ODdCODhCM0E5ODcyMTlG QzQxNzQ0MEVGQkM2RDJCRkQ0QzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOoALEW0+KKzsC/pNxjKcWDFod5euWTz6iLdE/xtPI/ic3f7CQ9QCaMHjwgL ySBRjRo9X0lmm/6rl69Im6PvP9HU9tYQ0SO4dWi0a3Dg4JinKZuG6R/qsjWQstyn MG3x1hJG+E+PhxtrfKTCVOdmKMTGK5/cckia1110v9Xbx2iMQpYzyfvtHrxbKAUx dcpOeBuI0ZQXGgQiLQf8iIcl1A1j1xxRZcnTfmQ10/42Qxb00Ocj6jqhVJ63zU/f u2vMj+3h3T71P2PYJVg2ZRIY+Y0MSQKWmns5wFsfesFyNxU2B2cj+mD+0Vbz9Qvy MyNUXH9Din1nywPtFFaplwVqrhkCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSQphSH uIs6mHIZ/EF0QO+8bSv9TDAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTA3OC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qXwwDQYJKoZIhvcNAQELBQADggEBAE3A0pw5tc3TppFIOr1MbfkHHwyd504pR8i/ ln57TBTQCNot9vhYSSy+RoHKm32Vd/XiT92C+xcUvQ0YBFn+V2hYsL7nH61FH5eI /JyOApfLjAORlJqD60s1cuexiKz20y2V3E16cPXY04iC2VoOI4SXy1erwfKVobbl 4Z+PA7h2KeSbT4avlL1uXX4PYFq1UfiFE+fpL55ksUKLCXA9FMkOavXit0iHQNvv U0eWudco0+WRW7g4y4JlU+lJADa89GxnrxYvbwyO4bNGSRR+gfMGwhr0haNtMROy 8wXfk6Wg6rDtZb4q84s+FDzq+UCQhYthupOIZSxEA5az0d9uWow= -----END CERTIFICATE-----Generated at Sat Mar 28 11:50:01 2026 by rpki-client