$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145082.roa File: AS145082.roa (raw, json) Hash identifier: agtygapets+Hi55BP1wGrKSM0eprsCK2FaeeoloY2QE= Subject key identifier: D4:13:1C:50:DF:55:E2:19:AE:3B:55:81:8C:7F:23:41:30:80:E1:B2 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 09AFFEB35601E2F1E5DA0BA923EFC83A23420CA0 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145082.roa Signing time: Wed 04 Mar 2026 06:22:16 +0000 ROA not before: Wed 04 Mar 2026 06:17:16 +0000 ROA not after: Wed 03 Mar 2027 06:22:16 +0000 asID: 145082 IP address blocks: 240a:a980::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:af:fe:b3:56:01:e2:f1:e5:da:0b:a9:23:ef:c8:3a:23:42:0c:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:17:16 2026 GMT Not After : Mar 3 06:22:16 2027 GMT Subject: CN=D4131C50DF55E219AE3B55818C7F23413080E1B2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:9b:d1:80:3c:40:6e:fc:6f:b0:9c:45:de:16: 2c:c2:6f:49:52:5c:7c:c4:83:7c:63:4c:cf:18:01: 40:e1:f6:60:65:fb:77:05:92:e6:5a:2b:c7:5e:60: 92:44:bb:44:fa:09:11:1a:79:76:10:a9:35:bb:65: 88:5b:2b:90:b2:2b:72:f5:ad:51:9e:1f:d4:20:56: e0:61:4c:b5:5e:d2:54:99:84:af:40:90:39:f5:99: 12:a5:6d:82:c7:87:8f:06:62:d4:6d:30:72:a7:8b: be:29:90:52:36:ed:ae:ba:88:9d:ff:f0:83:66:e4: 6f:00:6b:e8:a2:7a:c6:5c:97:32:8d:fd:49:bb:85: f0:3a:86:8e:c2:4b:78:46:fc:7d:0d:36:56:74:df: d3:f6:69:74:ab:89:4b:b3:c9:33:8b:4a:29:b1:28: 43:0f:a5:a0:fa:69:e4:3b:57:bb:37:49:73:53:c3: e5:e7:ce:7a:44:57:b2:7f:94:2f:87:1e:13:91:1c: 56:f7:de:03:76:86:f1:e7:1e:88:27:17:09:df:47: e7:3c:b6:87:bc:d2:6d:1f:ee:4c:a2:3c:cd:a9:03: 63:e0:a4:1d:2e:46:be:ea:45:c4:8b:29:13:b8:b8: 4e:1e:e6:1d:1f:fa:c0:04:92:58:3f:00:a3:18:16: 84:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:13:1C:50:DF:55:E2:19:AE:3B:55:81:8C:7F:23:41:30:80:E1:B2 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145082.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a980::/32 Signature Algorithm: sha256WithRSAEncryption bb:a8:c0:a9:b0:5e:d4:d8:f4:54:3a:17:e3:47:15:d9:28:3f: 7d:7e:f8:be:0c:3d:ef:42:6d:1c:c7:4d:1e:f6:6d:a7:c7:f2: f8:fd:cc:32:51:98:43:38:03:3e:33:ad:e1:11:62:cc:b7:a9: 94:0a:2f:1e:33:17:20:a5:0c:ef:18:59:0f:62:e7:07:48:8d: 14:ce:04:68:c9:e5:3a:69:fd:b5:6e:c3:6a:47:b9:f6:b0:00: 88:c7:1a:e5:69:9b:7e:c2:4b:a3:82:e6:a9:70:7c:dd:f1:e0: 66:e4:a8:9e:1a:58:48:2d:63:84:2b:a1:3c:40:2f:b9:04:f3: a4:53:24:d0:b8:27:c6:4b:de:b7:29:50:24:5f:e4:35:78:fb: 9c:96:bf:0b:a0:f4:19:d1:02:0b:c4:bb:42:14:9e:4a:79:3a: b5:35:d5:8a:ce:d5:71:7b:d4:8a:09:da:62:e2:22:73:b0:5e: 6b:de:bf:1d:6a:ec:0b:3b:1e:e5:5e:bc:ae:46:76:1b:ca:14: 6c:8e:51:c8:4e:f8:3d:df:8c:7e:ca:c8:52:09:76:78:6b:ed: c9:68:00:ef:e2:54:14:7d:e3:5b:2e:1a:d0:ca:05:25:d0:e5: 24:f9:e8:7b:c2:14:c2:8d:e4:97:cb:0b:22:b3:df:0f:60:64: f5:46:64:78 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUCa/+s1YB4vHl2gupI+/IOiNCDKAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTcxNloX DTI3MDMwMzA2MjIxNlowMzExMC8GA1UEAxMoRDQxMzFDNTBERjU1RTIxOUFFM0I1 NTgxOEM3RjIzNDEzMDgwRTFCMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKab0YA8QG78b7CcRd4WLMJvSVJcfMSDfGNMzxgBQOH2YGX7dwWS5lorx15g kkS7RPoJERp5dhCpNbtliFsrkLIrcvWtUZ4f1CBW4GFMtV7SVJmEr0CQOfWZEqVt gseHjwZi1G0wcqeLvimQUjbtrrqInf/wg2bkbwBr6KJ6xlyXMo39SbuF8DqGjsJL eEb8fQ02VnTf0/ZpdKuJS7PJM4tKKbEoQw+loPpp5DtXuzdJc1PD5efOekRXsn+U L4ceE5EcVvfeA3aG8eceiCcXCd9H5zy2h7zSbR/uTKI8zakDY+CkHS5GvupFxIsp E7i4Th7mHR/6wASSWD8AoxgWhGMCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBTUExxQ 31XiGa47VYGMfyNBMIDhsjAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTA4Mi5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qYAwDQYJKoZIhvcNAQELBQADggEBALuowKmwXtTY9FQ6F+NHFdkoP31++L4MPe9C bRzHTR72bafH8vj9zDJRmEM4Az4zreERYsy3qZQKLx4zFyClDO8YWQ9i5wdIjRTO BGjJ5Tpp/bVuw2pHufawAIjHGuVpm37CS6OC5qlwfN3x4GbkqJ4aWEgtY4QroTxA L7kE86RTJNC4J8ZL3rcpUCRf5DV4+5yWvwug9BnRAgvEu0IUnkp5OrU11YrO1XF7 1IoJ2mLiInOwXmvevx1q7As7HuVevK5GdhvKFGyOUchO+D3fjH7KyFIJdnhr7clo AO/iVBR941suGtDKBSXQ5ST56HvCFMKN5JfLCyKz3w9gZPVGZHg= -----END CERTIFICATE-----Generated at Sat Mar 28 11:43:09 2026 by rpki-client