$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145083.roa File: AS145083.roa (raw, json) Hash identifier: PhBJQJYR2w5dJN0Rs4cD4Ry0AizG5Bg3G/3jpDcYSzk= Subject key identifier: 3A:93:43:B9:B7:D0:6D:29:45:50:11:92:B3:22:12:E5:BA:4F:DA:03 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 5C0F1063E7468A2C2D6170CB324ACBA0DB324367 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145083.roa Signing time: Wed 04 Mar 2026 06:20:27 +0000 ROA not before: Wed 04 Mar 2026 06:15:27 +0000 ROA not after: Wed 03 Mar 2027 06:20:27 +0000 asID: 145083 IP address blocks: 240a:a981::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:0f:10:63:e7:46:8a:2c:2d:61:70:cb:32:4a:cb:a0:db:32:43:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:15:27 2026 GMT Not After : Mar 3 06:20:27 2027 GMT Subject: CN=3A9343B9B7D06D2945501192B32212E5BA4FDA03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:00:fd:cf:29:c4:34:5f:7d:5f:10:08:b1:d2: 33:68:0d:38:df:23:41:1e:21:09:23:95:f7:0e:ba: 07:56:07:82:2d:db:53:f5:c0:c6:38:d9:ec:78:3e: 3c:d1:07:6a:85:7f:90:2a:9e:c1:01:e5:e4:34:2c: 2b:f6:d9:c9:8d:35:5c:0c:4e:26:30:fe:8b:9b:64: 27:f5:63:36:f5:5c:e2:49:ee:ee:32:96:cb:5e:44: de:6c:66:eb:11:57:2a:35:91:24:9b:76:fd:7e:ff: 97:a8:be:a5:fb:09:cd:cd:c1:5a:ec:be:ed:b8:86: 0c:e7:a7:16:ad:62:51:e1:3d:86:7a:60:a0:c7:63: 27:dd:fb:e5:b9:f5:30:a5:f2:db:d9:84:f8:de:6e: 82:cb:1d:d4:87:b7:e1:35:09:ae:13:e8:b7:ef:31: a5:f8:c5:4d:6b:f1:28:87:ea:ad:c1:33:ea:8b:60: 4d:a7:c8:3b:2b:f2:ce:3b:ff:9a:18:33:5b:a0:8e: 3f:5f:35:8e:68:5d:38:92:d1:d6:65:8d:92:c0:38: 42:df:a3:91:9a:8d:00:e1:c9:74:cc:a2:1a:aa:c6: 42:41:f3:45:86:78:15:7d:2c:13:b1:5d:2b:cd:8c: 02:e0:05:e9:17:8e:c9:09:ee:00:79:cf:b3:98:47: 47:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:93:43:B9:B7:D0:6D:29:45:50:11:92:B3:22:12:E5:BA:4F:DA:03 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145083.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a981::/32 Signature Algorithm: sha256WithRSAEncryption 53:76:ff:02:bd:2f:e4:0f:48:c1:47:6c:4d:74:5d:7f:b5:c0: de:dc:2d:03:93:3b:e0:cf:a0:18:35:2e:33:17:3b:ef:f2:51: ca:39:b9:9e:5e:b8:cc:e7:27:fc:27:cf:d0:8a:01:62:2f:a6: d7:0d:01:27:b9:3d:03:71:4e:5e:16:3c:68:76:6f:b9:dc:11: d3:50:66:47:91:2c:0e:63:0c:a7:4f:84:f5:57:9d:cc:c1:80: 6e:f0:49:0f:fc:a4:6d:a0:07:81:aa:51:8d:91:c3:41:fa:b9: 1c:b6:81:40:74:68:14:1a:d1:1f:5d:34:ae:a4:21:69:d3:0d: b6:68:e1:cc:2e:c2:bc:be:c8:25:1b:40:c4:f6:a0:b0:53:61: ff:2f:db:c6:21:91:e3:f2:fa:68:13:a6:75:81:66:d8:f4:15: 57:26:09:cb:83:8b:57:74:db:f3:fe:70:06:15:e5:47:29:30: a5:f3:4d:a7:65:38:89:f5:c3:42:c1:f1:09:47:54:09:ec:1d: 01:b0:f2:34:b0:69:e5:82:9a:0e:f3:45:ff:9c:95:4c:7d:f2: 08:4a:90:07:7f:4c:c0:9a:bc:c2:8a:e3:4d:d3:a2:3f:bc:83: 08:87:ca:96:16:ae:0f:0b:39:99:5b:5a:80:d9:6c:46:a7:88: e5:58:e4:b5 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUXA8QY+dGiiwtYXDLMkrLoNsyQ2cwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTUyN1oX DTI3MDMwMzA2MjAyN1owMzExMC8GA1UEAxMoM0E5MzQzQjlCN0QwNkQyOTQ1NTAx MTkyQjMyMjEyRTVCQTRGREEwMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALsA/c8pxDRffV8QCLHSM2gNON8jQR4hCSOV9w66B1YHgi3bU/XAxjjZ7Hg+ PNEHaoV/kCqewQHl5DQsK/bZyY01XAxOJjD+i5tkJ/VjNvVc4knu7jKWy15E3mxm 6xFXKjWRJJt2/X7/l6i+pfsJzc3BWuy+7biGDOenFq1iUeE9hnpgoMdjJ9375bn1 MKXy29mE+N5ugssd1Ie34TUJrhPot+8xpfjFTWvxKIfqrcEz6otgTafIOyvyzjv/ mhgzW6COP181jmhdOJLR1mWNksA4Qt+jkZqNAOHJdMyiGqrGQkHzRYZ4FX0sE7Fd K82MAuAF6ReOyQnuAHnPs5hHRw8CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQ6k0O5 t9BtKUVQEZKzIhLluk/aAzAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTA4My5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qYEwDQYJKoZIhvcNAQELBQADggEBAFN2/wK9L+QPSMFHbE10XX+1wN7cLQOTO+DP oBg1LjMXO+/yUco5uZ5euMznJ/wnz9CKAWIvptcNASe5PQNxTl4WPGh2b7ncEdNQ ZkeRLA5jDKdPhPVXnczBgG7wSQ/8pG2gB4GqUY2Rw0H6uRy2gUB0aBQa0R9dNK6k IWnTDbZo4cwuwry+yCUbQMT2oLBTYf8v28YhkePy+mgTpnWBZtj0FVcmCcuDi1d0 2/P+cAYV5UcpMKXzTadlOIn1w0LB8QlHVAnsHQGw8jSwaeWCmg7zRf+clUx98ghK kAd/TMCavMKK403Toj+8gwiHypYWrg8LOZlbWoDZbEaniOVY5LU= -----END CERTIFICATE-----Generated at Sat Mar 28 13:18:09 2026 by rpki-client