$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145095.roa File: AS145095.roa (raw, json) Hash identifier: vBjCB+ZBub2J8om1HaOyO02nvsure08VlYQBBEunlv4= Subject key identifier: 41:D0:C7:20:C3:CA:81:3E:38:03:7F:6D:7E:08:83:BB:16:F5:AE:C1 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 4496376F314F9253C6936442D64C7C93D6B79A6F Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145095.roa Signing time: Wed 04 Mar 2026 06:20:00 +0000 ROA not before: Wed 04 Mar 2026 06:15:00 +0000 ROA not after: Wed 03 Mar 2027 06:20:00 +0000 asID: 145095 IP address blocks: 240a:a98d::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:96:37:6f:31:4f:92:53:c6:93:64:42:d6:4c:7c:93:d6:b7:9a:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:15:00 2026 GMT Not After : Mar 3 06:20:00 2027 GMT Subject: CN=41D0C720C3CA813E38037F6D7E0883BB16F5AEC1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:06:01:da:68:2d:ee:13:1d:cd:1a:19:c4:33: d0:14:5e:cc:3a:9e:b4:ce:26:80:e7:a1:31:9c:62: fe:99:63:44:d9:7e:7e:3b:d6:d4:aa:4d:77:43:a2: b9:9c:83:c5:1b:68:22:cf:a2:c0:3c:4b:96:57:bc: 82:c6:96:4c:47:da:b6:33:4b:98:0b:3d:0b:bb:74: e4:8d:dc:70:b4:d6:74:cf:57:3e:e5:cf:25:bc:c0: 97:8b:56:67:d8:48:21:71:62:66:c3:f7:84:af:10: 30:69:96:90:44:9a:e4:67:71:f5:4a:34:19:a9:ec: e2:f9:37:7c:41:e9:3a:10:35:f5:e4:23:21:95:49: cc:19:a9:58:0d:e4:37:42:d7:27:8b:33:c8:35:8b: 21:d3:c8:26:9a:d9:fc:0e:57:00:1b:60:09:ae:88: 9b:e5:74:4a:f8:62:29:19:c2:06:a9:26:19:2f:26: f7:a3:23:27:e6:36:b7:f1:fd:0b:2e:68:0f:20:84: 64:d1:dc:63:83:eb:e3:3a:a7:be:7c:71:fe:8d:b4: d8:83:66:d5:0f:98:f3:d1:6f:33:92:3a:c1:3d:f5: 04:26:a0:f1:99:d9:0b:37:4a:88:07:9f:a2:37:7b: 90:04:a1:7a:25:45:29:c0:6d:c3:6d:2d:c8:d2:bc: b7:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:D0:C7:20:C3:CA:81:3E:38:03:7F:6D:7E:08:83:BB:16:F5:AE:C1 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145095.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a98d::/32 Signature Algorithm: sha256WithRSAEncryption 82:a1:01:e5:09:b0:8d:87:81:f3:35:54:64:03:9a:95:cc:0f: 81:e3:36:26:af:c7:df:9f:90:e1:94:2e:8c:1e:17:b4:ba:14: cb:16:5a:66:5a:ae:ff:e5:bf:35:ca:80:da:fc:c0:29:f1:b9: f4:44:76:8c:9a:87:ce:e7:2d:07:f4:c7:ac:92:56:07:63:74: 41:68:57:d3:20:e5:a5:03:b6:eb:bb:81:3c:03:ae:92:12:a7: 9e:41:3c:04:6d:2e:fb:18:62:8e:51:62:b7:80:4a:bf:ac:43: 59:f3:a7:da:e6:05:7a:38:d5:85:1c:a9:65:38:b0:e7:2d:18: fc:b4:26:ef:1e:63:43:7d:00:47:46:28:f5:d6:5e:d2:59:24: 97:35:27:e1:27:fa:df:1a:32:f4:82:83:d3:d3:22:c7:fe:03: b9:d7:58:c7:6a:1a:cd:bb:d0:a0:9e:c4:61:7c:86:5b:02:b1: 78:4d:65:c6:5b:81:aa:46:d2:08:71:4f:a9:e1:5c:46:7a:2e: f4:b3:82:fa:be:ae:41:0a:eb:42:33:dc:d1:61:0c:f7:e6:45: 82:31:26:65:00:7d:d4:8f:09:8f:78:7c:3e:00:7e:cf:c2:44: 43:cc:1a:b0:01:cc:98:e2:20:b8:26:4c:01:b7:d1:6b:aa:6b: 85:08:13:d5 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIURJY3bzFPklPGk2RC1kx8k9a3mm8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTUwMFoX DTI3MDMwMzA2MjAwMFowMzExMC8GA1UEAxMoNDFEMEM3MjBDM0NBODEzRTM4MDM3 RjZEN0UwODgzQkIxNkY1QUVDMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL4GAdpoLe4THc0aGcQz0BRezDqetM4mgOehMZxi/pljRNl+fjvW1KpNd0Oi uZyDxRtoIs+iwDxLlle8gsaWTEfatjNLmAs9C7t05I3ccLTWdM9XPuXPJbzAl4tW Z9hIIXFiZsP3hK8QMGmWkESa5Gdx9Uo0Gans4vk3fEHpOhA19eQjIZVJzBmpWA3k N0LXJ4szyDWLIdPIJprZ/A5XABtgCa6Im+V0SvhiKRnCBqkmGS8m96MjJ+Y2t/H9 Cy5oDyCEZNHcY4Pr4zqnvnxx/o202INm1Q+Y89FvM5I6wT31BCag8ZnZCzdKiAef ojd7kASheiVFKcBtw20tyNK8tzMCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRB0Mcg w8qBPjgDf21+CIO7FvWuwTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTA5NS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qY0wDQYJKoZIhvcNAQELBQADggEBAIKhAeUJsI2HgfM1VGQDmpXMD4HjNiavx9+f kOGULoweF7S6FMsWWmZarv/lvzXKgNr8wCnxufREdoyah87nLQf0x6ySVgdjdEFo V9Mg5aUDtuu7gTwDrpISp55BPARtLvsYYo5RYreASr+sQ1nzp9rmBXo41YUcqWU4 sOctGPy0Ju8eY0N9AEdGKPXWXtJZJJc1J+En+t8aMvSCg9PTIsf+A7nXWMdqGs27 0KCexGF8hlsCsXhNZcZbgapG0ghxT6nhXEZ6LvSzgvq+rkEK60Iz3NFhDPfmRYIx JmUAfdSPCY94fD4Afs/CREPMGrABzJjiILgmTAG30Wuqa4UIE9U= -----END CERTIFICATE-----Generated at Sat Mar 28 11:42:31 2026 by rpki-client