$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145098.roa File: AS145098.roa (raw, json) Hash identifier: cZbpUqfSXYvxaXdJX5h3MEua7nLZQpTTho3heQY3UWA= Subject key identifier: 87:27:C7:73:73:DF:80:CB:E9:A8:60:A9:D1:08:A0:68:99:39:E0:EF Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 573275DBAE39B471DAEA7D3B97BC223EAF78627A Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145098.roa Signing time: Wed 04 Mar 2026 06:19:30 +0000 ROA not before: Wed 04 Mar 2026 06:14:30 +0000 ROA not after: Wed 03 Mar 2027 06:19:30 +0000 asID: 145098 IP address blocks: 240a:a990::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:32:75:db:ae:39:b4:71:da:ea:7d:3b:97:bc:22:3e:af:78:62:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:14:30 2026 GMT Not After : Mar 3 06:19:30 2027 GMT Subject: CN=8727C77373DF80CBE9A860A9D108A0689939E0EF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:33:60:f4:bb:27:8b:02:2b:8b:8c:92:97:c7: 96:f3:4a:c2:49:f6:cf:84:89:78:41:26:96:36:80: 80:97:9e:e9:f4:fd:40:3e:1d:fe:6f:a8:95:93:2c: 4a:4c:9f:b5:8d:75:de:9b:25:35:40:86:29:b9:9f: 95:35:84:5e:6e:fc:d3:de:ca:45:41:2b:f7:76:0a: 0e:e1:1b:70:55:b8:8a:0d:bd:d5:f5:03:4f:2c:23: 98:e1:1a:e1:7a:be:58:66:e1:b6:15:d8:18:72:6a: 48:0c:2a:ea:12:66:e1:1d:1a:4e:f3:b7:ce:d7:93: 99:4f:4d:2f:23:d3:fe:e2:93:09:e9:e5:78:7f:48: 38:74:e6:3a:5d:2f:0a:c5:ea:55:02:5a:e0:a7:d5: 69:bc:b6:c5:68:e7:59:70:25:6c:70:52:2e:e8:cd: 12:e1:bb:3a:87:93:21:4b:87:ee:8f:83:a2:94:86: a4:8d:52:74:4d:b7:37:ea:47:40:34:57:f1:1c:e8: a9:e2:5b:10:78:33:3c:ea:58:8b:8e:c7:2b:09:0a: 00:ae:32:17:5b:33:c0:fe:6a:3c:f5:7b:f3:ea:d8: 65:cf:f0:ee:ca:84:17:fa:eb:60:79:0a:69:a1:5f: 21:f2:74:74:c3:82:9e:59:22:98:1b:2d:90:2f:e6: fc:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:27:C7:73:73:DF:80:CB:E9:A8:60:A9:D1:08:A0:68:99:39:E0:EF X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145098.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a990::/32 Signature Algorithm: sha256WithRSAEncryption b0:af:60:e8:4c:83:22:e4:58:6f:9b:dd:d4:42:0e:7c:a2:b5: a4:3a:d7:2d:64:c4:b4:15:b1:6b:3f:1f:d1:4d:f5:b2:60:95: 10:d4:35:65:f8:48:5e:ab:f6:9a:7d:2b:62:a7:fc:42:15:b0: fe:28:5f:aa:c7:63:7e:35:94:86:59:da:8e:9e:23:2d:39:76: cb:d7:2b:98:b6:b6:26:01:90:28:f8:9b:72:52:ad:5e:0a:bb: dd:59:26:40:b6:ba:5e:b8:15:03:b7:38:f6:9c:69:b0:4c:ff: fe:28:62:2d:a5:99:bd:7c:16:f4:f6:b1:f5:c1:eb:c5:68:6f: 5a:b0:1e:f5:e8:54:04:34:40:c4:f4:8c:3a:f2:1a:fe:17:18: 12:74:d4:9b:7f:f8:d1:96:3b:a6:37:5c:99:9e:fa:d0:30:15: 6f:53:7b:16:db:8b:38:ea:52:b7:de:13:91:3b:57:ed:c8:5e: a6:a5:ff:54:df:f0:f2:1a:48:a1:ee:8d:04:36:37:0d:b6:7c: 3c:5d:02:ba:9b:1b:c9:7f:44:be:a8:3f:b9:4e:2a:60:b8:8f: 82:f9:70:b1:49:7b:0e:47:a1:df:60:1c:b6:1b:42:1e:9e:07: 85:86:81:c5:72:a7:09:63:e8:ca:89:8b:d3:42:80:3b:82:3a: 1b:24:da:8c -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUVzJ12645tHHa6n07l7wiPq94YnowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTQzMFoX DTI3MDMwMzA2MTkzMFowMzExMC8GA1UEAxMoODcyN0M3NzM3M0RGODBDQkU5QTg2 MEE5RDEwOEEwNjg5OTM5RTBFRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALkzYPS7J4sCK4uMkpfHlvNKwkn2z4SJeEEmljaAgJee6fT9QD4d/m+olZMs SkyftY113pslNUCGKbmflTWEXm78097KRUEr93YKDuEbcFW4ig291fUDTywjmOEa 4Xq+WGbhthXYGHJqSAwq6hJm4R0aTvO3zteTmU9NLyPT/uKTCenleH9IOHTmOl0v CsXqVQJa4KfVaby2xWjnWXAlbHBSLujNEuG7OoeTIUuH7o+DopSGpI1SdE23N+pH QDRX8RzoqeJbEHgzPOpYi47HKwkKAK4yF1szwP5qPPV78+rYZc/w7sqEF/rrYHkK aaFfIfJ0dMOCnlkimBstkC/m/N0CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSHJ8dz c9+Ay+moYKnRCKBomTng7zAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTA5OC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qZAwDQYJKoZIhvcNAQELBQADggEBALCvYOhMgyLkWG+b3dRCDnyitaQ61y1kxLQV sWs/H9FN9bJglRDUNWX4SF6r9pp9K2Kn/EIVsP4oX6rHY341lIZZ2o6eIy05dsvX K5i2tiYBkCj4m3JSrV4Ku91ZJkC2ul64FQO3OPacabBM//4oYi2lmb18FvT2sfXB 68Vob1qwHvXoVAQ0QMT0jDryGv4XGBJ01Jt/+NGWO6Y3XJme+tAwFW9Texbbizjq UrfeE5E7V+3IXqal/1Tf8PIaSKHujQQ2Nw22fDxdArqbG8l/RL6oP7lOKmC4j4L5 cLFJew5Hod9gHLYbQh6eB4WGgcVypwlj6MqJi9NCgDuCOhsk2ow= -----END CERTIFICATE-----Generated at Sat Mar 28 11:43:09 2026 by rpki-client