$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145099.roa File: AS145099.roa (raw, json) Hash identifier: MFlDhjPW+0RMu5qfz55uX8WWxHUqkVV9skHhwS2vWFU= Subject key identifier: 94:B6:11:80:0C:BE:AA:06:95:FC:EC:86:F3:BB:44:6E:71:8A:74:CC Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 7F57A5AEFFACAB559A98A0CF317CCA4995878455 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145099.roa Signing time: Wed 04 Mar 2026 06:21:46 +0000 ROA not before: Wed 04 Mar 2026 06:16:46 +0000 ROA not after: Wed 03 Mar 2027 06:21:46 +0000 asID: 145099 IP address blocks: 240a:a991::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:57:a5:ae:ff:ac:ab:55:9a:98:a0:cf:31:7c:ca:49:95:87:84:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:16:46 2026 GMT Not After : Mar 3 06:21:46 2027 GMT Subject: CN=94B611800CBEAA0695FCEC86F3BB446E718A74CC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:2c:1a:75:42:41:cb:c1:62:6d:fe:06:ed:1c: 02:08:3b:6d:2d:b6:3c:f2:1a:5f:c0:5e:f1:48:45: d7:13:86:ae:fc:c7:a6:b1:de:d1:9b:6c:7f:3b:cf: 91:7c:96:3a:59:74:66:d6:ed:94:13:f9:84:67:81: e8:74:51:eb:67:4a:90:9f:91:6a:d0:50:f5:64:2f: f6:1c:a6:02:6a:9c:34:07:af:50:59:6a:6d:f9:fd: 03:78:cf:e8:2f:e6:1f:d1:d6:37:22:14:6c:81:d1: 8d:b1:a7:5a:5b:8b:bf:60:57:cd:03:26:f7:1e:cd: 64:35:3a:ed:d9:34:e1:7f:9a:a1:5f:f6:79:4d:d1: 69:c0:be:b5:b7:48:83:71:b0:d7:ef:54:9e:08:11: 13:ac:3e:d0:fd:3a:7c:bb:d3:fa:09:f5:93:d9:38: c5:12:f3:b6:dd:ac:c8:f3:d8:bd:69:70:46:ba:af: 9b:32:21:e1:3e:5d:bc:a3:9b:b8:07:db:b7:b1:3a: fd:21:3c:85:01:db:13:81:29:6f:65:f0:aa:52:0c: b8:a4:16:9e:be:9b:8f:ca:c4:d4:11:d5:35:bd:ca: 1d:21:a5:06:c2:4a:ad:f9:98:59:d4:a0:2f:97:b3: 31:d2:da:dd:12:c5:70:e2:66:72:54:71:48:1c:62: f7:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:B6:11:80:0C:BE:AA:06:95:FC:EC:86:F3:BB:44:6E:71:8A:74:CC X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145099.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a991::/32 Signature Algorithm: sha256WithRSAEncryption b2:19:00:4c:dd:09:b8:12:cc:09:12:e7:f3:a1:fb:f6:ca:27: 94:44:6c:be:ea:bf:62:0b:e5:43:b3:ae:17:dd:97:38:91:b1: d1:2d:95:6c:03:0c:b5:d9:68:06:b2:a7:28:c9:6a:ab:9a:c2: 82:ec:42:31:73:07:2f:be:f4:63:cc:32:aa:34:a9:db:87:14: 31:ae:b4:c6:a0:f8:1c:cc:4c:12:e8:96:5d:d4:9d:b2:21:44: c4:4f:a3:5d:6f:30:af:3b:11:23:08:83:91:65:e3:39:2d:79: a0:2f:8f:e5:03:97:05:c6:d6:da:1a:ea:e6:67:14:c7:02:a1: c6:cb:59:2f:e5:ab:b4:d0:14:7f:39:93:40:00:d5:7e:7d:29: e8:14:cc:55:26:22:4a:41:dd:cc:3e:f8:d6:aa:b7:a3:2f:83: c3:61:2b:64:ef:81:4e:30:49:8e:80:d7:33:c5:f9:0a:8f:ff: af:cf:7c:0b:88:a9:89:13:ae:ed:7a:c6:c6:c8:ad:93:9d:4c: 37:a8:76:e1:06:52:79:2c:0d:b2:2e:a1:84:21:03:ca:91:a9: 42:05:6d:2e:43:5d:f9:e8:31:af:6f:d6:3b:b9:70:6a:f5:9c: b7:5e:5d:a0:60:79:4c:8b:e6:62:de:1e:8b:87:8e:4e:80:7c: ad:82:05:9f -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUf1elrv+sq1WamKDPMXzKSZWHhFUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTY0NloX DTI3MDMwMzA2MjE0NlowMzExMC8GA1UEAxMoOTRCNjExODAwQ0JFQUEwNjk1RkNF Qzg2RjNCQjQ0NkU3MThBNzRDQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMYsGnVCQcvBYm3+Bu0cAgg7bS22PPIaX8Be8UhF1xOGrvzHprHe0ZtsfzvP kXyWOll0ZtbtlBP5hGeB6HRR62dKkJ+RatBQ9WQv9hymAmqcNAevUFlqbfn9A3jP 6C/mH9HWNyIUbIHRjbGnWluLv2BXzQMm9x7NZDU67dk04X+aoV/2eU3RacC+tbdI g3Gw1+9UnggRE6w+0P06fLvT+gn1k9k4xRLztt2syPPYvWlwRrqvmzIh4T5dvKOb uAfbt7E6/SE8hQHbE4Epb2XwqlIMuKQWnr6bj8rE1BHVNb3KHSGlBsJKrfmYWdSg L5ezMdLa3RLFcOJmclRxSBxi9yMCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSUthGA DL6qBpX87Ibzu0RucYp0zDAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTA5OS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qZEwDQYJKoZIhvcNAQELBQADggEBALIZAEzdCbgSzAkS5/Oh+/bKJ5REbL7qv2IL 5UOzrhfdlziRsdEtlWwDDLXZaAaypyjJaquawoLsQjFzBy++9GPMMqo0qduHFDGu tMag+BzMTBLoll3UnbIhRMRPo11vMK87ESMIg5Fl4zkteaAvj+UDlwXG1toa6uZn FMcCocbLWS/lq7TQFH85k0AA1X59KegUzFUmIkpB3cw++Naqt6Mvg8NhK2TvgU4w SY6A1zPF+QqP/6/PfAuIqYkTru16xsbIrZOdTDeoduEGUnksDbIuoYQhA8qRqUIF bS5DXfnoMa9v1ju5cGr1nLdeXaBgeUyL5mLeHouHjk6AfK2CBZ8= -----END CERTIFICATE-----Generated at Sat Mar 28 11:42:49 2026 by rpki-client