$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145101.roa File: AS145101.roa (raw, json) Hash identifier: e5/QJf39iZEe0xpkqV9vU5keOZi6xdA3SKbaXYaySqI= Subject key identifier: 43:C5:32:DA:8B:CD:DC:B7:DF:DF:F2:B9:73:0B:0D:30:AA:2A:5B:ED Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 625F6DF3044EFEB1DFF9C0E818BC237FE5E44CCF Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145101.roa Signing time: Wed 04 Mar 2026 06:20:50 +0000 ROA not before: Wed 04 Mar 2026 06:15:50 +0000 ROA not after: Wed 03 Mar 2027 06:20:50 +0000 asID: 145101 IP address blocks: 240a:a993::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:5f:6d:f3:04:4e:fe:b1:df:f9:c0:e8:18:bc:23:7f:e5:e4:4c:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:15:50 2026 GMT Not After : Mar 3 06:20:50 2027 GMT Subject: CN=43C532DA8BCDDCB7DFDFF2B9730B0D30AA2A5BED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:85:fa:e2:cd:d8:05:94:36:4d:e6:00:be:cc: e9:61:e8:eb:e2:c5:1c:1b:63:ff:c5:46:5a:d6:82: 3e:45:be:1b:86:90:61:be:ba:be:37:b6:b6:23:59: dd:48:c2:0f:a5:17:ab:cc:37:53:ab:6f:ff:b7:a1: eb:b2:41:0c:9e:d8:46:a2:51:69:68:e8:cc:d4:b6: 84:cb:be:10:21:d2:9f:3e:f7:c3:2c:13:d3:30:6a: 34:0f:8d:de:76:b7:aa:05:81:ea:90:34:74:8d:87: df:ee:20:a6:d6:a3:d5:f2:12:4b:b3:f0:a1:f3:64: 6d:14:e0:d0:7a:33:3e:57:ae:87:79:53:09:2c:86: 3d:a1:b6:15:48:e3:0b:26:fd:cc:36:80:82:56:f7: f7:d2:e5:29:85:59:06:5a:af:bc:4f:e8:38:5a:eb: bc:73:3f:20:22:6d:30:4b:88:eb:f4:cb:49:4f:ba: 8a:e5:3b:d3:b3:a3:4d:60:a0:f8:cc:6b:85:46:47: 41:ae:ad:6e:82:f8:6e:71:69:d5:a0:be:75:7f:36: 39:fb:8c:66:cf:36:05:02:83:2f:80:e3:64:28:00: c1:70:cc:34:6d:e6:56:e6:a7:a5:e4:c9:0a:72:a0: 8f:1c:92:ff:66:4c:a1:56:50:22:a4:d2:e6:fd:d6: 5f:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:C5:32:DA:8B:CD:DC:B7:DF:DF:F2:B9:73:0B:0D:30:AA:2A:5B:ED X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145101.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a993::/32 Signature Algorithm: sha256WithRSAEncryption 8f:03:14:65:d1:09:6d:1b:56:64:d6:42:45:32:db:f0:bf:b3: 96:4d:4c:57:8a:45:dc:00:9e:b5:b2:22:c8:ed:aa:48:02:ba: ab:86:44:a1:d7:ad:64:c2:17:56:21:e8:b9:9c:4c:79:20:97: 50:a8:70:bf:14:ed:9b:9a:84:38:ad:49:e8:3b:48:e5:cb:86: 9b:6e:89:d4:5a:6a:9d:af:2e:d4:d5:63:34:f7:3d:27:bd:15: 29:19:3a:5d:c4:d6:c2:07:76:b5:18:69:b2:fd:4d:3f:10:ef: fd:9e:1c:51:30:cf:70:a7:8d:b1:7c:f1:d4:ff:4e:80:be:81: db:10:43:55:66:ed:ff:cb:3c:09:8e:b2:ee:6e:72:1f:b2:df: 10:ab:1a:0f:42:b1:38:d3:6c:ca:fb:c7:8e:11:8e:b4:d7:ef: a4:35:d2:31:2b:28:50:dc:43:53:de:b2:98:c4:c2:e5:e4:ce: af:ec:80:a0:6e:13:3e:52:e8:91:83:b9:66:6e:e2:40:8a:f4: 5c:4b:0f:77:16:4f:eb:13:a1:7f:82:54:6f:2e:dd:f8:bc:b8: 24:07:84:b5:7d:83:6f:b9:1b:8a:19:d3:a4:e7:e8:cc:fa:c0: 26:7a:9b:1b:a1:71:2e:1d:e6:aa:d1:12:50:0a:1c:2a:94:fe: 75:fb:4d:12 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUYl9t8wRO/rHf+cDoGLwjf+XkTM8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTU1MFoX DTI3MDMwMzA2MjA1MFowMzExMC8GA1UEAxMoNDNDNTMyREE4QkNERENCN0RGREZG MkI5NzMwQjBEMzBBQTJBNUJFRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAIaF+uLN2AWUNk3mAL7M6WHo6+LFHBtj/8VGWtaCPkW+G4aQYb66vje2tiNZ 3UjCD6UXq8w3U6tv/7eh67JBDJ7YRqJRaWjozNS2hMu+ECHSnz73wywT0zBqNA+N 3na3qgWB6pA0dI2H3+4gptaj1fISS7PwofNkbRTg0HozPleuh3lTCSyGPaG2FUjj Cyb9zDaAglb399LlKYVZBlqvvE/oOFrrvHM/ICJtMEuI6/TLSU+6iuU707OjTWCg +MxrhUZHQa6tboL4bnFp1aC+dX82OfuMZs82BQKDL4DjZCgAwXDMNG3mVuanpeTJ CnKgjxyS/2ZMoVZQIqTS5v3WX68CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRDxTLa i83ct9/f8rlzCw0wqipb7TAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTEwMS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qZMwDQYJKoZIhvcNAQELBQADggEBAI8DFGXRCW0bVmTWQkUy2/C/s5ZNTFeKRdwA nrWyIsjtqkgCuquGRKHXrWTCF1Yh6LmcTHkgl1CocL8U7ZuahDitSeg7SOXLhptu idRaap2vLtTVYzT3PSe9FSkZOl3E1sIHdrUYabL9TT8Q7/2eHFEwz3CnjbF88dT/ ToC+gdsQQ1Vm7f/LPAmOsu5uch+y3xCrGg9CsTjTbMr7x44RjrTX76Q10jErKFDc Q1PespjEwuXkzq/sgKBuEz5S6JGDuWZu4kCK9FxLD3cWT+sToX+CVG8u3fi8uCQH hLV9g2+5G4oZ06Tn6Mz6wCZ6mxuhcS4d5qrRElAKHCqU/nX7TRI= -----END CERTIFICATE-----Generated at Sat Mar 28 11:50:00 2026 by rpki-client