$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145103.roa File: AS145103.roa (raw, json) Hash identifier: 1A2+H/V81np5k0f4vZbi8nv6j8/2kZ4n8ACtEFkOQtQ= Subject key identifier: 54:FB:B8:3B:C0:34:AE:AF:2E:AB:C5:F4:55:FF:65:22:E6:5B:23:BA Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 3AD3491E912F46913512A01CCB0711C98BAB867C Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145103.roa Signing time: Wed 04 Mar 2026 06:19:37 +0000 ROA not before: Wed 04 Mar 2026 06:14:37 +0000 ROA not after: Wed 03 Mar 2027 06:19:37 +0000 asID: 145103 IP address blocks: 240a:a995::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:d3:49:1e:91:2f:46:91:35:12:a0:1c:cb:07:11:c9:8b:ab:86:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:14:37 2026 GMT Not After : Mar 3 06:19:37 2027 GMT Subject: CN=54FBB83BC034AEAF2EABC5F455FF6522E65B23BA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:fe:05:9a:94:10:b5:75:dc:02:9e:61:37:7f: 75:2e:ae:f1:da:32:83:ff:5e:ea:54:65:5d:0b:1c: c2:ed:29:30:fc:45:33:90:3f:92:fe:58:5a:7f:33: ee:a5:cd:df:75:8b:c4:fd:75:b7:f7:c3:b1:14:3d: 4b:02:1d:b3:0a:40:4c:1f:18:72:58:7e:f0:df:79: f9:57:10:90:89:62:c3:66:2b:83:91:b3:4a:6d:b3: 55:50:53:23:9d:af:37:1c:92:b0:35:2a:44:e2:92: c0:bc:25:0f:f3:34:c9:4e:f1:7b:d5:76:99:c9:73: 96:4e:fb:97:e0:40:c6:93:7f:00:a1:29:5a:95:cc: 5c:42:ab:2d:5a:9c:01:2c:d6:6c:aa:a3:41:91:ae: d7:18:bf:6e:7a:6c:9d:4f:fe:a7:4c:30:64:71:58: f2:8c:7d:91:17:0a:47:b6:c8:dc:64:7b:4d:4c:cb: 30:f9:c5:d0:b6:4f:8c:1e:fa:54:d0:b9:9a:74:56: 06:b5:aa:87:eb:6d:e9:41:bd:56:e8:12:48:60:03: 70:c9:e9:16:7e:29:c4:b5:4e:2f:ff:70:33:a2:da: da:e7:da:d3:31:ce:76:12:f4:1f:d8:fa:84:76:37: 18:85:8f:16:4d:85:3d:27:86:02:c6:97:08:9c:09: f2:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:FB:B8:3B:C0:34:AE:AF:2E:AB:C5:F4:55:FF:65:22:E6:5B:23:BA X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145103.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a995::/32 Signature Algorithm: sha256WithRSAEncryption 92:f8:19:62:9e:2c:01:b7:dc:3d:55:df:47:11:67:b3:81:c1: 30:83:38:7f:c1:5b:fe:fa:ff:04:56:99:1c:ff:0b:67:9f:0f: 83:6e:b2:52:ce:65:a5:13:77:11:4f:02:21:83:e7:d5:e2:36: 13:0a:ea:5c:97:cf:b5:fb:ed:89:59:23:07:f7:0b:d7:e4:86: 0e:aa:44:b7:0d:fa:c3:fc:f8:b0:4d:34:28:6e:75:9f:89:d6: d4:8c:b6:0f:03:1a:a0:5c:74:88:db:b5:f7:b6:79:55:0a:da: ad:34:a3:48:ff:df:52:84:68:1d:a9:51:cb:fa:87:1a:1c:46: ed:ac:5d:6a:ac:23:84:17:49:ee:27:75:66:21:eb:14:b0:ad: 86:c6:93:e1:a3:1f:58:d1:32:c4:9d:51:ba:5e:f8:ce:3e:ee: cf:c2:86:e6:32:ae:f9:8a:82:ab:d6:23:db:b2:19:28:6f:45: 03:88:8f:42:ef:06:36:07:9e:ad:eb:45:eb:1d:db:4b:8c:1f: 99:97:29:1a:c6:d7:98:1b:d4:73:82:d4:7a:8f:41:0c:29:b6: 18:e3:18:ac:f0:27:c3:e3:ed:e0:81:1a:24:84:dd:02:cf:e2: df:f6:f4:d8:27:0a:ef:6d:f6:68:05:0e:72:f8:5a:47:e1:ef: 3b:93:a7:c5 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUOtNJHpEvRpE1EqAcywcRyYurhnwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTQzN1oX DTI3MDMwMzA2MTkzN1owMzExMC8GA1UEAxMoNTRGQkI4M0JDMDM0QUVBRjJFQUJD NUY0NTVGRjY1MjJFNjVCMjNCQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANT+BZqUELV13AKeYTd/dS6u8doyg/9e6lRlXQscwu0pMPxFM5A/kv5YWn8z 7qXN33WLxP11t/fDsRQ9SwIdswpATB8Yclh+8N95+VcQkIliw2Yrg5GzSm2zVVBT I52vNxySsDUqROKSwLwlD/M0yU7xe9V2mclzlk77l+BAxpN/AKEpWpXMXEKrLVqc ASzWbKqjQZGu1xi/bnpsnU/+p0wwZHFY8ox9kRcKR7bI3GR7TUzLMPnF0LZPjB76 VNC5mnRWBrWqh+tt6UG9VugSSGADcMnpFn4pxLVOL/9wM6La2ufa0zHOdhL0H9j6 hHY3GIWPFk2FPSeGAsaXCJwJ8kkCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRU+7g7 wDSury6rxfRV/2Ui5lsjujAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTEwMy5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qZUwDQYJKoZIhvcNAQELBQADggEBAJL4GWKeLAG33D1V30cRZ7OBwTCDOH/BW/76 /wRWmRz/C2efD4NuslLOZaUTdxFPAiGD59XiNhMK6lyXz7X77YlZIwf3C9fkhg6q RLcN+sP8+LBNNChudZ+J1tSMtg8DGqBcdIjbtfe2eVUK2q00o0j/31KEaB2pUcv6 hxocRu2sXWqsI4QXSe4ndWYh6xSwrYbGk+GjH1jRMsSdUbpe+M4+7s/ChuYyrvmK gqvWI9uyGShvRQOIj0LvBjYHnq3rResd20uMH5mXKRrG15gb1HOC1HqPQQwpthjj GKzwJ8Pj7eCBGiSE3QLP4t/29NgnCu9t9mgFDnL4Wkfh7zuTp8U= -----END CERTIFICATE-----Generated at Sat Mar 28 13:13:24 2026 by rpki-client