$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145106.roa File: AS145106.roa (raw, json) Hash identifier: wYI61PDPJ+8yeHQMTziAdFqTFWuHfJeiRo5gs/UYsKc= Subject key identifier: 3A:F6:00:CD:0B:41:C9:36:8A:85:35:6F:73:6A:D4:D0:A1:56:58:0E Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 16743CBB57AD10E999E12CD940DB229E14924076 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145106.roa Signing time: Wed 04 Mar 2026 06:20:21 +0000 ROA not before: Wed 04 Mar 2026 06:15:21 +0000 ROA not after: Wed 03 Mar 2027 06:20:21 +0000 asID: 145106 IP address blocks: 240a:a998::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:74:3c:bb:57:ad:10:e9:99:e1:2c:d9:40:db:22:9e:14:92:40:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:15:21 2026 GMT Not After : Mar 3 06:20:21 2027 GMT Subject: CN=3AF600CD0B41C9368A85356F736AD4D0A156580E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:70:b9:1e:2e:14:00:a5:70:68:a7:e4:cd:af: dd:bf:30:d9:ed:13:c6:bf:eb:4a:2a:71:cf:7e:38: 03:8d:7f:3d:a3:b7:bc:e2:be:3b:24:77:01:9e:96: ff:37:c2:97:88:89:28:ff:d9:63:b3:c1:2d:38:7a: c0:85:7d:8b:6c:ee:56:82:4b:5e:ee:39:f2:38:7f: 97:75:a3:11:d8:1e:93:cf:2d:91:90:8b:91:ed:92: 37:82:22:12:37:85:50:a7:59:f2:f9:61:e7:e9:7e: 18:b1:de:3f:cf:d9:15:90:4b:58:50:03:80:5a:2b: af:5e:56:7e:e7:7e:d1:30:9c:c7:c7:e2:d4:9b:70: cc:34:79:09:a3:99:52:48:7a:28:90:cf:7f:13:13: d8:fc:65:9e:06:0c:a1:09:35:d4:4d:3c:90:ff:9a: 90:8d:58:1f:02:9a:f6:f5:06:a6:c7:f6:a7:94:63: c2:ca:99:15:9e:03:a6:f9:38:86:30:72:f0:2c:18: e2:2b:54:f1:19:6d:57:0b:96:98:cf:df:32:fb:75: c6:21:d3:3d:fc:81:86:b1:de:86:cd:de:13:29:d9: e5:1c:54:cb:02:65:a0:46:92:9e:ee:c5:23:3e:3f: fd:53:ca:b0:a5:40:e1:dd:c7:56:8f:6c:eb:05:ae: 1d:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:F6:00:CD:0B:41:C9:36:8A:85:35:6F:73:6A:D4:D0:A1:56:58:0E X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145106.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a998::/32 Signature Algorithm: sha256WithRSAEncryption cb:0c:b6:cb:ff:6d:fd:f9:66:51:4a:51:37:80:f7:bd:97:be: 28:56:d3:06:89:fa:fe:8e:7d:d3:58:8c:00:b0:a7:bb:43:35: d6:1b:70:6f:30:12:16:b1:c3:5e:b3:2e:77:3f:55:c0:a6:4b: de:aa:d4:5b:db:1e:56:ea:56:67:9b:35:f3:f8:27:3a:92:ce: ba:13:9b:f8:da:fe:ba:f4:c3:5c:fa:23:ed:40:69:78:c0:83: 5f:82:a5:89:b4:3e:11:89:4a:04:44:00:6e:e8:57:13:d0:c5: 18:bb:e0:f3:20:e7:85:7c:38:ab:70:29:51:2f:e8:87:a9:4a: 73:b4:fc:7a:11:c6:0f:da:94:80:fb:9b:19:74:8a:2a:15:3e: 18:af:2b:3a:1d:b8:e8:28:5c:2d:96:f1:bc:0d:75:1a:36:25: e7:fe:4a:78:0c:50:8d:83:0c:d4:b0:f4:f1:ed:a1:e8:d3:40: 61:dd:9e:70:f1:b6:7a:5a:68:65:1c:2a:c6:67:cb:eb:2a:98: 4c:35:64:32:77:f3:1e:81:00:36:07:f2:08:21:1b:8e:b3:59: 9c:43:d4:6d:14:ae:23:b7:36:a4:ac:37:2e:a6:0f:0e:e4:c7: 2d:ac:db:79:57:bd:e8:a3:1b:8c:96:c7:33:f1:36:db:7c:29: 2e:22:1a:5d -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUFnQ8u1etEOmZ4SzZQNsinhSSQHYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTUyMVoX DTI3MDMwMzA2MjAyMVowMzExMC8GA1UEAxMoM0FGNjAwQ0QwQjQxQzkzNjhBODUz NTZGNzM2QUQ0RDBBMTU2NTgwRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANhwuR4uFAClcGin5M2v3b8w2e0Txr/rSipxz344A41/PaO3vOK+OyR3AZ6W /zfCl4iJKP/ZY7PBLTh6wIV9i2zuVoJLXu458jh/l3WjEdgek88tkZCLke2SN4Ii EjeFUKdZ8vlh5+l+GLHeP8/ZFZBLWFADgForr15Wfud+0TCcx8fi1JtwzDR5CaOZ Ukh6KJDPfxMT2PxlngYMoQk11E08kP+akI1YHwKa9vUGpsf2p5RjwsqZFZ4Dpvk4 hjBy8CwY4itU8RltVwuWmM/fMvt1xiHTPfyBhrHehs3eEynZ5RxUywJloEaSnu7F Iz4//VPKsKVA4d3HVo9s6wWuHWUCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQ69gDN C0HJNoqFNW9zatTQoVZYDjAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTEwNi5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qZgwDQYJKoZIhvcNAQELBQADggEBAMsMtsv/bf35ZlFKUTeA972XvihW0waJ+v6O fdNYjACwp7tDNdYbcG8wEhaxw16zLnc/VcCmS96q1FvbHlbqVmebNfP4JzqSzroT m/ja/rr0w1z6I+1AaXjAg1+CpYm0PhGJSgREAG7oVxPQxRi74PMg54V8OKtwKVEv 6IepSnO0/HoRxg/alID7mxl0iioVPhivKzoduOgoXC2W8bwNdRo2Jef+SngMUI2D DNSw9PHtoejTQGHdnnDxtnpaaGUcKsZny+sqmEw1ZDJ38x6BADYH8gghG46zWZxD 1G0UriO3NqSsNy6mDw7kxy2s23lXveijG4yWxzPxNtt8KS4iGl0= -----END CERTIFICATE-----Generated at Sat Mar 28 14:26:42 2026 by rpki-client