$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145108.roa File: AS145108.roa (raw, json) Hash identifier: HZW/7TicmsEYMXcOtsrYKCcguj1NOyZLNnn28Mh4psY= Subject key identifier: 96:AA:B1:88:6A:F5:D5:74:A7:44:55:E0:BF:15:95:E9:52:C3:C5:A6 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 1A9262E9F5F42A454F71C78E192B9E0B5E23A0D8 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145108.roa Signing time: Wed 04 Mar 2026 06:19:39 +0000 ROA not before: Wed 04 Mar 2026 06:14:39 +0000 ROA not after: Wed 03 Mar 2027 06:19:39 +0000 asID: 145108 IP address blocks: 240a:a99a::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:92:62:e9:f5:f4:2a:45:4f:71:c7:8e:19:2b:9e:0b:5e:23:a0:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:14:39 2026 GMT Not After : Mar 3 06:19:39 2027 GMT Subject: CN=96AAB1886AF5D574A74455E0BF1595E952C3C5A6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:c8:b2:26:43:bd:40:8c:5e:a0:b3:3d:e2:5e: 81:64:64:21:85:f8:98:1f:db:3d:8b:c4:b3:dc:af: e6:7d:52:d2:b3:f5:0b:b0:da:de:b8:35:aa:82:c6: a8:c3:76:4f:8d:b4:f9:71:2b:9a:ac:d3:f7:3a:3f: ce:c4:90:2a:77:5d:05:fc:9a:c1:1a:27:86:be:f2: f4:d5:12:28:e6:18:93:e0:13:cd:03:b2:ee:38:d0: f9:a7:af:0b:84:a8:7c:cb:f7:54:0f:ef:67:17:2e: 21:10:18:7d:81:de:ca:52:bc:e6:27:d2:a5:2f:8d: 18:8c:aa:ae:72:08:e8:57:80:82:8e:f8:c0:ec:5c: b1:45:b1:2d:5a:44:80:f5:42:9c:77:a8:f0:71:6e: d0:29:2f:e4:aa:71:20:0a:07:df:6a:b5:9f:8a:53: b8:8c:85:4f:e5:42:6f:36:fb:ee:56:8d:0b:f6:1e: ad:09:07:54:17:d6:a0:27:69:bd:31:5f:32:df:04: 02:94:a1:dc:2a:62:11:58:c9:49:8d:d4:e2:75:10: 89:a9:45:16:1d:1c:f8:37:07:4e:2d:60:d0:41:1f: 6f:93:09:20:5f:d2:f4:b4:36:97:3f:95:21:f9:5a: d2:12:f4:ee:63:0d:08:e9:4b:d9:4e:c7:5a:a1:81: b3:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:AA:B1:88:6A:F5:D5:74:A7:44:55:E0:BF:15:95:E9:52:C3:C5:A6 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145108.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a99a::/32 Signature Algorithm: sha256WithRSAEncryption 69:ea:4f:fa:21:1d:49:20:75:6d:41:5d:0d:ea:61:09:ce:98: 30:9f:ab:dd:99:1d:7d:22:83:ea:bb:b3:de:bd:49:38:12:17: 09:f8:03:9a:87:11:02:26:53:3f:f6:09:d7:b5:ec:bc:61:82: 19:ad:53:10:3e:7b:b2:0d:fa:ce:d0:66:b2:2c:29:b8:ee:c3: bb:6c:83:03:5f:48:a5:64:a2:85:ec:03:6e:dd:ce:c9:63:a9: cf:64:1d:f1:48:5d:06:67:d9:74:14:f0:07:0d:46:97:83:10: 18:5d:6f:22:a1:5c:0b:bc:0b:a8:37:54:03:e7:5a:3c:02:14: cd:f7:71:b9:ac:dc:e9:55:aa:83:f5:2e:a7:71:23:91:c5:e0: 5c:90:f1:d0:5d:77:33:12:b2:f4:07:7c:36:00:66:19:06:4b: ab:7b:32:5a:83:d0:12:1c:f6:0e:35:a1:41:45:c0:12:8b:44: 98:b9:c1:e0:e6:e5:bb:b4:8b:16:30:12:8f:14:75:7f:2f:1e: 57:01:49:aa:8d:df:ce:7a:c6:06:25:5b:75:e8:8c:b5:2f:94: 29:1e:92:3f:66:c1:45:c6:22:17:80:60:8e:4a:3e:82:fe:e4: c7:d0:47:c4:d0:72:23:f6:03:d0:0b:f3:8c:fd:e0:99:74:9a: 76:9e:e7:a3 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUGpJi6fX0KkVPcceOGSueC14joNgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTQzOVoX DTI3MDMwMzA2MTkzOVowMzExMC8GA1UEAxMoOTZBQUIxODg2QUY1RDU3NEE3NDQ1 NUUwQkYxNTk1RTk1MkMzQzVBNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMPIsiZDvUCMXqCzPeJegWRkIYX4mB/bPYvEs9yv5n1S0rP1C7Da3rg1qoLG qMN2T420+XErmqzT9zo/zsSQKnddBfyawRonhr7y9NUSKOYYk+ATzQOy7jjQ+aev C4SofMv3VA/vZxcuIRAYfYHeylK85ifSpS+NGIyqrnII6FeAgo74wOxcsUWxLVpE gPVCnHeo8HFu0Ckv5KpxIAoH32q1n4pTuIyFT+VCbzb77laNC/YerQkHVBfWoCdp vTFfMt8EApSh3CpiEVjJSY3U4nUQialFFh0c+DcHTi1g0EEfb5MJIF/S9LQ2lz+V Ifla0hL07mMNCOlL2U7HWqGBs/UCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSWqrGI avXVdKdEVeC/FZXpUsPFpjAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTEwOC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qZowDQYJKoZIhvcNAQELBQADggEBAGnqT/ohHUkgdW1BXQ3qYQnOmDCfq92ZHX0i g+q7s969STgSFwn4A5qHEQImUz/2Cde17LxhghmtUxA+e7IN+s7QZrIsKbjuw7ts gwNfSKVkooXsA27dzsljqc9kHfFIXQZn2XQU8AcNRpeDEBhdbyKhXAu8C6g3VAPn WjwCFM33cbms3OlVqoP1LqdxI5HF4FyQ8dBddzMSsvQHfDYAZhkGS6t7MlqD0BIc 9g41oUFFwBKLRJi5weDm5bu0ixYwEo8UdX8vHlcBSaqN3856xgYlW3XojLUvlCke kj9mwUXGIheAYI5KPoL+5MfQR8TQciP2A9AL84z94Jl0mnae56M= -----END CERTIFICATE-----Generated at Sat Mar 28 15:54:05 2026 by rpki-client