$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145110.roa File: AS145110.roa (raw, json) Hash identifier: JmehqtXsmwsD3vKQxt0Mktvnya1oeFaAUeXr8RJJU/M= Subject key identifier: 35:13:36:30:2A:DC:AA:E8:79:2D:24:A8:13:93:CF:0A:26:E7:89:FC Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 0BA3B7C00BE5EF53DFF0C3BCFA4AC72036297947 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145110.roa Signing time: Wed 04 Mar 2026 06:20:06 +0000 ROA not before: Wed 04 Mar 2026 06:15:06 +0000 ROA not after: Wed 03 Mar 2027 06:20:06 +0000 asID: 145110 IP address blocks: 240a:a99c::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:a3:b7:c0:0b:e5:ef:53:df:f0:c3:bc:fa:4a:c7:20:36:29:79:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:15:06 2026 GMT Not After : Mar 3 06:20:06 2027 GMT Subject: CN=351336302ADCAAE8792D24A81393CF0A26E789FC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:8a:2e:80:e9:50:6b:aa:3f:0b:02:2b:8f:93: d7:5e:11:e1:65:89:35:9b:57:bf:b0:0b:d3:f5:f7: 1b:83:ca:4d:bf:d5:4f:21:16:c0:91:a4:48:42:75: 4c:3a:22:01:3d:74:77:50:52:62:ac:b5:31:64:dc: 5f:06:41:35:05:07:b9:68:8d:03:91:32:1f:c7:64: b6:15:01:e6:82:62:25:66:ee:a8:18:13:91:99:ec: f0:3d:f3:1c:ee:9f:75:c3:92:61:8a:6f:ff:8a:17: 57:db:8a:f2:30:bf:c9:8f:59:71:a6:e7:26:ef:10: d2:5f:b0:79:49:cc:a8:18:1d:de:4d:36:35:a0:22: d3:24:35:1f:b5:e8:a5:13:25:f7:8f:45:97:5a:db: 1e:12:02:7f:1e:ba:2b:32:21:e6:fa:0a:b9:6e:ed: 6d:e8:28:d6:30:af:1e:b1:a1:c8:e1:cf:17:c9:41: 72:4f:6a:e8:9a:a5:35:44:1e:3a:60:2a:c5:13:c7: 7e:40:49:72:39:e3:e9:96:45:82:cc:2c:01:17:b0: 3f:92:c1:a9:42:1d:83:b8:24:b7:bc:c6:a4:0d:28: 60:73:02:a1:03:ec:2f:60:e8:fe:7c:ac:2b:53:77: 53:d1:8d:34:cf:dd:b3:fe:1f:f3:ba:68:61:b3:93: 38:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:13:36:30:2A:DC:AA:E8:79:2D:24:A8:13:93:CF:0A:26:E7:89:FC X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145110.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a99c::/32 Signature Algorithm: sha256WithRSAEncryption 63:f0:c2:de:cc:6d:23:88:38:4a:87:13:dd:76:a0:b7:cd:67: bd:e9:4a:94:c2:d3:8f:d1:68:a2:7b:7c:c4:30:1b:ad:99:c4: 32:5d:ea:14:1a:7c:69:6a:50:67:b6:0d:80:90:e1:7f:fc:25: c3:d0:a9:af:50:6b:56:c4:7f:74:db:a1:2f:3d:f3:70:46:73: 85:a6:57:b0:10:bc:4c:1f:45:62:c2:26:7a:dd:fb:b8:aa:b3: 6c:43:04:b5:96:f6:b6:aa:1d:ff:ff:b4:e3:0c:6f:99:72:f2: e1:99:fc:05:9b:56:9f:f3:a6:2b:23:e5:36:37:21:5f:71:71: 74:6d:fc:c3:5c:81:63:4f:48:b0:f3:e0:56:8e:63:62:46:7d: 02:ef:af:12:f0:88:6e:c9:13:bf:28:92:7b:d3:c4:f6:d8:9f: f3:82:34:65:13:aa:b2:1a:f6:f1:af:b0:01:8f:9b:71:ec:c5: a6:ff:8a:52:f0:88:90:c0:d9:00:ce:8e:22:04:3e:bc:17:95: d7:9a:9f:9a:47:a1:d6:d8:e0:40:67:de:75:6d:9c:25:ef:60: e7:c2:72:81:5e:dc:47:1d:87:8f:e6:a0:e8:d8:f3:4c:8b:86: 02:c5:dd:0d:1b:93:72:d5:e8:db:10:23:a6:e2:75:dc:8a:5d: 1a:a1:79:64 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUC6O3wAvl71Pf8MO8+krHIDYpeUcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTUwNloX DTI3MDMwMzA2MjAwNlowMzExMC8GA1UEAxMoMzUxMzM2MzAyQURDQUFFODc5MkQy NEE4MTM5M0NGMEEyNkU3ODlGQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL6KLoDpUGuqPwsCK4+T114R4WWJNZtXv7AL0/X3G4PKTb/VTyEWwJGkSEJ1 TDoiAT10d1BSYqy1MWTcXwZBNQUHuWiNA5EyH8dkthUB5oJiJWbuqBgTkZns8D3z HO6fdcOSYYpv/4oXV9uK8jC/yY9ZcabnJu8Q0l+weUnMqBgd3k02NaAi0yQ1H7Xo pRMl949Fl1rbHhICfx66KzIh5voKuW7tbego1jCvHrGhyOHPF8lBck9q6JqlNUQe OmAqxRPHfkBJcjnj6ZZFgswsARewP5LBqUIdg7gkt7zGpA0oYHMCoQPsL2Do/nys K1N3U9GNNM/ds/4f87poYbOTOKcCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQ1EzYw Ktyq6HktJKgTk88KJueJ/DAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTExMC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qZwwDQYJKoZIhvcNAQELBQADggEBAGPwwt7MbSOIOEqHE912oLfNZ73pSpTC04/R aKJ7fMQwG62ZxDJd6hQafGlqUGe2DYCQ4X/8JcPQqa9Qa1bEf3TboS8983BGc4Wm V7AQvEwfRWLCJnrd+7iqs2xDBLWW9raqHf//tOMMb5ly8uGZ/AWbVp/zpisj5TY3 IV9xcXRt/MNcgWNPSLDz4FaOY2JGfQLvrxLwiG7JE78oknvTxPbYn/OCNGUTqrIa 9vGvsAGPm3Hsxab/ilLwiJDA2QDOjiIEPrwXldean5pHodbY4EBn3nVtnCXvYOfC coFe3Ecdh4/moOjY80yLhgLF3Q0bk3LV6NsQI6biddyKXRqheWQ= -----END CERTIFICATE-----Generated at Sat Mar 28 11:45:50 2026 by rpki-client