$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145113.roa File: AS145113.roa (raw, json) Hash identifier: GrX02XuTF8PASCJltXEKGod+2KFLIDW1bcN5rk/sqZw= Subject key identifier: EB:56:8B:81:8C:B9:73:23:D7:D5:AC:0C:89:1D:80:72:92:44:5B:BF Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 4AF75C53FF33B777DAD0D4FD624182E519CB218F Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145113.roa Signing time: Wed 04 Mar 2026 06:19:36 +0000 ROA not before: Wed 04 Mar 2026 06:14:36 +0000 ROA not after: Wed 03 Mar 2027 06:19:36 +0000 asID: 145113 IP address blocks: 240a:a99f::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:f7:5c:53:ff:33:b7:77:da:d0:d4:fd:62:41:82:e5:19:cb:21:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:14:36 2026 GMT Not After : Mar 3 06:19:36 2027 GMT Subject: CN=EB568B818CB97323D7D5AC0C891D807292445BBF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:e6:41:d8:2a:53:d9:3d:89:19:3c:00:cb:e3: 22:34:00:f2:ef:5d:3e:30:e5:b2:01:c9:2e:fc:18: 30:7a:58:91:64:5c:a6:28:ba:be:78:d5:36:dc:41: 3a:7c:f4:c7:70:ca:71:9f:62:c2:2f:50:44:65:c5: e7:a8:4b:76:d3:56:d0:4a:f9:b4:a7:e9:9b:e6:0b: 2d:b6:f3:17:f3:c8:8f:26:9d:25:1a:cb:76:25:f1: 2c:36:33:3e:7e:20:0e:c7:5a:a4:6e:36:5a:38:33: 27:d7:bb:cd:40:93:c3:67:95:d9:cc:ca:d3:ff:f6: 3e:cd:3f:ab:41:7f:71:89:9e:86:3e:fb:f2:1d:75: 93:c4:a7:37:c8:9d:d9:98:e7:65:b1:66:32:9f:76: 26:7c:4c:4b:12:9e:7b:34:11:24:b4:f9:e2:8a:65: 17:dc:5b:59:00:91:dd:54:8a:a2:0c:2f:c0:4c:75: 66:13:43:bf:8a:c1:8e:0b:79:c3:88:9f:5c:f6:dc: ce:00:bc:f6:c6:a4:82:21:93:5e:58:98:e6:34:cb: 1f:de:4a:d7:a4:56:cc:df:fe:a7:da:20:a1:f0:4e: 02:d2:63:44:31:da:5f:6c:0d:86:14:ce:95:92:a1: 48:f2:5c:23:22:66:78:3f:c8:d9:04:49:0f:04:ad: 08:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:56:8B:81:8C:B9:73:23:D7:D5:AC:0C:89:1D:80:72:92:44:5B:BF X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145113.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a99f::/32 Signature Algorithm: sha256WithRSAEncryption cf:2c:bd:d6:02:96:88:00:29:dc:07:ee:a6:45:95:8a:b3:f7: ad:a2:44:7b:92:fa:40:2f:5f:83:fb:bd:03:bc:44:56:b0:9d: 92:af:53:7b:eb:be:77:62:81:f1:e8:2e:1f:78:42:80:f2:dc: 36:d1:54:1f:56:a2:a2:08:7e:9c:68:49:98:38:fd:59:64:b6: cb:ac:e5:a1:56:d7:59:92:1d:ea:63:45:20:25:74:56:89:51: 59:65:56:4b:25:e7:6c:74:f9:3a:67:17:5e:4e:80:2f:a3:a6: f7:0f:16:0b:6e:93:a0:f6:20:32:e4:57:db:48:a2:9c:cd:1f: 32:96:8a:5f:f8:80:05:67:22:07:f2:ba:fa:63:53:30:36:b3: 7f:2c:0c:b3:f8:db:c1:29:54:b2:e7:3d:2b:c7:fd:42:df:0f: b9:a4:b8:5f:56:f3:fc:38:f4:2f:3a:bf:10:5f:53:55:97:8c: 2c:aa:0d:d0:9c:19:1c:96:88:ae:3d:e9:5d:30:50:43:f2:21: 5f:f2:8f:b7:34:95:41:b8:4a:b0:e8:ec:57:8c:49:a1:1d:85: 83:95:6f:85:44:95:c3:8d:a3:80:e5:4f:c3:6d:c0:ac:dc:5d: e9:1c:14:e2:a7:2a:8c:ab:78:60:63:ac:86:fb:55:54:a2:0a: e5:92:c6:70 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUSvdcU/8zt3fa0NT9YkGC5RnLIY8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTQzNloX DTI3MDMwMzA2MTkzNlowMzExMC8GA1UEAxMoRUI1NjhCODE4Q0I5NzMyM0Q3RDVB QzBDODkxRDgwNzI5MjQ0NUJCRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALDmQdgqU9k9iRk8AMvjIjQA8u9dPjDlsgHJLvwYMHpYkWRcpii6vnjVNtxB Onz0x3DKcZ9iwi9QRGXF56hLdtNW0Er5tKfpm+YLLbbzF/PIjyadJRrLdiXxLDYz Pn4gDsdapG42WjgzJ9e7zUCTw2eV2czK0//2Ps0/q0F/cYmehj778h11k8SnN8id 2ZjnZbFmMp92JnxMSxKeezQRJLT54oplF9xbWQCR3VSKogwvwEx1ZhNDv4rBjgt5 w4ifXPbczgC89sakgiGTXliY5jTLH95K16RWzN/+p9ogofBOAtJjRDHaX2wNhhTO lZKhSPJcIyJmeD/I2QRJDwStCLkCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBTrVouB jLlzI9fVrAyJHYBykkRbvzAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTExMy5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qZ8wDQYJKoZIhvcNAQELBQADggEBAM8svdYClogAKdwH7qZFlYqz962iRHuS+kAv X4P7vQO8RFawnZKvU3vrvndigfHoLh94QoDy3DbRVB9WoqIIfpxoSZg4/Vlktsus 5aFW11mSHepjRSAldFaJUVllVksl52x0+TpnF15OgC+jpvcPFgtuk6D2IDLkV9tI opzNHzKWil/4gAVnIgfyuvpjUzA2s38sDLP428EpVLLnPSvH/ULfD7mkuF9W8/w4 9C86vxBfU1WXjCyqDdCcGRyWiK496V0wUEPyIV/yj7c0lUG4SrDo7FeMSaEdhYOV b4VElcONo4DlT8NtwKzcXekcFOKnKoyreGBjrIb7VVSiCuWSxnA= -----END CERTIFICATE-----Generated at Sat Mar 28 11:42:19 2026 by rpki-client