$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145125.roa File: AS145125.roa (raw, json) Hash identifier: 8m6VO/TzJyLtQdT0dFqBMlBVw6+8RmvY+xOJ9+PrKYQ= Subject key identifier: C7:B4:82:FF:26:66:6E:3D:FA:93:0B:49:C0:D6:42:A7:7E:62:E7:0A Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 1DA6F80651E459C8D45667085D540D6A4D4326DD Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145125.roa Signing time: Wed 04 Mar 2026 06:22:20 +0000 ROA not before: Wed 04 Mar 2026 06:17:20 +0000 ROA not after: Wed 03 Mar 2027 06:22:20 +0000 asID: 145125 IP address blocks: 240a:a9ab::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:a6:f8:06:51:e4:59:c8:d4:56:67:08:5d:54:0d:6a:4d:43:26:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:17:20 2026 GMT Not After : Mar 3 06:22:20 2027 GMT Subject: CN=C7B482FF26666E3DFA930B49C0D642A77E62E70A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:8a:82:7a:e8:a6:94:a8:a4:9c:c5:08:e2:87: 16:14:76:63:fb:84:0e:48:76:81:d2:42:09:ac:e5: e0:bd:c4:38:40:a4:83:56:b7:c2:bf:b6:bf:c6:a4: 57:9c:f7:3e:5f:0a:9f:94:9d:27:75:d2:6e:fe:f6: 0e:10:c6:2f:45:24:d8:8d:d0:d3:31:5d:b3:bf:88: 2e:ff:92:d3:f5:a1:9b:3a:6f:c3:96:44:7e:b7:db: 94:98:03:b8:73:7f:bc:1f:71:ef:50:1d:de:d6:f1: 17:00:1b:5b:13:b2:7b:f5:fe:8c:e9:49:c1:13:0b: fe:3e:09:09:8f:a5:60:19:84:b9:2f:13:d2:f3:61: 31:1e:e0:53:65:65:6a:91:1b:1e:4f:7c:19:13:54: e9:7d:49:8c:b0:a3:e5:8e:87:21:b0:8a:fc:c3:e8: 52:3c:f6:fd:97:8c:d3:03:e0:97:6e:b0:19:63:fc: 91:ee:c4:06:4c:17:ee:60:36:e5:16:5e:ad:79:65: 4b:a7:3b:4c:b5:cd:d8:6f:73:2d:8a:d1:ed:a0:e2: 90:aa:6a:7a:9c:76:56:30:ce:8f:f7:48:c9:cf:c3: 57:9c:1c:51:cb:20:3d:0e:8d:2b:a4:64:e8:32:72: 9c:52:fa:4a:53:21:eb:30:6b:be:cc:9f:a1:be:82: 71:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:B4:82:FF:26:66:6E:3D:FA:93:0B:49:C0:D6:42:A7:7E:62:E7:0A X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145125.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a9ab::/32 Signature Algorithm: sha256WithRSAEncryption 29:de:ab:d5:44:c0:04:6f:5d:0b:9d:bb:2a:2c:3b:51:69:1b: bb:18:57:39:50:65:c8:e1:cb:3e:61:1b:d5:f0:44:0a:38:63: b4:13:39:99:73:0b:26:7a:25:69:00:c1:b1:5b:1d:15:b9:a2: 90:28:2e:e8:55:b3:18:64:d5:2f:d1:6d:b4:0c:e2:0a:6f:28: 92:51:ad:74:72:af:76:a0:41:40:96:34:ff:a5:10:a9:92:2c: f3:1d:19:62:e0:3a:62:ee:d7:ef:60:45:15:22:06:88:08:2c: 25:40:80:0d:83:17:98:c9:08:c3:9b:6a:92:4d:15:30:f0:a2: f3:4b:d9:f8:3e:11:7b:20:b4:ee:a6:27:48:57:fb:35:e1:e5: 7f:c8:3b:b8:8a:6a:ae:51:5d:9b:aa:dd:70:e6:47:25:f6:80: c4:23:a6:26:88:82:16:cf:c0:6d:00:45:78:5b:7d:46:61:09: 67:e7:34:32:f2:43:0c:93:52:11:6e:49:5b:ed:b5:f8:93:2f: c6:2e:09:9d:1c:12:eb:db:72:f3:98:35:ef:6d:2a:a0:15:76: 98:7b:ba:e2:db:2c:18:cb:6f:46:ea:16:72:36:bc:41:ec:85: ec:6a:74:44:16:87:f5:d4:4f:48:9a:88:7e:51:52:05:5c:25: 3d:fc:62:1d -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUHab4BlHkWcjUVmcIXVQNak1DJt0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTcyMFoX DTI3MDMwMzA2MjIyMFowMzExMC8GA1UEAxMoQzdCNDgyRkYyNjY2NkUzREZBOTMw QjQ5QzBENjQyQTc3RTYyRTcwQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKaKgnroppSopJzFCOKHFhR2Y/uEDkh2gdJCCazl4L3EOECkg1a3wr+2v8ak V5z3Pl8Kn5SdJ3XSbv72DhDGL0Uk2I3Q0zFds7+ILv+S0/Whmzpvw5ZEfrfblJgD uHN/vB9x71Ad3tbxFwAbWxOye/X+jOlJwRML/j4JCY+lYBmEuS8T0vNhMR7gU2Vl apEbHk98GRNU6X1JjLCj5Y6HIbCK/MPoUjz2/ZeM0wPgl26wGWP8ke7EBkwX7mA2 5RZerXllS6c7TLXN2G9zLYrR7aDikKpqepx2VjDOj/dIyc/DV5wcUcsgPQ6NK6Rk 6DJynFL6SlMh6zBrvsyfob6CcTkCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBTHtIL/ JmZuPfqTC0nA1kKnfmLnCjAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTEyNS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qaswDQYJKoZIhvcNAQELBQADggEBACneq9VEwARvXQuduyosO1FpG7sYVzlQZcjh yz5hG9XwRAo4Y7QTOZlzCyZ6JWkAwbFbHRW5opAoLuhVsxhk1S/RbbQM4gpvKJJR rXRyr3agQUCWNP+lEKmSLPMdGWLgOmLu1+9gRRUiBogILCVAgA2DF5jJCMObapJN FTDwovNL2fg+EXsgtO6mJ0hX+zXh5X/IO7iKaq5RXZuq3XDmRyX2gMQjpiaIghbP wG0ARXhbfUZhCWfnNDLyQwyTUhFuSVvttfiTL8YuCZ0cEuvbcvOYNe9tKqAVdph7 uuLbLBjLb0bqFnI2vEHshexqdEQWh/XUT0iaiH5RUgVcJT38Yh0= -----END CERTIFICATE-----Generated at Sat Mar 28 14:26:38 2026 by rpki-client