$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145136.roa File: AS145136.roa (raw, json) Hash identifier: qkUjL2PXAaBH1gnF2g/ZJwWflUDnHdM1gxcKggjaSI8= Subject key identifier: E6:33:62:E0:3C:23:3F:C2:B9:AB:BB:3D:D8:17:61:BC:9A:BB:FF:46 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 595FFBB6B3A99C353B95703041543D714C190A76 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145136.roa Signing time: Wed 04 Mar 2026 06:21:16 +0000 ROA not before: Wed 04 Mar 2026 06:16:16 +0000 ROA not after: Wed 03 Mar 2027 06:21:16 +0000 asID: 145136 IP address blocks: 240a:a9b6::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:5f:fb:b6:b3:a9:9c:35:3b:95:70:30:41:54:3d:71:4c:19:0a:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:16:16 2026 GMT Not After : Mar 3 06:21:16 2027 GMT Subject: CN=E63362E03C233FC2B9ABBB3DD81761BC9ABBFF46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:8d:dd:ed:cd:00:b4:6c:67:f0:6e:50:39:4d: 49:95:c9:0d:95:dd:7a:ea:9f:b3:14:34:df:63:86: 60:ad:36:35:12:08:7f:76:d6:cc:da:47:bd:f3:dc: 29:c0:e4:61:56:96:e7:f0:53:0a:c8:99:c9:66:7a: 1e:71:d2:14:53:b6:be:b1:20:86:b1:4d:98:bf:23: 62:a3:ee:ca:b1:14:6c:8c:11:f4:dd:c1:de:39:f1: 41:bb:99:27:96:cb:50:36:ee:71:e8:aa:04:1a:3e: e7:5d:6c:e0:d4:c0:52:23:09:ad:55:b7:6a:0e:d3: b4:27:73:44:cc:41:d8:29:d8:af:aa:85:cd:4e:c4: 5a:72:67:73:94:e0:01:8c:2e:1b:69:49:ef:12:41: c6:a9:a5:af:27:d7:53:b6:1f:26:2b:98:50:6f:ae: dd:b9:c1:c5:0e:85:c8:ea:90:83:ec:79:a2:06:66: 6b:7f:8e:b4:03:ef:be:e1:2c:25:26:2a:69:15:21: 64:f0:93:78:82:ed:65:35:4f:9e:19:50:ab:57:d9: 2e:6e:04:a9:2a:58:9e:ac:a5:f9:db:6f:d8:fc:5b: 11:ec:f0:e9:b7:f1:a4:0b:6c:39:6e:93:72:0f:81: 54:e8:b0:54:45:c1:7e:95:e4:ef:af:41:b0:5e:9e: 55:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:33:62:E0:3C:23:3F:C2:B9:AB:BB:3D:D8:17:61:BC:9A:BB:FF:46 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145136.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a9b6::/32 Signature Algorithm: sha256WithRSAEncryption 77:49:cc:84:31:ce:f1:83:1b:c6:0f:c3:39:74:d1:46:58:cf: fc:99:66:d4:f9:c4:92:2a:f8:00:3d:c3:93:4b:97:25:4a:9a: 24:f7:e3:be:b1:2a:92:28:c1:72:4d:c2:f2:46:1d:d6:35:99: d1:6b:08:16:05:bb:6c:e3:71:9e:8f:a5:88:44:3c:51:7c:de: 5c:91:e6:d6:8f:b7:e4:a2:4d:16:3e:a3:e2:98:87:e6:be:63: 3e:e2:2b:95:b3:76:03:8d:52:6c:b7:58:77:b6:70:15:4e:84: d6:fd:df:88:63:ce:f9:23:21:3e:c3:f4:48:20:75:5c:40:1c: bb:81:a6:c0:ce:67:a1:00:89:88:26:15:8c:c0:7a:2e:47:8c: 4f:54:05:b2:1b:74:69:3c:2c:03:f2:2a:43:ad:a6:07:fd:70: f6:85:b3:d2:69:95:d7:ee:07:cb:fd:7b:4e:26:0f:f9:cd:22: 6c:b7:ca:65:86:45:40:4a:b5:4b:c4:60:21:88:c4:87:db:49: d9:7c:09:94:10:0b:75:18:ec:5d:fe:e8:92:d4:63:50:81:db: a9:22:7b:ca:83:0f:80:d6:2f:ef:50:cf:6b:a6:c0:a3:95:d8: 38:c6:f1:ad:02:75:24:b2:1a:ff:12:33:46:a3:08:ac:e8:ac: e4:3d:12:24 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUWV/7trOpnDU7lXAwQVQ9cUwZCnYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTYxNloX DTI3MDMwMzA2MjExNlowMzExMC8GA1UEAxMoRTYzMzYyRTAzQzIzM0ZDMkI5QUJC QjNERDgxNzYxQkM5QUJCRkY0NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALKN3e3NALRsZ/BuUDlNSZXJDZXdeuqfsxQ032OGYK02NRIIf3bWzNpHvfPc KcDkYVaW5/BTCsiZyWZ6HnHSFFO2vrEghrFNmL8jYqPuyrEUbIwR9N3B3jnxQbuZ J5bLUDbuceiqBBo+511s4NTAUiMJrVW3ag7TtCdzRMxB2CnYr6qFzU7EWnJnc5Tg AYwuG2lJ7xJBxqmlryfXU7YfJiuYUG+u3bnBxQ6FyOqQg+x5ogZma3+OtAPvvuEs JSYqaRUhZPCTeILtZTVPnhlQq1fZLm4EqSpYnqyl+dtv2PxbEezw6bfxpAtsOW6T cg+BVOiwVEXBfpXk769BsF6eVXkCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBTmM2Lg PCM/wrmruz3YF2G8mrv/RjAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTEzNi5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qbYwDQYJKoZIhvcNAQELBQADggEBAHdJzIQxzvGDG8YPwzl00UZYz/yZZtT5xJIq +AA9w5NLlyVKmiT3476xKpIowXJNwvJGHdY1mdFrCBYFu2zjcZ6PpYhEPFF83lyR 5taPt+SiTRY+o+KYh+a+Yz7iK5WzdgONUmy3WHe2cBVOhNb934hjzvkjIT7D9Egg dVxAHLuBpsDOZ6EAiYgmFYzAei5HjE9UBbIbdGk8LAPyKkOtpgf9cPaFs9Jpldfu B8v9e04mD/nNImy3ymWGRUBKtUvEYCGIxIfbSdl8CZQQC3UY7F3+6JLUY1CB26ki e8qDD4DWL+9Qz2umwKOV2DjG8a0CdSSyGv8SM0ajCKzorOQ9EiQ= -----END CERTIFICATE-----Generated at Sat Mar 28 15:53:12 2026 by rpki-client