$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145142.roa File: AS145142.roa (raw, json) Hash identifier: DuRUv9oA+AyR9Yq1rC2Cm5szSc1abn96uF45/9SxwFU= Subject key identifier: EC:DF:C8:65:E0:13:BF:B2:BC:B0:26:27:92:28:2C:DF:37:D9:83:D5 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 15A11CA1AD0F77D0C964329368B98957786CD74E Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145142.roa Signing time: Wed 04 Mar 2026 06:21:51 +0000 ROA not before: Wed 04 Mar 2026 06:16:51 +0000 ROA not after: Wed 03 Mar 2027 06:21:51 +0000 asID: 145142 IP address blocks: 240a:a9bc::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:a1:1c:a1:ad:0f:77:d0:c9:64:32:93:68:b9:89:57:78:6c:d7:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:16:51 2026 GMT Not After : Mar 3 06:21:51 2027 GMT Subject: CN=ECDFC865E013BFB2BCB0262792282CDF37D983D5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:58:56:26:c1:40:70:83:ff:56:fc:0f:ec:06: 7e:c4:7c:61:39:2a:17:1e:82:70:4f:6e:76:b0:36: aa:68:15:67:58:af:65:5b:36:c5:9a:56:79:c7:30: 1b:9f:63:16:05:11:0b:e9:6a:f4:df:90:e3:64:fd: dc:c6:49:0b:33:f9:34:c5:93:9a:85:2d:1d:2a:11: 4e:22:50:8e:5d:4a:1d:b4:ba:b8:85:fd:8e:de:67: 75:7a:60:4f:58:26:d9:11:de:98:67:dc:7e:8b:fa: ae:22:b7:2d:e8:4f:bc:7a:cb:fd:1e:a2:e4:7d:f0: 66:e4:2b:8d:88:e9:4c:25:4f:bf:18:c2:05:b7:b3: db:62:bd:c9:0a:2d:0b:ad:c4:8e:87:9b:d2:eb:b3: 70:10:c9:28:d3:b1:8f:36:40:c7:b8:f6:58:58:29: e8:1e:f3:42:38:2a:af:43:cb:96:58:bf:f0:f5:f5: ec:7f:4d:68:9b:ca:14:63:7e:16:ea:46:db:7b:16: 62:62:f6:20:d7:98:15:e1:44:7c:18:ad:21:96:c9: ff:7c:be:c5:81:76:ea:53:2d:93:e3:67:de:0d:47: eb:53:0a:0c:99:6d:bd:08:72:d0:ae:9b:b2:78:4e: 3b:5c:2f:89:c0:09:12:80:16:fa:53:67:12:86:01: 1a:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:DF:C8:65:E0:13:BF:B2:BC:B0:26:27:92:28:2C:DF:37:D9:83:D5 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145142.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a9bc::/32 Signature Algorithm: sha256WithRSAEncryption 21:c5:48:0d:46:80:72:87:d9:88:49:f4:55:4b:c3:1f:55:3c: ca:5c:1b:38:69:6d:9b:0b:89:fe:e5:a5:10:2c:be:a2:69:eb: 19:15:3e:20:d2:16:67:e5:8b:4d:e8:39:1b:44:04:ed:57:c6: 6f:a8:c4:97:25:22:5d:6a:c6:e9:42:a9:6b:0c:d8:a4:62:50: 64:5a:02:cd:18:51:d4:98:f2:cf:a3:32:12:a4:e0:cf:c7:d4: 99:6a:7b:2f:38:af:62:df:03:64:82:54:39:65:ce:f5:4a:fa: b4:a4:ed:54:56:b7:02:6c:fb:c8:04:66:1d:d9:75:72:9b:91: 44:bf:16:d5:00:14:13:f1:1b:c9:57:f0:08:98:99:02:b1:ce: 55:71:e2:3c:77:94:bf:9b:6f:3e:fe:d3:6b:20:7a:46:0e:7b: 8d:f3:b4:75:27:10:7b:f9:5a:b4:c6:89:fb:2a:73:b3:87:27: ef:35:a1:8e:ee:d1:35:5e:77:3b:c5:ec:57:e2:68:9b:e0:a6: 7c:9f:fe:df:63:f0:23:0d:62:83:4c:ea:0b:76:bd:0b:aa:d1: 91:5c:ed:ba:4a:21:b0:12:95:26:9b:01:92:7e:dd:a5:f6:dc: d6:30:f8:e6:f6:42:eb:bb:7a:22:ef:e8:c4:e7:01:20:1b:53: be:c4:f2:98 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUFaEcoa0Pd9DJZDKTaLmJV3hs104wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTY1MVoX DTI3MDMwMzA2MjE1MVowMzExMC8GA1UEAxMoRUNERkM4NjVFMDEzQkZCMkJDQjAy NjI3OTIyODJDREYzN0Q5ODNENTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMRYVibBQHCD/1b8D+wGfsR8YTkqFx6CcE9udrA2qmgVZ1ivZVs2xZpWeccw G59jFgURC+lq9N+Q42T93MZJCzP5NMWTmoUtHSoRTiJQjl1KHbS6uIX9jt5ndXpg T1gm2RHemGfcfov6riK3LehPvHrL/R6i5H3wZuQrjYjpTCVPvxjCBbez22K9yQot C63Ejoeb0uuzcBDJKNOxjzZAx7j2WFgp6B7zQjgqr0PLlli/8PX17H9NaJvKFGN+ FupG23sWYmL2INeYFeFEfBitIZbJ/3y+xYF26lMtk+Nn3g1H61MKDJltvQhy0K6b snhOO1wvicAJEoAW+lNnEoYBGk8CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBTs38hl 4BO/srywJieSKCzfN9mD1TAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTE0Mi5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qbwwDQYJKoZIhvcNAQELBQADggEBACHFSA1GgHKH2YhJ9FVLwx9VPMpcGzhpbZsL if7lpRAsvqJp6xkVPiDSFmfli03oORtEBO1Xxm+oxJclIl1qxulCqWsM2KRiUGRa As0YUdSY8s+jMhKk4M/H1Jlqey84r2LfA2SCVDllzvVK+rSk7VRWtwJs+8gEZh3Z dXKbkUS/FtUAFBPxG8lX8AiYmQKxzlVx4jx3lL+bbz7+02sgekYOe43ztHUnEHv5 WrTGifsqc7OHJ+81oY7u0TVedzvF7FfiaJvgpnyf/t9j8CMNYoNM6gt2vQuq0ZFc 7bpKIbASlSabAZJ+3aX23NYw+Ob2Quu7eiLv6MTnASAbU77E8pg= -----END CERTIFICATE-----Generated at Sat Mar 28 15:53:32 2026 by rpki-client