$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145143.roa File: AS145143.roa (raw, json) Hash identifier: 3N7Bac7MJ5qnJW2wbe8lZuOMJ2WdOx5NTxjb63Guzws= Subject key identifier: 1A:DC:FA:87:98:94:F7:B4:99:43:37:E9:7F:F6:C3:B4:A9:66:B6:E5 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 648B767F88AA7E906FED976C784FB5EEE12D82BF Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145143.roa Signing time: Wed 04 Mar 2026 06:20:40 +0000 ROA not before: Wed 04 Mar 2026 06:15:40 +0000 ROA not after: Wed 03 Mar 2027 06:20:40 +0000 asID: 145143 IP address blocks: 240a:a9bd::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:8b:76:7f:88:aa:7e:90:6f:ed:97:6c:78:4f:b5:ee:e1:2d:82:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:15:40 2026 GMT Not After : Mar 3 06:20:40 2027 GMT Subject: CN=1ADCFA879894F7B4994337E97FF6C3B4A966B6E5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:72:4c:7b:9e:5c:b4:f5:d9:e2:7b:7d:a2:98: d0:21:80:6a:1a:6a:31:4e:7e:29:87:aa:07:40:53: cd:57:d9:c8:6a:58:be:42:e9:6c:53:bb:ec:05:d2: fb:72:32:12:65:f4:b7:50:98:49:e7:15:cb:9e:05: 62:c1:e5:8f:97:8e:da:ef:1d:63:62:21:3b:40:74: 90:cc:05:f9:ac:2e:8d:c5:ed:6b:1e:3e:e9:48:c2: af:e3:df:ea:b7:dd:bb:3d:29:fc:aa:86:4e:55:25: 68:aa:89:41:64:87:06:c1:55:b4:c5:0b:d6:74:f3: 2a:5f:dd:f7:ca:ab:ea:3e:f2:eb:f5:a4:51:90:d3: 87:b5:70:7d:08:c5:1b:44:9b:3d:f4:b3:6c:15:87: af:3b:f1:04:90:bd:05:46:cd:c1:6a:49:7d:21:34: b1:fa:c2:64:61:3f:55:0a:47:7e:63:54:b8:e0:fb: 32:9b:81:89:a5:6e:f1:41:be:16:88:08:49:b6:93: 32:45:f2:ec:b1:4a:9b:d1:53:be:0a:5b:da:74:3c: 9a:6b:62:2e:43:43:d7:4e:45:71:ee:09:e1:d3:91: a6:74:a7:3a:22:2c:fe:7f:e3:3f:e7:c7:a0:f4:e8: c4:68:5c:78:f4:5f:74:b8:53:46:7e:d1:e0:35:c3: d1:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:DC:FA:87:98:94:F7:B4:99:43:37:E9:7F:F6:C3:B4:A9:66:B6:E5 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145143.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a9bd::/32 Signature Algorithm: sha256WithRSAEncryption 77:4f:9e:30:95:5d:0b:88:ba:41:a9:a8:f3:23:54:73:5d:ff: 55:44:a4:ce:cd:a2:4a:a1:f8:cf:9a:32:6e:eb:07:5c:54:29: 31:f3:f8:80:15:c9:f4:ae:dd:7f:51:d2:09:a6:29:71:16:c4: 03:9b:8a:b6:be:c0:a3:e6:45:56:07:fc:70:e9:a9:bb:ca:af: 22:ea:55:4d:4c:db:04:9f:df:bf:11:2e:e9:63:eb:0e:06:8d: 1e:23:27:2d:4b:e1:a4:82:82:8a:14:53:83:02:d7:13:14:05: 20:d9:85:a5:db:a9:9f:85:5b:28:57:a1:cd:47:4a:de:eb:8e: d8:aa:64:22:b5:aa:cf:27:7f:16:ab:64:10:f0:52:e0:09:78: fa:00:32:d6:ed:23:d4:c2:60:90:d4:55:81:0b:8d:46:64:f3: fa:22:b5:47:b1:64:7b:ce:1c:d5:06:43:f0:90:eb:08:8e:66: a8:d9:01:e1:c5:25:78:71:95:91:d6:51:43:cd:2b:85:a6:f2: 51:87:20:5c:8e:93:c6:0a:2a:a9:42:ee:cc:47:8c:77:7b:dd: de:e4:6b:6e:1f:e7:22:51:71:fe:92:d3:89:44:1b:74:32:9d: 21:c8:8d:1e:4c:e8:49:3d:7a:65:57:14:77:a2:b4:e4:75:7c: ba:db:f1:65 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUZIt2f4iqfpBv7ZdseE+17uEtgr8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTU0MFoX DTI3MDMwMzA2MjA0MFowMzExMC8GA1UEAxMoMUFEQ0ZBODc5ODk0RjdCNDk5NDMz N0U5N0ZGNkMzQjRBOTY2QjZFNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJtyTHueXLT12eJ7faKY0CGAahpqMU5+KYeqB0BTzVfZyGpYvkLpbFO77AXS +3IyEmX0t1CYSecVy54FYsHlj5eO2u8dY2IhO0B0kMwF+awujcXtax4+6UjCr+Pf 6rfduz0p/KqGTlUlaKqJQWSHBsFVtMUL1nTzKl/d98qr6j7y6/WkUZDTh7VwfQjF G0SbPfSzbBWHrzvxBJC9BUbNwWpJfSE0sfrCZGE/VQpHfmNUuOD7MpuBiaVu8UG+ FogISbaTMkXy7LFKm9FTvgpb2nQ8mmtiLkND105Fce4J4dORpnSnOiIs/n/jP+fH oPToxGhcePRfdLhTRn7R4DXD0RECAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQa3PqH mJT3tJlDN+l/9sO0qWa25TAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTE0My5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qb0wDQYJKoZIhvcNAQELBQADggEBAHdPnjCVXQuIukGpqPMjVHNd/1VEpM7Nokqh +M+aMm7rB1xUKTHz+IAVyfSu3X9R0gmmKXEWxAObira+wKPmRVYH/HDpqbvKryLq VU1M2wSf378RLulj6w4GjR4jJy1L4aSCgooUU4MC1xMUBSDZhaXbqZ+FWyhXoc1H St7rjtiqZCK1qs8nfxarZBDwUuAJePoAMtbtI9TCYJDUVYELjUZk8/oitUexZHvO HNUGQ/CQ6wiOZqjZAeHFJXhxlZHWUUPNK4Wm8lGHIFyOk8YKKqlC7sxHjHd73d7k a24f5yJRcf6S04lEG3QynSHIjR5M6Ek9emVXFHeitOR1fLrb8WU= -----END CERTIFICATE-----Generated at Sat Mar 28 13:14:17 2026 by rpki-client