$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145144.roa File: AS145144.roa (raw, json) Hash identifier: tu3mpxejX+CIuBqdiHZrQ/tvfrOug/89CZnaJoaaS2w= Subject key identifier: 78:F0:F2:72:3F:D5:B7:B5:67:53:EB:79:C5:80:0A:39:B4:EE:89:0D Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 6D18FF920BEB7E2C178ACE23AA360D7D4720F2C4 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145144.roa Signing time: Wed 04 Mar 2026 06:21:30 +0000 ROA not before: Wed 04 Mar 2026 06:16:30 +0000 ROA not after: Wed 03 Mar 2027 06:21:30 +0000 asID: 145144 IP address blocks: 240a:a9be::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:18:ff:92:0b:eb:7e:2c:17:8a:ce:23:aa:36:0d:7d:47:20:f2:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:16:30 2026 GMT Not After : Mar 3 06:21:30 2027 GMT Subject: CN=78F0F2723FD5B7B56753EB79C5800A39B4EE890D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:50:52:d6:6c:52:a8:41:e3:d9:d9:c0:e8:40: 53:09:00:12:58:05:70:60:17:82:ac:97:79:fa:29: 35:b6:d9:8d:4c:94:e9:70:85:09:a6:2e:0b:18:96: a5:38:be:fb:0f:a9:d7:29:82:23:9d:50:6c:a6:e1: 82:6e:89:9c:0e:21:ac:cf:e2:01:cf:34:16:8c:f7: 06:06:c8:46:31:24:35:62:65:de:ce:1f:cf:8d:89: 5a:f1:0c:f9:bf:aa:ec:41:f9:f3:3d:e6:21:b6:87: 59:b4:6a:ed:56:40:d3:17:bd:7b:20:ae:5b:b1:6a: fb:80:57:c6:66:90:58:f9:f1:97:ad:e8:6a:cf:6f: 74:d3:f9:c7:92:18:e8:c3:76:55:32:b6:9f:cd:c3: 76:bc:d1:10:ae:97:87:16:22:22:7c:c5:8d:91:76: 61:8d:b5:01:b0:32:23:18:c5:ae:f8:e2:2f:38:3c: ed:63:62:b7:a5:0b:94:f5:08:fe:55:72:83:14:75: 7d:99:07:0f:e8:4b:a0:e1:e3:19:03:a2:bf:dc:55: d6:37:1f:75:d5:9c:9e:83:ff:4a:f9:23:24:62:7e: ae:f9:56:8c:b2:ef:99:d0:e7:64:eb:d8:d3:8d:ce: 30:72:41:5a:3f:eb:d6:5c:68:a5:dc:b9:1d:8a:bd: f3:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:F0:F2:72:3F:D5:B7:B5:67:53:EB:79:C5:80:0A:39:B4:EE:89:0D X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145144.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a9be::/32 Signature Algorithm: sha256WithRSAEncryption 9a:36:c5:06:f6:d7:c7:28:b6:62:f3:5c:3d:60:a5:58:44:4c: 9d:35:54:b8:a6:d4:2f:cf:e5:65:35:13:be:ac:ba:18:4b:db: 5d:5a:d6:48:73:2e:fb:ae:52:f5:94:84:14:42:ef:b4:1f:45: 89:30:25:e3:05:dd:91:04:0a:6a:19:ae:d8:5d:49:5e:51:5a: ba:45:a9:2a:c4:d6:c5:1e:ed:3d:e8:b5:65:2c:3d:11:0d:e1: 03:f4:c9:0d:26:26:3e:20:dc:d2:14:62:b5:23:fa:83:03:26: 7d:e9:1f:53:bf:04:65:26:29:5e:0b:f7:a4:5f:dc:ff:9b:bc: 4c:35:3a:f9:fc:be:ac:5b:50:3c:fd:2b:ea:8c:31:55:fb:45: b7:af:a1:c7:7a:2c:35:f5:18:0c:79:8c:8c:e4:ca:f1:e5:19: 20:86:46:44:8d:72:c3:6c:1e:5e:37:81:f2:49:96:b8:f8:be: 9a:18:54:f4:7d:ed:f6:49:7c:2a:d6:a0:3c:5e:19:75:e4:78: 98:2b:b0:91:c9:b3:1c:7f:d6:94:27:55:d2:ca:c0:cd:76:fa: fc:d3:1c:d8:1a:8d:04:31:53:8d:38:a5:90:6c:dd:0f:52:89: 36:4d:04:ed:34:66:da:1e:3e:e3:ec:7e:20:15:4e:b4:e1:08: 5f:81:b7:9c -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUbRj/kgvrfiwXis4jqjYNfUcg8sQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTYzMFoX DTI3MDMwMzA2MjEzMFowMzExMC8GA1UEAxMoNzhGMEYyNzIzRkQ1QjdCNTY3NTNF Qjc5QzU4MDBBMzlCNEVFODkwRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKhQUtZsUqhB49nZwOhAUwkAElgFcGAXgqyXefopNbbZjUyU6XCFCaYuCxiW pTi++w+p1ymCI51QbKbhgm6JnA4hrM/iAc80Foz3BgbIRjEkNWJl3s4fz42JWvEM +b+q7EH58z3mIbaHWbRq7VZA0xe9eyCuW7Fq+4BXxmaQWPnxl63oas9vdNP5x5IY 6MN2VTK2n83DdrzREK6XhxYiInzFjZF2YY21AbAyIxjFrvjiLzg87WNit6ULlPUI /lVygxR1fZkHD+hLoOHjGQOiv9xV1jcfddWcnoP/SvkjJGJ+rvlWjLLvmdDnZOvY 043OMHJBWj/r1lxopdy5HYq982kCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBR48PJy P9W3tWdT63nFgAo5tO6JDTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTE0NC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qb4wDQYJKoZIhvcNAQELBQADggEBAJo2xQb218cotmLzXD1gpVhETJ01VLim1C/P 5WU1E76suhhL211a1khzLvuuUvWUhBRC77QfRYkwJeMF3ZEECmoZrthdSV5RWrpF qSrE1sUe7T3otWUsPREN4QP0yQ0mJj4g3NIUYrUj+oMDJn3pH1O/BGUmKV4L96Rf 3P+bvEw1Ovn8vqxbUDz9K+qMMVX7Rbevocd6LDX1GAx5jIzkyvHlGSCGRkSNcsNs Hl43gfJJlrj4vpoYVPR97fZJfCrWoDxeGXXkeJgrsJHJsxx/1pQnVdLKwM12+vzT HNgajQQxU404pZBs3Q9SiTZNBO00ZtoePuPsfiAVTrThCF+Bt5w= -----END CERTIFICATE-----Generated at Sat Mar 28 11:46:11 2026 by rpki-client