$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145146.roa File: AS145146.roa (raw, json) Hash identifier: GYBkJDdEp/96C1cZ6HfL5jd++7JQwrgOxeNppzKRlCU= Subject key identifier: 39:F4:26:F3:D5:A2:B3:A6:74:93:BF:A4:51:F4:EF:BB:04:E6:3E:92 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 6FAD73060AE94DDBB2EF3F04F988A3202B7FFB8A Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145146.roa Signing time: Wed 04 Mar 2026 06:20:20 +0000 ROA not before: Wed 04 Mar 2026 06:15:20 +0000 ROA not after: Wed 03 Mar 2027 06:20:20 +0000 asID: 145146 IP address blocks: 240a:a9c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:ad:73:06:0a:e9:4d:db:b2:ef:3f:04:f9:88:a3:20:2b:7f:fb:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:15:20 2026 GMT Not After : Mar 3 06:20:20 2027 GMT Subject: CN=39F426F3D5A2B3A67493BFA451F4EFBB04E63E92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:34:7d:07:8f:4a:e8:da:17:53:0d:90:e1:4c: 63:00:87:cf:3c:15:3e:9d:ba:b0:ab:e1:54:fc:4a: 21:b0:37:14:b3:2d:ab:8a:79:69:25:64:0c:58:09: 4e:ec:43:75:90:a7:7f:ce:df:f9:32:18:a3:57:7e: b4:0f:63:0c:78:9b:78:6d:e4:71:29:94:40:36:30: c8:98:fd:d0:03:ef:f2:22:0e:66:bf:15:ed:1d:ed: 30:73:f6:35:fc:b2:2e:2c:bc:06:09:15:cb:f1:07: 39:84:cf:72:07:d2:01:db:f9:ab:29:98:c8:6b:ce: 78:9c:da:66:bf:f3:1e:1b:35:ab:89:69:ee:97:95: 93:76:47:75:65:47:91:51:11:9e:1d:5a:c5:a9:47: 8e:54:9e:08:db:cb:04:b8:b1:0e:a2:e7:42:45:86: 6a:24:4e:a7:c2:7c:10:13:5b:26:92:1c:59:51:54: 7e:ef:20:43:cf:ac:e5:6a:cb:11:e1:83:16:00:01: 62:d3:3a:7b:ba:2b:b3:46:ab:f7:4b:6a:0f:07:18: b6:5b:5b:e5:69:8d:1f:61:c0:ca:d4:a9:49:f4:c7: 04:24:e0:d5:a5:c1:ab:82:42:72:8e:23:8f:83:c8: 01:2a:45:8d:3a:cb:c0:f8:77:d4:bd:89:bd:66:8e: 41:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:F4:26:F3:D5:A2:B3:A6:74:93:BF:A4:51:F4:EF:BB:04:E6:3E:92 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145146.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a9c0::/32 Signature Algorithm: sha256WithRSAEncryption a5:60:1d:8d:8b:63:4b:d2:42:1d:8c:ec:8b:a7:bf:67:3b:31: e3:e3:2b:f9:81:ba:41:1f:33:9e:1b:cf:38:67:e4:f5:c1:97: a1:b6:06:65:68:2c:7a:0c:56:bb:9e:06:a6:36:2c:5f:1b:50: 49:b1:7a:5b:13:d8:4f:86:aa:09:cc:cd:e6:21:fd:0f:c3:14: ef:db:96:1f:7f:87:e5:73:af:24:13:6e:65:5b:ab:41:99:32: bc:fe:ec:d0:72:08:f5:2e:0c:c6:1e:46:fc:66:4a:7d:ca:f4: 30:84:4f:8d:b6:be:75:f8:e1:24:0a:cc:27:4e:99:73:0e:c1: 45:eb:6f:4a:cf:be:35:ff:16:b5:97:e2:dc:57:fe:a2:31:14: 86:61:61:81:e8:f2:9d:ed:f1:02:28:89:e9:c2:7e:b1:75:d6: f3:d7:d8:ed:3e:d6:79:71:f4:63:eb:c4:60:80:93:37:61:0e: 15:4c:e7:56:9f:09:c9:69:18:ff:74:28:c5:88:45:33:6d:51: ca:7c:e0:69:33:61:77:b7:b2:34:f4:ee:38:66:b2:36:e6:5b: 2c:f4:6a:6a:f5:b4:2d:40:95:a2:33:50:f9:a2:da:ef:58:42: 65:aa:12:82:23:98:e3:8f:c8:43:ed:7c:e4:c8:84:4b:29:d3: 27:68:3a:7b -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUb61zBgrpTduy7z8E+YijICt/+4owDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTUyMFoX DTI3MDMwMzA2MjAyMFowMzExMC8GA1UEAxMoMzlGNDI2RjNENUEyQjNBNjc0OTNC RkE0NTFGNEVGQkIwNEU2M0U5MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJg0fQePSujaF1MNkOFMYwCHzzwVPp26sKvhVPxKIbA3FLMtq4p5aSVkDFgJ TuxDdZCnf87f+TIYo1d+tA9jDHibeG3kcSmUQDYwyJj90APv8iIOZr8V7R3tMHP2 NfyyLiy8BgkVy/EHOYTPcgfSAdv5qymYyGvOeJzaZr/zHhs1q4lp7peVk3ZHdWVH kVERnh1axalHjlSeCNvLBLixDqLnQkWGaiROp8J8EBNbJpIcWVFUfu8gQ8+s5WrL EeGDFgABYtM6e7ors0ar90tqDwcYtltb5WmNH2HAytSpSfTHBCTg1aXBq4JCco4j j4PIASpFjTrLwPh31L2JvWaOQTkCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQ59Cbz 1aKzpnSTv6RR9O+7BOY+kjAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTE0Ni5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qcAwDQYJKoZIhvcNAQELBQADggEBAKVgHY2LY0vSQh2M7Iunv2c7MePjK/mBukEf M54bzzhn5PXBl6G2BmVoLHoMVrueBqY2LF8bUEmxelsT2E+GqgnMzeYh/Q/DFO/b lh9/h+VzryQTbmVbq0GZMrz+7NByCPUuDMYeRvxmSn3K9DCET422vnX44SQKzCdO mXMOwUXrb0rPvjX/FrWX4txX/qIxFIZhYYHo8p3t8QIoienCfrF11vPX2O0+1nlx 9GPrxGCAkzdhDhVM51afCclpGP90KMWIRTNtUcp84GkzYXe3sjT07jhmsjbmWyz0 amr1tC1AlaIzUPmi2u9YQmWqEoIjmOOPyEPtfOTIhEsp0ydoOns= -----END CERTIFICATE-----Generated at Sat Mar 28 11:41:21 2026 by rpki-client