$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145147.roa File: AS145147.roa (raw, json) Hash identifier: Yg01Ws1eJJRrNOWeg+qX9gW/9KAalMu0vXwkiwqaK2Y= Subject key identifier: 4B:AE:FC:68:FB:7D:7C:69:66:AC:6C:E0:28:C1:30:AA:54:37:89:33 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 51DAE9F6622407078970E083B932E74C4A9AA64C Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145147.roa Signing time: Wed 04 Mar 2026 06:21:37 +0000 ROA not before: Wed 04 Mar 2026 06:16:37 +0000 ROA not after: Wed 03 Mar 2027 06:21:37 +0000 asID: 145147 IP address blocks: 240a:a9c1::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:da:e9:f6:62:24:07:07:89:70:e0:83:b9:32:e7:4c:4a:9a:a6:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:16:37 2026 GMT Not After : Mar 3 06:21:37 2027 GMT Subject: CN=4BAEFC68FB7D7C6966AC6CE028C130AA54378933 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:de:fa:b8:ae:ba:f8:c3:5d:5c:9b:f0:a3:2d: be:27:97:79:91:8e:da:89:0d:ca:a5:21:1f:72:e9: 05:8b:fc:19:79:f9:cd:77:f4:9c:bf:6d:3d:74:7f: 0c:7b:aa:1e:2e:69:46:77:5e:6b:dc:e2:48:ef:18: e6:8c:03:b5:9d:1a:49:9c:a1:86:96:e6:19:3e:a4: b6:54:31:65:91:29:81:0d:d7:48:62:8a:de:ab:68: 23:e7:6a:25:3d:14:f2:4c:cd:3e:bc:e1:7c:c5:7b: f9:15:0a:b1:5c:ab:8a:b4:96:e8:2b:fe:ce:20:f8: 6e:5a:21:00:b1:7a:64:28:55:7a:3d:42:6d:04:30: b0:22:6a:9a:e8:d0:00:3e:7e:4d:4c:f9:74:94:d0: 8d:1b:2f:e5:47:4f:22:e6:bc:b5:c9:c4:7b:c8:49: 95:d2:3f:1f:60:07:63:e5:80:63:57:93:c9:22:48: a2:e9:80:ba:31:02:3c:bf:cb:8d:c6:2f:85:4a:38: 02:f8:20:8c:e0:c6:0a:ac:8d:87:a8:06:fa:35:45: c8:66:d2:bd:58:d4:e9:06:13:9e:f3:a6:e5:d5:6d: 94:d2:34:c9:67:85:5a:95:3d:40:67:fd:87:82:68: d3:82:ee:20:af:cb:ca:50:a3:db:8b:8a:41:e1:db: 85:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:AE:FC:68:FB:7D:7C:69:66:AC:6C:E0:28:C1:30:AA:54:37:89:33 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145147.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a9c1::/32 Signature Algorithm: sha256WithRSAEncryption 13:8a:5f:63:4e:18:31:bc:4d:47:33:ed:c1:50:c9:59:a1:99: 9b:70:f1:ee:13:23:64:a6:83:1d:d6:9c:ef:2a:8e:bf:7b:3c: 63:67:e7:ef:1d:90:6d:2c:b6:64:c6:ef:e1:de:e1:21:a9:94: a3:1c:13:d1:e3:ee:74:74:63:9c:81:84:ac:1f:b7:66:19:c2: db:8d:67:19:64:95:18:d5:b0:ca:f4:39:ff:00:33:91:71:fd: 1c:91:98:12:46:d4:05:0d:cd:62:5f:d7:23:f0:3e:50:5f:e2: 4c:33:38:cc:55:30:2d:70:b3:a1:fc:73:18:06:28:4f:bc:4c: e8:c2:bf:4d:63:36:aa:fe:b9:f2:0e:ee:0f:1a:01:eb:e2:a2: d7:72:2b:79:58:61:1c:0c:af:a5:58:a0:59:8b:e1:f7:9a:b6: 2c:2e:34:6d:9d:9c:dd:e0:84:71:07:d9:f1:be:66:9a:71:4f: 09:7e:f2:5a:c3:f1:e5:95:d5:bf:7a:e7:cd:5b:72:32:2d:a6: 8b:a0:45:ef:ae:be:5f:ff:3f:cb:be:ac:08:98:ad:d7:8f:e3: ea:42:cd:3b:cb:cb:84:de:4c:c9:27:96:14:27:72:a8:77:b5: 44:aa:6b:7c:59:71:9f:83:bc:b2:60:73:ad:77:a9:f2:40:e4: cc:92:32:56 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUUdrp9mIkBweJcOCDuTLnTEqapkwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTYzN1oX DTI3MDMwMzA2MjEzN1owMzExMC8GA1UEAxMoNEJBRUZDNjhGQjdEN0M2OTY2QUM2 Q0UwMjhDMTMwQUE1NDM3ODkzMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK7e+riuuvjDXVyb8KMtvieXeZGO2okNyqUhH3LpBYv8GXn5zXf0nL9tPXR/ DHuqHi5pRndea9ziSO8Y5owDtZ0aSZyhhpbmGT6ktlQxZZEpgQ3XSGKK3qtoI+dq JT0U8kzNPrzhfMV7+RUKsVyrirSW6Cv+ziD4blohALF6ZChVej1CbQQwsCJqmujQ AD5+TUz5dJTQjRsv5UdPIua8tcnEe8hJldI/H2AHY+WAY1eTySJIoumAujECPL/L jcYvhUo4AvggjODGCqyNh6gG+jVFyGbSvVjU6QYTnvOm5dVtlNI0yWeFWpU9QGf9 h4Jo04LuIK/LylCj24uKQeHbhcUCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRLrvxo +318aWasbOAowTCqVDeJMzAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTE0Ny5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qcEwDQYJKoZIhvcNAQELBQADggEBABOKX2NOGDG8TUcz7cFQyVmhmZtw8e4TI2Sm gx3WnO8qjr97PGNn5+8dkG0stmTG7+He4SGplKMcE9Hj7nR0Y5yBhKwft2YZwtuN ZxlklRjVsMr0Of8AM5Fx/RyRmBJG1AUNzWJf1yPwPlBf4kwzOMxVMC1ws6H8cxgG KE+8TOjCv01jNqr+ufIO7g8aAeviotdyK3lYYRwMr6VYoFmL4featiwuNG2dnN3g hHEH2fG+ZppxTwl+8lrD8eWV1b96581bcjItpougRe+uvl//P8u+rAiYrdeP4+pC zTvLy4TeTMknlhQncqh3tUSqa3xZcZ+DvLJgc613qfJA5MySMlY= -----END CERTIFICATE-----Generated at Sat Mar 28 13:16:41 2026 by rpki-client