$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145148.roa File: AS145148.roa (raw, json) Hash identifier: 55M6n1bu0/e1AvGtYeOsa/vx8l1w6CdGlLCl7H91QXg= Subject key identifier: 7B:45:17:87:79:29:8E:59:BA:8F:FA:34:43:B0:FC:45:59:AC:75:93 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 3F6014B55258782CE3337483831EE9EEAF4AC564 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145148.roa Signing time: Wed 04 Mar 2026 06:21:26 +0000 ROA not before: Wed 04 Mar 2026 06:16:26 +0000 ROA not after: Wed 03 Mar 2027 06:21:26 +0000 asID: 145148 IP address blocks: 240a:a9c2::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:60:14:b5:52:58:78:2c:e3:33:74:83:83:1e:e9:ee:af:4a:c5:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:16:26 2026 GMT Not After : Mar 3 06:21:26 2027 GMT Subject: CN=7B45178779298E59BA8FFA3443B0FC4559AC7593 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:69:a7:43:7a:64:99:dd:64:d8:87:cf:70:78: b2:71:a9:86:ce:4b:f7:75:63:d9:fc:4f:1c:da:43: 23:5c:f9:8e:10:28:02:17:f9:97:64:08:c9:08:05: 04:5d:d2:f2:cf:e5:4e:89:87:5b:78:94:b2:8d:b8: f3:52:45:f1:2f:f8:ab:c7:20:7d:0c:61:a5:1a:0e: 19:18:b5:19:e9:fd:6c:e4:06:a7:7f:d8:ac:12:56: 78:ba:87:2f:b8:5a:26:cc:5c:44:56:37:78:b1:af: 73:0e:85:53:fc:01:6a:db:5c:42:be:5f:08:e0:87: b0:82:22:c5:fa:9d:c7:54:6d:50:95:47:07:da:28: ed:bb:82:e4:98:d8:fb:6e:47:11:45:6e:53:f1:6d: 36:5b:78:c0:5c:a4:d0:99:64:cb:2b:92:a5:04:82: 5b:56:71:38:ff:7a:ef:74:74:13:86:89:17:d0:be: 58:ad:d5:2a:68:28:06:9b:1a:f4:ec:d3:73:5e:c3: f3:6f:7d:fc:aa:b6:b2:59:9c:ba:dd:ed:1b:4d:56: a5:a4:20:02:74:0f:df:63:49:7f:e7:89:8c:b4:1a: 07:3b:f5:1a:bd:ae:9e:33:63:07:dc:58:95:e4:d8: 9d:f9:79:e9:53:52:38:08:e0:7d:a9:2f:ab:2a:90: 8b:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:45:17:87:79:29:8E:59:BA:8F:FA:34:43:B0:FC:45:59:AC:75:93 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145148.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a9c2::/32 Signature Algorithm: sha256WithRSAEncryption 04:fc:5b:d0:ba:65:c9:17:b5:84:68:57:20:67:14:9a:c7:f0: 35:ed:ad:8c:a7:4f:2e:fc:89:92:f1:bb:eb:95:02:2d:95:90: 47:6f:54:7b:38:fe:4e:15:b0:da:36:48:63:09:dc:45:59:b3: a5:26:8f:4f:53:c7:ac:76:95:d4:75:b6:9a:1d:84:4d:50:2f: b5:b4:4f:ca:61:0c:a2:85:53:45:b6:8e:61:43:c0:e2:7b:05: f5:d7:55:1d:62:18:24:88:83:36:e3:8c:cd:c8:07:08:88:47: a6:24:51:26:7c:f4:14:c4:8f:a6:d7:2e:9e:1f:8c:b6:a2:c0: f3:da:1a:82:c1:bf:00:a6:95:f1:32:a5:25:2f:70:07:a2:ef: dc:43:af:2c:18:80:71:ab:6a:8f:9e:d9:08:c6:18:dd:2b:37: 0d:9a:2a:51:78:c6:2a:76:ad:95:a1:a0:15:7d:ed:a9:a7:3b: 76:5b:09:b9:70:a2:83:34:14:76:ea:58:4c:88:94:97:5d:0d: d8:c6:6e:38:2f:80:f0:2f:50:7b:f8:25:4b:c1:7c:18:0c:65: 31:64:03:66:00:05:4a:bf:6a:93:8e:54:a3:22:bc:be:9e:9d: 5c:f9:bc:f6:a3:1b:bc:3a:76:d8:5b:df:f6:bd:c6:98:2d:de: 56:91:46:ed -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUP2AUtVJYeCzjM3SDgx7p7q9KxWQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTYyNloX DTI3MDMwMzA2MjEyNlowMzExMC8GA1UEAxMoN0I0NTE3ODc3OTI5OEU1OUJBOEZG QTM0NDNCMEZDNDU1OUFDNzU5MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANBpp0N6ZJndZNiHz3B4snGphs5L93Vj2fxPHNpDI1z5jhAoAhf5l2QIyQgF BF3S8s/lTomHW3iUso2481JF8S/4q8cgfQxhpRoOGRi1Gen9bOQGp3/YrBJWeLqH L7haJsxcRFY3eLGvcw6FU/wBattcQr5fCOCHsIIixfqdx1RtUJVHB9oo7buC5JjY +25HEUVuU/FtNlt4wFyk0JlkyyuSpQSCW1ZxOP9673R0E4aJF9C+WK3VKmgoBpsa 9OzTc17D8299/Kq2slmcut3tG01WpaQgAnQP32NJf+eJjLQaBzv1Gr2unjNjB9xY leTYnfl56VNSOAjgfakvqyqQi9kCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBR7RReH eSmOWbqP+jRDsPxFWax1kzAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTE0OC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qcIwDQYJKoZIhvcNAQELBQADggEBAAT8W9C6ZckXtYRoVyBnFJrH8DXtrYynTy78 iZLxu+uVAi2VkEdvVHs4/k4VsNo2SGMJ3EVZs6Umj09Tx6x2ldR1tpodhE1QL7W0 T8phDKKFU0W2jmFDwOJ7BfXXVR1iGCSIgzbjjM3IBwiIR6YkUSZ89BTEj6bXLp4f jLaiwPPaGoLBvwCmlfEypSUvcAei79xDrywYgHGrao+e2QjGGN0rNw2aKlF4xip2 rZWhoBV97amnO3ZbCblwooM0FHbqWEyIlJddDdjGbjgvgPAvUHv4JUvBfBgMZTFk A2YABUq/apOOVKMivL6enVz5vPajG7w6dthb3/a9xpgt3laRRu0= -----END CERTIFICATE-----Generated at Sat Mar 28 11:45:49 2026 by rpki-client