$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145154.roa File: AS145154.roa (raw, json) Hash identifier: MO4zJuWVq2Zc8OK38YlPc00US0q+Cii8YFBZfA7f7sM= Subject key identifier: 53:2D:95:8E:F4:B3:DF:E6:10:99:4A:AA:FE:68:EE:92:26:90:DD:25 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 34A09431D9597D29536CA7FC9B7BC8218E49E946 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145154.roa Signing time: Wed 04 Mar 2026 06:21:24 +0000 ROA not before: Wed 04 Mar 2026 06:16:24 +0000 ROA not after: Wed 03 Mar 2027 06:21:24 +0000 asID: 145154 IP address blocks: 240a:a9c8::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:a0:94:31:d9:59:7d:29:53:6c:a7:fc:9b:7b:c8:21:8e:49:e9:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:16:24 2026 GMT Not After : Mar 3 06:21:24 2027 GMT Subject: CN=532D958EF4B3DFE610994AAAFE68EE922690DD25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:a2:e0:7b:b3:c4:ec:fe:57:3e:74:8c:72:46: f9:2e:2c:af:f6:2b:8f:8c:26:9b:91:5d:6d:20:49: 6d:40:9c:35:17:d7:19:8b:2e:94:92:e9:64:71:39: 25:78:84:29:a1:3f:f2:2a:39:59:1f:af:53:16:0e: 12:22:9a:e7:6e:e4:99:d9:c6:c9:e7:28:ba:65:f0: 70:7b:76:3a:db:54:7e:a7:d2:03:1b:fb:ba:e9:52: de:41:15:4a:d1:a3:5d:57:de:03:51:1b:01:cc:c6: 27:7a:07:d8:7e:f4:46:9d:73:6a:5e:ca:bf:7f:26: c9:3a:8b:5a:9a:30:42:21:6e:07:e3:a1:fb:62:c7: ca:26:8d:02:0d:1b:dc:7f:a8:2d:00:68:0e:14:2b: c0:08:ed:dd:ea:3c:12:8b:c0:a6:d3:e0:8c:b1:b8: bc:5e:b9:3d:f9:d0:06:1b:1c:0d:9e:0f:9a:a3:af: d3:21:c8:e3:9e:9a:b7:c7:06:33:68:8a:30:a7:81: 52:7d:44:45:14:15:d9:be:21:5a:35:fa:e8:ab:56: 7e:4e:c5:6b:2e:e2:07:9e:74:84:29:c7:55:47:b3: 85:e3:db:1f:70:95:54:9d:f4:38:95:c0:47:e1:78: 6d:7f:4b:54:8e:df:c8:51:5c:4b:f3:74:04:62:cb: 33:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:2D:95:8E:F4:B3:DF:E6:10:99:4A:AA:FE:68:EE:92:26:90:DD:25 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145154.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a9c8::/32 Signature Algorithm: sha256WithRSAEncryption b8:7c:77:56:6d:78:ae:c0:cf:fc:e8:b4:bb:12:1a:c7:83:11: 23:3f:d3:a3:a7:31:64:63:c6:39:90:b9:58:a5:58:3b:93:ab: c9:95:77:05:8d:68:4c:f4:c2:17:5b:36:27:a0:b2:4c:48:e5: e5:23:b9:20:95:1f:ef:42:f5:30:96:eb:a2:de:04:90:d8:5e: 0e:83:43:34:81:44:d8:c5:1c:3c:da:3d:1d:4d:9e:f6:d0:e4: 6b:94:17:ed:cd:28:c6:c9:22:1b:f4:7d:6b:41:99:63:a9:b9: ac:c7:65:33:78:75:a1:16:a4:1c:9d:5a:e7:89:39:51:46:7e: 6a:64:82:25:14:d8:b8:a2:bc:20:30:b7:5d:d2:19:76:92:4b: 73:8a:bb:8c:6f:cf:36:f4:fc:1d:55:41:a3:f0:3b:97:35:e8: a5:92:5a:84:11:09:a2:42:e6:bb:f0:7b:b2:4f:68:be:a8:a3: a7:24:ee:97:19:51:e3:1a:32:42:92:43:e2:d8:45:f2:cd:04: 4b:de:51:ee:b3:a3:12:a4:41:7e:74:ec:8b:f5:e3:c9:6e:1d: 95:15:bd:9a:08:3f:08:a0:6c:fd:65:20:bb:8b:80:2c:89:7b: 46:d9:4e:f0:83:cd:5d:fd:d0:8d:26:19:2f:f7:c6:f9:05:9d: db:fb:38:85 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUNKCUMdlZfSlTbKf8m3vIIY5J6UYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTYyNFoX DTI3MDMwMzA2MjEyNFowMzExMC8GA1UEAxMoNTMyRDk1OEVGNEIzREZFNjEwOTk0 QUFBRkU2OEVFOTIyNjkwREQyNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANGi4HuzxOz+Vz50jHJG+S4sr/Yrj4wmm5FdbSBJbUCcNRfXGYsulJLpZHE5 JXiEKaE/8io5WR+vUxYOEiKa527kmdnGyecoumXwcHt2OttUfqfSAxv7uulS3kEV StGjXVfeA1EbAczGJ3oH2H70Rp1zal7Kv38myTqLWpowQiFuB+Oh+2LHyiaNAg0b 3H+oLQBoDhQrwAjt3eo8EovAptPgjLG4vF65PfnQBhscDZ4PmqOv0yHI456at8cG M2iKMKeBUn1ERRQV2b4hWjX66KtWfk7Fay7iB550hCnHVUezhePbH3CVVJ30OJXA R+F4bX9LVI7fyFFcS/N0BGLLM40CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRTLZWO 9LPf5hCZSqr+aO6SJpDdJTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTE1NC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qcgwDQYJKoZIhvcNAQELBQADggEBALh8d1ZteK7Az/zotLsSGseDESM/06OnMWRj xjmQuVilWDuTq8mVdwWNaEz0whdbNiegskxI5eUjuSCVH+9C9TCW66LeBJDYXg6D QzSBRNjFHDzaPR1NnvbQ5GuUF+3NKMbJIhv0fWtBmWOpuazHZTN4daEWpBydWueJ OVFGfmpkgiUU2LiivCAwt13SGXaSS3OKu4xvzzb0/B1VQaPwO5c16KWSWoQRCaJC 5rvwe7JPaL6oo6ck7pcZUeMaMkKSQ+LYRfLNBEveUe6zoxKkQX507Iv148luHZUV vZoIPwigbP1lILuLgCyJe0bZTvCDzV390I0mGS/3xvkFndv7OIU= -----END CERTIFICATE-----Generated at Sat Mar 28 13:15:11 2026 by rpki-client