$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145155.roa File: AS145155.roa (raw, json) Hash identifier: DpXg6YUZoIwRARsRSg0PDuGOeAST8VC0PkVJu00SShk= Subject key identifier: FE:70:CD:31:0E:44:7A:3E:8E:3B:A1:D0:E2:9E:43:D2:0C:FE:EA:CF Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 7116C60A130895F85626EC65E247C9F50A0F9DFD Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145155.roa Signing time: Wed 04 Mar 2026 06:19:49 +0000 ROA not before: Wed 04 Mar 2026 06:14:49 +0000 ROA not after: Wed 03 Mar 2027 06:19:49 +0000 asID: 145155 IP address blocks: 240a:a9c9::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:16:c6:0a:13:08:95:f8:56:26:ec:65:e2:47:c9:f5:0a:0f:9d:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:14:49 2026 GMT Not After : Mar 3 06:19:49 2027 GMT Subject: CN=FE70CD310E447A3E8E3BA1D0E29E43D20CFEEACF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:2f:7c:22:fa:5c:6f:92:a1:23:7b:38:4a:51: 93:15:4e:6f:9b:85:18:a9:1f:a3:45:48:29:36:72: 72:a9:5f:1e:44:d6:3e:df:eb:fc:d2:62:2b:d6:ab: 86:a3:6b:4b:9a:ec:b8:20:59:22:be:81:39:48:23: ec:1e:42:6e:f1:43:30:40:f7:4d:9d:96:85:be:71: a4:50:2b:82:90:ec:e9:11:5d:8c:d3:93:19:20:fc: 59:c5:ab:a2:04:88:e3:f4:bb:be:37:04:3e:74:a1: 64:20:50:24:43:1f:de:7f:04:f1:9a:08:90:16:d7: 5e:26:8d:61:45:c7:e4:c8:b1:e6:57:8f:ea:74:9c: 7d:15:4a:f0:a2:92:ad:cc:72:b0:22:37:92:fe:6e: ad:2b:4c:85:7e:dd:e1:4c:50:2d:f3:a0:44:4d:29: 65:76:93:2f:7f:e2:a0:f3:cd:be:5e:09:38:78:c7: 20:64:70:01:6b:47:17:77:8c:35:48:31:a5:17:01: e5:68:65:90:42:31:4d:97:e6:e8:5c:3a:44:d7:c1: bb:ee:f4:df:d5:13:a9:3f:f6:88:81:6e:70:e0:2a: 8d:c6:5b:76:32:e4:d5:de:81:9f:a0:d6:41:9b:bb: e5:cf:fd:0e:48:59:82:7c:72:1a:7b:2e:af:ab:8d: 5d:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:70:CD:31:0E:44:7A:3E:8E:3B:A1:D0:E2:9E:43:D2:0C:FE:EA:CF X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145155.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a9c9::/32 Signature Algorithm: sha256WithRSAEncryption 44:a2:d6:49:d5:7f:6c:4b:93:b4:43:12:1d:39:a4:a2:73:ca: 43:ee:c9:49:7e:a7:8e:86:8f:10:ba:3f:4f:5f:15:58:4a:bb: 4f:82:6e:1e:b6:3c:ff:7c:15:9f:1a:36:1b:a5:e6:0a:6f:50: 92:2c:c3:98:54:d3:44:56:3c:5c:31:30:89:0a:12:99:8f:fd: 30:3b:8e:4d:b7:37:15:fe:78:be:a7:c3:68:ff:eb:9a:df:f6: fe:a5:33:7c:ef:91:a0:22:40:65:00:ef:d9:97:58:d2:76:71: de:b6:0a:37:1d:2c:3e:e5:fb:42:21:ad:b1:12:7e:ef:b7:4d: 13:7a:b6:e5:81:dc:9d:93:23:e7:79:fc:9e:83:dd:e0:a1:6a: 1b:4b:dd:93:e1:03:9b:3c:39:e1:36:bd:fe:59:2d:2c:a7:b5: 26:75:ec:a1:3e:3c:7d:c1:27:49:6e:ab:31:f9:8e:16:3e:d2: 2d:a3:f2:2e:e1:34:17:40:88:0f:5f:5f:ac:b7:91:f9:81:cf: ae:32:8e:d2:e4:5a:8a:d0:b5:8e:f4:d9:c5:14:1d:30:e1:da: 59:e8:73:51:a4:ca:40:dc:72:68:1d:92:89:fd:16:b4:54:cb: b6:75:9b:48:d1:d2:69:54:6e:55:50:ca:3c:ff:97:53:d6:75: a1:74:54:d6 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUcRbGChMIlfhWJuxl4kfJ9QoPnf0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTQ0OVoX DTI3MDMwMzA2MTk0OVowMzExMC8GA1UEAxMoRkU3MENEMzEwRTQ0N0EzRThFM0JB MUQwRTI5RTQzRDIwQ0ZFRUFDRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALEvfCL6XG+SoSN7OEpRkxVOb5uFGKkfo0VIKTZycqlfHkTWPt/r/NJiK9ar hqNrS5rsuCBZIr6BOUgj7B5CbvFDMED3TZ2Whb5xpFArgpDs6RFdjNOTGSD8WcWr ogSI4/S7vjcEPnShZCBQJEMf3n8E8ZoIkBbXXiaNYUXH5Mix5leP6nScfRVK8KKS rcxysCI3kv5urStMhX7d4UxQLfOgRE0pZXaTL3/ioPPNvl4JOHjHIGRwAWtHF3eM NUgxpRcB5WhlkEIxTZfm6Fw6RNfBu+7039UTqT/2iIFucOAqjcZbdjLk1d6Bn6DW QZu75c/9DkhZgnxyGnsur6uNXTMCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBT+cM0x DkR6Po47odDinkPSDP7qzzAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTE1NS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qckwDQYJKoZIhvcNAQELBQADggEBAESi1knVf2xLk7RDEh05pKJzykPuyUl+p46G jxC6P09fFVhKu0+Cbh62PP98FZ8aNhul5gpvUJIsw5hU00RWPFwxMIkKEpmP/TA7 jk23NxX+eL6nw2j/65rf9v6lM3zvkaAiQGUA79mXWNJ2cd62CjcdLD7l+0IhrbES fu+3TRN6tuWB3J2TI+d5/J6D3eChahtL3ZPhA5s8OeE2vf5ZLSyntSZ17KE+PH3B J0luqzH5jhY+0i2j8i7hNBdAiA9fX6y3kfmBz64yjtLkWorQtY702cUUHTDh2lno c1GkykDccmgdkon9FrRUy7Z1m0jR0mlUblVQyjz/l1PWdaF0VNY= -----END CERTIFICATE-----Generated at Sat Mar 28 11:44:59 2026 by rpki-client