$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145156.roa File: AS145156.roa (raw, json) Hash identifier: zZv10evvLWMLLlGUq5yQdgdl3Imswlfwo/PSJ3o+Ta0= Subject key identifier: 53:BC:9C:CE:BD:EC:04:0A:2E:09:D6:06:21:90:22:74:B6:AE:40:85 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 5F8A1EFE231C29D4F155AD19E51E2829CB7598D7 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145156.roa Signing time: Wed 04 Mar 2026 06:22:04 +0000 ROA not before: Wed 04 Mar 2026 06:17:04 +0000 ROA not after: Wed 03 Mar 2027 06:22:04 +0000 asID: 145156 IP address blocks: 240a:a9ca::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:8a:1e:fe:23:1c:29:d4:f1:55:ad:19:e5:1e:28:29:cb:75:98:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:17:04 2026 GMT Not After : Mar 3 06:22:04 2027 GMT Subject: CN=53BC9CCEBDEC040A2E09D60621902274B6AE4085 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:db:d4:2b:1d:6b:b8:f1:bd:03:83:41:84:4b: 70:1d:9a:27:1a:0c:63:2c:45:69:e2:f2:4f:b9:4a: f5:2a:e5:21:6e:09:c6:f6:4d:d1:4f:42:69:c2:f6: d3:0e:cf:19:80:ba:f8:8b:77:0a:22:4f:01:bf:f5: 07:66:5e:ad:e0:8c:82:5d:ab:e4:62:af:a4:53:a9: 8f:f3:c0:15:4e:66:01:6d:d6:ca:55:f3:c0:5f:54: b3:0b:d9:ef:48:57:38:03:35:48:6e:9a:22:95:26: 5c:00:b5:97:ca:af:32:fd:4d:78:2d:79:92:f3:a0: 49:5c:c9:3c:4a:81:2f:af:5e:75:eb:9c:92:b2:3f: 39:6a:49:dc:1c:ab:70:f9:d9:f3:4f:04:a5:9f:2b: 32:18:29:0e:05:c4:d7:44:e9:87:a7:f1:97:2b:cf: 9c:3b:d4:a7:34:f6:74:e3:8c:02:c6:11:ef:ea:86: 9f:a7:d1:3f:33:ef:ee:e0:ef:50:a7:84:6b:96:53: 72:96:ed:b1:5c:4d:42:48:c8:78:fd:f7:22:82:55: b8:7b:bf:1e:af:3b:8d:24:54:d5:e5:38:c4:34:8f: e3:57:bb:e4:b9:37:f2:e4:fc:a9:c0:d6:bb:a9:97: 1e:27:58:13:85:23:cf:54:de:23:c9:f1:64:f6:19: 22:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:BC:9C:CE:BD:EC:04:0A:2E:09:D6:06:21:90:22:74:B6:AE:40:85 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145156.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a9ca::/32 Signature Algorithm: sha256WithRSAEncryption 90:2b:88:c8:23:71:8f:2d:05:e0:97:7d:07:db:f4:62:8b:58: 60:3f:6c:a1:fb:c5:1b:38:57:55:89:01:4f:b9:1c:0b:86:81: a3:49:b8:eb:17:9f:b5:f9:80:02:53:a4:5b:dc:09:8b:08:dc: a8:a5:c0:27:34:95:6b:d4:80:98:f3:78:12:c5:02:96:ac:c5: 23:f1:48:cf:f8:98:a7:45:86:d8:ba:ea:4f:a9:a0:9f:16:28: 29:de:55:af:36:17:8a:3b:b8:8a:15:79:a1:c3:e3:56:4e:7b: d7:32:15:d0:a4:c1:ee:e2:92:aa:4f:fd:6f:cc:2d:a1:df:28: 28:90:b8:2c:6b:a5:32:21:62:c1:00:43:02:9d:c8:44:53:27: 3a:1f:1a:27:22:dc:eb:e9:ec:e1:1a:71:b9:e4:61:33:0f:58: ba:4f:65:7f:b8:fd:24:74:3e:9f:74:8a:62:2e:60:25:2a:23: ec:6f:58:67:b6:e0:fd:cb:b0:67:75:11:d4:85:97:cd:8b:c6: 1e:90:60:51:33:23:62:b5:90:d2:04:e7:f6:93:d6:7d:d9:2a: a8:a5:b2:ee:09:8e:9e:8a:64:e4:90:cc:c5:fd:6f:76:22:d7: ba:49:0c:6e:ab:e8:7c:ce:d2:c6:53:55:5c:5d:b1:0f:db:92: 77:08:63:4b -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUX4oe/iMcKdTxVa0Z5R4oKct1mNcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTcwNFoX DTI3MDMwMzA2MjIwNFowMzExMC8GA1UEAxMoNTNCQzlDQ0VCREVDMDQwQTJFMDlE NjA2MjE5MDIyNzRCNkFFNDA4NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK/b1Csda7jxvQODQYRLcB2aJxoMYyxFaeLyT7lK9SrlIW4JxvZN0U9CacL2 0w7PGYC6+It3CiJPAb/1B2ZereCMgl2r5GKvpFOpj/PAFU5mAW3WylXzwF9UswvZ 70hXOAM1SG6aIpUmXAC1l8qvMv1NeC15kvOgSVzJPEqBL69edeuckrI/OWpJ3Byr cPnZ808EpZ8rMhgpDgXE10Tph6fxlyvPnDvUpzT2dOOMAsYR7+qGn6fRPzPv7uDv UKeEa5ZTcpbtsVxNQkjIeP33IoJVuHu/Hq87jSRU1eU4xDSP41e75Lk38uT8qcDW u6mXHidYE4Ujz1TeI8nxZPYZIl0CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRTvJzO vewECi4J1gYhkCJ0tq5AhTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTE1Ni5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qcowDQYJKoZIhvcNAQELBQADggEBAJAriMgjcY8tBeCXfQfb9GKLWGA/bKH7xRs4 V1WJAU+5HAuGgaNJuOsXn7X5gAJTpFvcCYsI3KilwCc0lWvUgJjzeBLFApasxSPx SM/4mKdFhti66k+poJ8WKCneVa82F4o7uIoVeaHD41ZOe9cyFdCkwe7ikqpP/W/M LaHfKCiQuCxrpTIhYsEAQwKdyERTJzofGici3Ovp7OEacbnkYTMPWLpPZX+4/SR0 Pp90imIuYCUqI+xvWGe24P3LsGd1EdSFl82Lxh6QYFEzI2K1kNIE5/aT1n3ZKqil su4Jjp6KZOSQzMX9b3Yi17pJDG6r6HzO0sZTVVxdsQ/bkncIY0s= -----END CERTIFICATE-----Generated at Sat Mar 28 15:54:32 2026 by rpki-client