$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145159.roa File: AS145159.roa (raw, json) Hash identifier: VuJULtsQ4IpOKaUChX0L7iRJq7Ljgbuvk/zlSKuWzRI= Subject key identifier: 69:DE:56:6E:B1:77:E8:DE:5E:7C:C5:EC:72:FA:C4:EE:F6:68:FA:2B Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 201347D22C26584943E9902D3D6350BA819A0FA0 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145159.roa Signing time: Wed 04 Mar 2026 06:22:11 +0000 ROA not before: Wed 04 Mar 2026 06:17:11 +0000 ROA not after: Wed 03 Mar 2027 06:22:11 +0000 asID: 145159 IP address blocks: 240a:a9cd::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:13:47:d2:2c:26:58:49:43:e9:90:2d:3d:63:50:ba:81:9a:0f:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:17:11 2026 GMT Not After : Mar 3 06:22:11 2027 GMT Subject: CN=69DE566EB177E8DE5E7CC5EC72FAC4EEF668FA2B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:ce:45:be:0a:bc:c0:bd:e7:61:15:56:46:f4: 29:b5:a5:12:7d:9b:b0:95:82:bb:21:db:de:da:b9: 9b:86:17:27:9c:d1:01:8d:47:50:71:d8:c9:8d:30: 2d:67:35:36:47:09:b2:58:f8:f5:7b:73:81:4d:2e: 68:05:54:f6:49:e2:4f:a2:50:44:39:9b:ee:48:e4: 16:ba:0b:b8:ca:df:ab:61:c9:7c:8f:0d:08:03:5f: ea:5f:20:ce:68:38:12:42:cd:1a:d4:ab:6c:81:7d: 4b:aa:13:75:71:b3:5d:4c:05:d3:f0:28:a2:21:7e: 34:f4:43:b3:fb:20:9e:0a:d8:a1:24:78:5c:01:7d: 08:18:70:20:2b:61:55:4e:ff:e6:41:5b:25:15:5a: 31:9f:8d:9c:c5:91:c5:42:a8:5d:5a:5f:6c:77:24: 82:a6:26:b5:44:8c:70:bd:ad:90:ea:31:75:28:f3: 0c:d1:60:20:51:a2:2e:3e:18:9a:40:43:c5:00:8e: 7d:cc:28:56:fa:2d:ed:37:89:39:88:ac:19:dd:88: 9f:13:67:d4:41:9e:79:90:12:86:48:e3:b6:d5:00: 68:16:2b:1c:fd:2e:dc:90:a7:24:4e:6c:e1:15:dd: 21:df:78:bb:3c:19:5b:4d:d6:86:1f:b7:63:ad:2c: 34:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:DE:56:6E:B1:77:E8:DE:5E:7C:C5:EC:72:FA:C4:EE:F6:68:FA:2B X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145159.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a9cd::/32 Signature Algorithm: sha256WithRSAEncryption 94:6c:59:0c:10:e7:fd:88:90:f3:d6:30:2f:7e:c1:94:2a:37: f5:d6:69:4d:c5:36:28:1a:cc:8a:e1:98:51:78:80:03:8f:be: 3a:31:54:2e:73:43:31:a4:28:d7:6e:58:f7:80:af:68:9f:64: 38:a7:da:e0:7c:7a:a8:5f:87:70:9e:bd:96:57:13:6d:21:b9: 51:87:72:3d:94:f4:30:93:15:ae:1c:a5:c6:30:94:37:33:a6: 55:46:88:6f:a4:1a:4a:2d:a9:cd:83:55:5e:aa:2b:d9:4b:de: b3:e0:b7:37:e4:6e:84:1c:dc:7c:cb:73:99:7a:46:91:52:5b: 94:1d:e9:af:fb:d4:e3:af:a3:cf:4c:a3:31:6a:07:5f:ed:f1: 9b:4d:d1:5b:5a:af:7a:8a:5d:c7:93:65:9a:e2:a8:c1:33:c1: c4:b5:9e:14:f8:fe:9a:7d:3b:90:ac:81:be:66:42:86:e7:55: c5:62:79:fa:52:97:6f:a5:22:53:95:e5:a4:66:b1:2e:9d:43: e0:f1:c9:5d:1e:fe:8b:78:ac:a7:51:47:a8:8c:66:62:d2:1b: f7:e6:5e:26:a4:12:ed:26:44:1d:b2:07:19:5b:f6:ae:3d:39: 1a:5b:fc:b7:a9:fe:65:03:c3:75:e7:cb:df:ab:80:28:e1:18: 22:90:04:dd -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUIBNH0iwmWElD6ZAtPWNQuoGaD6AwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTcxMVoX DTI3MDMwMzA2MjIxMVowMzExMC8GA1UEAxMoNjlERTU2NkVCMTc3RThERTVFN0ND NUVDNzJGQUM0RUVGNjY4RkEyQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALnORb4KvMC952EVVkb0KbWlEn2bsJWCuyHb3tq5m4YXJ5zRAY1HUHHYyY0w LWc1NkcJslj49XtzgU0uaAVU9kniT6JQRDmb7kjkFroLuMrfq2HJfI8NCANf6l8g zmg4EkLNGtSrbIF9S6oTdXGzXUwF0/AooiF+NPRDs/sgngrYoSR4XAF9CBhwICth VU7/5kFbJRVaMZ+NnMWRxUKoXVpfbHckgqYmtUSMcL2tkOoxdSjzDNFgIFGiLj4Y mkBDxQCOfcwoVvot7TeJOYisGd2InxNn1EGeeZAShkjjttUAaBYrHP0u3JCnJE5s 4RXdId94uzwZW03Whh+3Y60sNHsCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRp3lZu sXfo3l58xexy+sTu9mj6KzAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTE1OS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qc0wDQYJKoZIhvcNAQELBQADggEBAJRsWQwQ5/2IkPPWMC9+wZQqN/XWaU3FNiga zIrhmFF4gAOPvjoxVC5zQzGkKNduWPeAr2ifZDin2uB8eqhfh3CevZZXE20huVGH cj2U9DCTFa4cpcYwlDczplVGiG+kGkotqc2DVV6qK9lL3rPgtzfkboQc3HzLc5l6 RpFSW5Qd6a/71OOvo89MozFqB1/t8ZtN0Vtar3qKXceTZZriqMEzwcS1nhT4/pp9 O5Csgb5mQobnVcViefpSl2+lIlOV5aRmsS6dQ+DxyV0e/ot4rKdRR6iMZmLSG/fm XiakEu0mRB2yBxlb9q49ORpb/Lep/mUDw3Xny9+rgCjhGCKQBN0= -----END CERTIFICATE-----Generated at Sat Mar 28 15:53:30 2026 by rpki-client