$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145160.roa File: AS145160.roa (raw, json) Hash identifier: 7/iQ9b5XmYnsHwQFNOU4PWijAHEzeYkRTvF3flzA7dc= Subject key identifier: 01:74:1B:56:F0:2B:98:6A:C1:CA:67:A5:13:11:37:6D:3A:96:19:CE Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 4461F3367C9C028B760EEB9BC70FCEE8846F1929 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145160.roa Signing time: Wed 04 Mar 2026 06:21:31 +0000 ROA not before: Wed 04 Mar 2026 06:16:31 +0000 ROA not after: Wed 03 Mar 2027 06:21:31 +0000 asID: 145160 IP address blocks: 240a:a9ce::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:61:f3:36:7c:9c:02:8b:76:0e:eb:9b:c7:0f:ce:e8:84:6f:19:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:16:31 2026 GMT Not After : Mar 3 06:21:31 2027 GMT Subject: CN=01741B56F02B986AC1CA67A51311376D3A9619CE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:9d:3a:d7:30:4e:40:1f:09:21:75:7f:99:d2: d5:b9:22:25:64:02:e8:9d:af:23:09:74:78:ad:39: 4d:21:12:e3:4a:ff:89:fd:0b:c7:d3:d6:d2:77:27: 69:30:46:6f:66:6f:11:3f:ea:0c:03:90:ea:43:54: 72:9b:45:9e:96:5d:8e:3b:c1:b7:51:87:24:c8:1a: bf:8e:63:c5:f1:e0:ce:db:bc:14:8e:5d:6d:a5:8e: e2:3c:df:52:78:8a:28:5c:52:27:87:ef:1e:c4:a9: 1d:99:86:07:18:fe:22:1d:c4:eb:fb:38:d7:c0:24: 89:34:ff:2c:36:f5:a3:a3:a1:02:ae:89:9f:1f:8d: 11:eb:69:3b:53:d4:64:0d:89:df:dd:bf:c2:8d:2c: 5a:f5:ad:04:9e:c7:da:26:c4:44:59:a1:c7:b6:79: e4:c2:0b:ee:03:e5:13:f1:27:82:56:c7:45:b3:59: 37:0e:ea:b8:6f:5d:0b:96:07:c4:6d:85:3d:eb:a3: aa:0e:a0:c1:b0:0c:86:4c:35:a3:9f:d4:66:82:a3: 7a:98:81:c7:52:c4:4c:10:0c:b9:33:16:5b:6b:ac: 2c:91:63:a5:ab:d2:f1:a2:16:32:f5:15:79:84:a7: c8:34:3c:cd:05:f0:4c:49:d4:16:88:fb:1c:4b:ca: 91:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:74:1B:56:F0:2B:98:6A:C1:CA:67:A5:13:11:37:6D:3A:96:19:CE X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145160.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a9ce::/32 Signature Algorithm: sha256WithRSAEncryption 49:dc:ee:a4:12:dc:c7:2e:a9:12:11:d6:41:db:00:2b:dc:8f: c1:5e:34:32:96:ec:98:4b:3f:5e:84:40:01:9f:cc:ef:65:7f: fe:86:71:6f:af:51:e4:c6:eb:b6:cd:7d:47:2e:9b:54:42:60: 79:00:fa:e7:55:0b:3d:2b:8a:ce:85:f5:41:7d:ea:2a:00:bc: 0f:ba:3c:1c:94:b5:06:66:44:f3:24:38:e7:7b:87:ca:89:1e: 35:b2:b4:91:54:8b:64:53:c6:8c:3b:e4:2c:5b:cc:7c:94:f7: aa:e3:0e:da:11:38:5b:44:58:03:46:2b:bc:fd:ba:a3:d8:30: 8e:de:1f:91:76:70:12:33:f7:de:e9:42:e9:8a:d1:c4:08:b8: 8b:ff:b7:04:7f:42:f3:9d:cf:89:68:3c:39:54:a2:fa:be:56: 35:27:10:29:c9:44:a5:f1:22:97:5f:be:87:1b:55:9f:2c:b0: 1f:94:c6:8f:03:45:2a:05:16:b3:98:d8:7f:2a:05:dc:79:ce: d7:92:01:aa:dd:86:2a:52:60:08:27:4e:e8:34:6e:0c:3c:ac: 37:ec:bb:f9:10:fd:8a:86:4f:81:d8:61:19:cb:3a:d7:82:4e: ec:f1:1b:9d:c9:f5:b3:e0:2b:c8:60:53:43:04:91:64:b1:0c: fd:b1:f8:8f -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIURGHzNnycAot2Duubxw/O6IRvGSkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTYzMVoX DTI3MDMwMzA2MjEzMVowMzExMC8GA1UEAxMoMDE3NDFCNTZGMDJCOTg2QUMxQ0E2 N0E1MTMxMTM3NkQzQTk2MTlDRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALudOtcwTkAfCSF1f5nS1bkiJWQC6J2vIwl0eK05TSES40r/if0Lx9PW0ncn aTBGb2ZvET/qDAOQ6kNUcptFnpZdjjvBt1GHJMgav45jxfHgztu8FI5dbaWO4jzf UniKKFxSJ4fvHsSpHZmGBxj+Ih3E6/s418AkiTT/LDb1o6OhAq6Jnx+NEetpO1PU ZA2J392/wo0sWvWtBJ7H2ibERFmhx7Z55MIL7gPlE/EnglbHRbNZNw7quG9dC5YH xG2FPeujqg6gwbAMhkw1o5/UZoKjepiBx1LETBAMuTMWW2usLJFjpavS8aIWMvUV eYSnyDQ8zQXwTEnUFoj7HEvKkUMCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQBdBtW 8CuYasHKZ6UTETdtOpYZzjAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTE2MC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qc4wDQYJKoZIhvcNAQELBQADggEBAEnc7qQS3McuqRIR1kHbACvcj8FeNDKW7JhL P16EQAGfzO9lf/6GcW+vUeTG67bNfUcum1RCYHkA+udVCz0ris6F9UF96ioAvA+6 PByUtQZmRPMkOOd7h8qJHjWytJFUi2RTxow75CxbzHyU96rjDtoROFtEWANGK7z9 uqPYMI7eH5F2cBIz997pQumK0cQIuIv/twR/QvOdz4loPDlUovq+VjUnECnJRKXx IpdfvocbVZ8ssB+Uxo8DRSoFFrOY2H8qBdx5zteSAardhipSYAgnTug0bgw8rDfs u/kQ/YqGT4HYYRnLOteCTuzxG53J9bPgK8hgU0MEkWSxDP2x+I8= -----END CERTIFICATE-----Generated at Sat Mar 28 15:54:34 2026 by rpki-client