$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145165.roa File: AS145165.roa (raw, json) Hash identifier: WUZz1K4S85xklkZY4r93ceMLYGjVhf55OYdzy7JGYOQ= Subject key identifier: FB:5F:2E:9E:7D:A4:E5:03:47:40:36:B5:23:55:AB:6E:06:88:8C:7B Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 0D7D109A284F8852BB49E7F7C551456CB0FFD11F Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145165.roa Signing time: Wed 04 Mar 2026 06:20:10 +0000 ROA not before: Wed 04 Mar 2026 06:15:10 +0000 ROA not after: Wed 03 Mar 2027 06:20:10 +0000 asID: 145165 IP address blocks: 240a:a9d3::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:7d:10:9a:28:4f:88:52:bb:49:e7:f7:c5:51:45:6c:b0:ff:d1:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:15:10 2026 GMT Not After : Mar 3 06:20:10 2027 GMT Subject: CN=FB5F2E9E7DA4E503474036B52355AB6E06888C7B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:54:c7:32:4f:dd:ed:7b:78:7b:f3:a7:b7:d4: 4c:56:68:69:e5:d5:90:7c:33:c4:6a:66:99:a1:27: 55:0c:dd:1f:79:d4:0f:37:64:b6:5c:ef:8c:f0:e4: 09:c8:8d:fa:23:e3:33:8c:d7:ca:69:15:58:0a:33: f3:cb:c9:ae:b4:a0:61:57:53:02:9e:3f:de:3c:b0: 00:f9:a6:3c:29:ff:da:5b:a7:a9:90:08:63:19:12: 43:a5:2f:95:e6:61:5f:63:04:ea:7a:63:6d:9e:ac: ea:40:78:e0:82:90:dd:cf:c9:de:fb:3f:77:af:6a: 8c:c8:5f:01:5a:98:10:37:70:88:63:0f:a9:74:3b: 03:73:a8:37:3e:8c:07:cd:b1:11:30:ce:14:1b:49: ca:bd:a7:3a:6f:40:9d:fd:87:80:1c:12:ca:8d:e4: 9e:fd:22:d2:ba:e2:b7:cc:a3:29:5e:15:b8:82:d8: 09:8b:03:fd:8f:25:b9:53:45:5a:dd:47:d2:c2:b5: 48:ad:3a:32:64:ac:bc:a3:b6:c5:f7:b8:ff:47:d7: e3:e9:20:eb:2e:ad:0c:e3:7a:a7:aa:93:2f:88:81: f5:61:79:72:69:d7:45:9f:c2:a3:e5:2c:70:8f:b1: 97:ae:be:91:12:47:b0:84:8b:ed:98:6c:d9:f0:78: 0b:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:5F:2E:9E:7D:A4:E5:03:47:40:36:B5:23:55:AB:6E:06:88:8C:7B X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145165.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a9d3::/32 Signature Algorithm: sha256WithRSAEncryption af:ec:d4:81:76:41:3d:90:a1:00:2c:6a:23:f0:90:f1:e8:39: bd:6b:59:d7:75:ab:34:60:e7:0e:0c:9b:87:d4:34:bd:38:02: 12:58:2d:4c:cf:cf:c7:08:45:93:7b:32:b6:7a:d7:40:09:04: 98:57:14:82:d1:4c:78:f1:59:dd:f2:fa:02:51:73:4e:4b:ad: 91:08:6e:22:7a:de:a6:71:80:b9:bc:31:a0:c3:18:89:6c:14: 6c:f6:dd:ac:a2:4b:e7:ef:91:ab:93:f3:10:57:c0:fb:25:20: 8b:7e:9a:87:88:98:97:6d:d6:36:8f:60:50:22:35:f7:f5:57: 22:d8:1c:07:9c:02:a0:26:17:55:89:3d:dd:9b:81:38:b4:a1: 12:00:d5:57:98:97:6c:5e:ed:a4:ae:da:cc:3b:0c:93:1a:b1: 95:1d:38:cf:4c:73:79:72:1f:02:3d:f0:ba:53:75:cb:48:ba: 9b:f3:14:f6:b9:ff:f8:74:78:d3:90:17:18:9c:19:b5:dc:c9: 72:50:bd:24:06:dc:51:82:90:b2:9c:24:9e:4b:8d:77:b3:f0: 20:ff:0a:b3:22:20:17:12:45:43:35:88:db:6d:ea:14:f2:6f: b2:6f:b3:35:e5:a7:13:5d:74:ef:5b:89:62:0c:0b:5e:4f:9d: 9e:6e:e0:42 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUDX0QmihPiFK7Sef3xVFFbLD/0R8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTUxMFoX DTI3MDMwMzA2MjAxMFowMzExMC8GA1UEAxMoRkI1RjJFOUU3REE0RTUwMzQ3NDAz NkI1MjM1NUFCNkUwNjg4OEM3QjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM9UxzJP3e17eHvzp7fUTFZoaeXVkHwzxGpmmaEnVQzdH3nUDzdktlzvjPDk CciN+iPjM4zXymkVWAoz88vJrrSgYVdTAp4/3jywAPmmPCn/2lunqZAIYxkSQ6Uv leZhX2ME6npjbZ6s6kB44IKQ3c/J3vs/d69qjMhfAVqYEDdwiGMPqXQ7A3OoNz6M B82xETDOFBtJyr2nOm9Anf2HgBwSyo3knv0i0rrit8yjKV4VuILYCYsD/Y8luVNF Wt1H0sK1SK06MmSsvKO2xfe4/0fX4+kg6y6tDON6p6qTL4iB9WF5cmnXRZ/Co+Us cI+xl66+kRJHsISL7Zhs2fB4C/kCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBT7Xy6e faTlA0dANrUjVatuBoiMezAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTE2NS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qdMwDQYJKoZIhvcNAQELBQADggEBAK/s1IF2QT2QoQAsaiPwkPHoOb1rWdd1qzRg 5w4Mm4fUNL04AhJYLUzPz8cIRZN7MrZ610AJBJhXFILRTHjxWd3y+gJRc05LrZEI biJ63qZxgLm8MaDDGIlsFGz23ayiS+fvkauT8xBXwPslIIt+moeImJdt1jaPYFAi Nff1VyLYHAecAqAmF1WJPd2bgTi0oRIA1VeYl2xe7aSu2sw7DJMasZUdOM9Mc3ly HwI98LpTdctIupvzFPa5//h0eNOQFxicGbXcyXJQvSQG3FGCkLKcJJ5LjXez8CD/ CrMiIBcSRUM1iNtt6hTyb7JvszXlpxNddO9biWIMC15PnZ5u4EI= -----END CERTIFICATE-----Generated at Sat Mar 28 11:41:06 2026 by rpki-client