$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145170.roa File: AS145170.roa (raw, json) Hash identifier: tBwhP9X6swWDSqZuSI7LPgFnkK7w3cAPS3P5EaV9OAc= Subject key identifier: 60:0C:EB:91:15:0A:53:A8:51:66:A1:5B:65:1D:CA:35:37:47:B2:A9 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 1F1A1DE1D9B0CA8F6BB8F336A0C4A97B8BA7BCCB Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145170.roa Signing time: Wed 04 Mar 2026 06:19:53 +0000 ROA not before: Wed 04 Mar 2026 06:14:53 +0000 ROA not after: Wed 03 Mar 2027 06:19:53 +0000 asID: 145170 IP address blocks: 240a:a9d8::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:1a:1d:e1:d9:b0:ca:8f:6b:b8:f3:36:a0:c4:a9:7b:8b:a7:bc:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:14:53 2026 GMT Not After : Mar 3 06:19:53 2027 GMT Subject: CN=600CEB91150A53A85166A15B651DCA353747B2A9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:c5:56:01:fe:4c:e2:ea:4b:0f:98:a7:17:99: 12:53:05:3c:c4:e0:aa:0e:0a:ef:cb:84:1c:fe:80: 4b:ed:49:aa:7c:f1:67:82:88:2e:a2:aa:20:92:2c: 69:38:5a:01:a2:da:88:99:6f:45:cd:fd:f2:30:01: 77:9e:bf:0d:58:c5:aa:0d:b1:df:02:d2:ab:24:c3: 00:f4:e7:df:15:f2:a1:6f:05:14:85:4f:22:13:3e: 0c:bd:82:07:c8:8d:d3:08:4f:e0:83:70:2c:2c:f2: b2:90:40:2d:cc:cc:d4:57:bc:24:f6:e5:3c:9e:55: 4c:c5:e6:5d:3b:4a:bb:be:6b:e8:49:33:66:83:7b: d3:f2:9f:26:ad:f8:b4:ed:f2:37:e7:d9:79:e3:99: 8a:d0:bf:83:03:2c:48:9b:6d:bc:39:15:a1:21:bf: 2b:46:70:63:26:96:fd:06:18:f5:e9:a2:6f:af:87: 79:d8:55:75:7a:29:4e:d7:58:05:80:97:cf:d9:12: f4:f6:ef:fe:db:14:2d:44:67:54:9c:13:61:99:6d: 8d:aa:38:0f:1c:f2:60:e6:de:52:56:a6:b6:9c:b5: a9:f7:01:f1:dc:86:e3:b0:cc:47:1d:97:ce:b3:d3: a1:3c:3a:d8:33:f3:f2:5b:1b:f7:97:2a:41:79:17: 57:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:0C:EB:91:15:0A:53:A8:51:66:A1:5B:65:1D:CA:35:37:47:B2:A9 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145170.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a9d8::/32 Signature Algorithm: sha256WithRSAEncryption a2:16:46:6b:5a:57:54:94:a2:3f:33:98:6f:4f:d9:5f:a4:d2: ef:2d:1a:e8:af:e5:ed:17:7c:9a:cf:1f:fb:8b:25:fb:9d:09: a0:a4:ac:47:57:70:1e:7a:d5:58:7d:57:e9:21:ff:e3:7e:cb: ad:83:9b:fa:f3:7f:e6:67:dd:63:a3:df:87:ea:75:80:8b:b3: 18:36:e7:f1:04:42:ea:bb:7b:80:6d:23:eb:4e:0d:8e:18:7f: b2:57:f9:13:2e:8b:84:87:52:e2:1e:09:f4:a6:73:de:35:72: b7:29:91:6a:06:6b:62:82:09:49:d2:71:eb:e2:9f:96:11:a7: 59:ee:79:24:7f:3f:ef:72:e9:5f:6e:fa:97:61:0c:5f:8f:96: 51:c0:88:f3:39:b3:ec:ba:f4:22:13:03:f2:47:01:0a:21:fb: c9:ca:60:e9:7b:ee:6f:5a:c5:7a:53:68:a3:cb:0a:44:b2:47: a1:7c:87:e2:29:c5:11:19:dc:b0:8d:fa:b8:60:a7:31:ef:c3: 37:86:32:dc:99:d4:e1:56:8d:16:ce:fe:a6:1c:64:e3:f9:8c: 90:d5:0d:ff:49:38:34:a8:91:80:24:a1:0e:15:30:3a:2b:0e: f5:e1:09:83:df:c2:d0:ad:06:49:ce:69:0f:d6:dd:d4:56:cb: f4:fb:c4:1e -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUHxod4dmwyo9ruPM2oMSpe4unvMswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTQ1M1oX DTI3MDMwMzA2MTk1M1owMzExMC8GA1UEAxMoNjAwQ0VCOTExNTBBNTNBODUxNjZB MTVCNjUxRENBMzUzNzQ3QjJBOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJvFVgH+TOLqSw+YpxeZElMFPMTgqg4K78uEHP6AS+1JqnzxZ4KILqKqIJIs aThaAaLaiJlvRc398jABd56/DVjFqg2x3wLSqyTDAPTn3xXyoW8FFIVPIhM+DL2C B8iN0whP4INwLCzyspBALczM1Fe8JPblPJ5VTMXmXTtKu75r6EkzZoN70/KfJq34 tO3yN+fZeeOZitC/gwMsSJttvDkVoSG/K0ZwYyaW/QYY9emib6+HedhVdXopTtdY BYCXz9kS9Pbv/tsULURnVJwTYZltjao4DxzyYObeUlamtpy1qfcB8dyG47DMRx2X zrPToTw62DPz8lsb95cqQXkXV2cCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRgDOuR FQpTqFFmoVtlHco1N0eyqTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTE3MC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qdgwDQYJKoZIhvcNAQELBQADggEBAKIWRmtaV1SUoj8zmG9P2V+k0u8tGuiv5e0X fJrPH/uLJfudCaCkrEdXcB561Vh9V+kh/+N+y62Dm/rzf+Zn3WOj34fqdYCLsxg2 5/EEQuq7e4BtI+tODY4Yf7JX+RMui4SHUuIeCfSmc941crcpkWoGa2KCCUnScevi n5YRp1nueSR/P+9y6V9u+pdhDF+PllHAiPM5s+y69CITA/JHAQoh+8nKYOl77m9a xXpTaKPLCkSyR6F8h+IpxREZ3LCN+rhgpzHvwzeGMtyZ1OFWjRbO/qYcZOP5jJDV Df9JODSokYAkoQ4VMDorDvXhCYPfwtCtBknOaQ/W3dRWy/T7xB4= -----END CERTIFICATE-----Generated at Sat Mar 28 15:53:31 2026 by rpki-client