$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145173.roa File: AS145173.roa (raw, json) Hash identifier: qr4//dUyJ8dxDbkFieauj4SOFdfQqO8tWxrti7ZtqxI= Subject key identifier: CD:B7:D4:27:97:C7:E0:9D:1F:29:61:9C:99:CB:5D:76:B0:57:9E:83 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 21714A11DD1B47136A4426EC218D2605387C4307 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145173.roa Signing time: Wed 04 Mar 2026 06:21:50 +0000 ROA not before: Wed 04 Mar 2026 06:16:50 +0000 ROA not after: Wed 03 Mar 2027 06:21:50 +0000 asID: 145173 IP address blocks: 240a:a9db::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:71:4a:11:dd:1b:47:13:6a:44:26:ec:21:8d:26:05:38:7c:43:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:16:50 2026 GMT Not After : Mar 3 06:21:50 2027 GMT Subject: CN=CDB7D42797C7E09D1F29619C99CB5D76B0579E83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:5a:dc:cc:b6:8f:6c:ed:9a:59:90:57:43:5f: bd:03:3c:15:fe:83:a1:b8:7b:80:58:38:d1:c7:f2: a2:36:a6:c0:b1:cd:62:51:fe:66:4f:40:03:fc:c6: 7f:28:cd:30:a0:47:98:17:b8:7a:b9:9f:76:1d:30: 14:f7:22:8a:cf:d5:b7:3a:c2:c4:d0:11:fc:cd:da: a6:cd:bd:8c:a7:3a:f8:a6:07:e1:76:28:b4:63:77: 6b:b2:bf:5d:a3:83:d9:e1:73:36:48:2f:d8:8a:49: ba:68:ec:30:62:0b:21:4b:e7:f3:3a:bb:58:dc:b4: de:8a:88:94:23:c9:d6:49:2f:35:c2:63:7b:45:78: 7d:4c:9c:5b:c4:59:26:a8:a6:ea:d5:fa:54:a0:b3: 23:83:a9:be:f5:e0:14:f3:cd:28:55:1f:4b:05:e5: 34:26:c0:2d:41:81:f7:d2:f7:b9:27:b5:aa:4b:93: 60:2a:35:2b:1a:9a:49:87:fd:79:d6:72:cd:41:e6: f4:71:58:d6:ee:49:1b:fc:2e:13:5e:a9:3b:8f:68: d4:8d:e4:79:c4:56:50:59:d3:54:a0:7b:28:48:54: 2f:91:d9:9d:82:39:a7:54:3d:90:2a:43:fb:36:35: d6:56:94:06:aa:d8:ea:b8:70:b5:b2:4e:da:35:8a: da:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:B7:D4:27:97:C7:E0:9D:1F:29:61:9C:99:CB:5D:76:B0:57:9E:83 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145173.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a9db::/32 Signature Algorithm: sha256WithRSAEncryption 2b:74:f5:75:51:de:01:1c:00:44:52:e3:18:4e:13:a4:b1:34: f3:fd:bc:a0:3e:cc:fc:34:04:df:5f:8d:6d:83:e5:0e:12:0e: fb:51:b5:9a:26:1f:83:c8:14:f4:09:5f:85:77:66:41:26:70: 33:a1:5c:89:14:58:e7:e0:e4:8b:f4:25:7b:f4:f8:27:26:58: a2:b8:91:cd:da:0e:1a:e5:9f:1b:ad:03:14:c6:59:c3:0a:7d: 9d:4d:23:07:65:27:07:67:09:48:c3:47:5e:58:80:42:3c:9e: fc:f8:1a:b8:4c:d1:87:89:88:2b:91:ac:03:16:60:23:64:f0: c2:b6:39:fb:3e:8f:7b:ec:5d:7a:de:e6:28:32:3c:5f:85:78: 64:5d:bf:c0:2e:18:08:c1:33:d0:93:65:35:3b:fb:e4:b0:5e: 8b:3b:54:07:16:b2:9a:6c:2f:ce:b4:6f:51:9d:0b:58:36:c0: 39:fe:b0:74:fa:f4:30:41:48:33:66:e9:3a:34:ae:6f:28:69: 5c:ee:a6:08:77:81:90:0b:86:ea:5a:43:0f:6b:d8:44:35:62: ad:0b:3c:78:d8:9a:eb:00:f9:54:64:2c:ee:2d:8b:3f:de:8e: ea:30:69:cc:a1:27:8e:83:4f:ca:c0:04:25:a0:e8:c9:74:67: f3:a2:da:8b -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUIXFKEd0bRxNqRCbsIY0mBTh8QwcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTY1MFoX DTI3MDMwMzA2MjE1MFowMzExMC8GA1UEAxMoQ0RCN0Q0Mjc5N0M3RTA5RDFGMjk2 MTlDOTlDQjVENzZCMDU3OUU4MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKta3My2j2ztmlmQV0NfvQM8Ff6Dobh7gFg40cfyojamwLHNYlH+Zk9AA/zG fyjNMKBHmBe4ermfdh0wFPciis/VtzrCxNAR/M3aps29jKc6+KYH4XYotGN3a7K/ XaOD2eFzNkgv2IpJumjsMGILIUvn8zq7WNy03oqIlCPJ1kkvNcJje0V4fUycW8RZ Jqim6tX6VKCzI4OpvvXgFPPNKFUfSwXlNCbALUGB99L3uSe1qkuTYCo1KxqaSYf9 edZyzUHm9HFY1u5JG/wuE16pO49o1I3kecRWUFnTVKB7KEhUL5HZnYI5p1Q9kCpD +zY11laUBqrY6rhwtbJO2jWK2k8CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBTNt9Qn l8fgnR8pYZyZy112sFeegzAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTE3My5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qdswDQYJKoZIhvcNAQELBQADggEBACt09XVR3gEcAERS4xhOE6SxNPP9vKA+zPw0 BN9fjW2D5Q4SDvtRtZomH4PIFPQJX4V3ZkEmcDOhXIkUWOfg5Iv0JXv0+CcmWKK4 kc3aDhrlnxutAxTGWcMKfZ1NIwdlJwdnCUjDR15YgEI8nvz4GrhM0YeJiCuRrAMW YCNk8MK2Ofs+j3vsXXre5igyPF+FeGRdv8AuGAjBM9CTZTU7++SwXos7VAcWspps L860b1GdC1g2wDn+sHT69DBBSDNm6To0rm8oaVzupgh3gZALhupaQw9r2EQ1Yq0L PHjYmusA+VRkLO4tiz/ejuowacyhJ46DT8rABCWg6Ml0Z/Oi2os= -----END CERTIFICATE-----Generated at Sat Mar 28 11:41:25 2026 by rpki-client