$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145174.roa File: AS145174.roa (raw, json) Hash identifier: YtMb5dzZKvfSZ6PHf2TwBzHD8Y0PuBI/shSE5S2QETw= Subject key identifier: 50:C9:79:BF:F3:C0:67:18:37:11:82:EE:7C:82:C1:13:7C:2C:D0:49 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 5E657B2047E3E926ACFEFD067473286EF1920913 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145174.roa Signing time: Wed 04 Mar 2026 06:19:59 +0000 ROA not before: Wed 04 Mar 2026 06:14:59 +0000 ROA not after: Wed 03 Mar 2027 06:19:59 +0000 asID: 145174 IP address blocks: 240a:a9dc::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:65:7b:20:47:e3:e9:26:ac:fe:fd:06:74:73:28:6e:f1:92:09:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:14:59 2026 GMT Not After : Mar 3 06:19:59 2027 GMT Subject: CN=50C979BFF3C06718371182EE7C82C1137C2CD049 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:35:6a:dc:70:2a:1d:97:e8:3e:0f:ae:1b:be: 55:39:83:8f:62:b1:6a:25:3b:b6:9e:3d:55:e7:97: 09:c2:41:ec:b9:cf:89:64:44:1b:41:c7:97:a7:7d: a3:9d:5a:92:0f:26:68:09:52:25:4d:79:d6:ed:28: 6f:53:af:24:c9:1e:7d:c8:4c:e1:ad:73:b9:3f:05: 0f:42:e9:28:cd:c3:35:89:5f:5a:a5:07:32:e5:12: 89:59:c3:3a:1f:df:82:18:8d:5d:a4:88:3a:25:ac: c8:e7:f1:82:4c:87:1f:bf:d8:e9:10:1e:c8:90:92: df:31:fb:7a:a2:d2:25:1a:28:c2:de:84:b4:85:86: fb:9e:55:31:fd:23:d1:6a:7b:6f:be:e2:cc:f9:48: 89:38:15:7c:ad:0e:7a:73:34:3b:77:4a:1f:0c:f8: 05:9e:6f:00:9b:cd:2a:b5:71:85:f3:22:f3:42:c9: 9a:37:9a:36:b5:05:38:7a:c3:70:dc:e1:13:5d:25: 78:fd:ad:31:f4:4e:0e:af:40:11:85:a2:dc:b7:d9: 9f:72:bd:ae:85:b7:67:e5:0c:3b:72:88:34:45:71: b4:47:0f:fa:2c:9f:20:68:8c:a9:00:d5:3b:6e:da: 66:53:7e:06:3a:24:76:4b:58:a4:96:d3:8f:3e:3e: 17:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:C9:79:BF:F3:C0:67:18:37:11:82:EE:7C:82:C1:13:7C:2C:D0:49 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145174.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a9dc::/32 Signature Algorithm: sha256WithRSAEncryption b6:6f:3f:bf:59:f7:c3:ae:0e:b5:6f:5a:95:e5:2a:41:f9:c8: 16:c9:d9:ee:5a:bf:1a:98:85:dd:b6:5b:b5:b2:92:9f:57:13: 36:be:e9:6c:5c:c1:ae:81:5c:48:f4:59:5e:c4:df:12:8a:c0: 30:61:1d:10:66:c6:7c:b7:2c:e8:1c:a9:f4:90:b2:4d:4c:03: 55:fd:c0:4e:0a:2b:07:30:1a:85:f4:1e:ca:55:86:6d:5b:82: 3e:04:19:f2:d1:66:58:3b:db:e9:80:5f:a6:f2:64:37:ee:55: d3:c8:c9:d7:9f:2d:77:63:8a:00:6a:80:c7:ee:0d:38:50:33: ac:0b:de:0b:56:6a:d3:c3:b2:7f:aa:89:f3:e1:4d:aa:d5:15: 81:dd:0f:bd:5e:f9:3b:1e:b9:18:9a:50:e3:70:c1:6d:af:46: f7:72:53:f1:c4:d4:b1:63:ef:6b:e1:59:d3:a7:3f:b5:e7:4c: 00:b2:b4:fc:a7:ac:6b:fd:52:a8:a9:b6:dc:31:8f:8c:3b:98: 26:30:7c:67:40:25:53:d1:2d:11:2f:c2:2d:76:b4:4f:8b:4b: 4f:cb:80:ee:02:9e:0f:0e:57:0f:76:94:59:0d:4e:22:34:c3: db:47:bd:65:e3:99:7d:54:98:df:52:fe:12:f2:03:d7:35:19: ca:aa:af:f3 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUXmV7IEfj6Sas/v0GdHMobvGSCRMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTQ1OVoX DTI3MDMwMzA2MTk1OVowMzExMC8GA1UEAxMoNTBDOTc5QkZGM0MwNjcxODM3MTE4 MkVFN0M4MkMxMTM3QzJDRDA0OTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOs1atxwKh2X6D4Prhu+VTmDj2KxaiU7tp49VeeXCcJB7LnPiWREG0HHl6d9 o51akg8maAlSJU151u0ob1OvJMkefchM4a1zuT8FD0LpKM3DNYlfWqUHMuUSiVnD Oh/fghiNXaSIOiWsyOfxgkyHH7/Y6RAeyJCS3zH7eqLSJRoowt6EtIWG+55VMf0j 0Wp7b77izPlIiTgVfK0OenM0O3dKHwz4BZ5vAJvNKrVxhfMi80LJmjeaNrUFOHrD cNzhE10leP2tMfRODq9AEYWi3LfZn3K9roW3Z+UMO3KINEVxtEcP+iyfIGiMqQDV O27aZlN+BjokdktYpJbTjz4+FxUCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRQyXm/ 88BnGDcRgu58gsETfCzQSTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTE3NC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qdwwDQYJKoZIhvcNAQELBQADggEBALZvP79Z98OuDrVvWpXlKkH5yBbJ2e5avxqY hd22W7Wykp9XEza+6Wxcwa6BXEj0WV7E3xKKwDBhHRBmxny3LOgcqfSQsk1MA1X9 wE4KKwcwGoX0HspVhm1bgj4EGfLRZlg72+mAX6byZDfuVdPIydefLXdjigBqgMfu DThQM6wL3gtWatPDsn+qifPhTarVFYHdD71e+TseuRiaUONwwW2vRvdyU/HE1LFj 72vhWdOnP7XnTACytPynrGv9Uqipttwxj4w7mCYwfGdAJVPRLREvwi12tE+LS0/L gO4Cng8OVw92lFkNTiI0w9tHvWXjmX1UmN9S/hLyA9c1Gcqqr/M= -----END CERTIFICATE-----Generated at Sat Mar 28 13:15:13 2026 by rpki-client