$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145185.roa File: AS145185.roa (raw, json) Hash identifier: 4nuxB3RtlYLUgFr0sf2XGF6m1ZBwd7LvUzOeZ8GqoNE= Subject key identifier: E8:5D:CB:52:3C:3E:C6:86:A8:A2:D0:CF:69:6F:A1:F8:33:46:38:70 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 139BC999F5C02402FC82255A123D33B9C12E29AF Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145185.roa Signing time: Wed 04 Mar 2026 06:21:56 +0000 ROA not before: Wed 04 Mar 2026 06:16:56 +0000 ROA not after: Wed 03 Mar 2027 06:21:56 +0000 asID: 145185 IP address blocks: 240a:a9e7::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:9b:c9:99:f5:c0:24:02:fc:82:25:5a:12:3d:33:b9:c1:2e:29:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:16:56 2026 GMT Not After : Mar 3 06:21:56 2027 GMT Subject: CN=E85DCB523C3EC686A8A2D0CF696FA1F833463870 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:a2:45:c7:9a:b6:83:52:96:56:25:88:ef:d6: 68:3d:8e:bf:16:a1:d2:5e:a8:46:1a:be:d2:f7:3b: 96:73:fb:72:37:64:eb:fa:0f:e5:19:76:45:c2:aa: 5e:9c:fe:01:ad:16:57:1d:07:40:dd:3b:98:9b:e8: 9f:59:1b:c6:91:7c:9f:9b:28:5a:0a:a6:7a:08:ac: 7d:b2:82:e2:3c:e4:3a:ae:95:db:79:1e:7d:b9:64: 02:5e:b4:32:e3:c5:94:4d:0c:af:1b:6e:cc:cc:98: 73:bc:fd:86:c0:9f:77:4d:02:e8:1e:d5:49:00:01: 07:3f:6a:41:59:bf:01:c7:63:89:83:d3:ad:6f:db: ff:cf:a8:e5:5a:0f:21:e9:12:8b:ca:7f:5e:a4:03: e6:c4:3e:5a:6f:e9:a3:a9:f2:89:91:ce:1c:2e:16: ae:65:57:eb:96:3c:2e:70:b5:56:c9:34:9b:a2:78: cb:1c:4e:f5:13:3d:78:c8:07:b5:ce:fb:9d:af:6f: 8a:4d:a2:70:f9:ce:82:2e:c1:29:1b:b4:96:58:30: 92:d1:3d:d9:d2:5f:bf:e3:ca:09:b7:9d:1b:e2:6a: 46:8e:df:9b:b0:5b:02:3c:1d:ce:bf:40:a8:45:b7: 29:13:b0:23:bf:c3:ac:5e:bb:b8:2d:ba:89:fe:eb: 23:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:5D:CB:52:3C:3E:C6:86:A8:A2:D0:CF:69:6F:A1:F8:33:46:38:70 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145185.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a9e7::/32 Signature Algorithm: sha256WithRSAEncryption 89:e0:55:1c:f3:bf:9b:b8:11:4f:b5:b5:38:e8:06:c7:ed:d7: 5c:54:df:24:15:fd:68:ce:2f:14:1f:48:39:fa:dc:f4:37:39: 7c:a9:6e:8e:3f:bf:e4:89:e9:7c:f6:f0:88:6b:97:ab:de:53: bc:0e:ea:41:47:3e:0c:cf:d1:b4:94:02:22:08:7e:40:79:8b: 50:a6:c4:17:06:af:79:74:04:3d:2e:33:45:d7:7c:f0:01:8c: 9e:cd:dd:61:d8:1f:4a:40:0c:7f:79:89:18:8c:25:26:0c:ab: ff:39:1d:dd:a2:65:74:f9:39:27:ad:8e:ae:d2:08:5c:35:3d: 71:a3:7f:d1:c2:33:c6:62:cc:f7:20:ad:e7:66:95:77:c8:3c: 8f:e1:59:d3:3b:b2:9a:d6:38:53:70:4f:2b:d5:29:9b:61:8f: 1e:8e:6e:6b:60:13:5d:2b:51:88:0c:f8:86:66:ce:91:61:23: 07:e5:8b:05:43:6f:9e:80:07:c7:f3:cf:b6:93:14:1a:a4:e8: 56:95:ee:91:1e:93:ac:54:26:42:82:a0:6e:ab:a7:e9:61:21: 0b:66:22:2d:1e:59:1a:c7:7d:62:9d:ab:d0:62:d5:b0:ec:fa: 16:9a:0e:24:98:48:45:c3:42:0b:c6:7b:1f:c3:c0:14:96:de: 64:2e:cc:ad -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUE5vJmfXAJAL8giVaEj0zucEuKa8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTY1NloX DTI3MDMwMzA2MjE1NlowMzExMC8GA1UEAxMoRTg1RENCNTIzQzNFQzY4NkE4QTJE MENGNjk2RkExRjgzMzQ2Mzg3MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOyiRceatoNSllYliO/WaD2Ovxah0l6oRhq+0vc7lnP7cjdk6/oP5Rl2RcKq Xpz+Aa0WVx0HQN07mJvon1kbxpF8n5soWgqmegisfbKC4jzkOq6V23kefblkAl60 MuPFlE0MrxtuzMyYc7z9hsCfd00C6B7VSQABBz9qQVm/AcdjiYPTrW/b/8+o5VoP IekSi8p/XqQD5sQ+Wm/po6nyiZHOHC4WrmVX65Y8LnC1Vsk0m6J4yxxO9RM9eMgH tc77na9vik2icPnOgi7BKRu0llgwktE92dJfv+PKCbedG+JqRo7fm7BbAjwdzr9A qEW3KROwI7/DrF67uC26if7rIzECAwEAAaOCAcUwggHBMB0GA1UdDgQWBBToXctS PD7Ghqii0M9pb6H4M0Y4cDAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTE4NS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qecwDQYJKoZIhvcNAQELBQADggEBAIngVRzzv5u4EU+1tTjoBsft11xU3yQV/WjO LxQfSDn63PQ3OXypbo4/v+SJ6Xz28Ihrl6veU7wO6kFHPgzP0bSUAiIIfkB5i1Cm xBcGr3l0BD0uM0XXfPABjJ7N3WHYH0pADH95iRiMJSYMq/85Hd2iZXT5OSetjq7S CFw1PXGjf9HCM8ZizPcgredmlXfIPI/hWdM7sprWOFNwTyvVKZthjx6ObmtgE10r UYgM+IZmzpFhIwfliwVDb56AB8fzz7aTFBqk6FaV7pEek6xUJkKCoG6rp+lhIQtm Ii0eWRrHfWKdq9Bi1bDs+haaDiSYSEXDQgvGex/DwBSW3mQuzK0= -----END CERTIFICATE-----Generated at Sat Mar 28 11:41:19 2026 by rpki-client