$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145209.roa File: AS145209.roa (raw, json) Hash identifier: 0pziZp7Siy6HvH486BLsaj0OzxnSmo/pOGGlXNmN/3Q= Subject key identifier: 19:51:AD:E3:BA:2C:2F:21:8C:3A:04:51:42:B9:1E:72:91:13:8B:45 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 6DE3FF6F17DD84ECABF9577174148A2289F3EDC3 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145209.roa Signing time: Wed 04 Mar 2026 06:22:05 +0000 ROA not before: Wed 04 Mar 2026 06:17:05 +0000 ROA not after: Wed 03 Mar 2027 06:22:05 +0000 asID: 145209 IP address blocks: 240a:a9ff::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:e3:ff:6f:17:dd:84:ec:ab:f9:57:71:74:14:8a:22:89:f3:ed:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:17:05 2026 GMT Not After : Mar 3 06:22:05 2027 GMT Subject: CN=1951ADE3BA2C2F218C3A045142B91E7291138B45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:40:3e:ed:3f:b5:49:0b:45:e3:9e:82:3e:82: 1d:7a:5c:aa:bb:09:51:95:c7:c4:ca:c2:e9:23:0d: de:b1:2d:c3:af:b8:aa:33:17:24:cb:0e:6b:27:3e: 41:71:96:15:bf:66:79:89:c1:e8:f7:87:ac:13:a3: 7e:a2:2f:31:5d:de:87:f0:c0:fc:03:4a:a6:f8:ca: 62:27:53:4f:88:6e:34:fc:36:73:e5:bf:ad:cd:df: 0f:6a:4e:4e:7b:ff:e1:b8:1d:68:a3:83:46:30:c9: 67:ae:31:1a:33:02:7c:71:1d:18:9b:b0:ed:73:34: 19:e6:2c:64:90:85:69:cc:87:f5:0b:d6:de:b8:51: 09:4c:22:65:f7:85:f0:e2:5d:8b:89:72:a2:15:34: 66:3c:cd:89:3a:09:32:1b:8c:fc:9f:a4:6d:d4:9e: 06:75:4b:a0:66:70:29:33:ce:42:75:be:c2:53:99: c8:31:2d:61:af:98:77:0f:a6:97:08:6f:b0:fd:85: d2:1f:a7:ec:ae:2b:cc:18:32:27:52:52:8a:3b:f1: 58:e6:1e:4d:8f:b8:cc:b4:01:ca:bd:cf:06:d8:40: 31:b5:99:c5:af:36:b5:07:f0:8a:87:9d:47:d0:07: 43:0d:c4:a7:17:0c:21:e1:4d:be:01:d2:17:f2:db: bd:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:51:AD:E3:BA:2C:2F:21:8C:3A:04:51:42:B9:1E:72:91:13:8B:45 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145209.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a9ff::/32 Signature Algorithm: sha256WithRSAEncryption 91:35:13:13:52:f3:ae:f8:54:ec:ab:63:19:24:91:22:0b:ba: 90:e8:27:d2:7f:db:29:d5:f8:0b:99:7d:0e:95:a4:56:54:98: b2:40:3e:2f:9b:25:c3:32:5d:71:6a:66:74:4e:71:c3:89:36: 9c:9d:9f:c6:be:b8:dc:13:4b:ff:bf:33:f3:1c:18:3a:b9:8d: 60:66:1e:29:b4:7b:31:a6:fb:20:28:51:6b:f2:cb:4f:b1:b6: 39:5f:18:da:c0:fb:c1:4d:52:5e:72:4b:a6:a1:73:a6:ba:d8: a0:c9:c2:ad:1f:9b:fc:73:87:57:f7:ac:0f:9a:7f:1a:d1:36: c2:b2:87:db:5b:bf:9c:c5:f8:80:74:9f:ae:5a:3f:f8:98:c4: ea:a9:31:a0:97:eb:21:e3:c8:20:b5:63:7b:c9:0b:06:37:1f: 79:19:a9:ac:d9:9e:9b:13:dc:f4:7e:5d:96:0c:02:19:e4:ec: 38:ad:71:2e:83:3c:e7:9f:20:4f:c2:a3:73:d0:5d:9e:6c:c2: b2:08:e9:8b:5d:fe:9a:ff:58:8f:08:25:87:70:32:67:27:e4: 68:24:46:69:75:ab:4d:64:96:53:58:60:d1:39:b0:f1:97:75: 9f:c8:05:97:b5:98:77:89:33:83:77:3e:c7:65:cf:a4:64:b7: 01:dd:82:75 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUbeP/bxfdhOyr+VdxdBSKIonz7cMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTcwNVoX DTI3MDMwMzA2MjIwNVowMzExMC8GA1UEAxMoMTk1MUFERTNCQTJDMkYyMThDM0Ew NDUxNDJCOTFFNzI5MTEzOEI0NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJdAPu0/tUkLReOegj6CHXpcqrsJUZXHxMrC6SMN3rEtw6+4qjMXJMsOayc+ QXGWFb9meYnB6PeHrBOjfqIvMV3eh/DA/ANKpvjKYidTT4huNPw2c+W/rc3fD2pO Tnv/4bgdaKODRjDJZ64xGjMCfHEdGJuw7XM0GeYsZJCFacyH9QvW3rhRCUwiZfeF 8OJdi4lyohU0ZjzNiToJMhuM/J+kbdSeBnVLoGZwKTPOQnW+wlOZyDEtYa+Ydw+m lwhvsP2F0h+n7K4rzBgyJ1JSijvxWOYeTY+4zLQByr3PBthAMbWZxa82tQfwioed R9AHQw3EpxcMIeFNvgHSF/LbvTECAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQZUa3j uiwvIYw6BFFCuR5ykROLRTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTIwOS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qf8wDQYJKoZIhvcNAQELBQADggEBAJE1ExNS8674VOyrYxkkkSILupDoJ9J/2ynV +AuZfQ6VpFZUmLJAPi+bJcMyXXFqZnROccOJNpydn8a+uNwTS/+/M/McGDq5jWBm Him0ezGm+yAoUWvyy0+xtjlfGNrA+8FNUl5yS6ahc6a62KDJwq0fm/xzh1f3rA+a fxrRNsKyh9tbv5zF+IB0n65aP/iYxOqpMaCX6yHjyCC1Y3vJCwY3H3kZqazZnpsT 3PR+XZYMAhnk7DitcS6DPOefIE/Co3PQXZ5swrII6Ytd/pr/WI8IJYdwMmcn5Ggk Rml1q01kllNYYNE5sPGXdZ/IBZe1mHeJM4N3Psdlz6RktwHdgnU= -----END CERTIFICATE-----Generated at Sat Mar 28 15:54:43 2026 by rpki-client