$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145981.roa File: AS145981.roa (raw, json) Hash identifier: Z+Mon8Y0qufrQxq/ziN5/8zZs9FS9xfMQBdRWMvG6ss= Subject key identifier: 45:F3:24:3E:85:EE:36:61:3B:E1:19:34:A7:EE:68:42:D9:84:8F:4B Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 561C80E2CF1108E54501D3ED9B2586DB77B66A3D Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145981.roa Signing time: Wed 04 Mar 2026 06:30:42 +0000 ROA not before: Wed 04 Mar 2026 06:25:42 +0000 ROA not after: Wed 03 Mar 2027 06:30:42 +0000 asID: 145981 IP address blocks: 240a:ad03::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:1c:80:e2:cf:11:08:e5:45:01:d3:ed:9b:25:86:db:77:b6:6a:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:25:42 2026 GMT Not After : Mar 3 06:30:42 2027 GMT Subject: CN=45F3243E85EE36613BE11934A7EE6842D9848F4B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:cb:4a:bf:99:bd:a3:17:0c:d9:1b:be:0d:fb: 0f:f1:fa:2f:7b:20:d2:ad:0b:5b:df:e1:f7:92:1d: cc:29:25:b6:47:c5:75:99:cf:58:09:85:ce:d0:d3: 31:8b:27:16:4a:67:cb:2b:6a:ed:0b:f9:fb:cd:79: 32:f5:4b:32:1d:ce:e8:b0:33:4c:4f:b9:7d:8c:17: 67:ea:4d:c4:e0:0f:56:ee:c3:43:32:f6:a7:c7:78: df:b7:fa:55:87:2d:db:99:f8:a0:9d:c4:66:99:0e: 18:19:15:ad:b7:0f:6a:80:2e:86:b0:26:0a:bf:ae: 13:3c:34:db:4a:40:61:4f:21:ab:27:08:38:db:32: 6d:e2:04:7c:cf:bf:4d:84:ce:4a:14:14:1b:76:23: ae:63:9c:80:59:46:28:19:7b:0f:7e:a7:d7:9a:f0: 38:c8:9e:68:da:9f:a1:6c:30:40:da:84:e0:e3:77: 54:84:55:82:44:58:fb:2f:c3:b4:bb:41:12:41:28: d2:84:fe:c8:6e:01:58:5d:7a:d5:62:01:6b:fb:e7: b7:45:fa:ba:e9:43:28:54:a4:a4:86:c0:53:da:c2: 3c:b3:3c:3e:14:b8:a8:11:27:4f:ff:6c:fd:1a:56: 61:77:94:06:2b:2d:df:56:35:b1:15:e3:0e:4a:1d: 0f:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:F3:24:3E:85:EE:36:61:3B:E1:19:34:A7:EE:68:42:D9:84:8F:4B X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145981.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:ad03::/32 Signature Algorithm: sha256WithRSAEncryption 10:e3:8a:76:b4:79:29:01:76:4a:25:79:9e:e7:83:0a:b9:d8: 5d:90:2e:14:b7:1f:77:ec:4c:16:17:03:06:92:6d:bd:3f:0e: 58:e4:eb:b6:4b:41:96:de:9f:5e:1d:ef:94:4f:b6:73:eb:0a: d2:1c:dc:db:32:ee:d6:d5:70:01:73:a1:70:69:e4:3e:7a:01: 29:ff:33:d5:aa:c9:b7:04:b9:cf:11:3c:7b:dd:2e:4e:96:96: 57:2b:5e:23:59:88:eb:0c:0c:69:a1:b6:b1:71:a1:7f:c3:04: e1:63:16:49:44:2f:69:78:00:64:67:b0:2a:28:d7:6f:34:70: 6e:92:86:55:59:c8:37:e4:a0:10:d7:19:40:c5:dc:37:63:8d: 4b:3c:63:41:9d:15:5d:a6:3f:86:6b:ab:fb:4b:e8:2f:e3:59: bb:99:a5:79:27:43:4f:2c:14:f7:de:12:e7:f7:ba:14:d0:55: 84:ea:79:86:a4:ff:6c:66:a4:ca:69:4a:3a:64:d9:02:a3:e5: 0e:9d:49:51:ec:2e:46:7d:55:ef:23:ff:9c:de:30:59:a0:cf: 22:4a:6c:fd:11:58:37:00:2d:e7:c5:af:be:95:f6:96:53:38: 79:b6:15:68:0a:f2:8d:c5:ad:f1:74:f0:e1:dc:e5:ef:10:d6: 2d:47:30:6c -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUVhyA4s8RCOVFAdPtmyWG23e2aj0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MjU0MloX DTI3MDMwMzA2MzA0MlowMzExMC8GA1UEAxMoNDVGMzI0M0U4NUVFMzY2MTNCRTEx OTM0QTdFRTY4NDJEOTg0OEY0QjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKzLSr+ZvaMXDNkbvg37D/H6L3sg0q0LW9/h95IdzCkltkfFdZnPWAmFztDT MYsnFkpnyytq7Qv5+815MvVLMh3O6LAzTE+5fYwXZ+pNxOAPVu7DQzL2p8d437f6 VYct25n4oJ3EZpkOGBkVrbcPaoAuhrAmCr+uEzw020pAYU8hqycIONsybeIEfM+/ TYTOShQUG3YjrmOcgFlGKBl7D36n15rwOMieaNqfoWwwQNqE4ON3VIRVgkRY+y/D tLtBEkEo0oT+yG4BWF161WIBa/vnt0X6uulDKFSkpIbAU9rCPLM8PhS4qBEnT/9s /RpWYXeUBist31Y1sRXjDkodDz0CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRF8yQ+ he42YTvhGTSn7mhC2YSPSzAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTk4MS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rQMwDQYJKoZIhvcNAQELBQADggEBABDjina0eSkBdkoleZ7ngwq52F2QLhS3H3fs TBYXAwaSbb0/Dljk67ZLQZben14d75RPtnPrCtIc3Nsy7tbVcAFzoXBp5D56ASn/ M9WqybcEuc8RPHvdLk6WllcrXiNZiOsMDGmhtrFxoX/DBOFjFklEL2l4AGRnsCoo 1280cG6ShlVZyDfkoBDXGUDF3DdjjUs8Y0GdFV2mP4Zrq/tL6C/jWbuZpXknQ08s FPfeEuf3uhTQVYTqeYak/2xmpMppSjpk2QKj5Q6dSVHsLkZ9Ve8j/5zeMFmgzyJK bP0RWDcALefFr76V9pZTOHm2FWgK8o3FrfF08OHc5e8Q1i1HMGw= -----END CERTIFICATE-----Generated at Sat Mar 28 11:44:30 2026 by rpki-client