$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145213.roa File: AS145213.roa (raw, json) Hash identifier: DRaj3o63haJLz6Qv5nmz7tYDrggNq576/5QCB+Wf97g= Subject key identifier: DD:16:6F:23:83:7A:D0:E2:E9:DF:FD:FC:8C:21:05:2B:1E:87:1E:FA Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 3AD357E5237BE211CF52A5FEB58D483DE0852E48 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145213.roa Signing time: Wed 04 Mar 2026 06:20:48 +0000 ROA not before: Wed 04 Mar 2026 06:15:48 +0000 ROA not after: Wed 03 Mar 2027 06:20:48 +0000 asID: 145213 IP address blocks: 240a:aa03::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:d3:57:e5:23:7b:e2:11:cf:52:a5:fe:b5:8d:48:3d:e0:85:2e:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:15:48 2026 GMT Not After : Mar 3 06:20:48 2027 GMT Subject: CN=DD166F23837AD0E2E9DFFDFC8C21052B1E871EFA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:ea:da:8f:e9:84:40:17:cd:33:32:42:4b:15: 7c:e0:32:24:00:d0:ac:90:3a:3d:45:49:19:de:86: 52:48:a9:db:2b:e7:2e:aa:65:91:41:a3:e8:f7:78: 6d:3e:3e:34:df:8f:b6:bf:6a:e9:96:f9:54:1c:37: a4:b8:84:bc:5f:a2:e1:ed:62:75:76:05:52:d4:be: 7c:4e:7a:30:a5:7b:8b:23:ef:4a:45:ae:18:51:64: 2f:64:e3:a0:3f:16:f0:4a:d9:8e:d2:0a:80:af:93: 86:85:99:2a:cf:8d:f8:27:90:89:dc:68:6c:ee:d9: ed:88:0e:0e:f2:7e:9d:44:a5:2c:e0:e3:0e:b8:cc: d1:89:1d:fd:6a:26:c8:4f:d0:c9:d0:94:a3:ec:f2: 49:62:ea:53:da:cb:50:4c:49:d9:11:a6:e7:f3:2f: 31:9e:d4:02:60:86:7b:f8:e5:4d:ca:51:c9:92:d9: 4c:5e:46:f1:a1:b2:93:0a:74:a4:81:ef:65:11:9d: 06:f5:13:fc:a7:df:76:1d:d7:2d:25:de:f7:9f:73: 8c:c0:b8:a8:1f:48:10:ec:19:0b:a7:91:5f:6b:57: 53:20:d3:7e:ef:e5:94:38:77:2e:2c:ba:a4:77:79: 16:81:ac:34:77:af:c3:66:97:3c:32:e3:be:3e:e7: 7c:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:16:6F:23:83:7A:D0:E2:E9:DF:FD:FC:8C:21:05:2B:1E:87:1E:FA X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145213.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:aa03::/32 Signature Algorithm: sha256WithRSAEncryption 50:7f:6b:af:2f:bc:61:d9:d6:21:64:58:cc:64:79:57:e7:bd: 41:a9:56:5a:6b:53:14:4a:78:06:bc:26:17:9e:35:14:9a:8c: 9d:38:8f:f3:1f:a7:5c:37:fc:2e:41:3d:fd:c6:67:44:03:e1: 8f:39:04:93:67:6d:2f:21:11:52:e8:18:d1:d3:57:aa:89:7b: eb:93:f9:b9:e4:b8:22:3d:ef:03:02:0c:b3:41:21:1f:5a:87: 9b:d5:24:67:84:a3:62:7f:db:5b:4a:c3:a1:18:6a:f9:cf:ab: b6:f8:4a:84:4b:9b:98:ea:7c:70:59:a0:35:24:a4:70:e3:56: bc:98:96:bd:a9:0f:ab:7b:95:54:26:fd:ea:b3:67:c9:f1:81: e5:fc:47:66:e7:ca:1e:ba:bc:1a:57:9a:8c:15:2b:69:df:6a: ea:6b:a1:4c:8a:50:cf:f5:5d:a3:4d:1e:ae:ca:a2:e9:28:76: e9:c2:8c:8e:36:33:12:88:ac:39:dc:ca:a3:21:0e:46:79:1f: b5:d9:7a:6f:69:46:c4:5a:80:e5:1e:85:f7:67:02:88:a9:51: ef:aa:49:27:c6:5f:27:2e:79:53:78:68:ea:4d:21:32:1f:c2: 77:08:00:d7:33:76:9f:35:81:d7:93:73:51:89:a7:b5:84:13: 49:8b:11:cd -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUOtNX5SN74hHPUqX+tY1IPeCFLkgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTU0OFoX DTI3MDMwMzA2MjA0OFowMzExMC8GA1UEAxMoREQxNjZGMjM4MzdBRDBFMkU5REZG REZDOEMyMTA1MkIxRTg3MUVGQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAI3q2o/phEAXzTMyQksVfOAyJADQrJA6PUVJGd6GUkip2yvnLqplkUGj6Pd4 bT4+NN+Ptr9q6Zb5VBw3pLiEvF+i4e1idXYFUtS+fE56MKV7iyPvSkWuGFFkL2Tj oD8W8ErZjtIKgK+ThoWZKs+N+CeQidxobO7Z7YgODvJ+nUSlLODjDrjM0Ykd/Wom yE/QydCUo+zySWLqU9rLUExJ2RGm5/MvMZ7UAmCGe/jlTcpRyZLZTF5G8aGykwp0 pIHvZRGdBvUT/Kffdh3XLSXe959zjMC4qB9IEOwZC6eRX2tXUyDTfu/llDh3Liy6 pHd5FoGsNHevw2aXPDLjvj7nfHMCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBTdFm8j g3rQ4unf/fyMIQUrHoce+jAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTIxMy5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qgMwDQYJKoZIhvcNAQELBQADggEBAFB/a68vvGHZ1iFkWMxkeVfnvUGpVlprUxRK eAa8JheeNRSajJ04j/Mfp1w3/C5BPf3GZ0QD4Y85BJNnbS8hEVLoGNHTV6qJe+uT +bnkuCI97wMCDLNBIR9ah5vVJGeEo2J/21tKw6EYavnPq7b4SoRLm5jqfHBZoDUk pHDjVryYlr2pD6t7lVQm/eqzZ8nxgeX8R2bnyh66vBpXmowVK2nfauproUyKUM/1 XaNNHq7KoukodunCjI42MxKIrDncyqMhDkZ5H7XZem9pRsRagOUehfdnAoipUe+q SSfGXycueVN4aOpNITIfwncIANczdp81gdeTc1GJp7WEE0mLEc0= -----END CERTIFICATE-----Generated at Sat Mar 28 11:43:02 2026 by rpki-client