$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145244.roa File: AS145244.roa (raw, json) Hash identifier: ECvaiNh9EfYsRjF2z1Fy5SAJsCDB2zvijDggK6UAdf4= Subject key identifier: F7:92:A8:EC:E3:5A:F3:F2:F8:0B:B3:A5:52:13:B5:76:A7:15:40:87 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 5003A680C4EAD3518FF9281E212B6D60B6413B62 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145244.roa Signing time: Wed 04 Mar 2026 06:19:27 +0000 ROA not before: Wed 04 Mar 2026 06:14:27 +0000 ROA not after: Wed 03 Mar 2027 06:19:27 +0000 asID: 145244 IP address blocks: 240a:aa22::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:03:a6:80:c4:ea:d3:51:8f:f9:28:1e:21:2b:6d:60:b6:41:3b:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:14:27 2026 GMT Not After : Mar 3 06:19:27 2027 GMT Subject: CN=F792A8ECE35AF3F2F80BB3A55213B576A7154087 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:ba:e0:82:e8:d9:72:61:a4:70:4a:0b:f7:e0: e3:ed:3f:f1:19:ea:77:63:31:24:4a:05:95:95:ea: 4d:2c:5a:5d:f9:30:75:de:c1:0b:bd:ae:2e:bb:c1: ba:65:f3:fb:bc:8e:3c:95:d3:59:8f:ae:8d:8a:5a: b4:94:f5:ec:3e:7b:ba:01:82:c7:5c:91:4a:e2:4b: 40:86:f5:41:e5:ef:2f:3f:12:4f:52:66:74:3a:77: 47:09:e1:75:c8:2e:fc:4a:1e:44:40:d9:57:25:ed: 76:33:a5:0b:eb:59:66:d9:b8:89:6b:d1:d1:e1:d3: 2e:0c:e3:c2:77:4e:53:4a:23:b5:26:cf:5f:82:63: 6c:0d:08:39:89:c8:59:47:97:1a:28:18:8b:22:37: e3:c9:f6:1b:28:90:a1:ee:e4:76:4e:2e:f4:9c:91: b2:dd:00:13:7e:f8:c0:92:5f:3e:cb:cf:35:9d:a3: 7f:5a:21:db:b0:8a:66:3c:d5:16:ca:4e:cf:6f:2d: ff:0b:75:5e:ea:bc:0a:9e:11:58:3f:83:4e:54:aa: b7:44:c0:3b:32:cf:ed:eb:0b:9a:b2:eb:54:ab:d6: 83:60:49:1b:04:51:fe:39:e4:78:51:54:71:3b:27: d5:24:b7:e8:08:70:28:a0:74:ca:5b:54:b4:30:8f: 39:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:92:A8:EC:E3:5A:F3:F2:F8:0B:B3:A5:52:13:B5:76:A7:15:40:87 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145244.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:aa22::/32 Signature Algorithm: sha256WithRSAEncryption bd:98:9c:83:ac:2c:55:2d:c2:54:e7:a0:dc:0d:1a:76:12:6c: 37:fe:2c:76:7a:a8:62:f9:e9:8a:2c:ed:2e:cc:95:5a:33:59: d5:9c:ec:65:27:c4:bf:20:71:db:f9:ac:5c:c8:86:aa:60:4f: af:95:55:31:bc:1d:89:07:fd:30:02:96:fc:be:1c:14:34:02: c0:68:02:ca:f2:f4:6b:f7:b9:94:83:f0:63:b5:2d:81:ec:13: 39:e5:58:d3:37:8d:15:66:25:f0:13:cf:c5:91:bc:3c:d6:00: 7b:fc:86:a1:86:fd:f9:42:88:6b:2f:ea:f9:32:fc:19:63:26: b6:9a:1d:ec:49:8d:bd:39:55:3e:5b:e5:67:97:35:fa:59:ac: c1:dc:43:ed:95:be:3b:a4:86:d6:88:91:13:da:1b:62:3b:3f: 32:8b:a7:58:d1:3f:f9:d2:6e:1d:8e:ae:8f:30:16:0c:45:9b: 0f:01:18:bc:62:96:07:41:25:0d:c8:4b:b8:dc:38:c4:9c:36: 94:53:4e:ec:1a:81:eb:ce:80:ea:d1:91:64:00:69:ab:73:e9: 5d:bf:1e:6b:44:42:ce:a1:f7:90:54:56:47:dc:d4:ec:7d:a3: c5:b3:ff:09:82:94:9d:08:ef:09:f2:19:19:6f:b2:70:1b:2a: d9:04:5e:1a -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUUAOmgMTq01GP+SgeISttYLZBO2IwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTQyN1oX DTI3MDMwMzA2MTkyN1owMzExMC8GA1UEAxMoRjc5MkE4RUNFMzVBRjNGMkY4MEJC M0E1NTIxM0I1NzZBNzE1NDA4NzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM664ILo2XJhpHBKC/fg4+0/8Rnqd2MxJEoFlZXqTSxaXfkwdd7BC72uLrvB umXz+7yOPJXTWY+ujYpatJT17D57ugGCx1yRSuJLQIb1QeXvLz8ST1JmdDp3Rwnh dcgu/EoeREDZVyXtdjOlC+tZZtm4iWvR0eHTLgzjwndOU0ojtSbPX4JjbA0IOYnI WUeXGigYiyI348n2GyiQoe7kdk4u9JyRst0AE374wJJfPsvPNZ2jf1oh27CKZjzV FspOz28t/wt1Xuq8Cp4RWD+DTlSqt0TAOzLP7esLmrLrVKvWg2BJGwRR/jnkeFFU cTsn1SS36AhwKKB0yltUtDCPOdkCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBT3kqjs 41rz8vgLs6VSE7V2pxVAhzAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTI0NC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qiIwDQYJKoZIhvcNAQELBQADggEBAL2YnIOsLFUtwlTnoNwNGnYSbDf+LHZ6qGL5 6Yos7S7MlVozWdWc7GUnxL8gcdv5rFzIhqpgT6+VVTG8HYkH/TAClvy+HBQ0AsBo Asry9Gv3uZSD8GO1LYHsEznlWNM3jRVmJfATz8WRvDzWAHv8hqGG/flCiGsv6vky /BljJraaHexJjb05VT5b5WeXNfpZrMHcQ+2VvjukhtaIkRPaG2I7PzKLp1jRP/nS bh2Oro8wFgxFmw8BGLxilgdBJQ3IS7jcOMScNpRTTuwagevOgOrRkWQAaatz6V2/ HmtEQs6h95BUVkfc1Ox9o8Wz/wmClJ0I7wnyGRlvsnAbKtkEXho= -----END CERTIFICATE-----Generated at Sat Mar 28 15:53:35 2026 by rpki-client