$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145248.roa File: AS145248.roa (raw, json) Hash identifier: RK7+2cQoEiUmYNhUC+Y+Lre7YVPe/u0EBOLBFKKpBfk= Subject key identifier: FC:71:BB:5F:60:5A:24:3E:96:69:4F:DD:5A:70:46:D9:2A:6D:41:27 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 194D9215C027549E61620ABDF1FDA07641E42AD2 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145248.roa Signing time: Wed 04 Mar 2026 06:21:58 +0000 ROA not before: Wed 04 Mar 2026 06:16:58 +0000 ROA not after: Wed 03 Mar 2027 06:21:58 +0000 asID: 145248 IP address blocks: 240a:aa26::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:4d:92:15:c0:27:54:9e:61:62:0a:bd:f1:fd:a0:76:41:e4:2a:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:16:58 2026 GMT Not After : Mar 3 06:21:58 2027 GMT Subject: CN=FC71BB5F605A243E96694FDD5A7046D92A6D4127 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:d9:86:b9:6f:86:1a:b6:04:03:06:3f:da:cc: 7c:33:86:ef:0c:9d:81:0a:ee:b0:af:f1:68:92:3a: 80:0e:9b:df:d9:25:db:90:3a:20:a1:10:ef:e6:35: af:ec:89:35:71:7e:03:d5:eb:28:51:4e:b5:71:96: ee:a6:6d:a8:e1:1d:98:19:1c:3e:ce:37:64:37:9e: e6:91:15:08:ec:47:cb:50:30:d5:07:dd:26:68:bc: 79:70:42:42:fe:26:f9:17:b0:ce:ed:42:1d:04:ef: e0:23:37:fc:f4:6b:79:c6:c5:9e:e7:92:88:2c:4b: f0:79:f0:42:86:a1:2f:13:26:f9:bc:96:19:08:b9: b2:a1:81:2f:7d:f1:52:ce:37:cd:c2:6c:a2:96:19: b9:4a:6d:aa:d5:d2:16:c0:e5:24:92:4a:1b:7a:a3: 69:22:b7:dc:fd:85:88:4b:18:fb:a8:24:52:e2:06: fb:da:1f:3e:0a:49:2a:c3:4c:a9:cc:5c:90:fa:59: cf:cc:19:54:e9:cd:75:1d:1f:b4:7b:ef:02:b2:d2: 95:50:4e:44:c4:b7:44:c1:a8:38:87:a7:c0:b4:1e: 55:27:ec:81:fe:86:9b:d3:b1:f5:01:36:ed:3d:a0: a8:2a:47:13:a0:a9:39:a9:18:f9:e3:fe:81:69:7a: 4d:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:71:BB:5F:60:5A:24:3E:96:69:4F:DD:5A:70:46:D9:2A:6D:41:27 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145248.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:aa26::/32 Signature Algorithm: sha256WithRSAEncryption 01:6a:25:e9:46:c1:c1:36:33:dd:82:4b:b6:97:38:54:1f:c2: f8:f7:93:ff:eb:71:c7:c0:9a:21:39:e3:78:27:49:84:17:f5: 1a:7d:8a:8c:bb:75:75:06:3f:b5:d2:b0:06:bb:5a:a6:06:c3: b8:e3:3c:08:d5:cf:2f:c1:3b:b8:1c:ff:d6:29:1c:e7:9b:59: e7:96:b8:73:76:d5:77:18:7c:63:d6:c3:e8:9d:98:04:c9:4e: 2d:cd:10:83:69:c3:c2:b9:2a:6d:c8:5c:16:fd:16:4d:18:62: d5:46:a1:0d:80:6d:bd:a1:f6:94:79:59:72:f5:01:f2:3b:27: 41:29:eb:c8:ab:06:bc:88:a8:d2:f9:ce:d9:fe:1f:33:d8:12: 56:4a:58:87:b7:0c:5b:f7:3e:d3:31:22:d6:77:0f:55:66:83: bb:91:51:e4:98:ff:83:0b:ac:e2:44:8e:38:1d:3d:8f:2a:4c: f4:33:63:6d:06:51:8a:e6:48:35:21:fe:73:19:47:67:89:0c: 03:f6:77:d8:ad:b2:c5:50:1e:86:6f:75:12:32:a0:59:4e:17: b2:f1:d2:7e:1a:68:b7:dd:3b:30:94:4d:7e:1c:e7:35:13:d0: 55:41:d5:bd:b8:72:bb:f7:c2:7f:3e:ec:48:76:1e:b7:2a:ff: 56:57:a8:c4 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUGU2SFcAnVJ5hYgq98f2gdkHkKtIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTY1OFoX DTI3MDMwMzA2MjE1OFowMzExMC8GA1UEAxMoRkM3MUJCNUY2MDVBMjQzRTk2Njk0 RkRENUE3MDQ2RDkyQTZENDEyNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJvZhrlvhhq2BAMGP9rMfDOG7wydgQrusK/xaJI6gA6b39kl25A6IKEQ7+Y1 r+yJNXF+A9XrKFFOtXGW7qZtqOEdmBkcPs43ZDee5pEVCOxHy1Aw1QfdJmi8eXBC Qv4m+Rewzu1CHQTv4CM3/PRrecbFnueSiCxL8HnwQoahLxMm+byWGQi5sqGBL33x Us43zcJsopYZuUptqtXSFsDlJJJKG3qjaSK33P2FiEsY+6gkUuIG+9ofPgpJKsNM qcxckPpZz8wZVOnNdR0ftHvvArLSlVBORMS3RMGoOIenwLQeVSfsgf6Gm9Ox9QE2 7T2gqCpHE6CpOakY+eP+gWl6TbcCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBT8cbtf YFokPpZpT91acEbZKm1BJzAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTI0OC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qiYwDQYJKoZIhvcNAQELBQADggEBAAFqJelGwcE2M92CS7aXOFQfwvj3k//rccfA miE543gnSYQX9Rp9ioy7dXUGP7XSsAa7WqYGw7jjPAjVzy/BO7gc/9YpHOebWeeW uHN21XcYfGPWw+idmATJTi3NEINpw8K5Km3IXBb9Fk0YYtVGoQ2Abb2h9pR5WXL1 AfI7J0Ep68irBryIqNL5ztn+HzPYElZKWIe3DFv3PtMxItZ3D1Vmg7uRUeSY/4ML rOJEjjgdPY8qTPQzY20GUYrmSDUh/nMZR2eJDAP2d9itssVQHoZvdRIyoFlOF7Lx 0n4aaLfdOzCUTX4c5zUT0FVB1b24crv3wn8+7Eh2Hrcq/1ZXqMQ= -----END CERTIFICATE-----Generated at Sat Mar 28 15:53:24 2026 by rpki-client