$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145249.roa File: AS145249.roa (raw, json) Hash identifier: /Yg2zHDOcUH4hdfsrZ1X8qUQvu7wfAvzMFxbSm6ghTU= Subject key identifier: 1E:52:E9:B8:01:B5:00:43:BF:AB:4A:AF:B3:73:66:4B:67:20:0D:8E Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 4954F63033B44366245D50167BDF819CED2E3BF7 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145249.roa Signing time: Wed 04 Mar 2026 06:19:17 +0000 ROA not before: Wed 04 Mar 2026 06:14:17 +0000 ROA not after: Wed 03 Mar 2027 06:19:17 +0000 asID: 145249 IP address blocks: 240a:aa27::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:54:f6:30:33:b4:43:66:24:5d:50:16:7b:df:81:9c:ed:2e:3b:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:14:17 2026 GMT Not After : Mar 3 06:19:17 2027 GMT Subject: CN=1E52E9B801B50043BFAB4AAFB373664B67200D8E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:eb:7c:e5:fc:f5:82:c1:84:18:d1:b0:c9:d9: 60:35:73:0e:c7:a0:60:d6:dc:dd:a1:e6:cd:ff:f9: ab:72:ac:ce:af:68:ae:63:45:c4:49:a1:1b:92:23: 39:b6:ca:71:79:41:77:6c:c0:a6:05:2b:dc:dc:df: 3c:94:4d:3f:16:46:98:f0:b3:1c:5e:03:00:f8:3e: a2:70:f4:6c:0f:e5:41:57:f8:7b:4b:78:01:07:99: 0c:bc:71:03:19:21:a7:59:63:3e:37:38:cb:59:5a: 97:09:7a:11:24:73:06:1c:1d:33:4b:fc:31:8b:16: 72:2d:3f:ae:5a:1e:a4:e5:2e:23:e4:87:20:e8:58: cb:a6:8f:cf:74:df:bf:63:12:96:27:50:d1:5a:70: 8f:e0:b9:fa:46:2e:52:f5:95:46:39:28:3a:09:57: fd:2a:94:e1:3d:eb:5a:94:aa:3e:c2:be:64:1a:13: 67:0a:91:3e:b0:b9:c1:99:d9:54:3b:7d:e6:ee:25: 24:e4:d8:ae:90:af:ba:b0:71:65:4d:08:ab:59:06: d0:6b:2b:d0:0e:17:49:c6:41:b3:75:a3:84:75:35: b7:35:79:6f:dd:1e:be:b2:64:66:6f:86:47:02:dc: 2d:4e:9b:82:cf:35:8b:34:af:c4:f3:71:e6:94:52: a4:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:52:E9:B8:01:B5:00:43:BF:AB:4A:AF:B3:73:66:4B:67:20:0D:8E X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145249.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:aa27::/32 Signature Algorithm: sha256WithRSAEncryption 51:8c:4c:6a:f8:f3:f5:9d:20:35:66:10:24:96:84:59:cc:76: 4b:5b:cf:62:13:82:85:ff:a8:5c:a9:97:23:a3:1e:a4:d7:ea: 05:36:d5:00:83:4b:bd:7f:0b:02:05:68:1b:ea:ea:c4:0c:88: c2:e6:3b:12:b1:6e:c9:cb:a8:df:21:1a:5c:94:27:7a:aa:0f: a1:13:2f:e4:a9:02:7f:1b:3c:ea:48:78:d1:83:e2:af:26:4f: 7e:08:50:dc:e4:71:00:e7:d5:d0:d4:91:52:b8:ce:8c:75:74: 82:11:b2:b1:45:63:27:05:f7:b9:46:f0:5d:eb:92:8a:99:c3: fd:d3:64:8c:5f:06:3f:80:cb:d0:75:57:8f:c0:f3:c8:dd:24: 8e:93:94:30:d5:27:f2:22:ab:c7:f2:92:83:8a:fe:e6:3b:e4: fd:9a:80:7f:42:5b:c5:c5:da:0d:fb:97:a7:67:d2:56:b8:10: e3:ae:4b:ef:18:e8:1c:4e:5a:72:52:6d:ea:4d:80:34:e6:36: fc:57:51:79:2e:12:fe:ee:16:6b:b8:e5:4f:61:7d:28:5f:4f: 50:a0:26:dc:50:0d:5e:6f:45:66:5d:e8:15:9d:f8:13:15:16: 20:42:04:e3:a2:4a:ad:46:d0:d4:c0:b1:59:96:f7:22:c8:c8: 81:d1:da:48 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUSVT2MDO0Q2YkXVAWe9+BnO0uO/cwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTQxN1oX DTI3MDMwMzA2MTkxN1owMzExMC8GA1UEAxMoMUU1MkU5QjgwMUI1MDA0M0JGQUI0 QUFGQjM3MzY2NEI2NzIwMEQ4RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAPjrfOX89YLBhBjRsMnZYDVzDsegYNbc3aHmzf/5q3Kszq9ormNFxEmhG5Ij ObbKcXlBd2zApgUr3NzfPJRNPxZGmPCzHF4DAPg+onD0bA/lQVf4e0t4AQeZDLxx Axkhp1ljPjc4y1lalwl6ESRzBhwdM0v8MYsWci0/rloepOUuI+SHIOhYy6aPz3Tf v2MSlidQ0Vpwj+C5+kYuUvWVRjkoOglX/SqU4T3rWpSqPsK+ZBoTZwqRPrC5wZnZ VDt95u4lJOTYrpCvurBxZU0Iq1kG0Gsr0A4XScZBs3WjhHU1tzV5b90evrJkZm+G RwLcLU6bgs81izSvxPNx5pRSpPkCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQeUum4 AbUAQ7+rSq+zc2ZLZyANjjAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTI0OS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qicwDQYJKoZIhvcNAQELBQADggEBAFGMTGr48/WdIDVmECSWhFnMdktbz2ITgoX/ qFyplyOjHqTX6gU21QCDS71/CwIFaBvq6sQMiMLmOxKxbsnLqN8hGlyUJ3qqD6ET L+SpAn8bPOpIeNGD4q8mT34IUNzkcQDn1dDUkVK4zox1dIIRsrFFYycF97lG8F3r koqZw/3TZIxfBj+Ay9B1V4/A88jdJI6TlDDVJ/Iiq8fykoOK/uY75P2agH9CW8XF 2g37l6dn0la4EOOuS+8Y6BxOWnJSbepNgDTmNvxXUXkuEv7uFmu45U9hfShfT1Cg JtxQDV5vRWZd6BWd+BMVFiBCBOOiSq1G0NTAsVmW9yLIyIHR2kg= -----END CERTIFICATE-----Generated at Sat Mar 28 11:49:43 2026 by rpki-client