$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145258.roa File: AS145258.roa (raw, json) Hash identifier: ZGF2y48IfbSomWjARm6D1F7kNyHCRDamssFbge114w8= Subject key identifier: FB:5C:83:B2:04:D4:EF:2E:EE:E8:4A:7F:CA:F4:3B:77:F9:3E:CF:DE Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 1BDD8943FF23E9DCFDFD3B1070DD8CB033C25979 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145258.roa Signing time: Wed 04 Mar 2026 06:21:00 +0000 ROA not before: Wed 04 Mar 2026 06:16:00 +0000 ROA not after: Wed 03 Mar 2027 06:21:00 +0000 asID: 145258 IP address blocks: 240a:aa30::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:dd:89:43:ff:23:e9:dc:fd:fd:3b:10:70:dd:8c:b0:33:c2:59:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:16:00 2026 GMT Not After : Mar 3 06:21:00 2027 GMT Subject: CN=FB5C83B204D4EF2EEEE84A7FCAF43B77F93ECFDE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:e9:88:1d:4c:04:59:6e:a7:fd:ca:f4:d3:d6: 7c:eb:13:5a:5c:6d:80:66:82:36:27:c1:b8:5d:66: 4a:0d:35:40:fb:81:1f:4b:5e:7f:82:e0:71:c8:75: 09:de:fe:d5:33:45:ef:90:49:d8:98:57:69:cd:68: 03:f1:a3:01:f8:55:44:20:de:9f:e6:ad:6d:0b:1b: 47:2b:f9:10:11:8f:b1:ea:0d:0e:78:5d:eb:0b:c5: e2:da:50:e9:2f:48:4e:89:ee:96:36:eb:97:12:d9: 6d:bc:3f:31:c8:71:05:07:68:ed:5b:cb:ad:a3:75: 69:63:ab:13:2d:53:81:c3:05:d6:ef:5e:f3:a7:0f: 8c:dd:9f:96:b8:7d:b7:7a:d7:15:a9:27:d9:7d:cb: c8:20:5d:15:a1:60:e1:66:bb:96:0e:a8:e7:84:3a: a8:1b:56:49:c6:6a:a9:ba:5f:d9:41:ee:c5:86:91: 18:9d:ff:cf:fb:b1:0d:d0:6e:df:84:b7:e9:f7:50: 49:76:30:89:2c:2a:4b:00:e5:ba:55:f0:a2:70:6d: 7a:46:fa:cc:2c:42:19:d4:ad:3e:b0:36:42:ed:62: 38:fd:a7:61:9f:78:ab:3f:92:46:f4:b0:36:e4:99: d4:f6:39:4c:77:31:95:76:0d:bc:68:e3:23:b1:d3: 79:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:5C:83:B2:04:D4:EF:2E:EE:E8:4A:7F:CA:F4:3B:77:F9:3E:CF:DE X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145258.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:aa30::/32 Signature Algorithm: sha256WithRSAEncryption 78:fc:11:00:f0:e8:71:31:fd:83:54:56:4d:6c:63:2b:63:13: cc:6d:8e:03:31:1a:c2:68:87:10:49:a3:cc:41:e2:f6:01:ea: 0b:0d:29:78:a5:47:51:3b:5e:28:b8:01:7d:f0:8e:2e:f1:83: e2:10:e6:91:95:9a:fa:ce:e2:79:c9:70:85:69:42:73:31:91: d0:26:d5:9e:2b:3d:e7:48:aa:95:4a:03:14:67:f8:40:f9:12: 4b:98:2b:55:4a:8e:1e:70:72:73:6f:e0:d4:d3:5c:35:53:34: 85:bf:9d:97:9d:1d:d0:e5:7a:c0:df:42:aa:2f:4a:1a:d5:a1: 03:cb:41:26:42:c3:0b:57:cd:2a:2c:bb:27:90:29:84:2d:f2: 0e:f7:24:89:7a:65:b9:55:b4:98:9f:11:cc:dc:5d:9e:5e:8e: 4b:cf:69:83:c4:94:5f:de:93:98:3c:e9:5c:f9:fd:ad:19:05: 94:fa:c8:e9:f2:16:52:10:e3:ab:8f:6e:e0:23:ca:ab:ac:c0: 4c:3d:0a:04:7e:49:0e:b8:ef:d9:df:fb:ce:b9:8e:ce:d2:2a: 5d:06:db:ec:0a:8f:0d:97:42:2b:f6:59:31:b3:41:03:a1:97: 02:9c:5a:76:af:d4:55:e4:ac:80:a8:cd:73:1b:2f:bd:3b:e5: 8b:f7:2d:d7 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUG92JQ/8j6dz9/TsQcN2MsDPCWXkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTYwMFoX DTI3MDMwMzA2MjEwMFowMzExMC8GA1UEAxMoRkI1QzgzQjIwNEQ0RUYyRUVFRTg0 QTdGQ0FGNDNCNzdGOTNFQ0ZERTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOXpiB1MBFlup/3K9NPWfOsTWlxtgGaCNifBuF1mSg01QPuBH0tef4Lgcch1 Cd7+1TNF75BJ2JhXac1oA/GjAfhVRCDen+atbQsbRyv5EBGPseoNDnhd6wvF4tpQ 6S9ITonuljbrlxLZbbw/MchxBQdo7VvLraN1aWOrEy1TgcMF1u9e86cPjN2flrh9 t3rXFakn2X3LyCBdFaFg4Wa7lg6o54Q6qBtWScZqqbpf2UHuxYaRGJ3/z/uxDdBu 34S36fdQSXYwiSwqSwDlulXwonBtekb6zCxCGdStPrA2Qu1iOP2nYZ94qz+SRvSw NuSZ1PY5THcxlXYNvGjjI7HTeYECAwEAAaOCAcUwggHBMB0GA1UdDgQWBBT7XIOy BNTvLu7oSn/K9Dt3+T7P3jAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTI1OC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qjAwDQYJKoZIhvcNAQELBQADggEBAHj8EQDw6HEx/YNUVk1sYytjE8xtjgMxGsJo hxBJo8xB4vYB6gsNKXilR1E7Xii4AX3wji7xg+IQ5pGVmvrO4nnJcIVpQnMxkdAm 1Z4rPedIqpVKAxRn+ED5EkuYK1VKjh5wcnNv4NTTXDVTNIW/nZedHdDlesDfQqov ShrVoQPLQSZCwwtXzSosuyeQKYQt8g73JIl6ZblVtJifEczcXZ5ejkvPaYPElF/e k5g86Vz5/a0ZBZT6yOnyFlIQ46uPbuAjyquswEw9CgR+SQ6479nf+865js7SKl0G 2+wKjw2XQiv2WTGzQQOhlwKcWnav1FXkrICozXMbL7075Yv3Ldc= -----END CERTIFICATE-----Generated at Sat Mar 28 13:15:12 2026 by rpki-client