$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145260.roa File: AS145260.roa (raw, json) Hash identifier: xmiUfnh6g1cRE+FxdjSraUGejkPv6xIao5Cmve+A9sA= Subject key identifier: F3:22:B0:E6:38:BB:99:4A:36:D6:77:0B:65:39:7C:18:C3:25:ED:C3 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 3E656B51BF3215119C99DD8F6F9D0EA90BD14919 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145260.roa Signing time: Wed 04 Mar 2026 06:21:58 +0000 ROA not before: Wed 04 Mar 2026 06:16:58 +0000 ROA not after: Wed 03 Mar 2027 06:21:58 +0000 asID: 145260 IP address blocks: 240a:aa32::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:65:6b:51:bf:32:15:11:9c:99:dd:8f:6f:9d:0e:a9:0b:d1:49:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:16:58 2026 GMT Not After : Mar 3 06:21:58 2027 GMT Subject: CN=F322B0E638BB994A36D6770B65397C18C325EDC3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:da:61:48:54:23:7d:74:a4:07:a4:a7:0d:d7: 30:6b:96:05:fb:5c:b6:ca:4a:84:16:de:e4:33:79: fa:95:37:06:7d:03:aa:5d:c6:27:cd:66:a9:7b:18: d5:1f:15:91:97:e8:89:7b:e1:03:68:f9:43:01:88: f9:3c:cf:df:8e:21:68:f7:af:ec:b9:a7:4b:72:75: 43:12:4b:b4:6a:75:54:e9:ea:36:d1:66:c5:0a:64: 4a:ee:0d:6c:97:6d:d9:e4:e8:ba:69:5f:9c:3f:bb: 03:ef:3e:65:cf:f1:f7:d8:8f:86:a2:51:92:d8:b3: 7a:51:d9:66:6d:5f:f0:f2:8a:31:c8:35:e4:e1:f1: bb:21:80:df:ac:97:1b:fb:85:1f:fc:64:40:c4:47: 35:1b:b3:31:15:5b:54:61:ad:10:31:07:d2:34:f6: b2:a5:ff:5f:70:22:91:b2:58:96:6f:68:87:4c:e0: 55:1e:c3:c0:9d:1f:7d:85:ad:82:a4:e9:f7:2e:51: 03:29:2b:15:f0:7d:5f:0e:6d:89:94:c9:75:6b:68: b2:16:72:86:9e:3c:b9:b9:b8:8c:8f:e4:99:1a:d6: 70:36:b0:61:71:25:8a:72:1e:fa:77:da:00:93:e2: 76:37:51:ea:e5:85:ba:8c:95:9d:51:18:bb:d2:c2: cd:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:22:B0:E6:38:BB:99:4A:36:D6:77:0B:65:39:7C:18:C3:25:ED:C3 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145260.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:aa32::/32 Signature Algorithm: sha256WithRSAEncryption 94:32:47:3f:2f:45:1b:69:fb:b1:c7:97:37:72:cd:77:e4:e0: ea:f6:95:ae:91:2a:1e:37:32:ca:07:cf:04:41:29:f0:67:14: 78:31:25:93:44:b3:66:e5:f9:b9:a7:61:fc:61:a4:61:9f:b5: 27:f2:c7:a5:f5:ba:dc:d5:8e:46:3d:a9:88:39:8c:aa:05:b8: 0e:22:14:b9:69:37:7d:79:71:75:ef:10:e4:50:4a:0a:e7:15: 0e:0c:39:93:39:6b:55:ec:c4:03:db:30:98:33:cc:7c:f8:84: 48:9c:9e:55:b8:73:b0:fe:c3:3a:69:ea:e2:d2:3e:ce:ef:b4: c7:b2:6d:ee:3d:70:f0:15:83:75:25:76:9e:a6:e8:b5:23:b1: 1d:80:be:70:f1:0d:af:11:d9:69:9f:30:95:0f:c0:c8:58:98: b3:ca:a2:1f:d1:0f:ce:13:ee:3a:61:c7:88:2a:ba:87:56:47: e5:02:8a:29:0f:2f:61:1b:2d:67:41:ab:13:22:b4:38:59:69: 4e:6b:09:39:d4:c2:6d:e0:1a:bd:b4:cb:be:ee:6d:e0:03:91: ad:55:8f:bd:52:ec:8c:7c:95:2d:d0:c8:11:b7:ba:92:46:fa: 90:34:0b:06:1f:ab:eb:fe:f7:71:d6:5c:09:ef:b0:3d:8b:54: a6:fe:39:00 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUPmVrUb8yFRGcmd2Pb50OqQvRSRkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTY1OFoX DTI3MDMwMzA2MjE1OFowMzExMC8GA1UEAxMoRjMyMkIwRTYzOEJCOTk0QTM2RDY3 NzBCNjUzOTdDMThDMzI1RURDMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJ7aYUhUI310pAekpw3XMGuWBftctspKhBbe5DN5+pU3Bn0Dql3GJ81mqXsY 1R8VkZfoiXvhA2j5QwGI+TzP344haPev7LmnS3J1QxJLtGp1VOnqNtFmxQpkSu4N bJdt2eToumlfnD+7A+8+Zc/x99iPhqJRktizelHZZm1f8PKKMcg15OHxuyGA36yX G/uFH/xkQMRHNRuzMRVbVGGtEDEH0jT2sqX/X3AikbJYlm9oh0zgVR7DwJ0ffYWt gqTp9y5RAykrFfB9Xw5tiZTJdWtoshZyhp48ubm4jI/kmRrWcDawYXElinIe+nfa AJPidjdR6uWFuoyVnVEYu9LCzdECAwEAAaOCAcUwggHBMB0GA1UdDgQWBBTzIrDm OLuZSjbWdwtlOXwYwyXtwzAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTI2MC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qjIwDQYJKoZIhvcNAQELBQADggEBAJQyRz8vRRtp+7HHlzdyzXfk4Or2la6RKh43 MsoHzwRBKfBnFHgxJZNEs2bl+bmnYfxhpGGftSfyx6X1utzVjkY9qYg5jKoFuA4i FLlpN315cXXvEORQSgrnFQ4MOZM5a1XsxAPbMJgzzHz4hEicnlW4c7D+wzpp6uLS Ps7vtMeybe49cPAVg3Uldp6m6LUjsR2AvnDxDa8R2WmfMJUPwMhYmLPKoh/RD84T 7jphx4gquodWR+UCiikPL2EbLWdBqxMitDhZaU5rCTnUwm3gGr20y77ubeADka1V j71S7Ix8lS3QyBG3upJG+pA0CwYfq+v+93HWXAnvsD2LVKb+OQA= -----END CERTIFICATE-----Generated at Sat Mar 28 14:26:40 2026 by rpki-client