$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145262.roa File: AS145262.roa (raw, json) Hash identifier: mxvjqfyO2Gsc9zp0Hq6GzaIrMLiV0saTpZnZKBrBP7s= Subject key identifier: BD:6C:5A:3B:17:85:61:B9:10:05:2E:89:10:F1:8E:81:C4:47:52:13 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 42C39C401C282A3EB74048E0C0173B4FD2EB1088 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145262.roa Signing time: Wed 04 Mar 2026 06:22:15 +0000 ROA not before: Wed 04 Mar 2026 06:17:15 +0000 ROA not after: Wed 03 Mar 2027 06:22:15 +0000 asID: 145262 IP address blocks: 240a:aa34::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:c3:9c:40:1c:28:2a:3e:b7:40:48:e0:c0:17:3b:4f:d2:eb:10:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:17:15 2026 GMT Not After : Mar 3 06:22:15 2027 GMT Subject: CN=BD6C5A3B178561B910052E8910F18E81C4475213 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:4b:2d:83:b2:7c:6b:41:a1:ea:ef:4e:a5:f3: 73:f9:e8:88:1a:bd:58:a6:5b:9b:0a:e1:00:ce:23: 08:9b:2b:60:bc:33:26:33:fe:fc:e5:fe:3f:13:6e: b7:a9:3d:df:c7:12:df:40:04:eb:89:40:63:29:69: 77:2b:d7:f4:01:f1:8b:08:19:d5:14:72:c7:02:02: 92:9f:73:4c:cb:ab:0d:8c:1d:56:28:99:2e:71:65: 9b:83:16:f0:64:d0:b3:1d:b5:11:3b:b1:8e:e5:48: bf:30:02:90:49:ae:94:30:53:7e:e1:3c:4e:77:86: b1:40:64:25:b9:65:88:e0:97:cf:4f:ff:e6:b3:2c: d3:6a:12:39:cb:d4:0c:39:dd:ed:92:7c:ca:a6:ef: 4e:b8:3b:a8:65:82:3d:e8:87:1d:04:5e:34:67:4a: 26:e6:eb:eb:25:a3:71:71:d4:9e:d3:07:f9:d9:a9: 2c:ca:d8:2c:11:03:07:08:05:e3:23:c4:11:82:3d: a1:cd:af:60:df:9f:55:f0:90:a3:f0:49:b9:84:e4: 6f:a4:d6:73:6a:57:73:66:74:dc:75:6d:2d:ae:46: b6:2a:20:c5:98:1b:e5:69:15:ed:ea:e4:a2:47:37: b9:4b:25:e4:20:0e:7d:91:88:26:b9:42:10:0d:7f: f1:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:6C:5A:3B:17:85:61:B9:10:05:2E:89:10:F1:8E:81:C4:47:52:13 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145262.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:aa34::/32 Signature Algorithm: sha256WithRSAEncryption cc:cd:29:a1:8f:c0:ff:83:6a:ef:d4:3e:cd:b1:18:a4:57:b8: 4e:c3:10:df:bd:d4:8f:2e:7a:a9:4e:09:6c:5b:bd:01:33:47: b8:91:0f:82:40:0e:51:2f:34:a9:0c:8f:af:26:33:94:a3:da: 01:fa:d9:6b:a5:23:af:80:31:c3:7a:9b:15:37:68:99:61:23: 65:d2:ee:34:bf:26:3a:51:be:4b:c3:94:d5:0e:0c:8a:6b:2f: de:3d:4e:1a:f2:d5:89:65:03:55:a1:a4:c2:34:85:53:8a:e5: 18:76:ac:71:55:15:bc:90:8c:e6:5c:85:0e:0e:8c:73:7b:70: e5:62:3c:b2:94:4c:f9:df:2f:dc:ea:3c:bc:8e:09:77:c2:bd: 0b:86:4e:ca:91:1d:0d:99:c0:f8:15:cd:81:52:fd:1b:f6:9a: ca:f5:2d:6b:92:bc:37:8a:26:c1:77:c8:ef:15:83:ff:f6:c4: 15:4a:2d:1f:98:85:0e:bf:9e:f2:e1:f3:89:86:55:a3:7f:a7: e0:3d:52:53:25:67:dc:25:f2:81:37:82:31:8c:b7:61:d1:f8: a5:21:7e:f4:59:7f:50:cc:00:57:da:8a:17:e7:a9:a4:a6:d1: f1:e2:67:71:32:6f:6c:c7:0e:dc:c6:fa:bf:6d:da:0d:8b:ce: 15:a5:44:d1 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUQsOcQBwoKj63QEjgwBc7T9LrEIgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTcxNVoX DTI3MDMwMzA2MjIxNVowMzExMC8GA1UEAxMoQkQ2QzVBM0IxNzg1NjFCOTEwMDUy RTg5MTBGMThFODFDNDQ3NTIxMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMpLLYOyfGtBoervTqXzc/noiBq9WKZbmwrhAM4jCJsrYLwzJjP+/OX+PxNu t6k938cS30AE64lAYylpdyvX9AHxiwgZ1RRyxwICkp9zTMurDYwdViiZLnFlm4MW 8GTQsx21ETuxjuVIvzACkEmulDBTfuE8TneGsUBkJblliOCXz0//5rMs02oSOcvU DDnd7ZJ8yqbvTrg7qGWCPeiHHQReNGdKJubr6yWjcXHUntMH+dmpLMrYLBEDBwgF 4yPEEYI9oc2vYN+fVfCQo/BJuYTkb6TWc2pXc2Z03HVtLa5GtiogxZgb5WkV7erk okc3uUsl5CAOfZGIJrlCEA1/8WECAwEAAaOCAcUwggHBMB0GA1UdDgQWBBS9bFo7 F4VhuRAFLokQ8Y6BxEdSEzAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTI2Mi5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qjQwDQYJKoZIhvcNAQELBQADggEBAMzNKaGPwP+Dau/UPs2xGKRXuE7DEN+91I8u eqlOCWxbvQEzR7iRD4JADlEvNKkMj68mM5Sj2gH62WulI6+AMcN6mxU3aJlhI2XS 7jS/JjpRvkvDlNUODIprL949Thry1YllA1WhpMI0hVOK5Rh2rHFVFbyQjOZchQ4O jHN7cOViPLKUTPnfL9zqPLyOCXfCvQuGTsqRHQ2ZwPgVzYFS/Rv2msr1LWuSvDeK JsF3yO8Vg//2xBVKLR+YhQ6/nvLh84mGVaN/p+A9UlMlZ9wl8oE3gjGMt2HR+KUh fvRZf1DMAFfaihfnqaSm0fHiZ3Eyb2zHDtzG+r9t2g2LzhWlRNE= -----END CERTIFICATE-----Generated at Sat Mar 28 13:16:43 2026 by rpki-client