$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145263.roa File: AS145263.roa (raw, json) Hash identifier: h25yBQgRtG0lrAQkzewzYwts0FinhRk+zTNRHF8uDR8= Subject key identifier: CB:B7:50:85:43:CB:30:61:03:A1:72:B0:87:72:01:A5:42:BF:AF:B1 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 7C959A8F064F1D7EC84960A5200E30A05D186866 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145263.roa Signing time: Wed 04 Mar 2026 06:19:34 +0000 ROA not before: Wed 04 Mar 2026 06:14:34 +0000 ROA not after: Wed 03 Mar 2027 06:19:34 +0000 asID: 145263 IP address blocks: 240a:aa35::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:95:9a:8f:06:4f:1d:7e:c8:49:60:a5:20:0e:30:a0:5d:18:68:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:14:34 2026 GMT Not After : Mar 3 06:19:34 2027 GMT Subject: CN=CBB7508543CB306103A172B0877201A542BFAFB1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:b3:fd:13:78:07:c0:5b:d6:14:76:85:8a:d6: 30:66:af:e3:3f:19:39:7b:c8:e7:69:2a:f7:77:42: 0a:0a:1d:74:14:b5:71:0e:39:a8:66:91:5f:2f:45: 9f:66:9a:b4:4d:16:19:c9:92:ac:f5:6e:9c:f8:69: 22:70:0a:6b:bd:86:92:0d:54:0a:1d:51:df:c4:39: a6:fe:d0:bf:04:f1:24:0f:55:ce:31:f1:1f:af:a0: 48:ee:0b:64:a8:77:b1:de:83:4d:5c:ba:fe:08:c3: 0f:92:47:5c:ce:7a:ed:9e:f2:c5:5a:f5:f3:b4:65: 5a:57:43:41:46:78:9d:1d:69:ae:cc:68:fb:0b:71: dc:03:3b:7d:dc:4c:6b:08:51:20:ed:8d:c2:2a:4a: bb:5a:ec:1b:12:c5:90:be:49:ae:06:88:67:94:83: d5:4c:03:74:b3:9f:0c:16:bd:06:b9:a5:10:50:45: d2:0e:db:91:ec:e0:10:6e:aa:82:b6:85:b1:92:ca: 60:c2:30:d8:58:f0:a1:53:86:52:c5:aa:ee:12:50: 27:4f:d9:6b:0f:f4:09:71:f0:c9:1a:e8:a2:b7:08: b4:d8:0b:a1:aa:b1:3d:d0:99:b9:e9:a1:ba:c1:12: 5b:5a:f2:c8:5a:14:26:d4:08:33:37:29:ab:da:3b: 99:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:B7:50:85:43:CB:30:61:03:A1:72:B0:87:72:01:A5:42:BF:AF:B1 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145263.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:aa35::/32 Signature Algorithm: sha256WithRSAEncryption 52:06:4e:ad:02:e8:78:49:3c:f5:96:b8:3b:b1:80:29:48:91: eb:24:f8:0a:b9:4d:55:27:fb:6f:0a:57:6e:96:3a:eb:ab:27: b5:8e:ce:10:50:9d:46:e3:17:31:34:46:b8:75:fd:b4:02:95: e7:c9:65:9d:6c:7a:da:be:4c:5e:d6:9f:37:c2:65:14:c0:70: 82:87:14:c3:9e:dc:17:27:0d:74:c2:c1:b4:45:df:de:47:8a: e0:e8:a0:bf:6a:fa:44:c1:94:3d:5f:dc:09:45:8f:d7:d5:55: 42:26:9e:1e:18:ed:c0:a2:8b:53:73:4b:59:4b:93:cd:ea:e0: 7c:88:52:56:3e:ae:0b:4a:23:dd:a2:40:af:cd:28:f9:57:dd: 2d:a4:18:3e:71:a8:c1:3a:40:8b:f9:e4:68:bb:e5:c0:03:aa: 93:79:d6:7f:fb:7e:b8:f1:8b:c8:37:f6:4c:7d:bc:51:22:9a: bd:61:57:a5:ee:85:63:5e:b1:dd:6b:4f:40:ee:8e:e1:bd:74: da:88:0f:b7:86:68:a7:be:a8:11:50:65:4c:05:ce:c3:2c:ae: 72:a2:67:80:ba:60:8a:f1:75:9c:23:1e:02:6d:df:19:7b:4b: b4:9d:a7:3e:5b:94:13:67:f5:fd:e3:1e:3c:a6:8e:54:67:43: 32:df:f4:21 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUfJWajwZPHX7ISWClIA4woF0YaGYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTQzNFoX DTI3MDMwMzA2MTkzNFowMzExMC8GA1UEAxMoQ0JCNzUwODU0M0NCMzA2MTAzQTE3 MkIwODc3MjAxQTU0MkJGQUZCMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKqz/RN4B8Bb1hR2hYrWMGav4z8ZOXvI52kq93dCCgoddBS1cQ45qGaRXy9F n2aatE0WGcmSrPVunPhpInAKa72Gkg1UCh1R38Q5pv7QvwTxJA9VzjHxH6+gSO4L ZKh3sd6DTVy6/gjDD5JHXM567Z7yxVr187RlWldDQUZ4nR1prsxo+wtx3AM7fdxM awhRIO2NwipKu1rsGxLFkL5JrgaIZ5SD1UwDdLOfDBa9BrmlEFBF0g7bkezgEG6q graFsZLKYMIw2FjwoVOGUsWq7hJQJ0/Zaw/0CXHwyRroorcItNgLoaqxPdCZuemh usESW1ryyFoUJtQIMzcpq9o7mQkCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBTLt1CF Q8swYQOhcrCHcgGlQr+vsTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTI2My5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qjUwDQYJKoZIhvcNAQELBQADggEBAFIGTq0C6HhJPPWWuDuxgClIkesk+Aq5TVUn +28KV26WOuurJ7WOzhBQnUbjFzE0Rrh1/bQClefJZZ1setq+TF7WnzfCZRTAcIKH FMOe3BcnDXTCwbRF395HiuDooL9q+kTBlD1f3AlFj9fVVUImnh4Y7cCii1NzS1lL k83q4HyIUlY+rgtKI92iQK/NKPlX3S2kGD5xqME6QIv55Gi75cADqpN51n/7frjx i8g39kx9vFEimr1hV6XuhWNesd1rT0DujuG9dNqID7eGaKe+qBFQZUwFzsMsrnKi Z4C6YIrxdZwjHgJt3xl7S7Sdpz5blBNn9f3jHjymjlRnQzLf9CE= -----END CERTIFICATE-----Generated at Sat Mar 28 13:16:43 2026 by rpki-client