$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145266.roa File: AS145266.roa (raw, json) Hash identifier: QxHKxCPV/D//mjwJI4yhli8pH5Drym1U7Du7H6TYLs4= Subject key identifier: 25:84:98:F6:E0:56:BC:A9:AD:AB:AB:5E:77:82:23:9B:9F:6A:75:C1 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 6C339DC9D4874DA35C3289C16CA4C1A8F380276B Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145266.roa Signing time: Wed 04 Mar 2026 06:22:30 +0000 ROA not before: Wed 04 Mar 2026 06:17:30 +0000 ROA not after: Wed 03 Mar 2027 06:22:30 +0000 asID: 145266 IP address blocks: 240a:aa38::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:33:9d:c9:d4:87:4d:a3:5c:32:89:c1:6c:a4:c1:a8:f3:80:27:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:17:30 2026 GMT Not After : Mar 3 06:22:30 2027 GMT Subject: CN=258498F6E056BCA9ADABAB5E7782239B9F6A75C1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:10:7b:39:df:a7:40:7b:5a:69:81:54:21:b7: 45:bb:47:de:8a:a7:1e:41:1d:67:45:4c:cb:13:bb: 44:f2:a9:4d:4b:67:5f:5c:23:0f:83:83:ac:8e:37: 5c:d1:ef:6a:12:a2:19:72:05:79:ac:f0:46:bf:88: 79:59:c0:25:22:39:db:68:52:e6:47:c9:3f:45:f1: 94:03:bd:71:46:e9:e7:9a:5b:8c:d3:4f:44:4e:fb: d9:26:ae:65:a1:0f:01:55:eb:58:ca:a8:a8:71:f5: f1:d8:31:aa:ec:c2:d4:56:c5:ae:6c:68:b0:e2:e9: ec:b9:91:f6:a7:3b:cd:d5:f6:07:5d:13:91:a6:23: c0:7b:33:dc:b5:d0:a9:66:e2:12:8a:23:3a:43:c1: 04:c7:c2:ab:b0:77:f5:26:f7:f1:35:4a:6c:04:69: dd:00:86:ba:8f:d5:37:d4:08:f8:d4:e8:4d:f6:43: b4:38:26:b8:f5:cd:83:18:ba:c0:5c:e1:d2:7c:86: 30:4e:46:7a:a7:25:98:78:33:2f:67:59:9b:1b:56: 77:2c:40:04:d0:c9:66:f6:5a:b7:20:d5:58:7f:0f: 6b:a5:5d:b3:a9:49:5b:f3:3d:ad:96:e8:c9:09:b2: 2e:16:76:79:e5:4d:f1:cc:f5:9e:f7:77:39:fd:60: f6:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:84:98:F6:E0:56:BC:A9:AD:AB:AB:5E:77:82:23:9B:9F:6A:75:C1 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145266.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:aa38::/32 Signature Algorithm: sha256WithRSAEncryption 52:5b:ba:d3:18:a6:f1:73:f4:d7:a6:c1:f8:1b:ff:45:09:8d: 7a:f4:c8:53:50:bf:cb:0e:26:4a:b4:92:42:38:03:99:6a:e3: 2a:31:9b:6c:17:80:36:0f:6b:36:22:d9:d4:47:d4:01:76:ed: cf:9c:2f:67:bc:8f:90:29:c4:18:d1:03:33:48:07:ec:79:ae: 04:b1:58:ce:ef:da:73:14:13:67:6b:eb:d5:9e:2b:1c:85:2d: 0a:b8:77:6b:c9:4f:26:84:34:a9:f8:9a:88:fa:f0:3b:95:07: 89:08:d3:27:af:b8:51:3b:08:82:03:5c:00:29:03:33:33:a3: 42:3d:12:e0:17:84:a4:9c:ea:10:e8:04:17:c9:d7:ff:b3:3e: 19:39:a8:46:a3:98:36:cf:5b:bf:73:71:ff:dd:a4:be:b5:08: dc:a3:c2:e4:df:f4:36:e7:6c:d8:de:c3:8d:e0:76:b7:00:9f: 3e:58:1d:05:0d:30:fe:b0:90:3b:fb:b0:03:21:32:10:d5:4c: ee:83:3d:c4:ad:f7:88:57:72:b6:ae:c6:95:65:79:d3:4e:ad: c0:4d:c5:27:90:25:8f:49:74:b8:97:c2:79:1f:4e:2a:3c:24: 56:b8:1e:9b:3e:73:2b:0f:37:37:9b:d7:39:20:5e:48:e1:ed: 42:a6:fa:71 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUbDOdydSHTaNcMonBbKTBqPOAJ2swDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTczMFoX DTI3MDMwMzA2MjIzMFowMzExMC8GA1UEAxMoMjU4NDk4RjZFMDU2QkNBOUFEQUJB QjVFNzc4MjIzOUI5RjZBNzVDMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAPMQeznfp0B7WmmBVCG3RbtH3oqnHkEdZ0VMyxO7RPKpTUtnX1wjD4ODrI43 XNHvahKiGXIFeazwRr+IeVnAJSI522hS5kfJP0XxlAO9cUbp55pbjNNPRE772Sau ZaEPAVXrWMqoqHH18dgxquzC1FbFrmxosOLp7LmR9qc7zdX2B10TkaYjwHsz3LXQ qWbiEoojOkPBBMfCq7B39Sb38TVKbARp3QCGuo/VN9QI+NToTfZDtDgmuPXNgxi6 wFzh0nyGME5GeqclmHgzL2dZmxtWdyxABNDJZvZatyDVWH8Pa6Vds6lJW/M9rZbo yQmyLhZ2eeVN8cz1nvd3Of1g9uMCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQlhJj2 4Fa8qa2rq153giObn2p1wTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTI2Ni5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qjgwDQYJKoZIhvcNAQELBQADggEBAFJbutMYpvFz9Nemwfgb/0UJjXr0yFNQv8sO Jkq0kkI4A5lq4yoxm2wXgDYPazYi2dRH1AF27c+cL2e8j5ApxBjRAzNIB+x5rgSx WM7v2nMUE2dr69WeKxyFLQq4d2vJTyaENKn4moj68DuVB4kI0yevuFE7CIIDXAAp AzMzo0I9EuAXhKSc6hDoBBfJ1/+zPhk5qEajmDbPW79zcf/dpL61CNyjwuTf9Dbn bNjew43gdrcAnz5YHQUNMP6wkDv7sAMhMhDVTO6DPcSt94hXcrauxpVledNOrcBN xSeQJY9JdLiXwnkfTio8JFa4Hps+cysPNzeb1zkgXkjh7UKm+nE= -----END CERTIFICATE-----Generated at Sat Mar 28 11:41:16 2026 by rpki-client