$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145273.roa File: AS145273.roa (raw, json) Hash identifier: hpP61grU9VMIkpsfyUafSrmTsk3n0vzwwzMNy5jBU6A= Subject key identifier: A1:A4:66:E5:C2:7C:BD:65:A9:C0:DC:4C:77:0F:D5:0E:A8:D0:9E:0C Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 2213EB441B0B4326F4525186941DBDF8AA66AD62 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145273.roa Signing time: Wed 04 Mar 2026 06:19:52 +0000 ROA not before: Wed 04 Mar 2026 06:14:52 +0000 ROA not after: Wed 03 Mar 2027 06:19:52 +0000 asID: 145273 IP address blocks: 240a:aa3f::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:13:eb:44:1b:0b:43:26:f4:52:51:86:94:1d:bd:f8:aa:66:ad:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:14:52 2026 GMT Not After : Mar 3 06:19:52 2027 GMT Subject: CN=A1A466E5C27CBD65A9C0DC4C770FD50EA8D09E0C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:28:44:e8:44:42:a6:f5:26:26:1e:9b:bb:12: 83:3f:53:27:c7:15:56:ae:64:9d:c4:62:ef:6f:b0: bd:b9:2a:28:31:16:1a:26:33:13:36:c8:db:61:f3: 77:14:63:cb:7f:9a:b7:58:45:cc:ab:c8:82:b3:07: 0b:45:51:ef:f4:8b:c0:ae:fc:c9:50:75:63:a6:74: 16:1e:15:92:88:97:46:6f:28:d3:75:8a:a5:b9:50: 52:75:5d:cf:d3:be:91:16:02:6e:ed:b1:52:34:c4: fe:5a:23:5a:91:8b:10:98:48:f9:89:87:61:46:67: 53:64:b5:45:8b:d3:04:fe:e4:4b:e2:22:d0:cd:e0: 19:98:6e:5f:27:b8:55:12:31:0b:ba:55:12:0b:bb: 42:6d:3d:97:d4:5f:8f:c9:ef:16:2c:9c:fc:75:3b: a5:e1:fc:6a:0b:e8:ac:90:f1:bc:d8:27:60:2b:95: f3:17:5d:0b:10:8b:d5:35:c4:30:90:af:e2:86:84: e7:b0:60:a6:03:76:1b:1d:60:31:e8:2c:36:8e:d1: d3:b7:1f:92:52:03:95:56:ea:d4:9f:ba:c1:dd:f3: f2:84:6a:5a:13:65:16:22:19:df:8d:15:65:ad:41: 6b:37:16:04:e7:87:cb:27:ec:2b:f6:47:75:3b:59: 6d:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:A4:66:E5:C2:7C:BD:65:A9:C0:DC:4C:77:0F:D5:0E:A8:D0:9E:0C X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145273.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:aa3f::/32 Signature Algorithm: sha256WithRSAEncryption 88:66:66:5b:31:98:43:46:57:fd:fc:a8:3d:12:a8:c1:52:98: 4b:99:07:14:ef:13:3e:aa:a0:91:4a:57:05:d5:4b:dc:b5:c5: aa:65:fb:07:20:50:1c:fc:0f:fc:12:87:a9:89:41:aa:6b:0c: 7e:d0:72:83:fe:1f:4a:0a:64:89:ed:00:6b:3a:63:5d:d2:84: 50:c5:1f:82:5e:fd:74:6e:24:6e:22:7c:a3:10:4b:65:da:6d: fc:9f:c1:c8:69:66:35:50:cf:8a:78:ae:83:c1:2e:be:4a:81: 64:93:44:f2:39:38:fd:5a:6c:9b:a7:3c:11:9a:6b:35:11:d7: 59:9b:cd:3f:cd:58:7d:ad:8c:47:91:b4:8a:26:1e:05:dc:8c: 04:41:ca:cf:2a:d4:27:8f:12:45:5a:d8:9a:eb:b1:bb:49:f2: bb:e3:35:c9:63:a9:82:04:23:da:fb:6b:dc:6a:cf:4c:82:ea: 9e:ee:b1:bd:c2:36:62:8c:b9:8a:6c:f5:95:e3:44:d9:6f:3f: b1:f2:75:e2:c4:86:e5:33:9e:e8:a6:19:88:d1:49:f6:26:a8: cc:9a:dc:bb:d1:df:35:93:01:47:50:61:84:44:f4:5e:18:e1: 6e:81:4a:15:bf:02:4c:00:11:7d:63:18:cb:3f:f8:5a:c2:8d: b9:8c:e6:58 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUIhPrRBsLQyb0UlGGlB29+KpmrWIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTQ1MloX DTI3MDMwMzA2MTk1MlowMzExMC8GA1UEAxMoQTFBNDY2RTVDMjdDQkQ2NUE5QzBE QzRDNzcwRkQ1MEVBOEQwOUUwQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJAoROhEQqb1JiYem7sSgz9TJ8cVVq5kncRi72+wvbkqKDEWGiYzEzbI22Hz dxRjy3+at1hFzKvIgrMHC0VR7/SLwK78yVB1Y6Z0Fh4VkoiXRm8o03WKpblQUnVd z9O+kRYCbu2xUjTE/lojWpGLEJhI+YmHYUZnU2S1RYvTBP7kS+Ii0M3gGZhuXye4 VRIxC7pVEgu7Qm09l9Rfj8nvFiyc/HU7peH8agvorJDxvNgnYCuV8xddCxCL1TXE MJCv4oaE57BgpgN2Gx1gMegsNo7R07cfklIDlVbq1J+6wd3z8oRqWhNlFiIZ340V Za1BazcWBOeHyyfsK/ZHdTtZbe8CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBShpGbl wny9ZanA3Ex3D9UOqNCeDDAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTI3My5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qj8wDQYJKoZIhvcNAQELBQADggEBAIhmZlsxmENGV/38qD0SqMFSmEuZBxTvEz6q oJFKVwXVS9y1xapl+wcgUBz8D/wSh6mJQaprDH7QcoP+H0oKZIntAGs6Y13ShFDF H4Je/XRuJG4ifKMQS2XabfyfwchpZjVQz4p4roPBLr5KgWSTRPI5OP1abJunPBGa azUR11mbzT/NWH2tjEeRtIomHgXcjARBys8q1CePEkVa2JrrsbtJ8rvjNcljqYIE I9r7a9xqz0yC6p7usb3CNmKMuYps9ZXjRNlvP7HydeLEhuUznuimGYjRSfYmqMya 3LvR3zWTAUdQYYRE9F4Y4W6BShW/AkwAEX1jGMs/+FrCjbmM5lg= -----END CERTIFICATE-----Generated at Sat Mar 28 11:42:09 2026 by rpki-client