$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145276.roa File: AS145276.roa (raw, json) Hash identifier: +dMmZQ1njG5CAmX9wzPtiHO21ny4d2vyniM7cRtxfIk= Subject key identifier: 38:C0:3F:5F:22:D6:21:F8:44:6B:DE:D2:E8:3E:62:69:EF:C2:1B:0A Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 0F64D082C9A5A761FD7CAC697C678AE31AAB8054 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145276.roa Signing time: Wed 04 Mar 2026 06:20:01 +0000 ROA not before: Wed 04 Mar 2026 06:15:01 +0000 ROA not after: Wed 03 Mar 2027 06:20:01 +0000 asID: 145276 IP address blocks: 240a:aa42::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:64:d0:82:c9:a5:a7:61:fd:7c:ac:69:7c:67:8a:e3:1a:ab:80:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:15:01 2026 GMT Not After : Mar 3 06:20:01 2027 GMT Subject: CN=38C03F5F22D621F8446BDED2E83E6269EFC21B0A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:59:23:ad:24:1f:35:b9:47:41:5b:67:a4:2c: 63:36:b5:e3:71:11:dc:1e:af:10:81:b7:fa:11:01: ee:21:10:81:19:25:07:84:81:74:a0:ce:e0:0e:2a: c1:1b:be:74:15:39:77:28:69:21:eb:5a:17:24:ae: fe:ed:54:7f:c5:47:b5:2b:d1:ea:22:11:af:c5:60: 65:7c:2a:1e:fc:6e:b7:99:b5:43:ae:df:57:e4:da: b7:31:3d:3e:d5:4a:71:00:de:47:7e:3e:2d:c0:b4: 03:7a:26:24:a5:ba:7e:03:1e:09:f4:0a:93:b3:23: fa:4a:67:01:e6:4c:22:f1:0f:1b:ae:2c:7f:54:65: 9d:2c:eb:8b:32:aa:8f:45:e6:3a:a2:71:d6:5a:a1: 55:ff:5d:43:66:e7:18:7b:af:9e:8a:bf:df:82:7c: 76:ba:ff:ad:2a:ab:d0:d3:ae:56:54:db:06:d5:4f: a7:45:4a:db:fb:59:60:4c:38:7f:32:90:a7:bb:bb: 3a:7f:92:3d:ab:fc:92:cc:cc:ae:41:47:fe:c5:d9: 7a:03:41:76:32:dc:b8:90:87:da:66:7b:c0:7a:0a: ff:db:a7:c6:3a:6c:2a:04:35:ba:61:fc:0a:f7:d2: 39:a2:68:d7:f4:aa:1a:98:e6:95:e8:5f:42:f3:52: 48:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:C0:3F:5F:22:D6:21:F8:44:6B:DE:D2:E8:3E:62:69:EF:C2:1B:0A X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145276.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:aa42::/32 Signature Algorithm: sha256WithRSAEncryption 69:20:5d:ff:6a:ac:37:7d:2a:16:27:10:ce:99:5f:87:dd:4d: f2:a5:3d:f3:5c:c8:06:99:c1:66:a5:4f:33:6c:ea:d8:d6:1a: b8:53:3a:59:6a:ea:23:ed:36:c1:da:d9:54:fa:56:96:a0:33: 7d:14:fc:dd:4f:43:f4:76:b7:3c:32:d3:78:fd:7e:78:6f:f9: c4:88:da:d2:30:b3:87:10:d7:3b:ae:5a:68:47:ca:46:6e:d5: 64:3f:46:9d:0e:0f:92:4c:0c:d2:9c:86:49:ff:8a:61:4b:0b: 1b:fb:36:22:98:d5:fc:ea:82:fc:ac:d1:30:44:24:18:73:a7: 43:f0:cc:b7:0e:47:84:b9:cd:4c:15:d8:c1:34:8a:80:34:a6: de:e6:63:3e:9b:04:a5:a3:fb:df:88:56:81:5d:ef:d4:6d:43: 80:8a:09:09:de:5b:2d:cc:f9:eb:98:7b:2e:1c:07:b4:3c:95: 12:c4:34:aa:1c:3f:f8:82:da:18:97:ad:96:e7:fb:b6:cc:f6: a5:27:10:04:03:1d:26:a3:a0:d9:47:77:e0:60:24:a6:28:54: 5c:51:f2:30:84:17:ca:aa:f9:df:06:60:6d:c9:4f:cf:36:a9: 82:c1:92:16:dc:f9:91:55:20:05:c1:bf:14:de:84:f7:61:e2: 4d:cb:79:e6 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUD2TQgsmlp2H9fKxpfGeK4xqrgFQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTUwMVoX DTI3MDMwMzA2MjAwMVowMzExMC8GA1UEAxMoMzhDMDNGNUYyMkQ2MjFGODQ0NkJE RUQyRTgzRTYyNjlFRkMyMUIwQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM5ZI60kHzW5R0FbZ6QsYza143ER3B6vEIG3+hEB7iEQgRklB4SBdKDO4A4q wRu+dBU5dyhpIetaFySu/u1Uf8VHtSvR6iIRr8VgZXwqHvxut5m1Q67fV+TatzE9 PtVKcQDeR34+LcC0A3omJKW6fgMeCfQKk7Mj+kpnAeZMIvEPG64sf1RlnSzrizKq j0XmOqJx1lqhVf9dQ2bnGHuvnoq/34J8drr/rSqr0NOuVlTbBtVPp0VK2/tZYEw4 fzKQp7u7On+SPav8kszMrkFH/sXZegNBdjLcuJCH2mZ7wHoK/9unxjpsKgQ1umH8 CvfSOaJo1/SqGpjmlehfQvNSSM0CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQ4wD9f ItYh+ERr3tLoPmJp78IbCjAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTI3Ni5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qkIwDQYJKoZIhvcNAQELBQADggEBAGkgXf9qrDd9KhYnEM6ZX4fdTfKlPfNcyAaZ wWalTzNs6tjWGrhTOllq6iPtNsHa2VT6VpagM30U/N1PQ/R2tzwy03j9fnhv+cSI 2tIws4cQ1zuuWmhHykZu1WQ/Rp0OD5JMDNKchkn/imFLCxv7NiKY1fzqgvys0TBE JBhzp0PwzLcOR4S5zUwV2ME0ioA0pt7mYz6bBKWj+9+IVoFd79RtQ4CKCQneWy3M +euYey4cB7Q8lRLENKocP/iC2hiXrZbn+7bM9qUnEAQDHSajoNlHd+BgJKYoVFxR 8jCEF8qq+d8GYG3JT882qYLBkhbc+ZFVIAXBvxTehPdh4k3LeeY= -----END CERTIFICATE-----Generated at Sat Mar 28 15:53:30 2026 by rpki-client