$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145280.roa File: AS145280.roa (raw, json) Hash identifier: mjhulWUUtZMNeENRysxhIL1i5AlK3gf4+HC0X5jpdMY= Subject key identifier: AB:DD:99:4E:C3:2A:35:BE:5B:87:3C:F8:43:EB:71:12:65:29:BB:B6 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 0CABE07CEAAB3F50CBF9CC1105F0D88B9A5576AA Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145280.roa Signing time: Wed 04 Mar 2026 06:21:17 +0000 ROA not before: Wed 04 Mar 2026 06:16:17 +0000 ROA not after: Wed 03 Mar 2027 06:21:17 +0000 asID: 145280 IP address blocks: 240a:aa46::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:ab:e0:7c:ea:ab:3f:50:cb:f9:cc:11:05:f0:d8:8b:9a:55:76:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:16:17 2026 GMT Not After : Mar 3 06:21:17 2027 GMT Subject: CN=ABDD994EC32A35BE5B873CF843EB71126529BBB6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:49:27:f7:60:ea:7e:a8:45:3d:e9:2f:bd:0e: 77:8f:97:06:c9:5b:00:42:fb:9f:21:d9:cf:41:b3: 4d:29:3b:5e:6c:2c:18:fc:54:09:42:9d:78:ab:d0: bd:d8:db:a6:27:ee:25:8b:a4:cb:2d:f8:03:36:a8: ed:29:5b:c0:ea:c6:93:ce:52:01:33:7c:62:49:e7: 75:5e:81:2f:78:6f:72:90:1b:bd:69:f4:36:dd:b8: 5f:bf:b5:b3:62:6b:6c:46:b0:42:8e:73:31:08:83: d8:73:8d:5f:94:f5:20:65:1d:c3:49:72:89:4a:90: 18:0f:28:58:7e:f0:de:38:5c:74:b9:8a:47:ec:13: a8:6a:40:f5:d3:e4:ec:cf:7a:88:d7:ed:01:fb:62: d5:09:d5:dc:df:23:6a:ea:b4:f9:98:eb:07:fc:b6: 98:b5:9c:cb:66:22:a8:29:d9:de:d5:cd:8d:e5:6f: 58:8c:55:1d:1b:0d:53:65:1e:41:7f:2f:8c:3a:4d: 66:2c:1b:99:b1:d4:3b:97:b9:d8:b2:1f:2a:17:7f: 81:27:03:37:ff:57:18:29:24:bc:2f:65:a6:68:5c: 34:ca:14:c4:f5:8d:e7:8a:da:a5:77:84:4e:99:b5: f0:61:75:32:90:0e:6a:3e:0e:4e:98:a8:27:33:d7: 0e:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:DD:99:4E:C3:2A:35:BE:5B:87:3C:F8:43:EB:71:12:65:29:BB:B6 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145280.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:aa46::/32 Signature Algorithm: sha256WithRSAEncryption 94:ab:1a:dd:ff:c8:c1:09:92:42:3c:43:75:4c:e9:f7:4b:38: 3f:4d:04:95:eb:d9:48:2e:53:14:16:66:dd:42:9f:7a:5b:01: 34:d1:a8:60:60:49:14:e7:fa:96:71:a8:f6:47:a6:18:cd:cb: 2b:43:4c:76:27:2b:81:65:ea:4c:bf:1e:d4:4c:a7:d9:52:31: 9d:fc:e2:43:2d:b1:9d:f1:37:bb:5e:43:49:bc:f2:95:7c:6a: 69:54:93:e3:ed:4f:1a:46:43:f6:44:df:47:7e:31:13:55:af: bd:ab:71:46:e7:a1:09:e7:81:43:11:4c:9c:da:c2:91:0e:29: b0:42:ce:74:f1:55:3a:f4:00:06:b6:78:ac:d1:61:e3:a5:93: 1f:87:ba:99:ae:8c:39:47:42:09:3c:e6:1c:b7:2d:be:3a:98: 6c:ac:fc:d5:ba:77:e4:27:0e:b8:d8:d3:8c:6c:34:6a:75:8e: d7:fc:cd:9c:45:f6:6e:ff:d9:25:d7:ce:49:b8:5f:b2:0d:3e: 8f:df:be:a7:db:1d:ec:cb:10:24:33:01:24:06:86:ce:61:07: c1:c0:35:50:78:d4:d1:1b:ab:a2:e1:36:1c:1f:d2:69:d6:bc: 90:0e:20:b0:5f:94:d8:28:8a:a4:ad:7a:84:c5:7a:3d:20:0e: 7b:59:f7:0a -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUDKvgfOqrP1DL+cwRBfDYi5pVdqowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTYxN1oX DTI3MDMwMzA2MjExN1owMzExMC8GA1UEAxMoQUJERDk5NEVDMzJBMzVCRTVCODcz Q0Y4NDNFQjcxMTI2NTI5QkJCNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALZJJ/dg6n6oRT3pL70Od4+XBslbAEL7nyHZz0GzTSk7XmwsGPxUCUKdeKvQ vdjbpifuJYukyy34Azao7SlbwOrGk85SATN8YknndV6BL3hvcpAbvWn0Nt24X7+1 s2JrbEawQo5zMQiD2HONX5T1IGUdw0lyiUqQGA8oWH7w3jhcdLmKR+wTqGpA9dPk 7M96iNftAfti1QnV3N8jauq0+ZjrB/y2mLWcy2YiqCnZ3tXNjeVvWIxVHRsNU2Ue QX8vjDpNZiwbmbHUO5e52LIfKhd/gScDN/9XGCkkvC9lpmhcNMoUxPWN54rapXeE Tpm18GF1MpAOaj4OTpioJzPXDisCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSr3ZlO wyo1vluHPPhD63ESZSm7tjAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTI4MC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qkYwDQYJKoZIhvcNAQELBQADggEBAJSrGt3/yMEJkkI8Q3VM6fdLOD9NBJXr2Ugu UxQWZt1Cn3pbATTRqGBgSRTn+pZxqPZHphjNyytDTHYnK4Fl6ky/HtRMp9lSMZ38 4kMtsZ3xN7teQ0m88pV8amlUk+PtTxpGQ/ZE30d+MRNVr72rcUbnoQnngUMRTJza wpEOKbBCznTxVTr0AAa2eKzRYeOlkx+HupmujDlHQgk85hy3Lb46mGys/NW6d+Qn DrjY04xsNGp1jtf8zZxF9m7/2SXXzkm4X7INPo/fvqfbHezLECQzASQGhs5hB8HA NVB41NEbq6LhNhwf0mnWvJAOILBflNgoiqSteoTFej0gDntZ9wo= -----END CERTIFICATE-----Generated at Sat Mar 28 15:53:59 2026 by rpki-client