$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145281.roa File: AS145281.roa (raw, json) Hash identifier: OgAIMYb66zAH5NhZDXR2Ep1Of2qx56VOcT6basO6XH4= Subject key identifier: F0:8C:58:10:1D:4F:73:E8:40:D6:8C:79:A4:43:34:53:6E:05:83:FD Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 039BB2B787DE31D5CEF1570E8517B9A61F107A1C Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145281.roa Signing time: Wed 04 Mar 2026 06:21:21 +0000 ROA not before: Wed 04 Mar 2026 06:16:21 +0000 ROA not after: Wed 03 Mar 2027 06:21:21 +0000 asID: 145281 IP address blocks: 240a:aa47::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:9b:b2:b7:87:de:31:d5:ce:f1:57:0e:85:17:b9:a6:1f:10:7a:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:16:21 2026 GMT Not After : Mar 3 06:21:21 2027 GMT Subject: CN=F08C58101D4F73E840D68C79A44334536E0583FD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:6c:d7:8f:09:85:cf:f3:e8:27:36:37:8b:5d: 49:50:a7:81:4d:1c:d7:eb:f3:9d:75:0f:ac:b5:d7: f4:fa:b1:d2:9d:c2:00:db:47:c7:2e:2f:61:42:68: 3d:a3:af:ef:94:fa:ef:e6:1d:55:2d:12:8b:e3:b5: 4e:d0:9c:a4:21:84:6b:c9:5c:05:b9:29:4d:ef:8e: e5:c0:50:de:e5:7b:0c:7e:9a:e0:5d:85:af:af:12: c9:02:40:8e:d3:d9:de:59:ee:23:ab:30:d4:7b:01: 34:43:be:38:13:c5:d6:28:71:48:24:81:86:34:12: 1d:38:fb:26:e8:74:ce:fc:5d:b3:ae:5e:40:a8:9d: 40:2b:02:2f:2e:0c:1a:3f:1c:ff:35:e6:af:bf:f7: 91:d4:3f:73:8c:b5:66:f4:8c:6f:11:0c:20:c3:e2: 69:08:37:a9:a5:78:95:56:9b:2b:be:95:30:dc:10: 2e:f7:33:05:ec:ef:b6:70:36:84:1a:40:77:98:10: 7a:e9:19:11:50:39:6d:dd:2f:d2:0c:e7:49:ef:04: 39:28:14:7f:6a:b1:8f:55:50:fb:0a:86:1d:0c:ff: e6:7d:70:27:a3:82:44:5e:90:6d:4f:b5:49:a7:e2: 64:9a:70:55:3e:29:00:df:cf:29:5e:db:2e:8c:50: af:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:8C:58:10:1D:4F:73:E8:40:D6:8C:79:A4:43:34:53:6E:05:83:FD X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145281.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:aa47::/32 Signature Algorithm: sha256WithRSAEncryption 0a:d7:cf:5a:c9:3e:9a:54:c4:f3:92:07:34:5a:75:60:28:cd: a1:d6:86:22:81:22:8e:d5:a6:2e:6e:c4:f8:c1:b7:3c:98:fa: a1:93:33:57:45:a5:e5:61:f2:42:cf:2b:ad:61:ed:05:7e:3a: dd:e8:38:c3:13:fc:11:90:fa:5b:96:35:29:f2:4e:f4:4e:4b: 13:59:5d:43:0b:2c:f7:92:ff:9a:fc:7e:b8:b6:71:6d:90:0b: 89:4a:db:7a:7b:98:bb:e0:fb:d4:59:87:cc:99:67:80:1e:2d: 3f:48:96:ec:0e:40:67:5d:fa:87:82:8e:b8:ea:72:11:e0:87: 43:d1:97:7b:77:f2:38:8e:30:a3:25:bd:5b:7b:0d:b3:01:75: b4:54:f2:3f:17:a0:84:06:91:88:d6:a2:84:36:dc:f0:e0:c7: 26:64:43:08:8c:5a:e9:e5:51:b9:1a:d7:c3:d0:be:76:48:25: 8c:3f:36:8e:2f:97:79:7a:51:80:f7:b2:00:b2:60:2e:fb:0f: ad:91:0b:c5:da:ac:4f:31:27:04:2d:cf:59:6e:11:1b:5f:a6: 27:07:3f:8c:4d:46:86:a3:17:36:cd:92:50:1f:ed:1d:58:50: 61:b8:7c:90:a7:1b:5a:6b:69:30:bc:25:fc:d6:28:1e:85:d2: ec:38:c3:ca -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUA5uyt4feMdXO8VcOhRe5ph8QehwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTYyMVoX DTI3MDMwMzA2MjEyMVowMzExMC8GA1UEAxMoRjA4QzU4MTAxRDRGNzNFODQwRDY4 Qzc5QTQ0MzM0NTM2RTA1ODNGRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL5s148Jhc/z6Cc2N4tdSVCngU0c1+vznXUPrLXX9Pqx0p3CANtHxy4vYUJo PaOv75T67+YdVS0Si+O1TtCcpCGEa8lcBbkpTe+O5cBQ3uV7DH6a4F2Fr68SyQJA jtPZ3lnuI6sw1HsBNEO+OBPF1ihxSCSBhjQSHTj7Juh0zvxds65eQKidQCsCLy4M Gj8c/zXmr7/3kdQ/c4y1ZvSMbxEMIMPiaQg3qaV4lVabK76VMNwQLvczBezvtnA2 hBpAd5gQeukZEVA5bd0v0gznSe8EOSgUf2qxj1VQ+wqGHQz/5n1wJ6OCRF6QbU+1 SafiZJpwVT4pAN/PKV7bLoxQr4kCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBTwjFgQ HU9z6EDWjHmkQzRTbgWD/TAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTI4MS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qkcwDQYJKoZIhvcNAQELBQADggEBAArXz1rJPppUxPOSBzRadWAozaHWhiKBIo7V pi5uxPjBtzyY+qGTM1dFpeVh8kLPK61h7QV+Ot3oOMMT/BGQ+luWNSnyTvROSxNZ XUMLLPeS/5r8fri2cW2QC4lK23p7mLvg+9RZh8yZZ4AeLT9IluwOQGdd+oeCjrjq chHgh0PRl3t38jiOMKMlvVt7DbMBdbRU8j8XoIQGkYjWooQ23PDgxyZkQwiMWunl Ubka18PQvnZIJYw/No4vl3l6UYD3sgCyYC77D62RC8XarE8xJwQtz1luERtfpicH P4xNRoajFzbNklAf7R1YUGG4fJCnG1praTC8JfzWKB6F0uw4w8o= -----END CERTIFICATE-----Generated at Sat Mar 28 13:18:07 2026 by rpki-client