$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145287.roa File: AS145287.roa (raw, json) Hash identifier: n+diBgJmdYAQyOTaW5uDSM4qzSHVbxABOqZda+cSpko= Subject key identifier: 06:51:81:2C:3C:87:2D:9F:5D:32:31:D4:B3:FA:30:EE:26:D8:84:EC Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 14E0E3C68D9B96348BAE20C7F3139D2E897BCAD6 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145287.roa Signing time: Wed 04 Mar 2026 06:20:05 +0000 ROA not before: Wed 04 Mar 2026 06:15:05 +0000 ROA not after: Wed 03 Mar 2027 06:20:05 +0000 asID: 145287 IP address blocks: 240a:aa4d::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:e0:e3:c6:8d:9b:96:34:8b:ae:20:c7:f3:13:9d:2e:89:7b:ca:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:15:05 2026 GMT Not After : Mar 3 06:20:05 2027 GMT Subject: CN=0651812C3C872D9F5D3231D4B3FA30EE26D884EC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:b3:37:f1:62:50:27:2a:04:a8:6e:98:58:43: e5:c5:87:53:b1:09:f2:15:9d:78:00:5e:99:d3:e6: 01:f9:ca:5a:97:27:1e:c1:64:b7:81:0f:c2:28:4b: 38:cb:87:cc:77:6f:33:6f:44:12:dd:b0:57:8b:82: 59:9e:e5:74:6b:5b:dd:6d:02:bd:24:9e:97:43:b1: 2b:f1:8d:47:c0:76:f4:a7:10:a2:35:7c:2a:36:b6: c3:26:39:48:2b:7f:05:fd:a4:b2:4b:b7:79:01:3f: 4c:04:ac:12:21:a8:93:02:26:63:28:f6:6c:c1:fd: 74:0a:f2:77:54:59:f6:08:36:1b:28:c7:20:03:51: 98:4d:2a:3d:dd:18:8b:a1:b8:ff:15:2b:85:95:b2: ea:95:3e:b5:a8:dc:dc:89:e2:e4:a6:7a:53:e8:5f: 9a:53:52:f8:d5:66:bd:a4:51:e1:fc:0b:81:0c:59: e1:e6:f5:28:99:07:96:aa:da:af:eb:78:72:f0:c8: 33:18:c7:44:16:4d:34:e7:64:70:d4:d9:6a:2c:25: 67:cc:be:90:1e:61:5a:40:28:45:a0:a2:d3:d9:0a: 73:f5:31:fc:ca:6a:c8:3d:24:0d:b8:50:bd:d0:9a: 9b:ee:4b:44:0a:11:b4:64:3e:51:73:5c:87:88:30: 81:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:51:81:2C:3C:87:2D:9F:5D:32:31:D4:B3:FA:30:EE:26:D8:84:EC X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145287.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:aa4d::/32 Signature Algorithm: sha256WithRSAEncryption 7b:bc:d2:a2:c2:6d:e9:ba:b1:ab:4c:a6:b5:ec:f9:60:52:a5: e9:af:e3:6b:c5:00:49:35:a3:7a:c1:b8:5f:bc:e3:f5:ab:a5: 3b:cc:83:c4:08:4a:a4:bd:e9:bf:bd:64:19:c6:1c:ff:5f:d3: 02:85:d4:96:3a:9a:ed:26:de:78:82:d3:e4:f2:69:32:d9:a9: f6:78:3d:d5:19:2c:2a:70:c4:4c:62:7a:36:54:ec:fa:3e:ba: 29:c0:19:f5:3f:e0:8e:64:d3:b4:32:25:f4:71:15:92:f4:46: bb:3a:1d:14:e6:0e:0a:83:5c:c1:94:1e:9b:61:02:08:e1:80: c8:aa:18:06:96:b9:54:05:59:a6:65:ce:b5:e8:84:76:4c:2c: a2:0f:d3:b0:0e:71:c2:8b:22:b3:e3:f9:e8:f2:17:a7:64:22: 86:84:88:56:44:d9:80:80:64:a2:fa:cd:dd:ef:86:0f:15:b1: 84:1e:1a:a8:92:22:ef:a8:cb:ab:51:1c:2f:79:52:1f:a1:52: da:be:06:ad:0b:e5:f0:53:e0:90:d3:b2:3a:86:bb:16:3f:9d: a3:7e:8e:5a:a6:32:09:6c:16:c8:8d:47:d0:ec:db:32:88:6c: ca:61:54:68:9e:60:f1:99:71:15:3b:17:8d:49:38:da:a9:89: b1:98:34:87 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUFODjxo2bljSLriDH8xOdLol7ytYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTUwNVoX DTI3MDMwMzA2MjAwNVowMzExMC8GA1UEAxMoMDY1MTgxMkMzQzg3MkQ5RjVEMzIz MUQ0QjNGQTMwRUUyNkQ4ODRFQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAN+zN/FiUCcqBKhumFhD5cWHU7EJ8hWdeABemdPmAfnKWpcnHsFkt4EPwihL OMuHzHdvM29EEt2wV4uCWZ7ldGtb3W0CvSSel0OxK/GNR8B29KcQojV8Kja2wyY5 SCt/Bf2ksku3eQE/TASsEiGokwImYyj2bMH9dAryd1RZ9gg2GyjHIANRmE0qPd0Y i6G4/xUrhZWy6pU+tajc3Ini5KZ6U+hfmlNS+NVmvaRR4fwLgQxZ4eb1KJkHlqra r+t4cvDIMxjHRBZNNOdkcNTZaiwlZ8y+kB5hWkAoRaCi09kKc/Ux/MpqyD0kDbhQ vdCam+5LRAoRtGQ+UXNch4gwgTECAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQGUYEs PIctn10yMdSz+jDuJtiE7DAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTI4Ny5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qk0wDQYJKoZIhvcNAQELBQADggEBAHu80qLCbem6satMprXs+WBSpemv42vFAEk1 o3rBuF+84/WrpTvMg8QISqS96b+9ZBnGHP9f0wKF1JY6mu0m3niC0+TyaTLZqfZ4 PdUZLCpwxExiejZU7Po+uinAGfU/4I5k07QyJfRxFZL0Rrs6HRTmDgqDXMGUHpth AgjhgMiqGAaWuVQFWaZlzrXohHZMLKIP07AOccKLIrPj+ejyF6dkIoaEiFZE2YCA ZKL6zd3vhg8VsYQeGqiSIu+oy6tRHC95Uh+hUtq+Bq0L5fBT4JDTsjqGuxY/naN+ jlqmMglsFsiNR9Ds2zKIbMphVGieYPGZcRU7F41JONqpibGYNIc= -----END CERTIFICATE-----Generated at Sat Mar 28 11:41:08 2026 by rpki-client