$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145288.roa File: AS145288.roa (raw, json) Hash identifier: jpP0rMIXaQCcqQavXIDTLf8xH+pcfs9Tk/ljrQTBeGQ= Subject key identifier: CC:80:D6:AF:54:30:4A:C0:B3:5B:A0:BF:B6:52:F5:58:57:0F:29:23 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 31EB67BAE38F2AC48176DBCD810261A28A14272A Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145288.roa Signing time: Wed 04 Mar 2026 06:19:29 +0000 ROA not before: Wed 04 Mar 2026 06:14:29 +0000 ROA not after: Wed 03 Mar 2027 06:19:29 +0000 asID: 145288 IP address blocks: 240a:aa4e::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:eb:67:ba:e3:8f:2a:c4:81:76:db:cd:81:02:61:a2:8a:14:27:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:14:29 2026 GMT Not After : Mar 3 06:19:29 2027 GMT Subject: CN=CC80D6AF54304AC0B35BA0BFB652F558570F2923 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:eb:26:f4:18:8b:2c:c8:08:4c:9c:fa:1a:d3: a1:7c:bf:63:0d:6e:be:aa:1a:ed:70:bd:10:81:34: 10:80:49:53:4b:76:26:1b:a3:8f:b0:18:47:04:1d: b2:ee:62:69:6c:81:19:0f:38:05:43:68:29:b2:f7: 6d:da:b8:72:df:41:3c:06:06:90:6b:22:50:81:b7: 1e:c1:54:80:47:d4:bf:9a:f4:63:f5:ca:24:d9:42: aa:9a:81:6c:3a:c2:98:af:2b:e3:84:3e:a9:83:c7: 82:c9:3f:07:79:c5:69:25:8f:b7:97:58:17:9e:3d: 66:c8:98:5f:40:56:e9:7e:ff:30:d5:2d:74:83:21: 37:e1:7d:0d:e0:d7:b9:d2:5e:65:af:aa:e5:e9:6e: 62:dc:36:ed:64:2d:66:2e:e3:b6:c3:6f:4f:06:fc: 47:f9:e4:25:ba:4c:6d:77:c9:6f:cd:ad:29:1d:05: f0:81:58:af:51:60:d2:eb:ed:21:bd:d6:59:61:b8: 25:43:47:ce:74:e5:ff:2f:a6:b6:17:95:01:b6:a6: 38:c4:4f:95:35:a9:8c:69:70:12:01:7c:c5:65:99: 04:84:85:b4:25:69:f7:aa:08:e7:18:e7:a5:9e:d9: 8f:a8:31:b9:54:61:37:43:23:bd:e9:e1:af:80:1e: cb:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:80:D6:AF:54:30:4A:C0:B3:5B:A0:BF:B6:52:F5:58:57:0F:29:23 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145288.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:aa4e::/32 Signature Algorithm: sha256WithRSAEncryption 08:b7:76:48:32:81:e3:b9:b5:f2:ec:79:3c:fc:5d:b7:4e:de: fe:6f:b6:7c:2b:19:ff:8f:bd:f0:b9:9b:35:db:8c:4c:eb:3b: 95:58:05:e9:dc:06:fd:fb:40:82:af:00:c7:df:03:4c:6a:67: 6c:f4:07:76:83:f6:dd:87:0c:30:0f:4f:60:64:28:d1:15:e8: eb:ae:60:f1:0b:27:98:a5:0b:67:ac:dc:4b:b3:a5:5f:97:ec: 8d:e2:bd:d3:ce:37:7c:f3:c2:97:ef:5f:d6:ff:e2:32:a8:5f: 19:ef:a4:60:f1:cb:ce:2f:2c:17:99:6b:1f:7b:29:01:ee:57: 41:e6:54:0b:84:39:c4:b0:0b:ec:b6:b4:7d:79:49:23:bd:be: bb:43:b1:b3:48:f0:e8:b2:36:09:6c:f9:2a:30:88:cd:fb:57: d9:ff:17:b6:34:46:1c:df:14:6b:83:62:a7:6f:8e:36:c3:96: f6:3d:f0:d0:b9:4b:0b:04:5d:ec:f6:6f:09:73:32:00:bd:59: f7:eb:1e:f8:b3:85:ce:03:f2:6b:01:eb:9c:21:37:c5:c5:ee: 30:01:e2:0c:00:70:e4:36:18:02:54:ff:ab:6e:3b:7a:81:eb: a4:42:9a:42:b0:17:62:b8:30:50:4d:d8:2f:fb:f6:d3:8f:81: 84:b8:49:8d -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUMetnuuOPKsSBdtvNgQJhoooUJyowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTQyOVoX DTI3MDMwMzA2MTkyOVowMzExMC8GA1UEAxMoQ0M4MEQ2QUY1NDMwNEFDMEIzNUJB MEJGQjY1MkY1NTg1NzBGMjkyMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALTrJvQYiyzICEyc+hrToXy/Yw1uvqoa7XC9EIE0EIBJU0t2Jhujj7AYRwQd su5iaWyBGQ84BUNoKbL3bdq4ct9BPAYGkGsiUIG3HsFUgEfUv5r0Y/XKJNlCqpqB bDrCmK8r44Q+qYPHgsk/B3nFaSWPt5dYF549ZsiYX0BW6X7/MNUtdIMhN+F9DeDX udJeZa+q5eluYtw27WQtZi7jtsNvTwb8R/nkJbpMbXfJb82tKR0F8IFYr1Fg0uvt Ib3WWWG4JUNHznTl/y+mtheVAbamOMRPlTWpjGlwEgF8xWWZBISFtCVp96oI5xjn pZ7Zj6gxuVRhN0Mjvenhr4Aeyz8CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBTMgNav VDBKwLNboL+2UvVYVw8pIzAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTI4OC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qk4wDQYJKoZIhvcNAQELBQADggEBAAi3dkgygeO5tfLseTz8XbdO3v5vtnwrGf+P vfC5mzXbjEzrO5VYBencBv37QIKvAMffA0xqZ2z0B3aD9t2HDDAPT2BkKNEV6Ouu YPELJ5ilC2es3EuzpV+X7I3ivdPON3zzwpfvX9b/4jKoXxnvpGDxy84vLBeZax97 KQHuV0HmVAuEOcSwC+y2tH15SSO9vrtDsbNI8OiyNgls+SowiM37V9n/F7Y0Rhzf FGuDYqdvjjbDlvY98NC5SwsEXez2bwlzMgC9WffrHvizhc4D8msB65whN8XF7jAB 4gwAcOQ2GAJU/6tuO3qB66RCmkKwF2K4MFBN2C/79tOPgYS4SY0= -----END CERTIFICATE-----Generated at Sat Mar 28 13:18:06 2026 by rpki-client