$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145290.roa File: AS145290.roa (raw, json) Hash identifier: /iQD5TyPcVhX+58eTXQ48F133Fol8ZGvZoZVlqlvzw8= Subject key identifier: FB:F9:E7:27:36:8A:1C:85:96:FF:75:08:62:C1:B0:DC:E2:5D:30:BE Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 30C2D9F3A5C80A2F5D5DE61498929AD69682A9AC Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145290.roa Signing time: Wed 04 Mar 2026 06:22:04 +0000 ROA not before: Wed 04 Mar 2026 06:17:04 +0000 ROA not after: Wed 03 Mar 2027 06:22:04 +0000 asID: 145290 IP address blocks: 240a:aa50::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:c2:d9:f3:a5:c8:0a:2f:5d:5d:e6:14:98:92:9a:d6:96:82:a9:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:17:04 2026 GMT Not After : Mar 3 06:22:04 2027 GMT Subject: CN=FBF9E727368A1C8596FF750862C1B0DCE25D30BE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:de:8b:22:3b:3c:d4:b1:34:76:1a:ee:ef:5e: ec:5f:fe:a5:01:b7:b9:e7:78:15:be:6c:b3:c8:6d: 5f:b6:84:14:a5:c4:62:82:22:53:51:d8:f7:d4:60: de:33:e8:1c:6d:cb:80:76:a4:ee:16:04:ce:de:c1: 78:d5:b3:25:7b:45:60:0e:61:6f:ee:20:20:d1:88: 87:50:e5:a2:4d:33:4b:7e:22:88:9d:1f:3a:d3:d9: 18:be:f2:38:41:a6:46:d0:be:6e:9f:4d:01:91:63: be:83:58:0c:08:44:6d:05:e4:fe:a8:db:d4:14:d9: f7:c4:67:1a:0b:3b:c2:31:18:3e:ce:ed:76:30:ef: f4:4a:35:a7:36:67:0f:5d:66:bc:58:37:ba:0a:3f: 8f:39:42:1e:62:c8:db:dc:ca:d2:3c:6c:d0:17:6f: bd:1f:b3:1f:66:01:74:04:e5:14:32:87:b4:6e:ab: 56:95:57:0d:d2:a4:46:40:ae:8b:13:a3:4e:df:4b: a7:0e:d1:33:ea:70:7f:14:31:50:0a:e5:50:02:e0: 1e:a1:d1:93:c2:d6:25:2e:d6:88:8a:76:23:9f:ed: db:0a:b5:b1:07:bb:a3:2d:dc:e1:3d:33:04:4e:86: f5:84:47:32:b4:73:e4:52:9e:77:02:4f:e0:02:bf: 67:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:F9:E7:27:36:8A:1C:85:96:FF:75:08:62:C1:B0:DC:E2:5D:30:BE X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145290.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:aa50::/32 Signature Algorithm: sha256WithRSAEncryption 24:97:7d:f4:5b:95:82:d8:30:ea:12:1f:46:e7:28:00:af:2f: 64:45:56:78:2b:5e:98:ce:6e:15:26:73:46:92:23:06:a0:a5: f2:7e:8b:38:8c:40:09:d3:0d:5c:af:cc:3d:70:2a:a8:0c:2f: 40:31:c7:f2:98:29:09:69:19:fd:69:6d:19:9a:12:bb:e2:a7: e8:96:a1:b5:6b:29:c8:7c:4b:ae:86:e0:6e:76:6e:bd:8e:87: 90:80:9e:f7:e1:47:34:d1:67:a3:a3:9e:07:e2:36:95:8f:cf: 70:5e:79:ea:94:e1:51:79:f9:85:46:7e:65:27:2b:8e:49:c6: 8e:68:00:36:36:ab:c9:4b:f1:7e:b9:2d:33:67:6c:85:45:a6: 1f:11:ac:1e:3c:8e:47:0a:2d:86:b8:fd:a1:ba:0f:92:fb:75: a1:d5:31:ab:0d:92:aa:fa:de:53:08:33:80:36:bb:ae:51:d4: 5b:35:94:2f:f2:23:c3:20:e3:a2:04:c4:da:a6:1e:4b:6b:f7: db:73:0d:0e:1e:86:36:f0:08:27:f9:ab:17:2b:82:a1:65:cd: d1:87:91:10:d8:3c:08:65:d7:ca:19:8b:7a:a7:0e:51:79:51: fe:41:4f:bb:a3:db:62:b1:63:c8:c6:00:22:a2:95:d9:72:9e: 40:b8:69:7b -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUMMLZ86XICi9dXeYUmJKa1paCqawwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTcwNFoX DTI3MDMwMzA2MjIwNFowMzExMC8GA1UEAxMoRkJGOUU3MjczNjhBMUM4NTk2RkY3 NTA4NjJDMUIwRENFMjVEMzBCRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOLeiyI7PNSxNHYa7u9e7F/+pQG3ued4Fb5ss8htX7aEFKXEYoIiU1HY99Rg 3jPoHG3LgHak7hYEzt7BeNWzJXtFYA5hb+4gINGIh1Dlok0zS34iiJ0fOtPZGL7y OEGmRtC+bp9NAZFjvoNYDAhEbQXk/qjb1BTZ98RnGgs7wjEYPs7tdjDv9Eo1pzZn D11mvFg3ugo/jzlCHmLI29zK0jxs0BdvvR+zH2YBdATlFDKHtG6rVpVXDdKkRkCu ixOjTt9Lpw7RM+pwfxQxUArlUALgHqHRk8LWJS7WiIp2I5/t2wq1sQe7oy3c4T0z BE6G9YRHMrRz5FKedwJP4AK/ZzsCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBT7+ecn NoochZb/dQhiwbDc4l0wvjAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTI5MC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qlAwDQYJKoZIhvcNAQELBQADggEBACSXffRblYLYMOoSH0bnKACvL2RFVngrXpjO bhUmc0aSIwagpfJ+iziMQAnTDVyvzD1wKqgML0Axx/KYKQlpGf1pbRmaErvip+iW obVrKch8S66G4G52br2Oh5CAnvfhRzTRZ6OjngfiNpWPz3BeeeqU4VF5+YVGfmUn K45Jxo5oADY2q8lL8X65LTNnbIVFph8RrB48jkcKLYa4/aG6D5L7daHVMasNkqr6 3lMIM4A2u65R1Fs1lC/yI8Mg46IExNqmHktr99tzDQ4ehjbwCCf5qxcrgqFlzdGH kRDYPAhl18oZi3qnDlF5Uf5BT7uj22KxY8jGACKildlynkC4aXs= -----END CERTIFICATE-----Generated at Sat Mar 28 15:53:32 2026 by rpki-client