$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145300.roa File: AS145300.roa (raw, json) Hash identifier: 5YgiTl4v5i5kEsPgPP6TAqYPBKASxURoeWm2ky2+6Mo= Subject key identifier: CD:07:19:9D:43:5B:F6:30:02:B9:9D:3B:5E:82:EB:28:11:19:43:42 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 3F6379DA363041E993D87D2C81FB8FE1E4788F9C Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145300.roa Signing time: Wed 04 Mar 2026 06:21:48 +0000 ROA not before: Wed 04 Mar 2026 06:16:48 +0000 ROA not after: Wed 03 Mar 2027 06:21:48 +0000 asID: 145300 IP address blocks: 240a:aa5a::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:63:79:da:36:30:41:e9:93:d8:7d:2c:81:fb:8f:e1:e4:78:8f:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:16:48 2026 GMT Not After : Mar 3 06:21:48 2027 GMT Subject: CN=CD07199D435BF63002B99D3B5E82EB2811194342 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:ba:45:21:32:cd:07:84:51:ef:e4:f0:2b:38: c8:f5:9f:0b:d3:24:9f:f8:0c:45:97:4d:91:81:ef: 3b:52:d3:cd:ae:e6:dd:df:be:ec:17:58:a7:45:70: fa:e0:33:cb:7a:77:b6:68:69:ce:48:6e:78:8c:b2: 7a:6a:ca:d3:b5:ae:d3:54:eb:d4:1b:50:b6:7b:9a: 95:58:a2:7d:90:63:45:3c:f1:0f:65:9f:1a:a6:a7: 10:9d:9e:ac:9a:4a:5c:54:04:be:b9:b8:02:80:d5: a5:44:70:da:11:48:9a:83:1c:7b:9f:c8:09:5c:fc: 10:1f:b7:64:e7:9d:6d:e7:68:f1:13:8e:88:d5:12: 1b:39:81:e3:db:26:cf:0a:09:b5:0d:68:fc:6b:aa: d6:af:e6:89:cd:4e:f7:b9:59:c0:1b:38:7b:6a:e4: 3b:11:58:3b:33:c4:e3:40:00:e8:74:f2:5c:9d:7c: 5a:65:c5:4a:59:02:a3:64:d9:a0:c7:5e:79:68:01: b1:22:4c:d6:8e:32:cb:4f:b6:32:13:02:f1:9d:3c: 81:bb:51:a7:7d:e2:0b:41:53:d9:b4:79:55:5e:38: 8f:cd:5d:dc:3e:27:3b:52:15:19:0b:c4:35:08:08: 49:13:cb:50:98:a4:eb:a4:94:aa:36:cf:4d:3e:0f: fa:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:07:19:9D:43:5B:F6:30:02:B9:9D:3B:5E:82:EB:28:11:19:43:42 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145300.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:aa5a::/32 Signature Algorithm: sha256WithRSAEncryption 0e:25:c4:d4:de:dd:9e:47:fa:78:b1:e6:e2:b9:04:aa:97:27: d8:cc:dc:10:d5:41:f2:d8:c4:7d:1f:b4:4e:f0:4d:31:d4:1a: fd:4c:b1:0b:ed:8b:59:19:28:5a:ab:57:03:02:79:45:37:c5: 8b:99:dd:63:d0:02:ca:00:2d:c3:a1:e2:41:0e:da:c8:87:db: 10:f4:cd:67:95:6e:55:db:aa:8b:4e:50:87:e7:c1:a8:49:ef: 5e:a8:d8:d1:70:c5:b6:e1:b9:88:c3:d0:fc:8f:c5:08:00:f4: d7:42:8e:ca:9c:65:65:c9:33:34:d5:3f:6c:7b:c4:d1:6f:48: 7c:a4:30:1c:31:ea:81:06:e5:2d:b3:a9:42:00:d4:5b:4c:78: cd:28:61:94:2e:0d:b8:a4:8e:ec:9e:17:5c:51:45:6b:51:81: 31:26:0b:ac:f9:a6:f2:dd:84:a8:17:72:f9:ea:1f:0b:4b:e1: 69:a8:39:18:cf:7f:bb:39:5c:7d:52:82:62:06:82:0d:ca:ce: 21:04:7c:48:bb:66:3e:eb:cd:8d:fd:99:59:54:dc:f0:be:7f: 0d:fe:f0:65:f2:64:9a:77:05:84:93:ec:af:ee:94:68:f7:fd: 5c:82:7a:41:a0:1f:c3:dd:55:94:c7:27:29:ca:fd:7d:c0:92: 83:0d:80:19 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUP2N52jYwQemT2H0sgfuP4eR4j5wwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTY0OFoX DTI3MDMwMzA2MjE0OFowMzExMC8GA1UEAxMoQ0QwNzE5OUQ0MzVCRjYzMDAyQjk5 RDNCNUU4MkVCMjgxMTE5NDM0MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKq6RSEyzQeEUe/k8Cs4yPWfC9Mkn/gMRZdNkYHvO1LTza7m3d++7BdYp0Vw +uAzy3p3tmhpzkhueIyyemrK07Wu01Tr1BtQtnualViifZBjRTzxD2WfGqanEJ2e rJpKXFQEvrm4AoDVpURw2hFImoMce5/ICVz8EB+3ZOedbedo8ROOiNUSGzmB49sm zwoJtQ1o/Guq1q/mic1O97lZwBs4e2rkOxFYOzPE40AA6HTyXJ18WmXFSlkCo2TZ oMdeeWgBsSJM1o4yy0+2MhMC8Z08gbtRp33iC0FT2bR5VV44j81d3D4nO1IVGQvE NQgISRPLUJik66SUqjbPTT4P+h0CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBTNBxmd Q1v2MAK5nTtegusoERlDQjAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTMwMC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qlowDQYJKoZIhvcNAQELBQADggEBAA4lxNTe3Z5H+nix5uK5BKqXJ9jM3BDVQfLY xH0ftE7wTTHUGv1MsQvti1kZKFqrVwMCeUU3xYuZ3WPQAsoALcOh4kEO2siH2xD0 zWeVblXbqotOUIfnwahJ716o2NFwxbbhuYjD0PyPxQgA9NdCjsqcZWXJMzTVP2x7 xNFvSHykMBwx6oEG5S2zqUIA1FtMeM0oYZQuDbikjuyeF1xRRWtRgTEmC6z5pvLd hKgXcvnqHwtL4WmoORjPf7s5XH1SgmIGgg3KziEEfEi7Zj7rzY39mVlU3PC+fw3+ 8GXyZJp3BYST7K/ulGj3/VyCekGgH8PdVZTHJynK/X3AkoMNgBk= -----END CERTIFICATE-----Generated at Sat Mar 28 11:45:36 2026 by rpki-client