$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145303.roa File: AS145303.roa (raw, json) Hash identifier: tEu1jMmMD9pC30KxXJWNzX1lMwNiJAGvEi/HwdFnCfE= Subject key identifier: F9:15:1F:58:66:8F:96:CB:34:79:D5:8D:5C:34:6F:8F:27:8F:AE:B1 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 2F6794C058F386AF5C520DE08BFD3083650E2120 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145303.roa Signing time: Wed 04 Mar 2026 06:22:04 +0000 ROA not before: Wed 04 Mar 2026 06:17:04 +0000 ROA not after: Wed 03 Mar 2027 06:22:04 +0000 asID: 145303 IP address blocks: 240a:aa5d::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:67:94:c0:58:f3:86:af:5c:52:0d:e0:8b:fd:30:83:65:0e:21:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:17:04 2026 GMT Not After : Mar 3 06:22:04 2027 GMT Subject: CN=F9151F58668F96CB3479D58D5C346F8F278FAEB1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:bc:ff:94:22:11:43:e1:b6:05:b1:9b:b1:83: 04:ab:79:fb:da:7e:b9:4d:e4:5a:9e:e3:ae:f0:ab: c7:14:73:bb:46:f5:3d:33:c4:a8:73:b4:2a:8f:df: ca:58:9f:d5:a4:ec:50:18:b1:db:5b:8e:65:e5:2d: 1a:c5:6b:4b:5c:7e:39:e8:97:fc:91:d4:9f:20:13: 86:66:ce:68:c5:ae:b5:ae:b9:68:1e:e7:0e:c6:25: 51:21:d8:f7:b1:83:0b:a5:9c:27:06:10:b6:90:7a: 74:b4:8d:de:5f:62:c7:04:71:9c:10:2d:ed:9f:58: 23:32:09:e6:18:18:b8:ae:fa:29:39:3e:cc:db:9f: 93:7f:87:6a:78:f9:51:6f:9a:19:57:e7:a6:ee:77: 87:7d:78:a4:ea:ad:0e:f6:40:e9:f2:d7:40:89:5e: b4:9e:36:b4:f7:4b:09:a4:ce:76:20:ad:ba:27:2b: 47:da:eb:4b:a8:b6:16:a4:1c:dc:8b:6e:b5:b7:11: 54:eb:3f:91:64:5e:43:21:0d:64:00:ad:c6:18:a1: 30:7b:f9:f6:3b:8d:bb:b5:5c:b6:2d:fa:e8:c1:b4: 6a:5a:85:82:9c:dc:5e:2d:fb:23:d0:36:34:d0:0d: c7:25:4a:d9:a1:c5:14:95:3f:ed:a3:c7:df:8e:7c: e4:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:15:1F:58:66:8F:96:CB:34:79:D5:8D:5C:34:6F:8F:27:8F:AE:B1 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145303.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:aa5d::/32 Signature Algorithm: sha256WithRSAEncryption 89:3b:f8:22:3d:cd:f7:34:bb:42:a5:d7:b8:7e:ee:80:bd:04: 47:02:2a:d8:3b:d9:2e:39:d8:01:10:33:0a:9a:eb:bc:d9:84: a7:65:c9:e5:27:33:62:54:75:95:5b:a1:5f:1a:4f:c3:8c:e2: 63:01:69:82:69:20:39:4a:0a:01:ac:73:8a:25:bb:07:2b:a1: 24:e5:4b:a7:e8:f2:40:3e:6f:48:35:d8:fd:58:88:06:d8:39: da:0d:0f:2a:81:a7:d8:db:bf:cc:f2:3e:20:81:b2:95:19:7d: 2a:14:98:ac:6a:32:53:db:68:e1:9b:b8:0c:8a:c9:dc:ba:f3: b2:c6:5d:81:4a:a4:a7:f0:3f:28:7f:d9:5f:0c:36:a8:3d:ac: 9c:fa:47:50:5f:6d:28:4c:9a:6c:3a:c4:a9:91:fb:28:a0:7b: ae:72:37:56:4d:b6:72:7b:e0:06:b4:42:5f:88:1c:86:96:72: e6:3b:c7:19:28:29:d8:a0:93:75:2f:5d:8f:96:43:1d:ed:7f: b7:e3:44:d1:ed:94:32:7f:5d:e5:8b:58:65:1a:cd:23:ac:40: 80:7e:cd:d3:61:8d:b6:db:0d:e6:e6:80:2e:1a:6c:08:5a:d8: 94:b8:10:6e:c6:f6:65:9b:c1:a0:0b:49:79:25:e8:b0:ae:f2: 8b:06:cf:e3 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUL2eUwFjzhq9cUg3gi/0wg2UOISAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTcwNFoX DTI3MDMwMzA2MjIwNFowMzExMC8GA1UEAxMoRjkxNTFGNTg2NjhGOTZDQjM0NzlE NThENUMzNDZGOEYyNzhGQUVCMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKy8/5QiEUPhtgWxm7GDBKt5+9p+uU3kWp7jrvCrxxRzu0b1PTPEqHO0Ko/f ylif1aTsUBix21uOZeUtGsVrS1x+OeiX/JHUnyAThmbOaMWuta65aB7nDsYlUSHY 97GDC6WcJwYQtpB6dLSN3l9ixwRxnBAt7Z9YIzIJ5hgYuK76KTk+zNufk3+Hanj5 UW+aGVfnpu53h314pOqtDvZA6fLXQIletJ42tPdLCaTOdiCtuicrR9rrS6i2FqQc 3ItutbcRVOs/kWReQyENZACtxhihMHv59juNu7Vcti366MG0alqFgpzcXi37I9A2 NNANxyVK2aHFFJU/7aPH34585EcCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBT5FR9Y Zo+WyzR51Y1cNG+PJ4+usTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTMwMy5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK ql0wDQYJKoZIhvcNAQELBQADggEBAIk7+CI9zfc0u0Kl17h+7oC9BEcCKtg72S45 2AEQMwqa67zZhKdlyeUnM2JUdZVboV8aT8OM4mMBaYJpIDlKCgGsc4oluwcroSTl S6fo8kA+b0g12P1YiAbYOdoNDyqBp9jbv8zyPiCBspUZfSoUmKxqMlPbaOGbuAyK ydy687LGXYFKpKfwPyh/2V8MNqg9rJz6R1BfbShMmmw6xKmR+yige65yN1ZNtnJ7 4Aa0Ql+IHIaWcuY7xxkoKdigk3UvXY+WQx3tf7fjRNHtlDJ/XeWLWGUazSOsQIB+ zdNhjbbbDebmgC4abAha2JS4EG7G9mWbwaALSXkl6LCu8osGz+M= -----END CERTIFICATE-----Generated at Sat Mar 28 13:18:09 2026 by rpki-client