$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145305.roa File: AS145305.roa (raw, json) Hash identifier: P8btNJ4e3yogZUyVuC6ULdN9wpiYZ53BMWjJnR2ON70= Subject key identifier: 8A:02:00:FF:83:25:E8:FA:9B:26:4D:89:45:65:43:42:33:5D:62:69 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 60BE84FDD5705B3174C136850F8654D2DF175AC6 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145305.roa Signing time: Wed 04 Mar 2026 06:22:38 +0000 ROA not before: Wed 04 Mar 2026 06:17:38 +0000 ROA not after: Wed 03 Mar 2027 06:22:38 +0000 asID: 145305 IP address blocks: 240a:aa5f::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:be:84:fd:d5:70:5b:31:74:c1:36:85:0f:86:54:d2:df:17:5a:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:17:38 2026 GMT Not After : Mar 3 06:22:38 2027 GMT Subject: CN=8A0200FF8325E8FA9B264D8945654342335D6269 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:a2:ff:97:6a:61:46:1c:b9:1b:6a:9c:83:46: a3:bf:9c:c3:4e:02:e9:91:70:c9:bd:07:f5:ea:2f: 80:21:15:e8:28:14:41:3c:45:63:51:fd:f2:52:70: 43:85:b1:27:47:5a:be:b1:57:9e:f2:f3:8d:28:c2: e8:5a:d6:3b:6c:26:be:d2:98:0d:94:d4:0d:ef:8a: 9a:83:08:a0:59:7f:fb:d8:9e:8d:51:04:ff:ef:2d: 00:33:87:f1:4b:2a:35:86:1e:85:3b:d4:33:26:6d: 4e:94:77:74:af:e4:df:95:6a:84:a6:59:0d:77:61: b0:49:96:04:20:3d:24:91:46:d4:11:93:1a:49:16: 0d:a3:9f:7b:56:ef:39:79:6d:c5:fd:76:28:96:dd: 34:e0:ba:7f:74:31:c4:90:c4:cf:65:f8:6e:7a:66: 4e:47:9a:ae:76:52:eb:8e:45:cc:9e:ef:70:e0:b9: cc:f7:73:f7:a3:96:1c:68:15:bb:f7:2c:63:3d:75: 8d:1c:5e:dd:a6:6d:c1:67:79:0b:de:a3:3e:ad:d8: 90:51:7c:01:8a:d3:a5:ad:ac:fb:4d:af:49:55:37: 39:f0:75:95:6f:f1:f2:d0:72:03:e2:c5:5d:1c:ea: ba:96:b4:eb:84:9b:4f:85:c7:10:39:83:7a:cd:5c: d9:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:02:00:FF:83:25:E8:FA:9B:26:4D:89:45:65:43:42:33:5D:62:69 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145305.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:aa5f::/32 Signature Algorithm: sha256WithRSAEncryption a8:e8:2c:ce:98:08:b6:a8:73:e1:17:8e:f5:8c:2d:b7:e5:b9: b5:86:3e:8b:42:0c:39:f5:9a:37:a5:b6:6a:48:5f:fd:d9:da: e5:a2:ef:ea:9c:dc:c1:99:99:32:bf:1f:05:6e:83:9c:b9:c6: da:6f:8a:04:03:73:e0:29:3d:db:41:a2:5a:33:f0:2b:5c:38: e4:95:56:a6:ea:4d:86:b0:77:00:b8:7a:90:e9:7b:86:b5:e7: f9:3f:33:6c:e2:fc:3f:0e:c8:c1:7a:4f:45:67:e6:d2:de:40: 90:72:74:d3:ee:0d:69:1c:69:04:57:9d:2e:b3:64:01:05:ad: 49:b0:51:b6:b1:33:64:cb:ff:68:6e:45:9f:ff:ac:a9:a3:b9: cd:3b:ad:69:38:95:c4:24:f7:c9:a0:79:47:f3:a9:ee:97:e0: 52:a5:d5:e2:b0:61:2f:c9:30:5e:a7:04:ec:9d:ce:df:6d:44: d5:e9:d2:6a:37:3d:3c:ff:e2:95:bb:cd:0e:d0:59:ae:fb:72: 28:38:af:e3:03:98:a1:da:b0:c0:26:4a:cc:f4:e8:74:e3:da: 25:c4:7d:55:5c:d7:7e:4d:08:ed:8d:4d:88:ec:c0:53:31:fd: 80:50:e4:15:64:c9:07:7c:83:5f:35:62:1e:11:4c:28:95:a8: 95:3c:0b:0f -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUYL6E/dVwWzF0wTaFD4ZU0t8XWsYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTczOFoX DTI3MDMwMzA2MjIzOFowMzExMC8GA1UEAxMoOEEwMjAwRkY4MzI1RThGQTlCMjY0 RDg5NDU2NTQzNDIzMzVENjI2OTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMii/5dqYUYcuRtqnINGo7+cw04C6ZFwyb0H9eovgCEV6CgUQTxFY1H98lJw Q4WxJ0davrFXnvLzjSjC6FrWO2wmvtKYDZTUDe+KmoMIoFl/+9iejVEE/+8tADOH 8UsqNYYehTvUMyZtTpR3dK/k35VqhKZZDXdhsEmWBCA9JJFG1BGTGkkWDaOfe1bv OXltxf12KJbdNOC6f3QxxJDEz2X4bnpmTkearnZS645FzJ7vcOC5zPdz96OWHGgV u/csYz11jRxe3aZtwWd5C96jPq3YkFF8AYrTpa2s+02vSVU3OfB1lW/x8tByA+LF XRzqupa064SbT4XHEDmDes1c2RkCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBSKAgD/ gyXo+psmTYlFZUNCM11iaTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTMwNS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK ql8wDQYJKoZIhvcNAQELBQADggEBAKjoLM6YCLaoc+EXjvWMLbflubWGPotCDDn1 mjeltmpIX/3Z2uWi7+qc3MGZmTK/HwVug5y5xtpvigQDc+ApPdtBoloz8CtcOOSV VqbqTYawdwC4epDpe4a15/k/M2zi/D8OyMF6T0Vn5tLeQJBydNPuDWkcaQRXnS6z ZAEFrUmwUbaxM2TL/2huRZ//rKmjuc07rWk4lcQk98mgeUfzqe6X4FKl1eKwYS/J MF6nBOydzt9tRNXp0mo3PTz/4pW7zQ7QWa77cig4r+MDmKHasMAmSsz06HTj2iXE fVVc135NCO2NTYjswFMx/YBQ5BVkyQd8g181Yh4RTCiVqJU8Cw8= -----END CERTIFICATE-----Generated at Sat Mar 28 15:54:36 2026 by rpki-client