$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145307.roa File: AS145307.roa (raw, json) Hash identifier: 2wHhoSUCKe40+uAARZzQsk4PJ7XjWnc0GE9X3HXdpEQ= Subject key identifier: 30:BC:D4:30:03:C8:A8:DC:DC:17:6D:14:8E:A1:51:77:3B:F2:D1:6D Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 7EC5408901483D25B86803E8F04E78E0BDEC4531 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145307.roa Signing time: Wed 04 Mar 2026 06:20:24 +0000 ROA not before: Wed 04 Mar 2026 06:15:24 +0000 ROA not after: Wed 03 Mar 2027 06:20:24 +0000 asID: 145307 IP address blocks: 240a:aa61::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:c5:40:89:01:48:3d:25:b8:68:03:e8:f0:4e:78:e0:bd:ec:45:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:15:24 2026 GMT Not After : Mar 3 06:20:24 2027 GMT Subject: CN=30BCD43003C8A8DCDC176D148EA151773BF2D16D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:2d:9e:a7:42:d7:5d:2c:b3:a8:74:be:96:16: a2:b5:15:d3:4d:de:70:33:57:6e:6b:51:c3:79:6a: 32:17:56:56:42:e4:00:df:b2:ca:90:d6:f4:79:2e: 3a:5c:0e:bc:d6:f4:76:24:ff:91:b7:50:99:38:ac: 7c:39:8b:32:ac:27:4f:1a:08:20:45:40:8c:ad:fc: 36:9b:d5:fc:93:0c:ed:79:e0:7d:51:51:69:fd:5e: 82:9c:b9:01:18:54:f8:5a:38:8d:7f:91:57:e0:ae: 5e:ab:4f:c9:9e:34:0d:5a:26:b8:91:dd:f3:e3:a7: 38:44:b7:16:5a:de:f6:90:06:16:98:72:d4:29:75: 31:f5:e1:cb:44:b4:86:a3:8a:b3:83:8f:3b:3d:ce: 0a:c2:51:53:c2:3a:af:73:b9:33:ff:15:75:ba:6a: 13:f4:fd:7a:93:1a:92:1a:0c:e1:30:09:53:59:e0: 05:6d:40:fd:30:dc:b2:96:7e:cb:67:b7:cc:01:e7: fb:4d:6e:83:ae:44:31:88:28:83:bc:af:a9:2c:e4: f7:ec:f2:68:8c:2c:07:c9:74:84:a0:a1:c7:41:5e: 03:f2:62:d4:d3:a6:10:6c:2c:be:0f:63:0c:29:07: cd:42:15:b3:6e:71:cc:12:41:9d:e2:ff:0a:91:3f: d0:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:BC:D4:30:03:C8:A8:DC:DC:17:6D:14:8E:A1:51:77:3B:F2:D1:6D X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145307.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:aa61::/32 Signature Algorithm: sha256WithRSAEncryption 83:f3:36:f4:ca:ee:52:71:f3:6f:d1:7f:24:55:b8:17:44:69: 0d:5d:1e:1a:dd:6d:5d:c5:e3:51:dd:c2:17:92:e0:1f:f7:55: 81:99:de:94:d7:74:ed:41:ad:65:fc:6d:3d:1a:26:0d:9e:a6: 20:59:d2:4c:2b:a8:d8:52:81:13:a9:c9:ee:f9:e2:0c:a2:4d: 99:af:37:17:92:48:35:a0:eb:5f:19:34:4a:3f:f1:27:b6:6c: 67:5f:d1:8b:0f:73:8d:2e:0d:fb:27:2c:65:9e:68:09:b7:c0: 18:70:df:bd:0a:5f:de:0d:ac:d9:22:56:00:30:24:3b:95:03: d0:d3:94:61:f0:b8:7e:9a:42:87:5f:a4:50:f4:68:3e:09:ca: ba:92:d8:c6:2f:ab:3f:12:be:26:06:9b:71:d4:94:5f:cd:54: 96:36:b4:34:98:2b:37:dc:be:e4:64:bd:5c:48:1d:22:cc:1c: e5:e8:c0:a8:e1:d8:56:a3:ff:89:98:43:af:7b:74:59:23:bf: 77:79:7c:3a:b3:64:47:7f:ac:ff:57:48:7b:1e:ca:ce:a4:61: 8d:76:c9:46:01:f1:82:24:4a:0f:49:c0:88:a1:96:67:6d:28: ba:84:be:5a:ff:ca:34:c7:b3:a6:f6:08:51:e7:17:0c:cb:c1: 36:ac:1d:11 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUfsVAiQFIPSW4aAPo8E544L3sRTEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTUyNFoX DTI3MDMwMzA2MjAyNFowMzExMC8GA1UEAxMoMzBCQ0Q0MzAwM0M4QThEQ0RDMTc2 RDE0OEVBMTUxNzczQkYyRDE2RDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAI8tnqdC110ss6h0vpYWorUV003ecDNXbmtRw3lqMhdWVkLkAN+yypDW9Hku OlwOvNb0diT/kbdQmTisfDmLMqwnTxoIIEVAjK38NpvV/JMM7XngfVFRaf1egpy5 ARhU+Fo4jX+RV+CuXqtPyZ40DVomuJHd8+OnOES3Flre9pAGFphy1Cl1MfXhy0S0 hqOKs4OPOz3OCsJRU8I6r3O5M/8VdbpqE/T9epMakhoM4TAJU1ngBW1A/TDcspZ+ y2e3zAHn+01ug65EMYgog7yvqSzk9+zyaIwsB8l0hKChx0FeA/Ji1NOmEGwsvg9j DCkHzUIVs25xzBJBneL/CpE/0C0CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQwvNQw A8io3NwXbRSOoVF3O/LRbTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTMwNy5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qmEwDQYJKoZIhvcNAQELBQADggEBAIPzNvTK7lJx82/RfyRVuBdEaQ1dHhrdbV3F 41HdwheS4B/3VYGZ3pTXdO1BrWX8bT0aJg2epiBZ0kwrqNhSgROpye754gyiTZmv NxeSSDWg618ZNEo/8Se2bGdf0YsPc40uDfsnLGWeaAm3wBhw370KX94NrNkiVgAw JDuVA9DTlGHwuH6aQodfpFD0aD4JyrqS2MYvqz8SviYGm3HUlF/NVJY2tDSYKzfc vuRkvVxIHSLMHOXowKjh2Faj/4mYQ697dFkjv3d5fDqzZEd/rP9XSHseys6kYY12 yUYB8YIkSg9JwIihlmdtKLqEvlr/yjTHs6b2CFHnFwzLwTasHRE= -----END CERTIFICATE-----Generated at Sat Mar 28 13:15:11 2026 by rpki-client