$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145308.roa File: AS145308.roa (raw, json) Hash identifier: 9P0abCO1l68dLlniRJ/s3joJMiS4IBg2bvYnRrXV8Q4= Subject key identifier: DF:42:73:A0:58:99:11:F0:4D:BE:B7:18:E3:EF:96:D3:07:9F:76:2C Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 28236515B8D16709307672221D3CFC703A844D08 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145308.roa Signing time: Wed 04 Mar 2026 06:21:52 +0000 ROA not before: Wed 04 Mar 2026 06:16:52 +0000 ROA not after: Wed 03 Mar 2027 06:21:52 +0000 asID: 145308 IP address blocks: 240a:aa62::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:23:65:15:b8:d1:67:09:30:76:72:22:1d:3c:fc:70:3a:84:4d:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:16:52 2026 GMT Not After : Mar 3 06:21:52 2027 GMT Subject: CN=DF4273A0589911F04DBEB718E3EF96D3079F762C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:7e:16:a9:13:90:23:86:06:60:77:3b:a5:59: 7d:5a:49:3f:3a:57:34:c0:47:cb:9c:4e:67:d8:b0: f5:d4:a5:a6:74:b6:4e:32:bc:23:5d:29:66:45:ea: 1d:56:e0:04:2a:dc:8d:87:a0:b1:e8:af:a6:97:0a: 0c:9e:17:59:a5:d4:a5:eb:1c:aa:39:de:68:13:19: a6:3e:35:de:f6:6b:3e:f9:17:11:00:9e:74:85:41: 25:a1:63:1e:5c:43:bb:95:cb:44:60:3a:ba:83:f0: b0:0a:b7:02:0c:16:0f:41:3c:34:8c:5f:1a:89:f7: e2:fd:63:a8:31:a1:73:e5:a0:a7:71:de:7f:ce:d8: 7a:c7:57:60:4f:e6:08:77:fb:ae:cd:f8:8a:3f:64: b6:ef:5a:58:e7:f3:23:70:f3:3c:11:c5:c2:8b:8e: 3c:a5:bf:5f:24:8b:f1:90:2c:00:e0:48:8f:b6:35: d3:e1:93:59:eb:81:db:ba:1e:61:e4:ea:0e:d1:fd: 45:b1:00:ff:00:3a:f3:cd:cb:2a:f3:53:97:1f:f7: a0:37:4b:75:81:af:80:01:9f:5e:2d:61:59:60:e5: cd:86:05:fd:df:2b:03:a7:b8:b8:7e:77:03:5d:6d: 8d:a0:87:f8:56:14:c3:d2:18:8d:b5:d6:ed:fa:30: b1:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:42:73:A0:58:99:11:F0:4D:BE:B7:18:E3:EF:96:D3:07:9F:76:2C X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145308.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:aa62::/32 Signature Algorithm: sha256WithRSAEncryption 4e:4d:ea:ca:a4:ad:08:6f:19:02:91:a5:3c:6b:e3:eb:02:49: f2:6c:b5:1d:09:09:ae:e5:f6:c1:46:77:2c:cc:20:21:b7:c2: 7c:0e:80:64:e2:1b:73:42:c4:67:e4:41:40:a2:e5:e4:a6:44: 5a:cd:d3:16:2a:6e:72:87:68:e1:dc:63:1c:ac:5c:af:22:05: 73:93:8e:76:7c:e2:c9:0b:b7:1f:3b:99:80:ae:85:b3:93:cd: d1:05:68:12:3b:ec:16:7d:11:16:2c:51:a0:0b:06:20:d6:29: bd:31:b7:04:ff:de:8b:19:df:c6:41:2a:06:a3:18:b2:36:e5: f8:ca:65:a0:07:79:08:1b:65:3c:3b:f9:a1:da:b6:c9:b7:24: 2a:2c:3e:4c:2b:24:b3:bc:e8:05:ff:cd:29:31:d4:10:34:9c: 6a:4b:3e:74:5f:05:fd:9c:03:21:e7:b0:c0:6e:a9:67:d8:22: d6:c0:9f:b3:67:76:ee:40:72:cb:45:2b:4e:12:e0:ae:60:a7: 07:f0:0d:a5:af:32:13:68:86:bc:33:32:69:ee:7f:d5:3f:f4: 6e:9f:d7:fc:ed:40:98:76:8d:55:c8:a2:6a:36:0e:9b:a3:b8: f6:1e:43:72:f0:7f:d6:50:46:b9:41:ce:2a:fb:1b:7e:45:cd: d9:90:7f:77 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUKCNlFbjRZwkwdnIiHTz8cDqETQgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTY1MloX DTI3MDMwMzA2MjE1MlowMzExMC8GA1UEAxMoREY0MjczQTA1ODk5MTFGMDREQkVC NzE4RTNFRjk2RDMwNzlGNzYyQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOh+FqkTkCOGBmB3O6VZfVpJPzpXNMBHy5xOZ9iw9dSlpnS2TjK8I10pZkXq HVbgBCrcjYegseivppcKDJ4XWaXUpescqjneaBMZpj413vZrPvkXEQCedIVBJaFj HlxDu5XLRGA6uoPwsAq3AgwWD0E8NIxfGon34v1jqDGhc+Wgp3Hef87YesdXYE/m CHf7rs34ij9ktu9aWOfzI3DzPBHFwouOPKW/XySL8ZAsAOBIj7Y10+GTWeuB27oe YeTqDtH9RbEA/wA6883LKvNTlx/3oDdLdYGvgAGfXi1hWWDlzYYF/d8rA6e4uH53 A11tjaCH+FYUw9IYjbXW7fowsbkCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBTfQnOg WJkR8E2+txjj75bTB592LDAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTMwOC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qmIwDQYJKoZIhvcNAQELBQADggEBAE5N6sqkrQhvGQKRpTxr4+sCSfJstR0JCa7l 9sFGdyzMICG3wnwOgGTiG3NCxGfkQUCi5eSmRFrN0xYqbnKHaOHcYxysXK8iBXOT jnZ84skLtx87mYCuhbOTzdEFaBI77BZ9ERYsUaALBiDWKb0xtwT/3osZ38ZBKgaj GLI25fjKZaAHeQgbZTw7+aHatsm3JCosPkwrJLO86AX/zSkx1BA0nGpLPnRfBf2c AyHnsMBuqWfYItbAn7Nndu5AcstFK04S4K5gpwfwDaWvMhNohrwzMmnuf9U/9G6f 1/ztQJh2jVXIomo2DpujuPYeQ3Lwf9ZQRrlBzir7G35FzdmQf3c= -----END CERTIFICATE-----Generated at Sat Mar 28 15:53:29 2026 by rpki-client