$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145309.roa File: AS145309.roa (raw, json) Hash identifier: yITkK+XYHJ6vqxqtsZk0bJK/vHDS+wohhMS9k2Cv2YY= Subject key identifier: EA:E8:33:36:93:02:9C:55:90:3F:CA:17:1F:2B:71:45:BF:3F:8F:26 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 64F8C0ACE8DAE8043E6015223708A0B4BE6349A1 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145309.roa Signing time: Wed 04 Mar 2026 06:20:45 +0000 ROA not before: Wed 04 Mar 2026 06:15:45 +0000 ROA not after: Wed 03 Mar 2027 06:20:45 +0000 asID: 145309 IP address blocks: 240a:aa63::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:f8:c0:ac:e8:da:e8:04:3e:60:15:22:37:08:a0:b4:be:63:49:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:15:45 2026 GMT Not After : Mar 3 06:20:45 2027 GMT Subject: CN=EAE8333693029C55903FCA171F2B7145BF3F8F26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:68:2b:07:6f:7c:34:e6:65:35:d7:ee:da:57: c3:ce:56:93:79:90:38:53:dd:18:4d:00:12:6b:c2: 2d:92:f0:28:8a:a4:7a:1d:19:6f:35:98:53:39:e8: ca:dd:fa:7c:b2:9c:bd:29:8e:c4:ba:5b:0a:d4:c9: 71:44:1b:fb:24:8c:90:aa:93:9b:d8:1d:bf:d2:0f: 30:2a:6b:ea:3e:5f:81:9f:b8:64:c8:89:da:3c:2e: 15:20:c0:f8:1d:8d:2e:82:0b:ae:6c:7b:9f:3e:b0: 1d:ea:32:60:dd:2e:8f:98:20:71:ef:94:17:3a:ce: 89:8b:61:69:ef:f3:93:37:05:07:eb:7d:1c:bd:ff: 57:04:83:7c:a2:95:61:c9:0f:5a:80:4b:d8:60:b7: 7d:93:f6:21:6c:58:11:92:14:8d:c9:e1:84:2a:3a: 05:23:c0:23:f1:4d:c6:2d:81:86:2d:93:03:b7:c4: 9a:be:82:84:8a:07:db:60:e3:ae:bd:44:58:20:4d: d5:12:97:da:e2:99:99:e1:04:13:c1:d6:9f:f5:fb: 96:4c:66:07:a2:2a:31:77:3c:6a:1a:50:76:d3:27: a0:25:04:cb:c4:d0:4c:5e:92:71:2e:c3:91:f4:17: f2:bf:5b:7d:ae:20:4a:d5:79:09:85:0f:83:fe:ce: 5e:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:E8:33:36:93:02:9C:55:90:3F:CA:17:1F:2B:71:45:BF:3F:8F:26 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145309.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:aa63::/32 Signature Algorithm: sha256WithRSAEncryption 58:ad:e1:32:2d:2c:a4:4d:93:2f:8b:22:be:d3:28:e8:ce:5f: 8f:25:48:2e:68:cb:40:e1:22:f4:de:b0:95:55:b7:63:21:28: c5:57:54:fd:de:1f:96:19:59:8b:f4:06:ea:48:4a:a8:28:5d: b0:d7:ac:89:a3:61:ed:6c:8a:6e:03:64:c6:99:5e:fc:92:3c: 0b:14:6d:a1:72:31:9e:46:86:cd:93:b4:8c:07:4c:6b:18:a3: b0:13:a9:da:84:de:23:25:00:1e:7f:bc:ae:62:07:04:9e:18: 18:26:6b:5b:d6:fa:57:0e:9d:3b:8d:e6:b6:8e:9c:4d:af:56: b8:55:76:c4:d4:13:f9:34:8b:88:61:96:ce:5a:c8:1f:9d:fe: c0:1f:60:ba:1b:2c:69:30:62:54:f2:b4:ce:0e:f4:71:a0:82: 20:f4:16:e8:cd:fe:63:34:cd:cc:63:eb:c7:44:75:5d:c0:38: 8b:af:d0:1c:d5:34:15:c3:d9:f9:97:45:2c:65:65:30:38:78: b3:af:5b:2d:c7:9c:20:d3:cc:a1:6c:aa:d1:ad:47:fa:37:9d: 74:d9:ae:07:57:53:27:c3:a3:9e:98:0b:58:6b:6f:98:29:5f: 48:39:48:3d:6e:7f:b3:38:d5:68:fe:e4:05:6e:e2:eb:9d:ef: 16:2f:0f:61 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUZPjArOja6AQ+YBUiNwigtL5jSaEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTU0NVoX DTI3MDMwMzA2MjA0NVowMzExMC8GA1UEAxMoRUFFODMzMzY5MzAyOUM1NTkwM0ZD QTE3MUYyQjcxNDVCRjNGOEYyNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL9oKwdvfDTmZTXX7tpXw85Wk3mQOFPdGE0AEmvCLZLwKIqkeh0ZbzWYUzno yt36fLKcvSmOxLpbCtTJcUQb+ySMkKqTm9gdv9IPMCpr6j5fgZ+4ZMiJ2jwuFSDA +B2NLoILrmx7nz6wHeoyYN0uj5ggce+UFzrOiYthae/zkzcFB+t9HL3/VwSDfKKV YckPWoBL2GC3fZP2IWxYEZIUjcnhhCo6BSPAI/FNxi2Bhi2TA7fEmr6ChIoH22Dj rr1EWCBN1RKX2uKZmeEEE8HWn/X7lkxmB6IqMXc8ahpQdtMnoCUEy8TQTF6ScS7D kfQX8r9bfa4gStV5CYUPg/7OXusCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBTq6DM2 kwKcVZA/yhcfK3FFvz+PJjAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTMwOS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qmMwDQYJKoZIhvcNAQELBQADggEBAFit4TItLKRNky+LIr7TKOjOX48lSC5oy0Dh IvTesJVVt2MhKMVXVP3eH5YZWYv0BupISqgoXbDXrImjYe1sim4DZMaZXvySPAsU baFyMZ5Ghs2TtIwHTGsYo7ATqdqE3iMlAB5/vK5iBwSeGBgma1vW+lcOnTuN5raO nE2vVrhVdsTUE/k0i4hhls5ayB+d/sAfYLobLGkwYlTytM4O9HGggiD0FujN/mM0 zcxj68dEdV3AOIuv0BzVNBXD2fmXRSxlZTA4eLOvWy3HnCDTzKFsqtGtR/o3nXTZ rgdXUyfDo56YC1hrb5gpX0g5SD1uf7M41Wj+5AVu4uud7xYvD2E= -----END CERTIFICATE-----Generated at Sat Mar 28 11:42:10 2026 by rpki-client