$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145192.roa File: AS145192.roa (raw, json) Hash identifier: bcDGkMpKJghqVVwhvw6syinVUk4QrxEmkVY6MIMX3Fc= Subject key identifier: DA:6C:32:04:38:CC:0C:76:3B:17:6B:48:BA:65:0B:F5:3E:B2:F1:81 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 141F3DFAE34C43D7ECF3DD2A6B44717450C0624F Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145192.roa Signing time: Wed 04 Mar 2026 06:21:27 +0000 ROA not before: Wed 04 Mar 2026 06:16:27 +0000 ROA not after: Wed 03 Mar 2027 06:21:27 +0000 asID: 145192 IP address blocks: 240a:a9ee::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:1f:3d:fa:e3:4c:43:d7:ec:f3:dd:2a:6b:44:71:74:50:c0:62:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:16:27 2026 GMT Not After : Mar 3 06:21:27 2027 GMT Subject: CN=DA6C320438CC0C763B176B48BA650BF53EB2F181 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:ea:05:93:2a:00:57:1c:6d:88:c9:cb:68:c0: c8:4c:36:f6:0b:1e:a6:0c:04:cf:ba:b0:4f:cd:50: 7a:9c:2c:ed:17:fe:87:a2:12:86:2d:19:9b:46:2f: 37:09:45:9a:53:66:d9:a5:30:ee:8a:05:2d:09:c0: 88:61:d2:52:8d:e5:fe:da:93:cc:b8:7d:6a:11:36: a9:83:35:ab:82:f6:f6:37:02:e3:e0:89:cd:a0:67: 57:3a:cc:04:92:be:5e:65:35:22:3c:37:2f:d5:90: f0:a7:81:e8:b7:70:5e:80:47:98:1c:b7:23:40:a1: 55:24:f2:11:68:0f:38:30:28:0e:40:e1:32:a4:43: a7:a4:4e:9a:b2:a7:2c:f2:a1:16:8b:73:db:b8:78: 65:17:e6:70:0c:96:0f:87:56:f7:66:2c:c7:06:f1: ea:de:55:b7:d3:c3:5d:91:89:7e:50:62:76:40:cc: 29:93:82:8f:d7:f5:5e:19:84:67:b7:25:3f:44:fd: 1e:64:d6:e5:30:14:2d:9b:d8:86:28:1a:ab:d7:eb: 75:93:ec:a6:5a:0c:66:e0:12:2a:f0:6d:95:6d:ef: ad:9a:8a:09:6c:71:db:03:43:41:9a:8b:ca:d1:a9: 07:68:77:31:52:63:e8:13:26:7c:b2:a2:3a:37:cd: 82:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:6C:32:04:38:CC:0C:76:3B:17:6B:48:BA:65:0B:F5:3E:B2:F1:81 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145192.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a9ee::/32 Signature Algorithm: sha256WithRSAEncryption 19:5e:1a:51:b6:5e:4f:cf:dd:a0:05:d9:fd:da:0c:01:10:ca: ee:c4:2c:01:c6:75:d0:5e:95:21:79:70:eb:09:71:f9:70:76: ff:82:32:aa:c6:1c:2e:22:1b:17:9d:26:d7:3d:24:81:37:5e: 0e:24:e3:81:06:eb:ed:74:36:71:e8:86:6a:d5:62:b0:55:dc: 0f:0c:70:e8:35:5c:db:39:1e:62:c9:7d:0e:fc:df:dd:f7:b5: 54:0b:64:28:a1:59:a4:c5:24:d2:85:e8:e8:c2:f4:ef:00:67: 2e:a8:a2:44:f9:c6:b0:45:ff:bf:25:21:8a:0a:1b:9f:dc:22: 8e:a4:5a:63:ad:e4:e2:5a:99:0c:3f:e0:f8:9f:7f:fd:26:e9: 1a:11:fc:c5:48:22:94:14:96:d2:15:c4:9b:4b:19:35:bc:ea: 4c:1b:2a:fa:3f:0f:07:bb:00:ed:68:1f:f7:84:73:31:1b:51: b8:96:79:9c:9e:2f:95:87:35:cb:a9:9e:f3:3a:67:82:ec:6a: fa:09:63:a1:e3:24:26:ea:04:b8:cd:46:f7:9e:69:ce:8b:90: e1:c3:f3:e6:c1:e7:27:24:41:18:f5:30:9a:29:9b:3c:30:9f: 52:5d:88:f5:5a:61:5d:f9:74:31:f6:3a:20:57:85:ac:4e:9b: c1:49:e5:46 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUFB89+uNMQ9fs890qa0RxdFDAYk8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTYyN1oX DTI3MDMwMzA2MjEyN1owMzExMC8GA1UEAxMoREE2QzMyMDQzOENDMEM3NjNCMTc2 QjQ4QkE2NTBCRjUzRUIyRjE4MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKPqBZMqAFccbYjJy2jAyEw29gsepgwEz7qwT81Qepws7Rf+h6IShi0Zm0Yv NwlFmlNm2aUw7ooFLQnAiGHSUo3l/tqTzLh9ahE2qYM1q4L29jcC4+CJzaBnVzrM BJK+XmU1Ijw3L9WQ8KeB6LdwXoBHmBy3I0ChVSTyEWgPODAoDkDhMqRDp6ROmrKn LPKhFotz27h4ZRfmcAyWD4dW92Ysxwbx6t5Vt9PDXZGJflBidkDMKZOCj9f1XhmE Z7clP0T9HmTW5TAULZvYhigaq9frdZPsploMZuASKvBtlW3vrZqKCWxx2wNDQZqL ytGpB2h3MVJj6BMmfLKiOjfNgrECAwEAAaOCAcUwggHBMB0GA1UdDgQWBBTabDIE OMwMdjsXa0i6ZQv1PrLxgTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTE5Mi5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qe4wDQYJKoZIhvcNAQELBQADggEBABleGlG2Xk/P3aAF2f3aDAEQyu7ELAHGddBe lSF5cOsJcflwdv+CMqrGHC4iGxedJtc9JIE3Xg4k44EG6+10NnHohmrVYrBV3A8M cOg1XNs5HmLJfQ783933tVQLZCihWaTFJNKF6OjC9O8AZy6ookT5xrBF/78lIYoK G5/cIo6kWmOt5OJamQw/4Piff/0m6RoR/MVIIpQUltIVxJtLGTW86kwbKvo/Dwe7 AO1oH/eEczEbUbiWeZyeL5WHNcupnvM6Z4LsavoJY6HjJCbqBLjNRveeac6LkOHD 8+bB5yckQRj1MJopmzwwn1JdiPVaYV35dDH2OiBXhaxOm8FJ5UY= -----END CERTIFICATE-----Generated at Sat Mar 28 13:15:13 2026 by rpki-client