$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145193.roa File: AS145193.roa (raw, json) Hash identifier: iE7yduLDdYpB/vK8ZEZ420iDBhND+J0aM7qJrvDctg0= Subject key identifier: BB:C1:AF:79:12:AE:FB:C9:48:ED:2A:C0:29:B7:0C:90:E2:76:48:49 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 02EB115C8B5BA7783DC88C9329A98382864A49E8 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145193.roa Signing time: Wed 04 Mar 2026 06:19:28 +0000 ROA not before: Wed 04 Mar 2026 06:14:28 +0000 ROA not after: Wed 03 Mar 2027 06:19:28 +0000 asID: 145193 IP address blocks: 240a:a9ef::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:eb:11:5c:8b:5b:a7:78:3d:c8:8c:93:29:a9:83:82:86:4a:49:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:14:28 2026 GMT Not After : Mar 3 06:19:28 2027 GMT Subject: CN=BBC1AF7912AEFBC948ED2AC029B70C90E2764849 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:6f:59:47:42:5b:b5:f5:ae:6b:d3:94:90:04: f5:b5:28:2c:9b:a5:be:e8:eb:5a:1a:67:ee:0d:69: 7f:fc:68:cd:88:69:7d:33:0c:16:77:e6:d2:8c:ee: bd:da:63:61:2a:91:e9:92:b6:d3:c2:a9:ef:58:91: 28:37:5e:36:31:a1:8e:e7:84:ed:cb:3b:61:27:97: cb:98:a1:46:10:4e:c0:5d:68:03:1e:b9:3f:be:0f: ac:5c:43:75:de:a3:9a:fe:22:12:9d:03:b8:55:df: 73:c4:48:ce:42:73:66:26:fa:d7:5c:5d:61:fa:8f: 61:8a:43:c6:a0:60:cc:e4:38:46:31:51:bb:b4:76: 3f:e0:3e:cb:97:8c:62:ce:6f:f6:95:9f:f6:ab:db: c8:d0:34:91:7c:0c:ae:ee:69:56:22:79:db:75:b7: 37:4a:62:8b:7f:09:74:ed:4f:95:99:3e:c5:95:53: 47:3c:1f:00:41:c6:24:f3:be:8d:01:9a:55:b9:2e: c7:f4:7b:6f:b2:da:2d:bb:eb:9e:03:92:49:d4:98: 9a:56:82:59:5f:1e:12:3c:56:e4:1f:7b:ae:52:02: e1:61:9e:df:a2:0c:d5:80:04:48:c2:3b:3c:94:63: f0:0b:08:2e:95:77:f6:67:f0:b0:35:21:5a:b9:b1: 03:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:C1:AF:79:12:AE:FB:C9:48:ED:2A:C0:29:B7:0C:90:E2:76:48:49 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145193.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a9ef::/32 Signature Algorithm: sha256WithRSAEncryption a9:11:0b:3e:db:6d:e6:c6:08:b5:21:35:c8:63:ac:f2:dd:d5: 3f:20:c8:91:00:5d:5f:c5:0d:35:0f:b3:26:f3:dc:71:f6:fb: b0:8a:49:bf:72:03:a1:cd:d2:72:74:b0:35:22:28:f1:6d:16: 9b:1e:7f:fe:1e:c4:ed:83:0b:54:06:fe:6c:14:a8:b8:fc:4d: 5b:e3:fc:e7:c5:8e:2b:99:8b:7e:0f:25:e8:35:bf:7b:3c:7b: 08:69:5a:79:18:cb:52:5a:5f:ed:fa:c6:6d:58:f5:b9:f9:56: e1:e1:de:12:ef:b3:ec:6b:6b:bd:95:b7:6f:2a:46:1e:6e:e9: 73:55:6b:c1:e5:c6:7d:2b:b1:d8:5e:8d:c0:e4:16:76:38:e6: fc:84:8c:70:ee:0d:bc:d7:c6:05:b0:9e:b1:2e:d4:b9:16:c7: a0:b1:a2:11:23:dc:d4:c0:4e:74:a9:54:c7:21:b8:bf:d1:73: ac:da:e2:df:92:55:17:52:b5:57:18:0a:10:ea:89:1a:2b:c2: ee:a0:63:5d:8a:e3:ef:c2:b4:d2:19:c0:71:dd:cc:22:87:95: 18:fc:31:26:ef:4e:e5:f1:0c:70:7c:d6:08:b4:f9:32:b1:f4: c7:58:43:09:c1:5a:ac:0e:d1:57:98:26:0f:e1:d5:30:6d:60: 70:0e:78:77 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUAusRXItbp3g9yIyTKamDgoZKSegwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTQyOFoX DTI3MDMwMzA2MTkyOFowMzExMC8GA1UEAxMoQkJDMUFGNzkxMkFFRkJDOTQ4RUQy QUMwMjlCNzBDOTBFMjc2NDg0OTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL9vWUdCW7X1rmvTlJAE9bUoLJulvujrWhpn7g1pf/xozYhpfTMMFnfm0ozu vdpjYSqR6ZK208Kp71iRKDdeNjGhjueE7cs7YSeXy5ihRhBOwF1oAx65P74PrFxD dd6jmv4iEp0DuFXfc8RIzkJzZib611xdYfqPYYpDxqBgzOQ4RjFRu7R2P+A+y5eM Ys5v9pWf9qvbyNA0kXwMru5pViJ523W3N0pii38JdO1PlZk+xZVTRzwfAEHGJPO+ jQGaVbkux/R7b7LaLbvrngOSSdSYmlaCWV8eEjxW5B97rlIC4WGe36IM1YAESMI7 PJRj8AsILpV39mfwsDUhWrmxA8ECAwEAAaOCAcUwggHBMB0GA1UdDgQWBBS7wa95 Eq77yUjtKsAptwyQ4nZISTAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTE5My5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qe8wDQYJKoZIhvcNAQELBQADggEBAKkRCz7bbebGCLUhNchjrPLd1T8gyJEAXV/F DTUPsybz3HH2+7CKSb9yA6HN0nJ0sDUiKPFtFpsef/4exO2DC1QG/mwUqLj8TVvj /OfFjiuZi34PJeg1v3s8ewhpWnkYy1JaX+36xm1Y9bn5VuHh3hLvs+xra72Vt28q Rh5u6XNVa8Hlxn0rsdhejcDkFnY45vyEjHDuDbzXxgWwnrEu1LkWx6CxohEj3NTA TnSpVMchuL/Rc6za4t+SVRdStVcYChDqiRorwu6gY12K4+/CtNIZwHHdzCKHlRj8 MSbvTuXxDHB81gi0+TKx9MdYQwnBWqwO0VeYJg/h1TBtYHAOeHc= -----END CERTIFICATE-----Generated at Sat Mar 28 14:30:45 2026 by rpki-client