$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145222.roa File: AS145222.roa (raw, json) Hash identifier: egpB137CW8X2iQphnFU5WbajMDi6ZWkqWAZVBeX2cCU= Subject key identifier: C6:80:4A:D3:1B:7E:3E:CE:EF:41:39:F8:C0:D3:E0:FF:F7:3B:33:EA Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 10196D7E6DD98E72980C7E0B39DE702614D14EB9 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145222.roa Signing time: Wed 04 Mar 2026 06:19:18 +0000 ROA not before: Wed 04 Mar 2026 06:14:18 +0000 ROA not after: Wed 03 Mar 2027 06:19:18 +0000 asID: 145222 IP address blocks: 240a:aa0c::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:19:6d:7e:6d:d9:8e:72:98:0c:7e:0b:39:de:70:26:14:d1:4e:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:14:18 2026 GMT Not After : Mar 3 06:19:18 2027 GMT Subject: CN=C6804AD31B7E3ECEEF4139F8C0D3E0FFF73B33EA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:3d:d5:61:8f:cf:e9:9d:24:2f:ae:30:fa:6b: 5a:28:e1:60:61:0c:22:43:8d:ac:5f:f9:99:13:72: f7:63:83:6e:f5:fe:6d:dd:56:39:af:34:21:08:3e: 9d:4c:8e:76:28:6a:0a:75:0e:45:04:11:07:ae:62: d7:83:ec:e6:2a:2e:49:fe:0a:2d:ed:e4:74:87:36: b2:89:99:7d:f7:4b:27:df:bd:a3:e4:89:c4:96:af: b9:47:0a:01:13:cc:a5:58:e5:04:59:8e:34:03:a6: 93:ef:d2:19:85:c8:13:b8:a4:44:3a:c7:91:c6:9f: 54:aa:75:29:6e:e3:88:e7:61:fd:ad:1e:f2:4d:e6: 99:5a:47:90:d9:52:b4:73:5c:25:2f:b3:1a:80:50: dc:d7:8c:cd:7f:0e:9c:34:d5:7a:eb:11:54:02:28: c2:c8:af:b3:4d:ab:cc:70:24:bd:6b:70:69:f3:cd: 73:7c:2e:b6:79:e0:c2:1a:40:f4:ce:35:01:d9:9e: 20:55:46:72:d5:df:68:db:7e:26:4f:8f:9c:1d:ff: 40:d6:9d:19:26:a3:42:9e:59:9f:ea:04:13:1e:54: 5c:89:17:30:cd:3b:ee:0b:e8:c4:d6:84:f5:6f:6a: c5:27:5c:ca:2c:b3:5e:dc:54:c2:41:94:42:bc:f1: aa:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:80:4A:D3:1B:7E:3E:CE:EF:41:39:F8:C0:D3:E0:FF:F7:3B:33:EA X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145222.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:aa0c::/32 Signature Algorithm: sha256WithRSAEncryption 1d:08:08:04:59:99:18:f2:d2:87:fb:52:71:8d:d3:f2:69:24: fc:50:53:8f:af:31:e6:22:67:d0:dc:35:e7:7f:58:9a:cd:c9: 19:3b:1d:f4:55:24:c0:cb:d0:aa:19:27:ae:a9:95:cd:62:94: 77:3b:d9:47:17:91:cb:a8:90:0a:01:f1:32:a6:e9:3a:5b:c1: 19:33:63:71:43:1d:56:ca:d5:c5:2d:16:f6:72:72:8c:7a:2f: e4:a4:9a:63:d1:95:d8:af:e2:31:c5:fe:38:b3:94:a8:ec:e5: e4:20:cb:eb:91:09:23:4c:a0:57:15:df:dd:68:96:c5:e5:f0: 05:6d:dd:52:ab:e6:63:01:d0:95:8c:d3:4a:31:b4:8f:d9:fc: f9:0a:da:9f:a2:2c:9f:db:7d:63:b7:eb:81:d8:f5:8a:61:81: a6:ad:9b:24:78:ee:cb:43:a0:54:d3:92:80:02:bc:9a:d8:91: 27:a3:83:e1:94:d4:45:5f:45:30:9a:cb:29:78:cb:f2:d4:5e: b1:6c:70:72:bf:d9:8d:0f:e2:13:e6:3b:83:da:c3:25:e6:1f: ec:f3:0a:33:b3:59:90:91:33:b2:65:7a:84:b1:af:dc:2a:35: a6:66:07:bb:a2:a3:af:97:56:ca:c5:05:aa:03:65:eb:3b:56: 7a:56:8c:63 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUEBltfm3ZjnKYDH4LOd5wJhTRTrkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTQxOFoX DTI3MDMwMzA2MTkxOFowMzExMC8GA1UEAxMoQzY4MDRBRDMxQjdFM0VDRUVGNDEz OUY4QzBEM0UwRkZGNzNCMzNFQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALA91WGPz+mdJC+uMPprWijhYGEMIkONrF/5mRNy92ODbvX+bd1WOa80IQg+ nUyOdihqCnUORQQRB65i14Ps5iouSf4KLe3kdIc2somZffdLJ9+9o+SJxJavuUcK ARPMpVjlBFmONAOmk+/SGYXIE7ikRDrHkcafVKp1KW7jiOdh/a0e8k3mmVpHkNlS tHNcJS+zGoBQ3NeMzX8OnDTVeusRVAIowsivs02rzHAkvWtwafPNc3wutnngwhpA 9M41AdmeIFVGctXfaNt+Jk+PnB3/QNadGSajQp5Zn+oEEx5UXIkXMM077gvoxNaE 9W9qxSdcyiyzXtxUwkGUQrzxqiECAwEAAaOCAcUwggHBMB0GA1UdDgQWBBTGgErT G34+zu9BOfjA0+D/9zsz6jAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTIyMi5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qgwwDQYJKoZIhvcNAQELBQADggEBAB0ICARZmRjy0of7UnGN0/JpJPxQU4+vMeYi Z9DcNed/WJrNyRk7HfRVJMDL0KoZJ66plc1ilHc72UcXkcuokAoB8TKm6TpbwRkz Y3FDHVbK1cUtFvZycox6L+SkmmPRldiv4jHF/jizlKjs5eQgy+uRCSNMoFcV391o lsXl8AVt3VKr5mMB0JWM00oxtI/Z/PkK2p+iLJ/bfWO364HY9YphgaatmyR47stD oFTTkoACvJrYkSejg+GU1EVfRTCayyl4y/LUXrFscHK/2Y0P4hPmO4PawyXmH+zz CjOzWZCRM7JleoSxr9wqNaZmB7uio6+XVsrFBaoDZes7VnpWjGM= -----END CERTIFICATE-----Generated at Sat Mar 28 15:54:05 2026 by rpki-client